$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/23c5e5ea-0067-3a34-834a-532581a87ad9.roa File: 23c5e5ea-0067-3a34-834a-532581a87ad9.roa (raw, json) Hash identifier: BnRGKAhkkKSPCjzbhQXPQ2Q7hKc5SRiRHWuLcgEqM2E= Subject key identifier: AA:15:9D:DD:A8:27:E8:43:CE:37:88:EA:1E:C0:27:DB:04:F3:08:BB Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F02422193CD6008BDCAEFFC00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/23c5e5ea-0067-3a34-834a-532581a87ad9.roa Signing time: Sun 30 Aug 2026 13:00:11 +0000 ROA not before: Sun 30 Aug 2026 13:00:11 +0000 ROA not after: Sat 28 Nov 2026 14:00:11 +0000 asID: 31898 IP address blocks: 207.211.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:02:42:21:93:cd:60:08:bd:ca:ef:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 30 13:00:11 2026 GMT Not After : Nov 28 14:00:11 2026 GMT Subject: CN=986d3454-4aae-4708-8ff1-a4d49bb5cda2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e0:9b:44:c6:c5:c5:2a:08:35:a8:94:92:1f: 3e:65:a9:2e:16:50:1e:3e:7e:5f:0a:ee:f3:41:a6: 3a:d8:b9:6c:a5:8b:ea:c4:24:57:08:b9:f3:cf:46: 21:cf:0e:b7:5a:dc:da:d0:32:82:f8:33:86:b5:dc: ad:99:bd:09:14:e3:1b:cd:c7:b9:97:f7:a5:98:cf: 45:c6:9c:80:c5:86:36:e5:2c:8e:ed:37:14:6f:3c: c7:2b:67:21:0d:f8:44:90:20:d4:01:e1:e5:19:c0: 6e:88:df:cb:fe:46:4d:19:e6:0a:9a:92:5f:9b:5d: 87:5b:1d:b1:0b:cc:b8:e7:c6:b2:a9:c7:20:be:41: 53:f9:13:22:a2:09:14:1b:f1:87:b2:ae:3c:f3:ad: b3:7f:84:f8:83:f5:2d:f0:a0:8e:92:aa:8b:0f:04: cb:30:ed:b5:0f:93:7d:06:2d:fd:86:7e:40:86:0f: 18:82:a2:43:9e:64:ec:3c:c2:ed:c5:f5:54:ae:4c: a6:a3:96:0d:11:31:71:19:68:0d:6c:89:8c:34:6d: f1:1c:86:93:35:34:af:50:ed:03:db:2d:4c:55:02: b8:59:82:ad:89:94:ec:60:75:78:49:7e:74:40:cc: ab:0d:59:58:5b:2c:50:5b:4c:39:c6:ed:b4:66:f2: 81:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:15:9D:DD:A8:27:E8:43:CE:37:88:EA:1E:C0:27:DB:04:F3:08:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/23c5e5ea-0067-3a34-834a-532581a87ad9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 207.211.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:06:86:6c:34:5c:7f:2e:c8:ae:95:e1:c8:2a:b3:89:d2:21: 5e:12:f3:2a:d6:41:0b:f4:a1:83:7f:58:cd:c6:93:47:04:9d: 84:c0:44:73:ac:08:88:7c:3c:31:d9:ef:36:a9:7a:0e:4a:0d: 13:9f:b4:4a:12:08:12:ce:ea:69:37:b2:94:fb:3b:c1:87:89: 64:25:17:c9:57:64:16:f9:4b:81:c5:eb:5c:1e:7a:6f:d7:a9: b4:fc:8e:de:d0:90:6c:40:b2:a2:db:34:f6:8d:ff:2f:c7:09: 90:13:07:15:22:eb:2d:29:b7:36:d9:c4:b9:8a:5d:29:0a:6f: 3a:3f:85:bf:bd:a9:2b:47:51:f2:10:ad:6c:da:cd:72:e4:6d: 16:c1:2f:4c:30:7e:98:84:14:66:00:da:45:ba:88:5d:5f:72: 84:f8:0d:45:db:14:a0:98:27:4f:e9:3c:56:2a:38:84:c7:98: 95:3f:65:e6:88:8e:2f:a7:8e:1b:17:bd:ad:8d:38:cc:5a:f9: 18:88:52:9a:8b:05:65:cb:73:6e:91:0b:fe:bc:4e:af:26:9f: c7:90:27:c7:10:7a:ae:ca:25:59:89:6d:a8:03:a5:74:cb:f4: 3e:0a:88:b6:39:7b:65:50:6d:f0:8e:b5:e9:01:e0:3f:2b:89: 9f:bf:5c:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8CQiGTzWAIvcrv/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk OTg2ZDM0NTQtNGFhZS00NzA4LThmZjEtYTRkNDliYjVjZGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneCbRMbFxSoINaiUkh8+ZakuFlAePn5fCu7z QaY62LlspYvqxCRXCLnzz0Yhzw63Wtza0DKC+DOGtdytmb0JFOMbzce5l/elmM9F xpyAxYY25SyO7TcUbzzHK2chDfhEkCDUAeHlGcBuiN/L/kZNGeYKmpJfm12HWx2x C8y458ayqccgvkFT+RMiogkUG/GHsq48862zf4T4g/Ut8KCOkqqLDwTLMO21D5N9 Bi39hn5Ahg8YgqJDnmTsPMLtxfVUrkymo5YNETFxGWgNbImMNG3xHIaTNTSvUO0D 2y1MVQK4WYKtiZTsYHV4SX50QMyrDVlYWyxQW0w5xu20ZvKBWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKoVnd2oJ+hDzjeI6h7AJ9sE8wi7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMjNjNWU1ZWEtMDA2Ny0z YTM0LTgzNGEtNTMyNTgxYTg3YWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEz9OQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGgGhmw0XH8uyK6V4cgqs4nSIV4S8yrWQQv0oYN/WM3Gk0cEnYTARHOs CIh8PDHZ7zapeg5KDROftEoSCBLO6mk3spT7O8GHiWQlF8lXZBb5S4HF61weem/X qbT8jt7QkGxAsqLbNPaN/y/HCZATBxUi6y0ptzbZxLmKXSkKbzo/hb+9qStHUfIQ rWzazXLkbRbBL0wwfpiEFGYA2kW6iF1fcoT4DUXbFKCYJ0/pPFYqOITHmJU/ZeaI ji+njhsXva2NOMxa+RiIUpqLBWXLc26RC/68Tq8mn8eQJ8cQeq7KJVmJbagDpXTL 9D4KiLY5e2VQbfCOtekB4D8riZ+/XI8= -----END CERTIFICATE-----Generated at Mon Sep 21 17:23:59 2026 by rpki-client