$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/235b6fae-087e-327e-a1ad-3f6566ede764.roa File: 235b6fae-087e-327e-a1ad-3f6566ede764.roa (raw, json) Hash identifier: 6IB0Bgf/AFpmPXViUQIPDfEIcqA3BKVtFIr12uBsR1g= Subject key identifier: FB:2E:BF:C7:2A:FC:14:77:B7:0F:19:09:13:4B:E6:8E:35:99:1A:D3 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F4974C164CA2D075020DD91C0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/235b6fae-087e-327e-a1ad-3f6566ede764.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 54253 IP address blocks: 137.131.72.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:c1:64:ca:2d:07:50:20:dd:91:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=2207f3d2-aaae-4fd2-9026-bde705509285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:9e:1f:a5:45:69:ba:19:29:eb:2e:ee:57:f8: b0:d8:d0:40:39:03:b7:d6:33:0e:ec:02:9f:e4:9e: 00:8f:9b:e2:40:83:c5:ff:42:e5:e8:89:68:b1:7e: 3f:fb:90:7f:70:85:e5:f6:95:f2:52:20:c3:26:ed: 9c:3b:f9:9c:e5:b6:51:a8:de:8d:ab:e2:2d:9a:80: 90:03:83:22:63:17:36:af:38:13:40:4e:e8:e8:31: df:0a:cd:60:41:61:e0:85:81:64:a7:25:c4:c5:4b: 92:d8:6a:f3:38:27:d9:a4:57:00:d3:1a:75:fc:86: 27:96:96:9e:74:cd:f6:6b:cd:c7:8c:c6:21:61:b8: 1a:da:a4:3e:6e:ff:86:bb:ec:10:26:7d:ab:c1:89: 9e:c8:44:20:cd:b6:da:bc:81:a2:3b:ce:1f:db:23: 8d:a5:89:ac:fe:67:28:c7:c4:94:05:09:45:8e:4b: 1e:de:b5:c4:95:55:15:40:ad:66:32:88:35:9a:06: 4b:6e:a5:05:c0:2d:56:74:8a:6a:85:94:ad:50:08: 24:12:d8:e6:00:70:dd:9d:d4:07:6c:42:e9:a5:00: e7:ce:da:67:e2:c4:da:e0:88:1b:99:26:5f:51:d1: c9:89:ee:56:87:f4:b8:e2:c8:78:26:2e:38:d6:e8: db:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:2E:BF:C7:2A:FC:14:77:B7:0F:19:09:13:4B:E6:8E:35:99:1A:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/235b6fae-087e-327e-a1ad-3f6566ede764.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 137.131.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:9c:9e:bc:db:87:9d:66:5a:b1:3b:bf:2b:f1:9a:56:90:db: 53:59:4c:10:4f:22:9b:b9:a9:62:45:94:a8:74:e1:34:a3:c4: 1a:81:86:0e:81:16:78:47:bc:dd:6b:63:69:7b:bc:44:c6:2e: 5d:d8:5e:df:89:69:69:39:43:c6:f1:63:a6:67:46:4e:ae:b7: 9f:d2:b5:0d:18:30:db:09:91:da:54:3f:7e:5d:bf:02:f7:3d: 39:52:f3:6a:a9:63:91:4b:25:5b:f9:ba:27:dc:01:bd:e4:1e: df:90:d1:4d:ad:68:b1:bc:9a:94:de:e6:f8:f3:6c:99:ed:cf: d4:77:d7:9a:f2:36:ce:61:75:dc:a3:ae:3b:1e:f7:50:f4:18: 2a:91:4b:e2:21:04:84:1c:94:58:23:3e:a6:e7:7a:33:81:06: 15:80:b4:7b:0b:74:0b:31:40:74:08:0b:27:a6:6e:0c:8f:8b: 2f:7c:42:24:1d:eb:ff:cd:e4:0c:54:09:30:6a:cc:58:4a:6c: 9a:fe:a7:9f:4d:b4:35:3f:ed:4c:f9:95:92:f2:72:bc:8b:aa: 79:4b:07:fc:88:d0:c9:90:72:da:01:f9:43:9e:fb:ae:8d:04: 4d:2e:70:99:c8:07:52:09:9b:a7:30:d9:34:a5:d5:0c:b3:a9: 1a:c2:bf:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdMFkyi0HUCDdkcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjIwN2YzZDItYWFhZS00ZmQyLTkwMjYtYmRlNzA1NTA5Mjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkp4fpUVpuhkp6y7uV/iw2NBAOQO31jMO7AKf 5J4Aj5viQIPF/0Ll6IlosX4/+5B/cIXl9pXyUiDDJu2cO/mc5bZRqN6Nq+ItmoCQ A4MiYxc2rzgTQE7o6DHfCs1gQWHghYFkpyXExUuS2GrzOCfZpFcA0xp1/IYnlpae dM32a83HjMYhYbga2qQ+bv+Gu+wQJn2rwYmeyEQgzbbavIGiO84f2yONpYms/mco x8SUBQlFjkse3rXElVUVQK1mMog1mgZLbqUFwC1WdIpqhZStUAgkEtjmAHDdndQH bELppQDnztpn4sTa4IgbmSZfUdHJie5Wh/S44sh4Ji441ujb2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPsuv8cq/BR3tw8ZCRNL5o41mRrTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMjM1YjZmYWUtMDg3ZS0z MjdlLWExYWQtM2Y2NTY2ZWRlNzY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDiYNIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACicnrzbh51mWrE7vyvxmlaQ21NZTBBPIpu5qWJFlKh04TSjxBqBhg6B FnhHvN1rY2l7vETGLl3YXt+JaWk5Q8bxY6ZnRk6ut5/StQ0YMNsJkdpUP35dvwL3 PTlS82qpY5FLJVv5uifcAb3kHt+Q0U2taLG8mpTe5vjzbJntz9R315ryNs5hddyj rjse91D0GCqRS+IhBIQclFgjPqbnejOBBhWAtHsLdAsxQHQICyembgyPiy98QiQd 6//N5AxUCTBqzFhKbJr+p59NtDU/7Uz5lZLycryLqnlLB/yI0MmQctoB+UOe+66N BE0ucJnIB1IJm6cw2TSl1QyzqRrCv5Q= -----END CERTIFICATE-----Generated at Mon Sep 28 23:12:27 2026 by rpki-client