$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9c8ee91b-84f9-3af8-a805-f49c3e862a38.roa File: 9c8ee91b-84f9-3af8-a805-f49c3e862a38.roa (raw, json) Hash identifier: E7nCSQ4XOUcIqnAjaKHLeDCFH65uMqcqfIDRAoBLSwM= Subject key identifier: 81:E7:06:B5:12:16:D6:18:35:23:68:94:29:4E:AC:E0:B8:6B:22:67 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F20F7A18E57D3D7616EDA5C80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9c8ee91b-84f9-3af8-a805-f49c3e862a38.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 129.191.128.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:a1:8e:57:d3:d7:61:6e:da:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=2a03ca31-9e2a-4600-8c7b-326177baceb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4f:ed:65:21:1d:90:b7:bc:4a:52:82:ca:28: 2e:79:dd:d7:c5:49:5f:c2:dc:17:84:89:5f:4c:9c: 16:12:37:fd:71:05:db:d5:34:e5:f1:93:b7:c0:26: ae:03:c5:cf:36:f4:9a:9a:a6:b4:ff:34:e1:9b:1e: 29:8c:5e:54:ed:c5:33:6c:71:99:3d:f7:03:28:88: b2:b8:29:10:c0:14:c9:f7:cd:cd:65:70:e2:6f:a3: 42:9a:75:80:ee:69:09:a7:73:0a:71:ba:cb:2a:3a: 9e:3e:1f:30:c1:43:a2:1a:c4:29:f8:19:c3:1c:df: 38:44:11:a2:53:5f:98:d1:d1:e9:80:99:f5:df:cd: 64:76:42:2f:77:83:05:5d:20:5d:8d:47:10:ab:bc: f2:09:4a:ed:c8:c3:0b:91:71:4c:f1:49:e7:3d:1d: ab:67:23:1d:05:32:86:5b:4d:6b:55:1a:38:51:39: 7f:93:3d:ce:37:73:76:d7:bc:bf:be:6b:a8:7d:85: 3f:c5:59:ed:82:c1:05:ec:33:cb:05:73:62:09:1d: 66:44:11:f5:d2:0c:08:6b:e7:3e:45:71:d0:13:65: bb:da:6b:6c:f2:8b:72:47:76:4a:4d:08:4b:41:47: a4:95:f5:f0:0f:b1:ae:8a:17:dc:1a:2e:d2:6b:77: 89:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:E7:06:B5:12:16:D6:18:35:23:68:94:29:4E:AC:E0:B8:6B:22:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9c8ee91b-84f9-3af8-a805-f49c3e862a38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.191.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:b7:32:bf:b6:d7:20:50:67:ea:eb:8a:e3:7f:1a:1b:c3:e7: 2f:cf:b1:c3:42:e6:fc:bd:a9:01:a2:fd:5d:65:38:5c:0f:26: 61:89:ba:d9:78:08:7c:49:76:21:47:85:bd:55:fb:3c:cb:d5: dd:42:7a:34:13:44:e2:10:94:a5:a7:fc:04:77:06:78:18:34: 94:fd:d0:eb:17:36:80:2f:2e:8e:b9:db:36:ec:51:83:0f:5a: 8c:89:ab:e9:c8:fa:ca:04:c4:ad:3e:8e:60:f7:64:fb:34:0a: 70:fe:3d:0b:d5:62:60:bc:0e:19:82:0a:4c:c3:9a:01:03:05: 38:34:1e:02:64:15:33:2b:e6:e9:53:0f:c3:ed:a6:f1:96:08: 50:71:dc:b0:ec:97:35:74:6a:f4:91:f9:1c:1d:f9:65:e0:22: 64:d3:2c:5e:15:26:65:c4:19:ca:69:0f:61:62:3f:73:ec:5b: 99:d2:78:61:18:43:24:ff:c4:95:e0:6c:ac:3e:70:1a:9d:35: 2c:a8:17:b7:f8:2a:75:c9:3e:49:ca:27:0a:9d:d1:4b:af:21: 47:c6:39:29:d9:ce:13:6d:a2:b4:42:5d:ea:10:dd:3a:a6:b0: d7:97:48:85:6b:b6:af:dd:18:9b:f7:3a:82:8f:0f:60:7c:ef: ec:74:ab:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g96GOV9PXYW7aXIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk MmEwM2NhMzEtOWUyYS00NjAwLThjN2ItMzI2MTc3YmFjZWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwk/tZSEdkLe8SlKCyigued3XxUlfwtwXhIlf TJwWEjf9cQXb1TTl8ZO3wCauA8XPNvSamqa0/zThmx4pjF5U7cUzbHGZPfcDKIiy uCkQwBTJ983NZXDib6NCmnWA7mkJp3MKcbrLKjqePh8wwUOiGsQp+BnDHN84RBGi U1+Y0dHpgJn1381kdkIvd4MFXSBdjUcQq7zyCUrtyMMLkXFM8UnnPR2rZyMdBTKG W01rVRo4UTl/kz3ON3N217y/vmuofYU/xVntgsEF7DPLBXNiCR1mRBH10gwIa+c+ RXHQE2W72mts8otyR3ZKTQhLQUeklfXwD7GuihfcGi7Sa3eJaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIHnBrUSFtYYNSNolClOrOC4ayJnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOWM4ZWU5MWItODRmOS0z YWY4LWE4MDUtZjQ5YzNlODYyYTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgb+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAq3Mr+21yBQZ+rriuN/GhvD5y/PscNC5vy9qQGi/V1lOFwPJmGJutl4 CHxJdiFHhb1V+zzL1d1CejQTROIQlKWn/AR3BngYNJT90OsXNoAvLo652zbsUYMP WoyJq+nI+soExK0+jmD3ZPs0CnD+PQvVYmC8DhmCCkzDmgEDBTg0HgJkFTMr5ulT D8PtpvGWCFBx3LDslzV0avSR+Rwd+WXgImTTLF4VJmXEGcppD2FiP3PsW5nSeGEY QyT/xJXgbKw+cBqdNSyoF7f4KnXJPknKJwqd0UuvIUfGOSnZzhNtorRCXeoQ3Tqm sNeXSIVrtq/dGJv3OoKPD2B87+x0q98= -----END CERTIFICATE-----Generated at Thu Sep 24 15:28:02 2026 by rpki-client