$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1a245a68-6d5b-37bd-88fd-a2c716da367c.roa File: 1a245a68-6d5b-37bd-88fd-a2c716da367c.roa (raw, json) Hash identifier: V7O2tqrG57yWcB3SSIzLVT6yF8fv+F2P3I6VQlQtL34= Subject key identifier: 74:61:9E:98:FA:93:86:49:2B:F9:F6:B5:5F:88:03:46:66:F7:84:29 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F46A7E1E3811B85E5ED313500 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1a245a68-6d5b-37bd-88fd-a2c716da367c.roa Signing time: Thu 24 Sep 2026 01:00:12 +0000 ROA not before: Thu 24 Sep 2026 01:00:12 +0000 ROA not after: Wed 23 Dec 2026 02:00:12 +0000 asID: 54253 IP address blocks: 134.185.144.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:46:a7:e1:e3:81:1b:85:e5:ed:31:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 24 01:00:12 2026 GMT Not After : Dec 23 02:00:12 2026 GMT Subject: CN=87e1f3a4-3c77-4a65-b9ff-4481d4aac6c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0d:dc:6c:17:d7:34:4f:88:4d:92:c1:d8:42: 00:b6:24:b9:4f:a9:e7:4c:d8:c1:aa:b6:e6:5e:8b: 98:0d:3e:5d:29:7c:88:36:ec:7e:bd:ac:4b:30:cf: 52:5a:6d:30:a5:68:21:44:b2:cf:45:28:e3:e2:05: eb:00:9e:b5:4b:5c:24:77:9d:47:fa:54:fe:53:e2: 87:bd:fe:f7:d3:dc:a4:49:4e:24:74:dc:96:d5:7d: 45:e0:e3:ea:94:18:13:97:3a:ce:64:81:00:d4:1e: 58:44:63:91:c2:95:94:c9:58:75:ac:2f:39:f2:f7: b9:73:9f:d4:a0:ec:75:66:d1:26:ac:89:22:99:2a: 93:1c:7b:99:35:91:a0:6e:96:3f:5e:2d:0b:d4:5d: 0d:37:90:8d:e5:36:65:c4:d4:b9:e5:48:b1:ad:9d: 89:91:ea:0a:fb:76:b1:e4:47:1d:fc:a5:96:39:0a: 16:20:94:98:ef:e1:f9:d2:09:7a:51:5f:4d:a4:87: 0e:d5:fd:45:5d:16:22:de:40:65:54:cc:e1:2a:48: 7d:7b:77:a2:40:eb:9e:f3:21:61:6b:cd:cd:23:10: 4f:7f:e6:bb:34:a6:55:d9:c0:63:99:9f:92:4c:22: 1f:d2:20:a9:59:d3:5b:00:54:16:94:0f:4d:76:98: 89:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:61:9E:98:FA:93:86:49:2B:F9:F6:B5:5F:88:03:46:66:F7:84:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1a245a68-6d5b-37bd-88fd-a2c716da367c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.185.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:b1:13:b7:ec:8a:a4:a9:83:80:39:99:af:3c:53:90:de:28: 1a:10:a6:3f:16:a4:a8:e9:15:f6:52:64:01:19:d6:d2:7c:91: 70:d5:78:35:68:99:69:0f:4f:3c:51:6c:59:f2:91:c0:49:04: 04:7d:34:f1:2c:28:4a:16:80:0e:c0:c6:df:bb:32:9d:14:6c: b4:db:52:40:8f:b5:77:2b:8d:8c:30:bf:9e:c2:b8:be:05:f1: 17:72:60:09:91:41:66:97:9b:30:33:15:14:6f:80:ce:42:6a: c4:0a:f8:dc:8d:d9:2b:17:e1:fb:96:28:86:ed:1c:7f:3e:6c: 3a:6f:52:08:0c:c6:30:96:f2:27:18:5b:f5:61:21:90:a0:fe: c8:a8:a9:01:33:fb:cd:48:c3:34:75:26:a1:4d:41:03:5d:d8: ae:90:ed:71:ed:73:56:18:54:fe:0d:8c:16:46:ac:3c:80:33: 60:ae:0f:31:ab:2b:d4:87:72:79:e0:4b:23:c4:db:b1:e9:d2: 65:88:09:a8:ce:98:09:52:1c:be:b8:28:f8:08:59:ec:c4:72: f8:1a:9d:d4:01:99:47:81:0a:06:67:42:de:cd:c2:20:42:5c: 0c:89:4a:d9:cb:28:92:36:d4:33:9e:39:24:be:25:8d:f0:c6: 82:49:91:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Gp+HjgRuF5e0xNQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkyNDAxMDAxMloXDTI2MTIyMzAyMDAxMlowLzEtMCsGA1UEAxMk ODdlMWYzYTQtM2M3Ny00YTY1LWI5ZmYtNDQ4MWQ0YWFjNmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQ3cbBfXNE+ITZLB2EIAtiS5T6nnTNjBqrbm XouYDT5dKXyINux+vaxLMM9SWm0wpWghRLLPRSjj4gXrAJ61S1wkd51H+lT+U+KH vf7309ykSU4kdNyW1X1F4OPqlBgTlzrOZIEA1B5YRGORwpWUyVh1rC858ve5c5/U oOx1ZtEmrIkimSqTHHuZNZGgbpY/Xi0L1F0NN5CN5TZlxNS55UixrZ2JkeoK+3ax 5Ecd/KWWOQoWIJSY7+H50gl6UV9NpIcO1f1FXRYi3kBlVMzhKkh9e3eiQOue8yFh a83NIxBPf+a7NKZV2cBjmZ+STCIf0iCpWdNbAFQWlA9NdpiJ3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHRhnpj6k4ZJK/n2tV+IA0Zm94QpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMWEyNDVhNjgtNmQ1Yi0z N2JkLTg4ZmQtYTJjNzE2ZGEzNjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDhrmQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAKxE7fsiqSpg4A5ma88U5DeKBoQpj8WpKjpFfZSZAEZ1tJ8kXDVeDVo mWkPTzxRbFnykcBJBAR9NPEsKEoWgA7Axt+7Mp0UbLTbUkCPtXcrjYwwv57CuL4F 8RdyYAmRQWaXmzAzFRRvgM5CasQK+NyN2SsX4fuWKIbtHH8+bDpvUggMxjCW8icY W/VhIZCg/sioqQEz+81IwzR1JqFNQQNd2K6Q7XHtc1YYVP4NjBZGrDyAM2CuDzGr K9SHcnngSyPE27Hp0mWICajOmAlSHL64KPgIWezEcvgandQBmUeBCgZnQt7NwiBC XAyJStnLKJI21DOeOSS+JY3wxoJJkYU= -----END CERTIFICATE-----Generated at Thu Sep 24 06:46:58 2026 by rpki-client