$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1df834ad-fe8c-3ba7-8f2b-6da35322ba15.roa File: 1df834ad-fe8c-3ba7-8f2b-6da35322ba15.roa (raw, json) Hash identifier: JNeoV4TmAxKrIehZq5cg0lTlDuTGzad4CcwEZnl1kx8= Subject key identifier: 67:62:4D:8F:41:F9:CF:72:EB:23:D4:39:E1:2F:73:96:F1:08:CC:9D Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F1B6254E2462AF1CC58EE9F00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1df834ad-fe8c-3ba7-8f2b-6da35322ba15.roa Signing time: Tue 08 Sep 2026 13:00:12 +0000 ROA not before: Tue 08 Sep 2026 13:00:12 +0000 ROA not after: Mon 07 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 147.154.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:62:54:e2:46:2a:f1:cc:58:ee:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 8 13:00:12 2026 GMT Not After : Dec 7 14:00:12 2026 GMT Subject: CN=e49bb5f6-11a8-4556-bdd8-24e3bde48594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:28:00:56:3e:81:a5:20:61:2a:0a:0e:6a:f1: b0:3e:96:e4:cf:7a:c9:1e:7b:9e:c1:a8:74:ab:ae: 61:17:5a:8a:f9:5a:07:af:84:25:49:e6:2d:d8:2d: cc:db:6b:a0:24:ef:07:39:56:64:ee:ea:3f:42:ce: 4c:fe:e7:0e:22:c7:3e:e6:80:8a:3c:31:4b:54:a1: a7:10:6d:b0:f2:2e:56:e1:38:72:df:99:fc:0d:c2: e2:38:f2:80:63:47:0f:79:82:04:f3:7f:93:68:66: af:89:6b:6f:b1:c8:89:8f:d7:e0:47:93:20:2c:40: 85:45:e2:d9:e9:d1:db:88:ff:53:1d:a2:fc:de:b5: cd:ab:d6:77:dd:81:7e:d9:cc:b1:7e:0e:0e:fc:65: 62:cd:d5:5a:90:b3:f3:cd:82:c5:ce:a3:bd:65:42: 57:7c:c5:39:7c:a2:75:c2:b8:fe:e2:3d:83:b8:b8: a3:87:a6:8f:f4:f3:6d:5e:61:71:95:06:af:55:53: 03:e2:72:6d:24:20:3a:61:c3:6c:e5:2d:a2:60:04: 28:29:72:57:a8:3a:09:e9:9f:8a:cd:3c:e8:08:40: c6:8c:3b:03:f2:43:f5:65:19:18:c7:9a:5e:19:f5: 73:43:1f:25:62:1a:0e:a8:e8:75:f7:13:30:83:89: 56:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:62:4D:8F:41:F9:CF:72:EB:23:D4:39:E1:2F:73:96:F1:08:CC:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1df834ad-fe8c-3ba7-8f2b-6da35322ba15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 147.154.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:09:f0:f2:ab:74:2d:83:97:69:9e:98:af:49:91:be:27:0b: 0f:0f:a2:4b:bb:2a:72:93:08:b5:43:65:e0:77:6f:c6:e7:41: b0:cb:c4:a1:a5:34:fa:b0:5d:91:d7:5b:f7:a8:38:8b:07:f5: 50:63:7d:37:26:4d:11:a6:8f:6c:ec:1f:a9:91:07:e2:6f:63: 73:f7:e4:61:ce:2f:78:ca:08:73:d0:b7:4e:56:f3:f5:fb:69: 74:3c:5d:63:ca:3a:f4:0d:0c:ec:61:fc:92:a8:da:5b:ef:d7: 7b:8a:12:69:fe:fb:d7:23:96:39:48:94:cb:a4:89:f7:4d:9c: 9e:bd:56:36:4c:9f:a3:c1:58:35:90:6e:c6:9c:2d:39:a9:f1: c9:34:75:b5:30:df:95:61:4a:ff:e0:2e:d3:a0:75:e6:31:47: 11:15:a0:65:3e:1f:75:2a:b1:8c:49:d5:9b:3e:28:da:37:e7: 17:94:e6:1f:23:36:1f:d5:df:3b:06:1f:5f:b8:9c:e5:95:ff: b7:6e:47:b8:26:5d:4f:7c:c2:3d:1a:8e:84:a1:4c:8e:e9:aa: 89:42:7d:d6:ef:bc:3c:da:e6:a2:f0:76:bc:94:42:97:7c:30: 8b:63:e0:7b:ed:30:07:46:98:24:c8:ba:11:01:54:30:f2:91: 26:9a:7c:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8bYlTiRirxzFjunwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwODEzMDAxMloXDTI2MTIwNzE0MDAxMlowLzEtMCsGA1UEAxMk ZTQ5YmI1ZjYtMTFhOC00NTU2LWJkZDgtMjRlM2JkZTQ4NTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwygAVj6BpSBhKgoOavGwPpbkz3rJHnuewah0 q65hF1qK+VoHr4QlSeYt2C3M22ugJO8HOVZk7uo/Qs5M/ucOIsc+5oCKPDFLVKGn EG2w8i5W4Thy35n8DcLiOPKAY0cPeYIE83+TaGaviWtvsciJj9fgR5MgLECFReLZ 6dHbiP9THaL83rXNq9Z33YF+2cyxfg4O/GVizdVakLPzzYLFzqO9ZUJXfMU5fKJ1 wrj+4j2DuLijh6aP9PNtXmFxlQavVVMD4nJtJCA6YcNs5S2iYAQoKXJXqDoJ6Z+K zTzoCEDGjDsD8kP1ZRkYx5peGfVzQx8lYhoOqOh19xMwg4lWFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGdiTY9B+c9y6yPUOeEvc5bxCMydMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMWRmODM0YWQtZmU4Yy0z YmE3LThmMmItNmRhMzUzMjJiYTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEk5owMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGoJ8PKrdC2Dl2memK9Jkb4nCw8Poku7KnKTCLVDZeB3b8bnQbDLxKGl NPqwXZHXW/eoOIsH9VBjfTcmTRGmj2zsH6mRB+JvY3P35GHOL3jKCHPQt05W8/X7 aXQ8XWPKOvQNDOxh/JKo2lvv13uKEmn++9cjljlIlMukifdNnJ69VjZMn6PBWDWQ bsacLTmp8ck0dbUw35VhSv/gLtOgdeYxRxEVoGU+H3UqsYxJ1Zs+KNo35xeU5h8j Nh/V3zsGH1+4nOWV/7duR7gmXU98wj0ajoShTI7pqolCfdbvvDza5qLwdryUQpd8 MItj4HvtMAdGmCTIuhEBVDDykSaafMY= -----END CERTIFICATE-----Generated at Sun Sep 20 23:38:19 2026 by rpki-client