$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9c8ee91b-84f9-3af8-a805-f49c3e862a38.roa File: 9c8ee91b-84f9-3af8-a805-f49c3e862a38.roa (raw, json) Hash identifier: Bo3ka3N7XYFts7ZG/d1X/mBUL7kNefBlyeOyiT7/gMw= Subject key identifier: BE:5D:9F:96:1B:CC:84:83:90:4A:6A:76:6B:CD:2D:08:CF:4E:09:5C Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E7E94DDEB4C64DD2BBB72D180 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9c8ee91b-84f9-3af8-a805-f49c3e862a38.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 31898 IP address blocks: 129.191.128.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:dd:eb:4c:64:dd:2b:bb:72:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=9f8dd128-53a6-441f-8fce-f817e8ffd82f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:fa:3e:ab:b4:d8:da:32:27:06:3d:26:11:65: 6f:22:41:5f:cb:2c:eb:b0:3f:c1:6f:e3:51:26:b7: 07:82:14:b1:ee:a5:56:f6:61:70:48:ed:6e:07:35: fe:6a:d1:f6:32:cd:7e:77:12:bc:71:11:49:a3:2c: 43:c5:76:f8:03:6b:ea:b6:d0:cd:7b:54:c8:2c:75: 43:4d:db:ed:0b:6e:aa:5e:63:ce:90:12:12:d6:ca: 23:0e:b7:47:aa:c9:74:e6:76:e3:f7:54:32:2c:22: 7e:0e:e9:f2:ec:5a:bb:98:1f:9e:75:dc:f1:15:d0: d7:11:e9:56:87:41:bb:03:e2:42:5b:4a:ea:2d:25: 9b:e1:ba:0a:e8:69:ff:a3:c0:54:a5:99:63:76:df: 6d:d3:14:07:98:03:af:bf:a5:78:2a:41:dd:53:eb: 60:35:68:46:1b:af:21:30:44:6d:14:73:77:ba:67: 50:76:3d:cd:fb:a3:e1:40:97:5b:30:08:c8:c9:4e: 75:fa:b2:4d:95:80:79:3f:2b:b6:4d:99:a6:8b:db: 07:1b:34:90:81:85:88:de:3d:f2:3a:55:0c:31:1d: 67:ad:b8:cb:80:40:03:2d:d2:34:d4:0c:1d:49:15: 69:79:b4:20:b9:fd:df:c4:10:24:0e:56:0b:57:96: 9e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:5D:9F:96:1B:CC:84:83:90:4A:6A:76:6B:CD:2D:08:CF:4E:09:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9c8ee91b-84f9-3af8-a805-f49c3e862a38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.191.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:b7:76:84:97:48:9a:59:ba:4b:36:b2:d6:96:0f:6c:ce:66: a4:f5:69:42:0e:c3:22:4b:60:81:f6:36:43:0d:56:72:16:a8: 06:f4:3c:c8:24:00:e4:f5:f4:cf:72:f1:18:7c:8c:ef:16:53: f7:60:00:05:e4:07:c6:72:c8:14:02:08:dd:fa:b3:7c:9d:e8: 32:89:e4:ab:3d:30:22:5b:e1:49:2d:0f:c0:ea:e7:84:37:53: 6d:93:88:ea:8d:a7:47:ad:d1:a3:b0:d1:76:f9:9d:fc:53:9b: 1e:66:f3:a5:3f:75:49:33:69:fd:47:52:b1:14:0b:02:19:d0: 2b:11:54:c6:50:4b:79:3f:cf:01:4d:54:33:02:65:cb:5c:af: 1a:26:85:50:f1:20:24:49:dc:62:b3:d6:07:69:3b:26:15:65: 25:9d:fa:72:8d:f0:c1:bf:19:f0:8b:36:7e:25:46:99:bb:60: 14:d2:a1:59:4a:ec:8a:29:1f:32:5f:8a:45:5b:72:fe:5f:32: 69:f3:15:21:98:58:2b:c7:ff:27:ae:a0:3a:a0:8f:b3:02:2f: c1:71:04:ee:5a:cc:86:cd:92:62:63:0a:f7:22:f2:5e:39:aa: 79:f5:cd:60:27:ce:3a:42:04:fa:1f:7c:04:2a:2b:b1:d7:9e: b1:b0:39:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lN3rTGTdK7ty0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk OWY4ZGQxMjgtNTNhNi00NDFmLThmY2UtZjgxN2U4ZmZkODJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Po+q7TY2jInBj0mEWVvIkFfyyzrsD/Bb+NR JrcHghSx7qVW9mFwSO1uBzX+atH2Ms1+dxK8cRFJoyxDxXb4A2vqttDNe1TILHVD TdvtC26qXmPOkBIS1sojDrdHqsl05nbj91QyLCJ+Duny7Fq7mB+eddzxFdDXEelW h0G7A+JCW0rqLSWb4boK6Gn/o8BUpZljdt9t0xQHmAOvv6V4KkHdU+tgNWhGG68h MERtFHN3umdQdj3N+6PhQJdbMAjIyU51+rJNlYB5Pyu2TZmmi9sHGzSQgYWI3j3y OlUMMR1nrbjLgEADLdI01AwdSRVpebQguf3fxBAkDlYLV5aePQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL5dn5YbzISDkEpqdmvNLQjPTglcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOWM4ZWU5MWItODRmOS0z YWY4LWE4MDUtZjQ5YzNlODYyYTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgb+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG63doSXSJpZuks2staWD2zOZqT1aUIOwyJLYIH2NkMNVnIWqAb0PMgk AOT19M9y8Rh8jO8WU/dgAAXkB8ZyyBQCCN36s3yd6DKJ5Ks9MCJb4UktD8Dq54Q3 U22TiOqNp0et0aOw0Xb5nfxTmx5m86U/dUkzaf1HUrEUCwIZ0CsRVMZQS3k/zwFN VDMCZctcrxomhVDxICRJ3GKz1gdpOyYVZSWd+nKN8MG/GfCLNn4lRpm7YBTSoVlK 7IopHzJfikVbcv5fMmnzFSGYWCvH/yeuoDqgj7MCL8FxBO5azIbNkmJjCvci8l45 qnn1zWAnzjpCBPoffAQqK7HXnrGwOT0= -----END CERTIFICATE-----Generated at Fri Jul 24 08:31:53 2026 by rpki-client