$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fd9d146a-9565-31e5-9e0e-d2de2ebd158a.roa File: fd9d146a-9565-31e5-9e0e-d2de2ebd158a.roa (raw, json) Hash identifier: sSgCWi6zv2twR5WPqwVwc2liJAYwM68MWXrcaMm9Oow= Subject key identifier: 3A:2C:DC:C7:E1:87:88:57:9F:5A:B3:A5:B2:53:FA:FC:94:52:96:D8 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584FC3014C6D5E860E045487EC80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fd9d146a-9565-31e5-9e0e-d2de2ebd158a.roa Signing time: Sat 07 Nov 2026 14:00:12 +0000 ROA not before: Sat 07 Nov 2026 14:00:12 +0000 ROA not after: Fri 05 Feb 2027 14:00:12 +0000 asID: 31898 IP address blocks: 129.157.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:c3:01:4c:6d:5e:86:0e:04:54:87:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Nov 7 14:00:12 2026 GMT Not After : Feb 5 14:00:12 2027 GMT Subject: CN=b21b8816-82b1-4cbe-b632-b555258fe0a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:4e:d2:7f:4e:47:51:6d:fc:e5:20:7e:0c:ab: dc:48:df:3e:6c:c8:1d:84:95:67:0e:eb:0b:09:53: 9c:99:77:d7:e0:83:ab:37:25:b9:49:76:fb:6f:4e: e2:0d:13:33:69:f2:e4:75:4c:b9:2c:29:ca:97:93: 96:44:13:28:d1:d0:2f:e7:05:85:a9:2f:bc:e6:42: 16:8e:79:30:d0:db:d7:82:bf:f0:96:67:bf:3b:3a: 89:99:c4:66:d0:36:cb:9c:2d:a1:b1:1c:73:c5:db: 2e:05:4a:f2:5c:31:bc:28:f7:16:18:f3:15:71:c3: 61:6e:48:99:06:8e:81:09:d4:03:34:e9:59:0e:ef: 22:51:e9:98:cd:78:2f:d1:33:7e:4d:51:ff:80:5e: 3c:f9:d1:09:ae:e0:c0:06:87:27:d7:05:d6:30:a0: da:80:a5:9c:73:8b:2f:55:9f:54:93:2c:f4:5c:10: 08:35:42:18:92:cf:27:ec:7a:fa:69:9d:60:5a:f2: 6d:02:f4:4b:9d:63:69:52:d5:00:ac:8d:23:8c:d5: 79:20:b3:e7:3f:72:2e:bf:9c:97:06:ab:86:33:34: d9:74:ac:fd:57:b4:0b:90:46:95:ad:fc:25:97:11: 84:b8:d3:f4:95:9b:66:83:6e:24:2a:94:e2:65:72: 0d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:2C:DC:C7:E1:87:88:57:9F:5A:B3:A5:B2:53:FA:FC:94:52:96:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fd9d146a-9565-31e5-9e0e-d2de2ebd158a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.157.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:f7:ad:c9:06:c2:44:ea:08:60:71:10:fc:ff:b1:49:5d:39: 1f:17:c3:d5:e2:83:3a:99:9b:7c:db:14:b1:e0:84:02:e4:a5: d2:ac:56:46:0d:6a:39:cc:67:1a:f0:8e:51:0e:ee:ad:e7:c3: 2d:64:ce:75:89:7b:1d:49:28:78:27:0c:d3:2b:40:b9:ae:07: 2d:3f:75:ac:69:0e:e8:b6:42:3f:9f:c1:48:19:68:c6:04:0e: 86:75:49:0d:ae:16:41:34:c4:b1:6c:4f:b2:fa:f5:26:18:6f: ad:72:45:78:a4:1d:1f:25:f4:28:ad:b9:e1:17:08:ef:ea:f4: f2:3c:9b:9e:6c:95:62:b6:c4:8a:fd:49:35:8d:a4:01:01:26: f0:1a:2b:d0:4a:e7:cc:c6:c2:8f:33:33:5e:74:19:18:86:52: 05:23:94:c9:96:e4:0c:1f:b9:6b:6b:4a:11:2c:a4:2d:72:71: dd:48:cc:ec:73:d9:41:c3:55:7a:20:19:88:74:07:08:f5:ac: 45:f3:ce:f7:bf:cf:d3:07:30:1d:e1:54:64:56:00:2d:79:c6: 04:ca:2c:a8:27:f5:1f:ba:2f:7f:82:69:65:d5:79:d7:05:67: 66:d2:1c:be:8d:49:32:a0:b7:a8:f0:ec:2d:9f:f5:61:fd:9c: a1:ee:c6:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE/DAUxtXoYOBFSH7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MTEwNzE0MDAxMloXDTI3MDIwNTE0MDAxMlowLzEtMCsGA1UEAxMk YjIxYjg4MTYtODJiMS00Y2JlLWI2MzItYjU1NTI1OGZlMGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgU7Sf05HUW385SB+DKvcSN8+bMgdhJVnDusL CVOcmXfX4IOrNyW5SXb7b07iDRMzafLkdUy5LCnKl5OWRBMo0dAv5wWFqS+85kIW jnkw0NvXgr/wlme/OzqJmcRm0DbLnC2hsRxzxdsuBUryXDG8KPcWGPMVccNhbkiZ Bo6BCdQDNOlZDu8iUemYzXgv0TN+TVH/gF48+dEJruDABocn1wXWMKDagKWcc4sv VZ9Ukyz0XBAINUIYks8n7Hr6aZ1gWvJtAvRLnWNpUtUArI0jjNV5ILPnP3Iuv5yX BquGMzTZdKz9V7QLkEaVrfwllxGEuNP0lZtmg24kKpTiZXINIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDos3Mfhh4hXn1qzpbJT+vyUUpbYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZmQ5ZDE0NmEtOTU2NS0z MWU1LTllMGUtZDJkZTJlYmQxNThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgZ14MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ/3rckGwkTqCGBxEPz/sUldOR8Xw9XigzqZm3zbFLHghALkpdKsVkYN ajnMZxrwjlEO7q3nwy1kznWJex1JKHgnDNMrQLmuBy0/daxpDui2Qj+fwUgZaMYE DoZ1SQ2uFkE0xLFsT7L69SYYb61yRXikHR8l9CitueEXCO/q9PI8m55slWK2xIr9 STWNpAEBJvAaK9BK58zGwo8zM150GRiGUgUjlMmW5AwfuWtrShEspC1ycd1IzOxz 2UHDVXogGYh0Bwj1rEXzzve/z9MHMB3hVGRWAC15xgTKLKgn9R+6L3+CaWXVedcF Z2bSHL6NSTKgt6jw7C2f9WH9nKHuxhs= -----END CERTIFICATE-----Generated at Sun Nov 15 22:11:24 2026 by rpki-client