$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3110b996-3f11-31b2-946d-df0d7d2a7a91.roa File: 3110b996-3f11-31b2-946d-df0d7d2a7a91.roa (raw, json) Hash identifier: b5rexGQf/Iy2cP5kOdXre+TpxF5hPqfLlC/g1s+mcsI= Subject key identifier: D1:39:A7:C2:7E:F2:4B:66:5E:D3:4C:87:73:AD:34:A3:CC:65:A9:57 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F1CC7A5A7C7C0648784AECC80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3110b996-3f11-31b2-946d-df0d7d2a7a91.roa Signing time: Wed 09 Sep 2026 01:00:11 +0000 ROA not before: Wed 09 Sep 2026 01:00:11 +0000 ROA not after: Tue 08 Dec 2026 02:00:11 +0000 asID: 31898 IP address blocks: 64.181.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1c:c7:a5:a7:c7:c0:64:87:84:ae:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 9 01:00:11 2026 GMT Not After : Dec 8 02:00:11 2026 GMT Subject: CN=fbf5d59b-80cf-4f05-9457-10025174f34f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:29:3f:ba:96:e9:6d:bb:63:f9:c8:81:26:58: 02:86:7b:4b:7b:b7:d5:be:85:0b:61:f3:4c:f3:d9: 40:a6:55:8b:c4:10:da:5f:11:3f:aa:35:b8:be:03: e1:2a:3c:f2:28:88:56:8c:a4:e2:c2:93:37:a3:f7: 61:9f:13:ab:69:be:e5:64:7b:6c:34:76:4e:5b:ff: c6:ed:a6:43:b8:5a:d2:b3:3c:89:81:a5:3b:2b:41: 66:a4:2f:20:d7:41:2b:96:3d:40:f1:e8:73:55:77: 62:5f:6b:90:85:3d:5c:89:c3:c7:c8:58:86:81:53: 3b:95:fa:99:74:3b:21:2c:0e:6d:53:27:08:52:35: 08:62:a9:22:d2:ff:93:d9:18:e2:d8:30:98:0b:ed: 77:57:47:49:32:0e:0c:7d:b0:c1:cf:6b:76:2c:bc: b7:38:d1:ca:94:e5:8e:5a:d6:26:12:d9:d5:cd:fe: 3b:3f:63:3d:5e:c4:3e:39:18:f6:f9:66:ea:f4:91: ab:2b:cc:ca:27:49:a1:bc:64:28:a9:59:0f:30:9c: 7a:50:ea:ab:bf:4c:e7:b1:8b:de:05:a7:2c:23:bb: 2f:2e:dd:20:5c:3f:c0:ff:08:d0:43:25:bd:46:93: 34:87:44:05:96:c3:ac:66:9e:5c:78:7f:d3:e4:45: db:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:39:A7:C2:7E:F2:4B:66:5E:D3:4C:87:73:AD:34:A3:CC:65:A9:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3110b996-3f11-31b2-946d-df0d7d2a7a91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 64.181.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:71:ec:54:9e:a5:a7:e6:14:4d:97:31:73:47:16:05:81:d5: 29:42:69:6d:69:bd:35:6a:38:20:18:ec:ad:50:73:be:5d:5e: 66:8d:d4:02:b7:f4:e6:0c:c8:17:2d:0d:5b:fa:af:17:d0:18: 31:3a:97:a1:67:20:68:76:5f:e6:c5:34:ab:ec:da:1d:90:bd: 71:11:52:1e:1c:12:54:9f:ef:39:5c:f0:e9:9b:fa:13:b4:8e: 5f:b4:e1:7c:c2:ad:c2:00:50:ef:a7:28:d6:28:c1:13:5f:6f: 98:b2:7a:76:60:e7:c6:39:c0:5e:5f:66:09:0b:17:03:8c:2b: 6d:cb:c5:33:d8:18:fb:12:ab:40:fd:24:fd:c2:b1:22:ff:29: 65:24:00:69:ef:7b:da:79:92:95:7a:ca:4d:2f:b9:71:ca:ff: fa:70:e6:87:b1:a4:2a:c3:ee:7f:f2:db:a8:6f:8d:b7:a0:64: da:4f:91:4a:d9:3f:2f:9c:cc:62:f6:a5:94:20:9a:0b:09:0b: 52:2a:ce:c1:71:d6:77:7c:ec:70:4d:15:ce:dd:5f:30:2f:89: c3:3b:ac:13:f3:f6:84:4b:63:0a:df:27:bb:8c:7c:7d:72:4b: db:f0:4f:89:d2:cd:a3:93:d4:98:60:10:b3:17:e1:e3:7b:eb: c1:4b:2b:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8cx6Wnx8Bkh4SuzIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwOTAxMDAxMVoXDTI2MTIwODAyMDAxMVowLzEtMCsGA1UEAxMk ZmJmNWQ1OWItODBjZi00ZjA1LTk0NTctMTAwMjUxNzRmMzRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSk/upbpbbtj+ciBJlgChntLe7fVvoULYfNM 89lAplWLxBDaXxE/qjW4vgPhKjzyKIhWjKTiwpM3o/dhnxOrab7lZHtsNHZOW//G 7aZDuFrSszyJgaU7K0FmpC8g10Erlj1A8ehzVXdiX2uQhT1cicPHyFiGgVM7lfqZ dDshLA5tUycIUjUIYqki0v+T2Rji2DCYC+13V0dJMg4MfbDBz2t2LLy3ONHKlOWO WtYmEtnVzf47P2M9XsQ+ORj2+Wbq9JGrK8zKJ0mhvGQoqVkPMJx6UOqrv0znsYve BacsI7svLt0gXD/A/wjQQyW9RpM0h0QFlsOsZp5ceH/T5EXbTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNE5p8J+8ktmXtNMh3OtNKPMZalXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMzExMGI5OTYtM2YxMS0z MWIyLTk0NmQtZGYwZDdkMmE3YTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQLXAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABNx7FSepafmFE2XMXNHFgWB1SlCaW1pvTVqOCAY7K1Qc75dXmaN1AK3 9OYMyBctDVv6rxfQGDE6l6FnIGh2X+bFNKvs2h2QvXERUh4cElSf7zlc8Omb+hO0 jl+04XzCrcIAUO+nKNYowRNfb5iyenZg58Y5wF5fZgkLFwOMK23LxTPYGPsSq0D9 JP3CsSL/KWUkAGnve9p5kpV6yk0vuXHK//pw5oexpCrD7n/y26hvjbegZNpPkUrZ Py+czGL2pZQgmgsJC1IqzsFx1nd87HBNFc7dXzAvicM7rBPz9oRLYwrfJ7uMfH1y S9vwT4nSzaOT1JhgELMX4eN768FLK0g= -----END CERTIFICATE-----Generated at Mon Sep 21 06:58:36 2026 by rpki-client