$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/24e28ffd-2f65-3ee6-a942-17cfe5f6b1b3.roa File: 24e28ffd-2f65-3ee6-a942-17cfe5f6b1b3.roa (raw, json) Hash identifier: 4c8+/WkP2hFYa32C/WJZb90p8Gj1lwe1ufMPrwpxTDo= Subject key identifier: D4:41:44:83:BD:94:77:73:EE:E2:9E:73:C2:C5:04:70:48:B0:01:C8 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F0ED2304637B39C39DE56D980 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/24e28ffd-2f65-3ee6-a942-17cfe5f6b1b3.roa Signing time: Fri 04 Sep 2026 01:00:12 +0000 ROA not before: Fri 04 Sep 2026 01:00:12 +0000 ROA not after: Thu 03 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 168.129.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0e:d2:30:46:37:b3:9c:39:de:56:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 4 01:00:12 2026 GMT Not After : Dec 3 02:00:12 2026 GMT Subject: CN=0e4306a4-f29c-4b59-b5a2-9dba3c16490e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:27:3c:c2:0f:58:a0:05:ea:b9:f2:e6:b2:6b: c2:10:eb:5c:60:33:12:8d:dc:6c:71:72:35:aa:17: 85:27:f4:43:82:a2:75:45:d3:53:f0:fc:37:6e:36: 85:74:be:8d:c7:95:8f:66:30:e3:3c:2d:ff:df:ec: ff:a1:36:6d:af:01:ba:e0:fb:89:62:5c:9c:5a:a2: 2a:00:4e:ac:b9:a8:48:52:1f:69:52:7c:75:ea:03: 67:47:04:63:68:92:82:17:37:e3:a1:86:76:91:99: 38:9b:99:75:39:16:a7:8a:fb:2d:97:ec:cd:cf:25: 6f:2c:ce:00:7d:08:fc:52:5e:a3:13:31:bd:4f:5d: 01:49:e9:e8:6a:45:21:06:03:17:af:17:d1:ad:f9: 5c:8f:0e:db:0c:17:8a:14:a3:b4:83:36:30:31:4e: 40:43:a4:4a:72:bf:91:48:77:6c:78:dc:97:b3:d0: 9a:27:b9:1a:66:ef:7a:7a:0b:94:b0:15:dd:d8:ff: 94:87:91:64:cf:a6:81:48:7f:f0:b2:0c:0d:6b:b9: 07:eb:71:d2:6c:54:e2:50:61:f0:36:86:0a:af:69: 23:d7:72:ed:6b:a9:cf:e7:0e:0c:4f:ae:ef:ec:9e: bd:1d:a8:d8:60:46:20:a8:85:b3:e1:85:f5:12:5d: 79:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:41:44:83:BD:94:77:73:EE:E2:9E:73:C2:C5:04:70:48:B0:01:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/24e28ffd-2f65-3ee6-a942-17cfe5f6b1b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.129.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:22:c1:2b:cd:e1:3b:7d:f5:a6:ae:a6:75:0c:9e:50:a4:aa: 33:1c:c2:a2:ea:1d:30:62:9a:74:00:bf:5f:cc:82:6a:74:40: 2a:7e:ad:8d:5a:4e:fa:aa:b8:46:95:e2:ec:2b:36:3e:8d:96: cd:ff:e0:f3:63:3f:fe:32:62:7b:66:7b:12:94:cb:75:14:0f: 2a:7a:0b:bd:f0:a0:eb:c6:6c:ef:37:ac:4d:35:7f:31:ce:ac: b6:fe:52:f4:51:e4:a6:fc:d9:00:bf:8f:6a:e0:2e:d3:39:7e: c7:17:49:fb:e0:a7:cd:78:aa:ed:2b:85:cd:ea:e0:cd:db:1a: 66:94:58:d9:b4:f1:6e:01:2a:25:5b:67:7f:fa:28:35:ea:ce: 33:46:58:6a:d1:ff:12:c6:8c:90:52:d1:6c:e8:ea:84:74:90: da:c6:f3:d6:70:95:94:0f:0c:2d:d6:17:d9:7c:ce:8a:8f:89: 53:c1:08:44:de:c4:c8:41:43:74:dc:ae:be:4a:9d:5a:ed:df: 2e:0d:35:37:34:9f:fa:62:7e:02:12:8d:b7:c4:c6:5c:ce:84: 1b:38:28:fd:93:00:1e:4a:71:25:a1:13:4c:40:20:09:da:0e: c6:fb:fc:6c:29:7a:4d:17:68:e7:32:e2:d1:0a:3e:57:84:c7: 8d:9f:41:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8O0jBGN7OcOd5W2YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNDAxMDAxMloXDTI2MTIwMzAyMDAxMlowLzEtMCsGA1UEAxMk MGU0MzA2YTQtZjI5Yy00YjU5LWI1YTItOWRiYTNjMTY0OTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCc8wg9YoAXqufLmsmvCEOtcYDMSjdxscXI1 qheFJ/RDgqJ1RdNT8Pw3bjaFdL6Nx5WPZjDjPC3/3+z/oTZtrwG64PuJYlycWqIq AE6suahIUh9pUnx16gNnRwRjaJKCFzfjoYZ2kZk4m5l1ORanivstl+zNzyVvLM4A fQj8Ul6jEzG9T10BSenoakUhBgMXrxfRrflcjw7bDBeKFKO0gzYwMU5AQ6RKcr+R SHdseNyXs9CaJ7kaZu96eguUsBXd2P+Uh5Fkz6aBSH/wsgwNa7kH63HSbFTiUGHw NoYKr2kj13Lta6nP5w4MT67v7J69HajYYEYgqIWz4YX1El15MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNRBRIO9lHdz7uKec8LFBHBIsAHIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMjRlMjhmZmQtMmY2NS0z ZWU2LWE5NDItMTdjZmU1ZjZiMWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFqIGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABIiwSvN4Tt99aaupnUMnlCkqjMcwqLqHTBimnQAv1/Mgmp0QCp+rY1a TvqquEaV4uwrNj6Nls3/4PNjP/4yYntmexKUy3UUDyp6C73woOvGbO83rE01fzHO rLb+UvRR5Kb82QC/j2rgLtM5fscXSfvgp814qu0rhc3q4M3bGmaUWNm08W4BKiVb Z3/6KDXqzjNGWGrR/xLGjJBS0Wzo6oR0kNrG89ZwlZQPDC3WF9l8zoqPiVPBCETe xMhBQ3Tcrr5KnVrt3y4NNTc0n/pifgISjbfExlzOhBs4KP2TAB5KcSWhE0xAIAna Dsb7/Gwpek0XaOcy4tEKPleEx42fQfU= -----END CERTIFICATE-----Generated at Mon Sep 21 07:59:46 2026 by rpki-client