$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0c1d78ae-d145-3c72-ad7d-5522f55ff688.roa File: 0c1d78ae-d145-3c72-ad7d-5522f55ff688.roa (raw, json) Hash identifier: KnruVkkk/5g3V7aD9jDVHup8LNVQbDZGr2nABT57SH4= Subject key identifier: 48:6D:F9:E2:0B:99:3C:34:54:A9:CC:93:1F:49:F4:B1:13:16:90:E7 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F11A1616492D015D2FCD07300 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0c1d78ae-d145-3c72-ad7d-5522f55ff688.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 168.129.180.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:a1:61:64:92:d0:15:d2:fc:d0:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=e6fc936f-422c-4a1f-90cc-0e6e169e1b8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:83:f3:0d:df:d8:5d:56:20:2f:c3:8a:a1:0d: 5a:8c:e0:fb:21:9f:7f:0c:86:23:e8:cc:04:d9:2c: 08:d7:6a:0a:99:bb:d3:bc:90:c3:84:c1:4e:4d:ed: 64:74:bb:25:b9:31:99:fb:96:46:58:f3:c7:08:2c: 4d:f3:03:b4:0b:98:62:f2:18:b9:df:42:03:c5:8d: 91:4e:1c:8d:44:d4:03:63:37:e0:68:c4:d3:1e:64: 30:7e:a5:fa:48:d0:20:27:27:3c:6f:94:21:14:2f: 4c:59:23:70:a5:d5:60:b9:86:42:af:5d:e8:0b:c0: 4b:b0:ff:98:4a:66:ff:03:94:88:d5:a7:21:cb:8b: 28:3d:2f:92:e3:32:0a:58:24:c3:ae:08:ba:1e:9b: b7:c0:7d:16:fd:d0:f8:77:6f:87:1e:78:4a:34:c2: 78:0a:b8:40:4f:7d:88:eb:24:ad:37:29:76:39:60: 70:19:33:32:e1:2f:2c:4a:8f:46:50:68:a2:de:33: 9e:de:51:e5:26:e7:d1:70:84:fc:b0:1d:43:46:12: 28:f8:75:4a:c5:d7:35:19:7b:78:84:ff:11:4c:14: 59:95:2e:f8:6f:d1:d5:fa:b6:12:74:99:df:e4:a0: 26:0d:57:03:35:7d:63:56:95:59:ca:2b:df:af:93: 0f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:6D:F9:E2:0B:99:3C:34:54:A9:CC:93:1F:49:F4:B1:13:16:90:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0c1d78ae-d145-3c72-ad7d-5522f55ff688.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.129.180.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:e1:b1:3c:8d:f4:72:50:aa:6c:df:a3:6f:ae:9d:5f:f0:7d: ec:96:14:44:8a:74:81:f3:fc:98:58:ab:c7:61:4c:49:63:79: ff:e8:27:2b:e4:1d:59:fa:08:4c:83:8d:d8:87:4d:98:21:e4: 08:5f:ab:06:d5:c5:7f:11:7f:00:80:14:1c:af:c9:db:b7:53: 64:9b:e2:5c:b8:1b:7d:7a:c1:65:cf:75:0e:13:16:19:46:9c: b6:be:18:47:d8:86:df:84:f5:f2:4c:4c:26:e9:b4:6a:bc:1e: 3c:bb:eb:0d:c2:72:2b:9d:9c:cf:77:97:76:6e:88:39:4d:00: 86:fb:24:46:6d:be:e0:52:ae:cc:01:74:9d:64:1d:af:e4:35: e5:b1:a3:e9:d4:ad:d0:0d:03:3b:4c:c5:6b:d6:59:50:4b:80: 0a:58:b5:99:8e:d3:61:69:64:18:da:c3:07:69:6b:f8:69:4c: ff:41:9a:6f:17:61:fd:15:87:10:c9:4e:96:21:c0:6a:d6:25: 4f:b0:dd:52:27:08:0f:ba:7e:ec:31:b8:1d:ee:ab:d4:53:f2: c3:3d:2d:50:f5:0b:d2:8e:1b:1c:2d:b6:e0:1b:d4:48:1c:68: 9b:5c:99:d8:02:70:3d:3d:1c:a0:b0:58:ed:7f:06:f3:79:ce: 3d:82:03:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RoWFkktAV0vzQcwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTZmYzkzNmYtNDIyYy00YTFmLTkwY2MtMGU2ZTE2OWUxYjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4PzDd/YXVYgL8OKoQ1ajOD7IZ9/DIYj6MwE 2SwI12oKmbvTvJDDhMFOTe1kdLsluTGZ+5ZGWPPHCCxN8wO0C5hi8hi530IDxY2R ThyNRNQDYzfgaMTTHmQwfqX6SNAgJyc8b5QhFC9MWSNwpdVguYZCr13oC8BLsP+Y Smb/A5SI1achy4soPS+S4zIKWCTDrgi6Hpu3wH0W/dD4d2+HHnhKNMJ4CrhAT32I 6yStNyl2OWBwGTMy4S8sSo9GUGii3jOe3lHlJufRcIT8sB1DRhIo+HVKxdc1GXt4 hP8RTBRZlS74b9HV+rYSdJnf5KAmDVcDNX1jVpVZyivfr5MPqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEht+eILmTw0VKnMkx9J9LETFpDnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMGMxZDc4YWUtZDE0NS0z YzcyLWFkN2QtNTUyMmY1NWZmNjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqIG0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAILhsTyN9HJQqmzfo2+unV/wfeyWFESKdIHz/JhYq8dhTEljef/oJyvk HVn6CEyDjdiHTZgh5AhfqwbVxX8RfwCAFByvydu3U2Sb4ly4G316wWXPdQ4TFhlG nLa+GEfYht+E9fJMTCbptGq8Hjy76w3CciudnM93l3ZuiDlNAIb7JEZtvuBSrswB dJ1kHa/kNeWxo+nUrdANAztMxWvWWVBLgApYtZmO02FpZBjawwdpa/hpTP9Bmm8X Yf0VhxDJTpYhwGrWJU+w3VInCA+6fuwxuB3uq9RT8sM9LVD1C9KOGxwttuAb1Egc aJtcmdgCcD09HKCwWO1/BvN5zj2CA1I= -----END CERTIFICATE-----Generated at Tue Sep 22 15:07:05 2026 by rpki-client