$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ba41a53c-7262-3cc0-8b22-72d10c28b1c6.roa File: ba41a53c-7262-3cc0-8b22-72d10c28b1c6.roa (raw, json) Hash identifier: uqhrZjWIwnuPBjj/eCYv2pdR22psVKyxTilNHYkcfto= Subject key identifier: 65:23:F7:30:E4:A9:DB:8C:C2:B1:19:5E:7A:54:B4:70:32:2A:77:C8 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F130248185C24C1282F8219E0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ba41a53c-7262-3cc0-8b22-72d10c28b1c6.roa Signing time: Sat 05 Sep 2026 13:00:12 +0000 ROA not before: Sat 05 Sep 2026 13:00:12 +0000 ROA not after: Fri 04 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 129.146.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:13:02:48:18:5c:24:c1:28:2f:82:19:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 5 13:00:12 2026 GMT Not After : Dec 4 14:00:12 2026 GMT Subject: CN=8f348594-7353-4373-ad37-693f387921e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:bd:aa:d9:9e:a2:08:da:c3:e9:38:e8:e3:12: 97:b9:8b:8d:00:95:ad:4b:e2:6a:91:77:4d:29:38: e9:40:13:9e:57:49:0f:d1:7a:18:b6:4f:8f:8b:f4: 6b:bc:29:40:a0:39:43:b4:db:08:47:58:e9:04:4b: 79:3b:be:0c:71:f4:8e:35:ae:8d:8d:3e:04:ac:4c: 64:52:d2:7f:5b:72:3b:02:35:6b:32:de:10:af:69: ad:0c:82:f3:5f:8d:bf:be:43:b4:5e:39:49:5c:66: 21:a4:b7:03:82:e3:af:f7:b3:81:a2:f2:c2:95:06: d3:5a:20:33:24:aa:89:d8:3a:7a:f9:4f:26:c5:d3: cb:fc:6b:dc:98:fb:49:a2:d4:43:f5:ff:88:ce:86: 16:7a:7d:71:f1:21:bb:c7:d1:da:e9:18:af:7c:db: 3a:eb:0d:a6:d1:50:37:f7:ba:e7:54:e0:2f:41:11: 17:0f:7b:9b:60:ef:c0:81:ed:0a:be:c5:06:fb:15: 1f:78:c7:82:7f:82:6b:1f:d0:d8:a1:37:05:87:b9: 6b:82:17:6e:8f:6d:be:e9:af:05:71:31:45:9e:c9: a0:17:7e:43:f3:2f:0d:97:84:6b:f5:e2:d8:64:c3: b3:16:a6:84:2a:db:af:51:3e:68:c7:49:5b:37:f0: 49:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:23:F7:30:E4:A9:DB:8C:C2:B1:19:5E:7A:54:B4:70:32:2A:77:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ba41a53c-7262-3cc0-8b22-72d10c28b1c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.146.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:9c:2d:94:a9:5a:c4:01:f9:de:c8:ad:02:77:f5:9e:2e:d5: 65:c1:61:a7:b5:db:e1:bb:19:37:63:c1:1d:a0:ee:76:60:86: 0b:e8:94:2a:34:dd:84:c0:77:9e:f0:04:0b:7d:d7:bf:f3:2a: 89:51:16:ff:ab:d2:40:7a:3f:78:f3:9f:f3:19:0d:b1:3c:af: 62:e9:a7:95:99:95:9d:03:d2:1a:0b:a1:b3:68:d8:64:ed:b7: 64:ba:6a:d3:44:4a:40:f7:23:c0:f7:5e:90:e6:38:33:60:6e: dc:20:f8:82:50:65:c7:8e:f3:f7:a3:bc:3a:cb:a3:e3:30:37: 9a:41:1e:74:eb:f4:a6:02:7d:d4:07:de:1d:e3:22:50:1d:83: 8f:6e:68:d1:14:09:e9:86:67:e2:da:7e:1e:b5:dc:5a:b4:93: c7:77:ad:00:95:83:f2:c5:ac:16:80:fd:f9:ca:96:59:42:25: 16:4e:5c:c0:0c:13:06:1c:90:e6:3b:1b:3a:bd:10:b7:58:b1: 3a:16:9b:43:9e:78:80:4b:73:6e:46:95:8f:d4:a3:f6:66:5b: 94:67:f5:63:1d:72:06:07:d8:b3:2e:80:a8:a0:91:7d:f9:c2: af:b9:73:b8:f0:06:13:f9:b1:4e:7b:c4:9d:cd:48:0d:4c:2e: 8c:8e:97:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8TAkgYXCTBKC+CGeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNTEzMDAxMloXDTI2MTIwNDE0MDAxMlowLzEtMCsGA1UEAxMk OGYzNDg1OTQtNzM1My00MzczLWFkMzctNjkzZjM4NzkyMWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxL2q2Z6iCNrD6Tjo4xKXuYuNAJWtS+JqkXdN KTjpQBOeV0kP0XoYtk+Pi/RrvClAoDlDtNsIR1jpBEt5O74McfSONa6NjT4ErExk UtJ/W3I7AjVrMt4Qr2mtDILzX42/vkO0XjlJXGYhpLcDguOv97OBovLClQbTWiAz JKqJ2Dp6+U8mxdPL/GvcmPtJotRD9f+IzoYWen1x8SG7x9Ha6RivfNs66w2m0VA3 97rnVOAvQREXD3ubYO/Age0KvsUG+xUfeMeCf4JrH9DYoTcFh7lrghduj22+6a8F cTFFnsmgF35D8y8Nl4Rr9eLYZMOzFqaEKtuvUT5ox0lbN/BJLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGUj9zDkqduMwrEZXnpUtHAyKnfIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYmE0MWE1M2MtNzI2Mi0z Y2MwLThiMjItNzJkMTBjMjhiMWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEgZKwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKWcLZSpWsQB+d7IrQJ39Z4u1WXBYae12+G7GTdjwR2g7nZghgvolCo0 3YTAd57wBAt917/zKolRFv+r0kB6P3jzn/MZDbE8r2Lpp5WZlZ0D0hoLobNo2GTt t2S6atNESkD3I8D3XpDmODNgbtwg+IJQZceO8/ejvDrLo+MwN5pBHnTr9KYCfdQH 3h3jIlAdg49uaNEUCemGZ+Lafh613Fq0k8d3rQCVg/LFrBaA/fnKlllCJRZOXMAM EwYckOY7Gzq9ELdYsToWm0OeeIBLc25GlY/Uo/ZmW5Rn9WMdcgYH2LMugKigkX35 wq+5c7jwBhP5sU57xJ3NSA1MLoyOl2E= -----END CERTIFICATE-----Generated at Sun Sep 27 03:00:21 2026 by rpki-client