$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1bdaa64e-b84c-349c-ad01-e3576cfc8d5b.roa File: 1bdaa64e-b84c-349c-ad01-e3576cfc8d5b.roa (raw, json) Hash identifier: G9PTUqZf/Yhy9XPoNQVw6yQz7RaucNbhJJ3s6mm4I+I= Subject key identifier: 58:8A:BB:86:98:3F:BF:0F:58:BF:F9:51:B0:68:C4:7F:37:B2:65:E8 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F20F7A15F2B8EA90F97452200 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1bdaa64e-b84c-349c-ad01-e3576cfc8d5b.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 142.0.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:a1:5f:2b:8e:a9:0f:97:45:22:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=974011c3-21d9-416d-969f-7662f4475cd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c0:fc:ff:96:92:d5:e7:d4:ff:ba:9f:48:e4: 56:95:5b:82:1d:bf:e9:af:da:6f:2e:19:92:d5:bc: 4f:30:46:07:00:3a:86:7c:d0:3e:e0:d7:7e:61:b2: b1:15:02:d0:15:1e:91:35:5b:ed:84:4b:a7:e8:62: e0:aa:44:90:f8:0d:da:23:df:f3:f8:a9:bc:23:69: 30:38:44:37:e6:67:6a:b8:a3:af:4b:9e:a6:74:7b: be:ff:63:0d:58:52:aa:dd:5c:fd:d4:d9:90:85:94: e3:a6:3b:0e:e0:24:2f:e7:02:e9:e0:a5:75:fe:89: 09:97:0d:ad:2f:72:9c:d6:50:0c:32:a4:b9:a9:dc: 5f:b6:f7:9e:d4:55:4a:64:36:0a:9e:e9:76:fa:a5: 01:15:ed:83:34:75:86:56:45:e5:1c:08:51:7e:68: 99:b7:64:9d:73:c3:af:cc:d1:32:13:e4:04:81:b0: 41:57:99:d6:63:d9:92:ed:2f:2d:67:22:1a:74:b3: cc:5e:af:02:f3:ee:05:20:9d:71:3a:50:50:6d:02: 99:02:99:a2:f4:fb:7c:31:9f:d5:b9:ce:38:15:8e: 1d:54:21:5b:4f:a2:64:c0:59:c6:71:a4:01:c0:fa: 5f:51:63:cc:cb:c1:62:41:cf:84:81:03:66:82:06: 09:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:8A:BB:86:98:3F:BF:0F:58:BF:F9:51:B0:68:C4:7F:37:B2:65:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1bdaa64e-b84c-349c-ad01-e3576cfc8d5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 142.0.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:23:b5:83:b3:87:2b:89:dd:84:d4:5f:3f:8e:7e:f0:5c:e2: e6:9b:10:2b:ee:d8:07:40:8c:d8:58:29:cb:14:96:2c:2b:36: b1:ff:05:a9:ec:00:3f:8d:a7:3f:2b:f9:87:65:e4:1e:2a:39: e3:36:b1:85:be:fd:93:a1:a7:cd:8e:78:fd:36:4d:fc:bd:ec: 5b:76:fe:ce:25:d3:f6:48:b8:38:57:8a:e5:e8:4d:d5:46:03: 5f:c7:f9:3b:ce:32:c2:72:2f:1e:9f:c2:5a:7d:7b:e4:62:3d: 6b:9a:09:43:8b:a1:8b:07:65:fa:18:72:9b:d1:28:4b:9b:29: a1:ca:51:a7:cd:ba:e9:c6:eb:6c:0b:b3:9e:39:d7:ae:35:ca: 77:3c:6e:08:47:f3:89:c1:fd:ec:2c:72:48:23:e8:6f:e4:fc: af:f0:9a:13:47:a3:30:8d:38:2c:76:a2:3f:d0:56:ae:75:07: 8f:5a:46:19:25:03:9d:e3:50:74:b7:52:2a:78:65:8f:f5:7d: 20:9e:1e:6e:57:83:7f:10:b3:c9:e3:2a:7e:ce:58:7e:2c:62: 64:91:2e:20:c1:d5:13:35:54:bd:1e:c6:b6:85:28:d4:79:a1: 6f:30:53:eb:07:bd:15:4e:2d:e7:65:bd:ec:52:58:b1:81:f4: 6d:91:cd:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g96FfK46pD5dFIgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk OTc0MDExYzMtMjFkOS00MTZkLTk2OWYtNzY2MmY0NDc1Y2QwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucD8/5aS1efU/7qfSORWlVuCHb/pr9pvLhmS 1bxPMEYHADqGfNA+4Nd+YbKxFQLQFR6RNVvthEun6GLgqkSQ+A3aI9/z+Km8I2kw OEQ35mdquKOvS56mdHu+/2MNWFKq3Vz91NmQhZTjpjsO4CQv5wLp4KV1/okJlw2t L3Kc1lAMMqS5qdxftvee1FVKZDYKnul2+qUBFe2DNHWGVkXlHAhRfmiZt2Sdc8Ov zNEyE+QEgbBBV5nWY9mS7S8tZyIadLPMXq8C8+4FIJ1xOlBQbQKZApmi9Pt8MZ/V uc44FY4dVCFbT6JkwFnGcaQBwPpfUWPMy8FiQc+EgQNmggYJZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFiKu4aYP78PWL/5UbBoxH83smXoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMWJkYWE2NGUtYjg0Yy0z NDljLWFkMDEtZTM1NzZjZmM4ZDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjgCuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACEjtYOzhyuJ3YTUXz+OfvBc4uabECvu2AdAjNhYKcsUliwrNrH/Bans AD+Npz8r+Ydl5B4qOeM2sYW+/ZOhp82OeP02Tfy97Ft2/s4l0/ZIuDhXiuXoTdVG A1/H+TvOMsJyLx6fwlp9e+RiPWuaCUOLoYsHZfoYcpvRKEubKaHKUafNuunG62wL s5451641ync8bghH84nB/ewsckgj6G/k/K/wmhNHozCNOCx2oj/QVq51B49aRhkl A53jUHS3Uip4ZY/1fSCeHm5Xg38Qs8njKn7OWH4sYmSRLiDB1RM1VL0exraFKNR5 oW8wU+sHvRVOLedlvexSWLGB9G2RzUk= -----END CERTIFICATE-----Generated at Mon Sep 21 00:21:10 2026 by rpki-client