$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/19404fb0-1c9e-30cc-bb2e-23a9e637fa9d.roa File: 19404fb0-1c9e-30cc-bb2e-23a9e637fa9d.roa (raw, json) Hash identifier: TkJy8n4NHRTYx2qPZmx6PqIWQPCq1Tm2NtXew6oJ8jo= Subject key identifier: 32:F8:73:05:77:FF:C1:B4:87:4A:FA:8A:BE:0F:D0:21:F1:10:97:9F Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F1B62541A362C5CE84F8F41B0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/19404fb0-1c9e-30cc-bb2e-23a9e637fa9d.roa Signing time: Tue 08 Sep 2026 13:00:12 +0000 ROA not before: Tue 08 Sep 2026 13:00:12 +0000 ROA not after: Mon 07 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 147.154.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:62:54:1a:36:2c:5c:e8:4f:8f:41:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 8 13:00:12 2026 GMT Not After : Dec 7 14:00:12 2026 GMT Subject: CN=2ae3eda4-a0fe-4d1e-850b-2fd9e4391047 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:cc:b2:82:0e:68:4b:2a:c8:21:65:30:a1:a9: a6:44:77:5f:bf:a9:ef:7c:92:8a:e0:f9:5f:ed:a7: d5:88:6d:78:3c:c4:89:f6:d5:e3:d7:72:15:cb:0c: ee:a0:80:d1:f3:d7:0f:61:3c:21:72:b4:cc:80:ea: 70:fd:81:84:a8:14:e1:53:2d:bb:a3:9d:b5:38:33: d3:08:7e:3a:bf:af:ff:44:c2:04:29:30:fb:9c:e0: f7:a5:e8:3f:00:a9:24:fa:48:89:2e:bb:e5:54:1e: 25:a9:2d:9e:15:0e:c8:25:f8:dc:dd:0f:81:e9:df: c7:a7:e3:a3:01:4a:19:48:ae:1d:1b:b7:66:e0:5b: b6:3e:9b:50:2a:be:40:99:7a:49:8a:93:e4:41:55: d2:b9:e4:02:74:77:ee:14:3a:32:7d:3a:03:c9:b1: e1:ee:8c:f0:16:c0:fe:5c:97:cd:b4:24:1c:36:2b: f1:37:da:78:31:20:c4:91:82:bb:9e:24:ea:0c:41: 72:2d:7d:b2:05:fa:5d:a6:18:c3:72:1a:c0:74:2e: 06:1d:0f:e6:e3:ec:d2:33:28:8c:49:3b:0e:87:f0: 3e:ab:9b:75:77:65:1e:d3:ce:96:8b:30:0d:b4:66: c1:31:80:93:b7:40:ff:8a:9c:c0:bb:0d:31:0c:b4: cb:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:F8:73:05:77:FF:C1:B4:87:4A:FA:8A:BE:0F:D0:21:F1:10:97:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/19404fb0-1c9e-30cc-bb2e-23a9e637fa9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 147.154.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:10:e6:6f:16:b9:14:66:bf:7b:b3:a1:87:cb:04:bb:a8:b7: 82:cd:85:36:67:77:72:ad:86:c3:92:cd:a4:15:e1:ef:07:a2: a0:58:47:65:b0:c6:91:b4:67:35:d9:8c:f4:98:77:a7:f9:a9: f7:e7:38:7a:34:7b:d8:f2:58:ef:c8:92:64:1b:cd:2c:6b:02: 3f:4d:f0:f3:0d:82:6a:8a:ae:82:13:43:70:e5:e3:7e:74:a9: 51:02:b6:07:a5:21:db:e8:03:3b:c9:ab:9e:ea:e7:0e:42:5b: 2d:15:cd:8a:e2:ea:d1:a2:4b:b3:56:88:57:57:08:b0:81:9b: 20:99:aa:ec:a5:f5:14:45:ce:68:76:19:7a:51:5f:aa:8f:c5: 06:f2:d2:f9:42:54:a3:83:d8:56:d9:d0:c0:a0:52:21:c5:39: a9:23:64:82:da:b9:3e:38:5b:74:e1:94:9f:fb:e2:71:51:19: ac:57:7d:45:7b:85:95:f5:2e:49:74:c3:d7:d2:79:b3:ec:be: bc:9f:10:d6:c1:a5:da:60:32:d5:3d:d0:1e:7d:a3:e2:f2:d2: 37:97:2e:56:de:00:a3:9d:10:66:fd:b6:6a:be:35:27:03:95: fb:f6:31:60:18:ae:84:78:e4:1e:cc:83:9a:d5:33:33:9d:be: c6:e7:49:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8bYlQaNixc6E+PQbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwODEzMDAxMloXDTI2MTIwNzE0MDAxMlowLzEtMCsGA1UEAxMk MmFlM2VkYTQtYTBmZS00ZDFlLTg1MGItMmZkOWU0MzkxMDQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8yygg5oSyrIIWUwoammRHdfv6nvfJKK4Plf 7afViG14PMSJ9tXj13IVywzuoIDR89cPYTwhcrTMgOpw/YGEqBThUy27o521ODPT CH46v6//RMIEKTD7nOD3peg/AKkk+kiJLrvlVB4lqS2eFQ7IJfjc3Q+B6d/Hp+Oj AUoZSK4dG7dm4Fu2PptQKr5AmXpJipPkQVXSueQCdHfuFDoyfToDybHh7ozwFsD+ XJfNtCQcNivxN9p4MSDEkYK7niTqDEFyLX2yBfpdphjDchrAdC4GHQ/m4+zSMyiM STsOh/A+q5t1d2Ue086WizANtGbBMYCTt0D/ipzAuw0xDLTLRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDL4cwV3/8G0h0r6ir4P0CHxEJefMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMTk0MDRmYjAtMWM5ZS0z MGNjLWJiMmUtMjNhOWU2MzdmYTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEk5ogMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJMQ5m8WuRRmv3uzoYfLBLuot4LNhTZnd3KthsOSzaQV4e8HoqBYR2Ww xpG0ZzXZjPSYd6f5qffnOHo0e9jyWO/IkmQbzSxrAj9N8PMNgmqKroITQ3Dl4350 qVECtgelIdvoAzvJq57q5w5CWy0VzYri6tGiS7NWiFdXCLCBmyCZquyl9RRFzmh2 GXpRX6qPxQby0vlCVKOD2FbZ0MCgUiHFOakjZILauT44W3ThlJ/74nFRGaxXfUV7 hZX1Lkl0w9fSebPsvryfENbBpdpgMtU90B59o+Ly0jeXLlbeAKOdEGb9tmq+NScD lfv2MWAYroR45B7Mg5rVMzOdvsbnSZ4= -----END CERTIFICATE-----Generated at Tue Sep 22 03:43:12 2026 by rpki-client