$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2c9994cf-5014-3839-8868-4cf4f0912959.roa File: 2c9994cf-5014-3839-8868-4cf4f0912959.roa (raw, json) Hash identifier: EUo9r3NuGfEzjwykreEBVnhKvoU+2b0dxmQQ5dqhTHs= Subject key identifier: 11:54:D3:87:59:DC:1B:2A:E7:96:45:BB:A6:A4:A3:3B:D7:E1:1A:D0 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F1CC795C463E7CF5344F99C80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2c9994cf-5014-3839-8868-4cf4f0912959.roa Signing time: Wed 09 Sep 2026 01:00:11 +0000 ROA not before: Wed 09 Sep 2026 01:00:11 +0000 ROA not after: Tue 08 Dec 2026 02:00:11 +0000 asID: 31898 IP address blocks: 64.181.136.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1c:c7:95:c4:63:e7:cf:53:44:f9:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 9 01:00:11 2026 GMT Not After : Dec 8 02:00:11 2026 GMT Subject: CN=7aae9a44-6ea0-469f-978e-09c16fd86544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:1f:83:1f:3e:f8:b5:32:ae:8c:24:29:5e:65: 32:08:d3:d9:34:05:16:71:b0:dd:85:b8:51:8b:ca: 55:65:96:57:54:f8:84:d5:03:72:7b:05:80:bd:22: 6a:ad:9e:56:0f:61:c0:46:5c:f2:20:20:8a:06:f0: ae:bb:7a:41:0b:b5:1e:32:32:ea:d6:97:c0:73:05: 0b:b7:78:18:2c:b5:dc:f4:3f:8b:b5:f6:d7:81:13: f8:8a:46:cb:a9:42:aa:64:53:b4:04:e2:ec:8d:fc: 4d:ea:21:8e:f0:1d:ae:8e:e8:96:f7:d0:4a:f2:ee: ad:88:f1:da:f0:8d:fa:85:e2:a9:17:29:dd:cd:bd: ba:26:0d:40:32:6d:e3:ad:d3:54:08:41:ff:32:73: b3:f6:83:4b:1f:36:8a:cc:7d:a4:d2:a6:18:54:de: 8a:e5:e5:91:4c:0b:03:94:e7:5e:a1:c6:2f:52:4b: 53:7d:97:99:ea:49:dc:b8:67:a9:aa:56:6e:b3:b7: e2:19:4d:38:5f:e7:e4:6c:40:e4:96:d9:d0:7b:8c: 92:18:47:68:be:3f:68:30:20:1c:7e:1e:aa:3a:f2: fa:46:be:f3:8a:62:82:3c:db:81:c9:68:54:dd:03: 80:eb:89:e8:b8:a5:fc:25:1b:85:9f:a8:c7:dc:e7: 5d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:54:D3:87:59:DC:1B:2A:E7:96:45:BB:A6:A4:A3:3B:D7:E1:1A:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2c9994cf-5014-3839-8868-4cf4f0912959.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 64.181.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:2f:41:b7:d7:1a:3f:96:d0:e5:2f:e7:63:54:af:77:2f:e3: 2c:56:2d:b7:18:85:55:1a:df:be:99:7b:05:9b:ec:3a:14:cf: ec:08:1c:cf:76:6f:fc:e4:12:22:d9:fb:dd:93:a5:55:4b:f5: 25:69:70:62:e9:05:be:4a:86:81:08:56:3f:6b:a6:37:62:f9: c2:9e:98:a3:68:f6:76:d1:70:73:77:4d:41:aa:cd:86:ef:81: 47:31:8f:cf:58:d0:95:46:51:01:2a:27:c0:e7:d0:2d:d9:93: 6d:cd:7c:be:be:85:b6:a9:72:c5:b6:8d:80:05:a8:3a:a4:57: e2:05:03:c2:69:ff:f8:69:76:41:ba:fb:10:65:24:85:98:95: 3b:07:20:6f:da:44:ad:0e:97:77:b7:2e:06:a2:3a:2c:cd:1b: ba:3a:8a:a8:9c:69:f5:a9:de:1a:cc:2d:01:8e:21:eb:b9:19: 91:87:0a:35:db:94:b4:7c:61:b4:b0:38:8f:a2:4c:aa:43:a0: 2d:df:16:e7:af:2a:ba:42:e5:6a:30:d2:c0:c4:31:b2:b3:c2: 41:26:41:b5:94:6c:f1:b9:31:d3:e9:1f:25:b5:26:03:1d:b5: 56:05:8c:8d:b2:c3:a7:d8:22:8c:8b:c8:63:be:33:07:cb:6e: 3f:19:61:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8cx5XEY+fPU0T5nIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwOTAxMDAxMVoXDTI2MTIwODAyMDAxMVowLzEtMCsGA1UEAxMk N2FhZTlhNDQtNmVhMC00NjlmLTk3OGUtMDljMTZmZDg2NTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjR+DHz74tTKujCQpXmUyCNPZNAUWcbDdhbhR i8pVZZZXVPiE1QNyewWAvSJqrZ5WD2HARlzyICCKBvCuu3pBC7UeMjLq1pfAcwUL t3gYLLXc9D+LtfbXgRP4ikbLqUKqZFO0BOLsjfxN6iGO8B2ujuiW99BK8u6tiPHa 8I36heKpFyndzb26Jg1AMm3jrdNUCEH/MnOz9oNLHzaKzH2k0qYYVN6K5eWRTAsD lOdeocYvUktTfZeZ6kncuGepqlZus7fiGU04X+fkbEDkltnQe4ySGEdovj9oMCAc fh6qOvL6Rr7zimKCPNuByWhU3QOA64nouKX8JRuFn6jH3OddgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBFU04dZ3Bsq55ZFu6akozvX4RrQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMmM5OTk0Y2YtNTAxNC0z ODM5LTg4NjgtNGNmNGYwOTEyOTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQLWIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACcvQbfXGj+W0OUv52NUr3cv4yxWLbcYhVUa376ZewWb7DoUz+wIHM92 b/zkEiLZ+92TpVVL9SVpcGLpBb5KhoEIVj9rpjdi+cKemKNo9nbRcHN3TUGqzYbv gUcxj89Y0JVGUQEqJ8Dn0C3Zk23NfL6+hbapcsW2jYAFqDqkV+IFA8Jp//hpdkG6 +xBlJIWYlTsHIG/aRK0Ol3e3LgaiOizNG7o6iqicafWp3hrMLQGOIeu5GZGHCjXb lLR8YbSwOI+iTKpDoC3fFuevKrpC5Wow0sDEMbKzwkEmQbWUbPG5MdPpHyW1JgMd tVYFjI2yw6fYIoyLyGO+MwfLbj8ZYew= -----END CERTIFICATE-----Generated at Tue Sep 22 21:09:32 2026 by rpki-client