$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/137e499e-7b88-381b-a4bf-8672c969503c.roa File: 137e499e-7b88-381b-a4bf-8672c969503c.roa (raw, json) Hash identifier: tDow0i0PljTBAsEKLw2W6lmh/JJsVgzuXJbqJv8ogRk= Subject key identifier: A4:22:43:39:40:4F:3E:45:09:47:DD:C9:8E:72:91:C9:35:DE:ED:97 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F0D6CFCBFA537560E4CC0F940 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/137e499e-7b88-381b-a4bf-8672c969503c.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 134.70.88.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:fc:bf:a5:37:56:0e:4c:c0:f9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=6a36186e-a73b-44b1-86db-f0a941398993 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:0d:3d:f2:af:d8:61:7f:40:d5:18:69:1b:59: b8:e5:53:37:cb:90:8d:f9:c3:18:61:9d:f6:f9:d9: 15:e2:6c:1e:12:db:0d:62:cc:de:c9:b7:b0:e3:9a: d2:83:e9:70:c5:3b:f2:5a:bd:7e:47:c7:93:a0:a1: 4d:7f:46:5f:0f:66:a3:d5:04:2f:57:33:bd:2c:21: bb:ea:a0:51:6d:63:b1:cb:84:cc:7d:4b:0f:ec:bf: 23:b8:14:84:1b:7e:f2:c9:d2:11:b9:f6:0a:88:91: 40:78:1c:4b:c0:e4:ab:4e:38:85:34:44:40:e8:34: c6:38:05:ca:4c:b2:f5:2d:d7:b3:65:b4:3a:43:47: dc:65:00:62:20:38:59:d8:e7:76:37:ae:0c:6d:c2: a1:96:8c:85:67:ee:8f:cd:77:7f:34:55:de:82:f4: a4:d4:c2:81:13:02:3a:63:88:02:c0:cb:32:2a:29: af:b9:a4:52:51:06:85:60:7d:ef:5f:bc:2c:ef:bf: 40:28:ee:52:69:fd:15:a5:8f:ae:c4:31:b3:ac:bb: a7:f0:9a:75:ec:7c:ce:ad:44:47:fd:20:db:ee:f6: d0:91:f9:e1:ad:c7:08:2b:b8:4a:1e:9c:47:00:91: 6a:55:ff:8a:d5:04:e4:bb:01:08:32:2a:aa:02:45: 6e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:22:43:39:40:4F:3E:45:09:47:DD:C9:8E:72:91:C9:35:DE:ED:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/137e499e-7b88-381b-a4bf-8672c969503c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.70.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:0a:82:ed:c3:6f:4c:4a:0d:18:0c:91:4f:ed:8e:92:5a:71: e6:d4:23:ea:5a:23:7b:9a:79:5b:33:7a:84:3b:ab:e2:74:02: 38:d4:44:72:7c:c5:73:e2:5e:63:3f:44:74:4e:a6:a7:76:18: 65:50:64:df:13:cf:72:e1:d1:e5:dd:c6:d5:92:ff:4a:50:87: 4d:0a:c1:e1:87:45:fe:d6:61:f1:64:b6:88:50:e7:7d:65:1d: 0f:76:73:5a:60:dd:17:89:94:38:50:57:ed:8e:75:d7:58:19: fb:2a:04:37:4a:56:b9:54:1a:a1:02:92:69:d6:f6:c1:91:7a: aa:1b:8f:c4:63:b3:7b:a9:7a:61:b3:84:8b:e3:12:47:bb:aa: 06:85:d3:35:a4:6e:bd:8a:5b:b3:0c:08:b3:80:02:5f:cd:1f: 9e:14:e3:89:35:b8:5a:60:e1:9a:e3:2a:dc:73:e2:48:83:9d: e9:6b:d6:2b:9a:34:33:76:cd:13:f8:37:7e:eb:2d:f8:e5:eb: 85:fd:eb:f0:b1:52:e2:48:d5:75:3d:22:c6:69:c0:6f:62:e0: a5:a0:c0:7f:1c:00:41:d6:5e:3d:2d:51:17:21:93:f3:fc:a3: 92:c5:fc:96:20:e6:dd:61:e9:72:a0:15:a9:db:98:09:97:e8: 88:6e:09:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbPy/pTdWDkzA+UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk NmEzNjE4NmUtYTczYi00NGIxLTg2ZGItZjBhOTQxMzk4OTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAng098q/YYX9A1RhpG1m45VM3y5CN+cMYYZ32 +dkV4mweEtsNYszeybew45rSg+lwxTvyWr1+R8eToKFNf0ZfD2aj1QQvVzO9LCG7 6qBRbWOxy4TMfUsP7L8juBSEG37yydIRufYKiJFAeBxLwOSrTjiFNERA6DTGOAXK TLL1LdezZbQ6Q0fcZQBiIDhZ2Od2N64MbcKhloyFZ+6PzXd/NFXegvSk1MKBEwI6 Y4gCwMsyKimvuaRSUQaFYH3vX7ws779AKO5Saf0VpY+uxDGzrLun8Jp17HzOrURH /SDb7vbQkfnhrccIK7hKHpxHAJFqVf+K1QTkuwEIMiqqAkVu1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKQiQzlATz5FCUfdyY5ykck13u2XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMTM3ZTQ5OWUtN2I4OC0z ODFiLWE0YmYtODY3MmM5Njk1MDNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhkZYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGAKgu3Db0xKDRgMkU/tjpJacebUI+paI3uaeVszeoQ7q+J0AjjURHJ8 xXPiXmM/RHROpqd2GGVQZN8Tz3Lh0eXdxtWS/0pQh00KweGHRf7WYfFktohQ531l HQ92c1pg3ReJlDhQV+2OdddYGfsqBDdKVrlUGqECkmnW9sGReqobj8Rjs3upemGz hIvjEke7qgaF0zWkbr2KW7MMCLOAAl/NH54U44k1uFpg4ZrjKtxz4kiDnelr1iua NDN2zRP4N37rLfjl64X96/CxUuJI1XU9IsZpwG9i4KWgwH8cAEHWXj0tURchk/P8 o5LF/JYg5t1h6XKgFanbmAmX6IhuCd4= -----END CERTIFICATE-----Generated at Mon Sep 21 18:41:54 2026 by rpki-client