$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/35fbf1ad-3fa1-3c11-bfea-eb025ecbcb6f.roa File: 35fbf1ad-3fa1-3c11-bfea-eb025ecbcb6f.roa (raw, json) Hash identifier: ZJs+U75ZIKCfWWRLSwWROOfUpw4Uu33sqNgvXZ9EnSI= Subject key identifier: 85:67:57:EE:1A:30:70:93:B6:E0:BC:67:66:E7:1C:AC:B9:C4:F1:7D Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584FB6712A99131A4AB59C19EB80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/35fbf1ad-3fa1-3c11-bfea-eb025ecbcb6f.roa Signing time: Tue 03 Nov 2026 02:00:13 +0000 ROA not before: Tue 03 Nov 2026 02:00:13 +0000 ROA not after: Mon 01 Feb 2027 02:00:13 +0000 asID: 31898 IP address blocks: 148.116.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b6:71:2a:99:13:1a:4a:b5:9c:19:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Nov 3 02:00:13 2026 GMT Not After : Feb 1 02:00:13 2027 GMT Subject: CN=578b9980-d462-4508-8143-f97abcc8bb74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d6:b7:5e:ef:2f:32:cd:5b:dd:d9:3f:00:d4: 04:27:87:e4:69:dd:dc:f9:41:dc:d2:57:bc:eb:b3: 54:25:77:4e:be:93:75:55:e8:a3:0a:7b:d2:be:bc: fd:59:36:c6:6b:8d:60:f6:cb:09:b1:1d:4d:20:da: 6f:b4:e7:3a:f1:a1:76:09:69:5d:76:19:51:c6:ab: cd:08:8d:c8:c7:82:99:87:5c:4a:5e:1a:5c:93:1d: 61:bc:66:02:60:3c:1d:fa:04:0d:a2:09:62:45:70: 20:aa:3c:ed:f0:a1:c4:09:a2:9c:e8:99:ec:fc:57: eb:e2:aa:71:cc:9d:dd:7d:47:fc:55:7c:95:2d:41: c5:0d:1e:c2:06:d7:6e:70:e9:bc:26:c1:33:b7:d8: 60:43:e1:59:3a:f6:1c:2a:e1:84:ea:6e:cc:d9:eb: 9e:37:a1:f0:af:08:6b:5a:db:9f:22:c6:ad:d4:b9: 1f:37:bd:79:53:a5:8f:64:f9:1f:70:4c:a4:e9:f2: 68:25:5d:74:b6:9f:48:4c:96:2b:00:c8:d0:ff:ca: ed:56:46:f6:af:fb:19:b5:eb:79:b7:bc:27:a1:d9: 8d:2d:11:9d:d1:ad:f6:bf:33:99:35:d4:51:63:f5: 2f:00:92:12:7c:a6:53:d5:2e:01:5e:23:b3:e8:79: 03:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:67:57:EE:1A:30:70:93:B6:E0:BC:67:66:E7:1C:AC:B9:C4:F1:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/35fbf1ad-3fa1-3c11-bfea-eb025ecbcb6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 148.116.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:bd:ce:90:50:d9:c2:25:d0:34:68:e6:8e:cd:99:37:60:dd: 93:08:1e:b5:59:06:c0:43:73:30:a1:37:f7:30:8e:b7:14:07: 47:e6:a8:8b:45:b3:dc:1d:93:e7:b4:1c:1f:eb:28:af:81:68: fc:d2:1c:11:b3:af:d7:c2:d7:61:75:09:17:37:cf:89:10:f8: 9e:61:67:29:a4:86:64:cc:1c:7f:29:6b:29:33:d7:88:3f:e3: 12:64:d9:53:4a:1d:8a:1e:b8:4f:81:18:99:11:a9:bc:a9:8e: 70:28:f4:3c:7a:e0:0e:a8:fe:8d:85:df:1a:07:c6:a0:d7:1f: b0:32:d0:26:13:4a:37:df:93:ef:a9:14:1d:28:4c:8b:2e:81: 75:99:3b:41:14:dc:06:50:46:86:47:3b:4f:d5:18:1e:84:22: 9d:50:23:a5:5f:24:0c:9b:53:e7:4c:15:32:57:e8:34:25:4f: bc:b9:f4:e9:5f:d5:3b:59:60:14:bd:3c:89:88:23:0c:51:52: 35:d1:7d:a4:6d:a5:50:37:83:8e:c2:56:da:1d:73:ac:c3:ba: 3f:a4:0c:30:00:82:a6:98:3f:89:51:0a:d7:04:e9:62:fd:96: 77:cc:66:e7:95:6a:d5:aa:34:a2:72:4c:7f:a4:43:26:a6:d1: 78:30:06:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+2cSqZExpKtZwZ64AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MTEwMzAyMDAxM1oXDTI3MDIwMTAyMDAxM1owLzEtMCsGA1UEAxMk NTc4Yjk5ODAtZDQ2Mi00NTA4LTgxNDMtZjk3YWJjYzhiYjc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9a3Xu8vMs1b3dk/ANQEJ4fkad3c+UHc0le8 67NUJXdOvpN1VeijCnvSvrz9WTbGa41g9ssJsR1NINpvtOc68aF2CWlddhlRxqvN CI3Ix4KZh1xKXhpckx1hvGYCYDwd+gQNogliRXAgqjzt8KHECaKc6Jns/Ffr4qpx zJ3dfUf8VXyVLUHFDR7CBtducOm8JsEzt9hgQ+FZOvYcKuGE6m7M2eueN6Hwrwhr WtufIsat1LkfN715U6WPZPkfcEyk6fJoJV10tp9ITJYrAMjQ/8rtVkb2r/sZtet5 t7wnodmNLRGd0a32vzOZNdRRY/UvAJISfKZT1S4BXiOz6HkD5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIVnV+4aMHCTtuC8Z2bnHKy5xPF9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMzVmYmYxYWQtM2ZhMS0z YzExLWJmZWEtZWIwMjVlY2JjYjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFlHRAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIW9zpBQ2cIl0DRo5o7NmTdg3ZMIHrVZBsBDczChN/cwjrcUB0fmqItF s9wdk+e0HB/rKK+BaPzSHBGzr9fC12F1CRc3z4kQ+J5hZymkhmTMHH8paykz14g/ 4xJk2VNKHYoeuE+BGJkRqbypjnAo9Dx64A6o/o2F3xoHxqDXH7Ay0CYTSjffk++p FB0oTIsugXWZO0EU3AZQRoZHO0/VGB6EIp1QI6VfJAybU+dMFTJX6DQlT7y59Olf 1TtZYBS9PImIIwxRUjXRfaRtpVA3g47CVtodc6zDuj+kDDAAgqaYP4lRCtcE6WL9 lnfMZueVatWqNKJyTH+kQyam0XgwBsI= -----END CERTIFICATE-----Generated at Thu Nov 5 11:41:01 2026 by rpki-client