$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/20c01e1b-7b2d-38c9-9e59-9998391566ac.roa File: 20c01e1b-7b2d-38c9-9e59-9998391566ac.roa (raw, json) Hash identifier: AEcsxF8SzLSKkIGoVlu3xdHeJF1oCJfRmQOCFHOME24= Subject key identifier: 11:ED:F6:1C:4E:93:FF:80:D5:FB:11:36:56:02:AE:31:B7:18:59:91 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F119CFF6B51521662AA619100 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/20c01e1b-7b2d-38c9-9e59-9998391566ac.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 140.238.236.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9c:ff:6b:51:52:16:62:aa:61:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=5703c50c-b498-4271-b00e-6120597536c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d3:83:20:6c:b5:66:91:34:42:f9:fc:bf:b4: 1b:b8:13:ad:57:99:6a:35:6e:5b:30:ee:e3:2d:eb: 3a:cc:c4:d4:80:c2:2b:27:bf:a6:f4:d3:8d:57:7f: 4d:0b:ac:4c:34:0d:45:fc:47:cb:75:0e:dc:88:17: c9:8d:ad:33:59:36:67:d9:81:6e:e6:af:61:60:18: f3:cf:3a:6a:e1:12:6c:9f:00:eb:6c:38:0e:e5:e3: 74:f3:f7:70:49:f3:dd:70:33:0c:0d:8d:3c:99:48: 43:14:f3:b1:08:86:63:b8:ab:5d:a0:5a:94:f7:4d: 0e:3c:ce:94:77:8f:ae:cf:ed:9b:29:42:fe:ef:ef: eb:49:db:6b:58:9d:d6:d5:31:de:7a:90:14:aa:61: e7:45:fa:16:0c:53:d6:76:f4:b8:9e:25:ef:b9:b0: a7:ab:77:d8:3a:9f:14:99:c4:ec:c4:6d:84:63:f6: 72:36:ba:23:d3:0c:21:d7:38:2e:da:b1:83:7c:88: 00:dd:75:5d:ab:9f:49:00:3a:da:c4:e7:0e:64:de: 69:3d:0f:5f:ae:dd:0f:0e:79:67:41:62:0a:d6:24: 8a:49:ca:5b:3e:9c:f0:66:0f:56:f1:81:86:fc:c9: 18:2d:55:d3:06:6c:66:76:ca:ff:ba:ca:e6:d4:14: 32:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:ED:F6:1C:4E:93:FF:80:D5:FB:11:36:56:02:AE:31:B7:18:59:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/20c01e1b-7b2d-38c9-9e59-9998391566ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.238.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:92:bc:1b:b9:7a:a6:41:8a:be:fa:fe:74:be:6c:b3:06:1d: ff:7a:6e:a8:0d:ee:5f:27:f3:8d:fe:c3:d5:9e:fe:83:46:9a: 13:62:b2:f2:5c:0f:33:cc:24:77:cf:85:c9:d2:5e:74:30:df: a4:8b:c3:a1:e8:2e:12:1a:56:49:a7:e5:aa:f3:50:19:36:a4: 5c:de:97:48:ba:d9:3f:51:bc:2c:ce:72:02:c3:29:61:f5:43: 4d:6e:de:cf:21:6e:fc:02:ac:c5:7d:07:a8:a9:d9:04:eb:16: c6:76:27:55:43:5b:4e:6b:b5:66:e3:9e:b9:bb:23:96:bc:6a: b3:1c:7f:95:fa:f6:00:2b:93:59:e1:73:09:a8:dc:2b:17:e3: b6:da:01:cb:04:bc:5e:39:e6:d5:08:ea:29:10:4a:dd:a4:68: 61:82:62:b4:b1:1c:6f:00:6c:8c:cc:d4:6d:9c:ea:9c:7b:35: 22:b7:f1:d5:b4:96:30:cd:ec:11:b1:dc:ad:6c:7b:dd:89:a4: d8:d5:47:6d:d0:de:0c:c9:9e:c0:6b:89:25:38:6a:c2:f2:04: 60:db:48:d6:da:2f:ec:d0:e9:8c:a4:68:52:3d:3b:52:2e:8c: 90:f2:f2:9c:a8:ea:be:d0:17:fa:40:0d:2b:f4:6d:81:85:32: 61:7b:f7:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnP9rUVIWYqphkQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk NTcwM2M1MGMtYjQ5OC00MjcxLWIwMGUtNjEyMDU5NzUzNmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldODIGy1ZpE0Qvn8v7QbuBOtV5lqNW5bMO7j Les6zMTUgMIrJ7+m9NONV39NC6xMNA1F/EfLdQ7ciBfJja0zWTZn2YFu5q9hYBjz zzpq4RJsnwDrbDgO5eN08/dwSfPdcDMMDY08mUhDFPOxCIZjuKtdoFqU900OPM6U d4+uz+2bKUL+7+/rSdtrWJ3W1THeepAUqmHnRfoWDFPWdvS4niXvubCnq3fYOp8U mcTsxG2EY/ZyNroj0wwh1zgu2rGDfIgA3XVdq59JADraxOcOZN5pPQ9frt0PDnln QWIK1iSKScpbPpzwZg9W8YGG/MkYLVXTBmxmdsr/usrm1BQyDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBHt9hxOk/+A1fsRNlYCrjG3GFmRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMjBjMDFlMWItN2IyZC0z OGM5LTllNTktOTk5ODM5MTU2NmFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjO7sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ2SvBu5eqZBir76/nS+bLMGHf96bqgN7l8n843+w9We/oNGmhNisvJc DzPMJHfPhcnSXnQw36SLw6HoLhIaVkmn5arzUBk2pFzel0i62T9RvCzOcgLDKWH1 Q01u3s8hbvwCrMV9B6ip2QTrFsZ2J1VDW05rtWbjnrm7I5a8arMcf5X69gArk1nh cwmo3CsX47baAcsEvF455tUI6ikQSt2kaGGCYrSxHG8AbIzM1G2c6px7NSK38dW0 ljDN7BGx3K1se92JpNjVR23Q3gzJnsBriSU4asLyBGDbSNbaL+zQ6YykaFI9O1Iu jJDy8pyo6r7QF/pADSv0bYGFMmF798k= -----END CERTIFICATE-----Generated at Mon Sep 21 17:18:35 2026 by rpki-client