$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3136b57f-6b27-3ba0-ac03-9a52a706ca21.roa File: 3136b57f-6b27-3ba0-ac03-9a52a706ca21.roa (raw, json) Hash identifier: +uNz/DbyveFsZgvIFcCMTF7Yr0cSzfi3/l30AVw5hho= Subject key identifier: FA:04:00:19:13:58:06:0E:9F:C2:86:D7:EC:0E:70:00:C0:D4:AC:C7 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F119CFDD77E96F0DD4E8C3B80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3136b57f-6b27-3ba0-ac03-9a52a706ca21.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 132.145.4.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9c:fd:d7:7e:96:f0:dd:4e:8c:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=85bc47c9-0ee5-4c88-a4f1-736e33b26c17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d1:33:13:15:25:05:6b:cf:15:bd:17:56:f9: df:ee:b5:82:06:2c:33:88:41:01:a0:91:e6:24:f4: c8:ed:c4:c2:80:65:05:04:9a:5c:43:81:26:df:90: 5d:84:f6:90:b8:00:15:04:2d:14:78:67:0f:5d:d5: 59:23:e6:49:33:cf:aa:ee:4d:be:cf:95:d7:53:ff: 15:8d:b6:2c:c0:14:4f:58:fa:04:e2:0c:82:80:fc: 64:eb:78:d6:4b:57:10:6b:22:4b:ab:54:6d:c5:62: db:03:7b:85:15:5d:4e:9c:0d:e7:3a:dc:f9:1c:da: 58:b6:a9:20:70:b6:e1:8f:de:b4:d4:a7:06:a4:fd: 5a:5f:7f:ae:9d:0b:90:a0:dc:60:10:b1:3f:6c:4d: 74:b1:98:bc:da:29:d0:06:cb:5b:92:4b:e0:7a:b1: 46:ab:bb:b2:99:3a:f5:3c:78:08:c0:93:cd:db:23: 0d:f4:a1:1e:0a:bf:7f:82:1e:06:2b:cf:6e:ec:93: 6e:35:43:e8:53:b1:d9:f6:db:22:18:6a:4c:83:b4: 81:2e:10:9b:a5:3c:c7:25:03:f0:d9:98:09:9e:73: 62:e4:89:85:b9:a1:25:a3:7f:18:4d:09:3d:c6:a3: 2b:4d:2d:b9:1b:f5:ba:bf:da:5f:69:aa:f5:d5:e6: 52:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:04:00:19:13:58:06:0E:9F:C2:86:D7:EC:0E:70:00:C0:D4:AC:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3136b57f-6b27-3ba0-ac03-9a52a706ca21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 132.145.4.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:38:d1:57:54:7f:55:2c:55:50:ea:76:bc:76:d5:54:b5:0c: 9d:80:4b:e6:c3:25:af:99:5f:10:7f:e8:1e:aa:7e:85:3d:67: 6f:11:57:84:7a:58:83:84:9a:f9:e2:58:8f:6e:19:22:1d:3b: 41:21:f8:87:ec:58:b5:9f:d8:ac:2e:a8:a1:ab:84:66:db:83: 04:c6:cd:75:e4:31:47:ce:b5:73:29:53:4b:e5:b3:ea:8d:cf: 4d:bd:89:17:59:86:a8:f4:e8:1b:1f:30:19:a4:d7:5e:4d:12: 81:1c:a9:cd:e8:95:21:f5:22:21:e7:72:cf:14:22:cc:ec:ac: bc:03:14:6a:8d:96:71:ec:21:a9:f7:7e:76:b3:b3:27:fb:59: 48:84:4a:81:ad:42:46:0a:75:20:e3:86:0a:e4:af:5e:cd:32: 98:7e:21:da:f6:f0:a1:86:c0:ab:04:bd:46:d7:33:96:fb:20: 50:54:a9:0c:6d:63:b6:81:fd:8e:ed:10:85:75:22:a2:8d:15: c9:77:d6:b4:4c:86:52:e5:cc:70:c9:e1:42:a2:04:1c:28:63: 4d:88:3e:a4:be:d9:fe:8e:6a:cc:f7:37:0b:d9:39:61:52:4e: e6:f0:e7:67:d8:22:79:8a:b8:05:a3:54:03:85:2b:ba:96:f0: 9a:1a:c4:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnP3Xfpbw3U6MO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk ODViYzQ3YzktMGVlNS00Yzg4LWE0ZjEtNzM2ZTMzYjI2YzE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNEzExUlBWvPFb0XVvnf7rWCBiwziEEBoJHm JPTI7cTCgGUFBJpcQ4Em35BdhPaQuAAVBC0UeGcPXdVZI+ZJM8+q7k2+z5XXU/8V jbYswBRPWPoE4gyCgPxk63jWS1cQayJLq1RtxWLbA3uFFV1OnA3nOtz5HNpYtqkg cLbhj9601KcGpP1aX3+unQuQoNxgELE/bE10sZi82inQBstbkkvgerFGq7uymTr1 PHgIwJPN2yMN9KEeCr9/gh4GK89u7JNuNUPoU7HZ9tsiGGpMg7SBLhCbpTzHJQPw 2ZgJnnNi5ImFuaElo38YTQk9xqMrTS25G/W6v9pfaar11eZSeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPoEABkTWAYOn8KG1+wOcADA1KzHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMzEzNmI1N2YtNmIyNy0z YmEwLWFjMDMtOWE1MmE3MDZjYTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhJEEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFw40VdUf1UsVVDqdrx21VS1DJ2AS+bDJa+ZXxB/6B6qfoU9Z28RV4R6 WIOEmvniWI9uGSIdO0Eh+IfsWLWf2KwuqKGrhGbbgwTGzXXkMUfOtXMpU0vls+qN z029iRdZhqj06BsfMBmk115NEoEcqc3olSH1IiHncs8UIszsrLwDFGqNlnHsIan3 fnazsyf7WUiESoGtQkYKdSDjhgrkr17NMph+Idr28KGGwKsEvUbXM5b7IFBUqQxt Y7aB/Y7tEIV1IqKNFcl31rRMhlLlzHDJ4UKiBBwoY02IPqS+2f6Oasz3NwvZOWFS Tubw52fYInmKuAWjVAOFK7qW8JoaxG0= -----END CERTIFICATE-----Generated at Sun Sep 27 04:22:15 2026 by rpki-client