$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ca414a24-2cf9-355c-b83f-5c043bd7f053.roa File: ca414a24-2cf9-355c-b83f-5c043bd7f053.roa (raw, json) Hash identifier: FNr9fXRKL8MgM+35CyoCDoGV1znB+wjn/Fpwc0S90E0= Subject key identifier: CB:F3:DE:41:2A:85:46:9B:14:D4:5C:B5:30:58:45:44:27:54:91:C7 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F130245E5217299ABF07AF300 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ca414a24-2cf9-355c-b83f-5c043bd7f053.roa Signing time: Sat 05 Sep 2026 13:00:12 +0000 ROA not before: Sat 05 Sep 2026 13:00:12 +0000 ROA not after: Fri 04 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 129.153.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:13:02:45:e5:21:72:99:ab:f0:7a:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 5 13:00:12 2026 GMT Not After : Dec 4 14:00:12 2026 GMT Subject: CN=35e58ed8-e799-4c6d-b992-8308d68c6d00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:73:09:59:42:df:81:95:de:73:4d:f5:2a:75: 74:34:ff:e3:d4:8d:99:a5:a0:35:a5:66:09:36:7e: 12:bd:34:17:43:5c:28:0a:82:c4:60:c9:06:3f:da: 6c:2b:9e:51:f8:b8:ba:19:2c:c2:27:c7:96:d7:1a: 0f:6d:48:25:2f:d3:5e:c8:c5:68:be:5e:15:9c:2d: 2f:b6:bd:f5:94:20:6f:67:62:f1:89:78:ee:0d:c8: d8:f2:1b:3e:6e:10:55:74:fb:0a:45:47:98:38:a2: 28:f1:c7:f9:02:2a:20:6a:ce:39:bb:ae:56:22:2c: 36:6a:e1:e5:01:99:06:9a:a8:16:5c:55:22:bd:2f: 4a:ba:d7:1e:f4:a8:14:40:61:07:14:6c:da:82:f4: b4:39:43:e7:1e:44:e7:e3:41:ba:9d:8a:f1:0c:3e: f2:5b:28:d8:23:99:4d:d0:d8:e0:3f:da:eb:35:11: ee:80:f4:b0:fd:42:e8:39:eb:34:7b:26:5c:3f:b5: 62:14:af:00:b2:64:bb:7e:aa:4e:3b:9b:b9:18:fa: 30:8a:8f:b8:ab:5e:e8:c5:9c:62:12:6d:cd:d4:50: 21:19:a1:88:09:37:f9:7b:32:d3:b1:e8:87:04:e0: ad:11:c6:8e:8e:47:98:c5:66:e0:86:5e:9b:b4:c6: 73:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:F3:DE:41:2A:85:46:9B:14:D4:5C:B5:30:58:45:44:27:54:91:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ca414a24-2cf9-355c-b83f-5c043bd7f053.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.153.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:41:90:11:0b:1b:9c:52:3f:95:e3:71:40:f2:83:71:53:b2: 66:80:84:9e:77:81:99:c4:4c:f2:6d:0e:69:4f:01:4d:4e:6c: 6a:24:6a:62:14:22:15:83:ab:60:9e:96:59:9c:f9:88:0c:c2: a0:c1:43:0f:dc:2d:d4:be:ab:8c:5f:cd:09:57:92:88:82:7b: 10:47:16:32:d1:c1:af:7e:31:af:81:a1:8e:0e:c9:96:7d:27: 8d:86:5e:c2:19:31:d4:89:45:1b:66:ad:f8:12:4f:36:4b:39: 32:e3:32:2b:b0:38:79:4f:6a:28:5e:4e:31:ce:fa:d3:7c:d8: 70:82:98:af:4e:2f:ca:6e:b9:0e:52:e1:ed:46:e1:ab:e9:7c: db:86:c1:1d:0d:7e:9d:03:58:9a:fd:5e:d0:6a:d6:85:4f:bf: 6e:84:70:4f:60:7a:f0:65:d2:0e:87:ef:9b:c8:dd:f8:61:cc: 33:d6:c5:a3:06:2d:82:08:eb:61:5e:f2:9d:67:a6:9b:40:87: aa:3e:08:08:d1:2b:3e:5c:f6:fb:b3:5c:a4:f1:07:6b:6d:23: 61:50:d2:54:3a:7f:18:4e:64:d7:40:8d:cd:f7:c0:c6:8f:b3: e2:dc:cb:73:5a:27:56:d2:b9:e9:ef:30:b6:18:6f:a1:0f:10: c8:c0:53:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8TAkXlIXKZq/B68wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNTEzMDAxMloXDTI2MTIwNDE0MDAxMlowLzEtMCsGA1UEAxMk MzVlNThlZDgtZTc5OS00YzZkLWI5OTItODMwOGQ2OGM2ZDAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHMJWULfgZXec031KnV0NP/j1I2ZpaA1pWYJ Nn4SvTQXQ1woCoLEYMkGP9psK55R+Li6GSzCJ8eW1xoPbUglL9NeyMVovl4VnC0v tr31lCBvZ2LxiXjuDcjY8hs+bhBVdPsKRUeYOKIo8cf5Aiogas45u65WIiw2auHl AZkGmqgWXFUivS9Kutce9KgUQGEHFGzagvS0OUPnHkTn40G6nYrxDD7yWyjYI5lN 0NjgP9rrNRHugPSw/ULoOes0eyZcP7ViFK8AsmS7fqpOO5u5GPowio+4q17oxZxi Em3N1FAhGaGICTf5ezLTseiHBOCtEcaOjkeYxWbghl6btMZz5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMvz3kEqhUabFNRctTBYRUQnVJHHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvY2E0MTRhMjQtMmNmOS0z NTVjLWI4M2YtNWMwNDNiZDdmMDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgZn0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABBBkBELG5xSP5XjcUDyg3FTsmaAhJ53gZnETPJtDmlPAU1ObGokamIU IhWDq2Cellmc+YgMwqDBQw/cLdS+q4xfzQlXkoiCexBHFjLRwa9+Ma+BoY4OyZZ9 J42GXsIZMdSJRRtmrfgSTzZLOTLjMiuwOHlPaiheTjHO+tN82HCCmK9OL8puuQ5S 4e1G4avpfNuGwR0Nfp0DWJr9XtBq1oVPv26EcE9gevBl0g6H75vI3fhhzDPWxaMG LYII62Fe8p1npptAh6o+CAjRKz5c9vuzXKTxB2ttI2FQ0lQ6fxhOZNdAjc33wMaP s+Lcy3NaJ1bSuenvMLYYb6EPEMjAU08= -----END CERTIFICATE-----Generated at Fri Sep 25 23:41:29 2026 by rpki-client