$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/37b4e2cd-1de2-3e9e-8542-033cf217eb7b.roa File: 37b4e2cd-1de2-3e9e-8542-033cf217eb7b.roa (raw, json) Hash identifier: oTr2enK40NWlFvGbltsv3Sl6L/z/mPQtyLOVrAigyZY= Subject key identifier: F5:56:24:58:AD:8B:FA:65:0E:4E:1E:B1:39:8E:D4:DA:20:03:93:29 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F1302475C410C7A684E494B80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/37b4e2cd-1de2-3e9e-8542-033cf217eb7b.roa Signing time: Sat 05 Sep 2026 13:00:12 +0000 ROA not before: Sat 05 Sep 2026 13:00:12 +0000 ROA not after: Fri 04 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 193.123.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:13:02:47:5c:41:0c:7a:68:4e:49:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 5 13:00:12 2026 GMT Not After : Dec 4 14:00:12 2026 GMT Subject: CN=f549f849-5d35-4f21-8f13-cb31e9cca960 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:7a:a4:04:3f:89:36:a5:7d:4c:1f:87:3d:7b: 9a:bb:47:68:fb:2e:49:84:1a:67:7b:e2:15:66:b3: 27:86:1c:af:df:bd:5d:f9:dc:88:67:ad:38:92:d1: ca:11:13:d5:f9:de:c3:c1:75:66:1f:dc:b4:b0:7e: b5:66:5e:de:48:fd:78:5d:1f:3c:35:b4:37:dc:bd: 23:a0:7c:fe:9d:dc:c6:a4:f9:cd:30:56:e3:79:66: 7b:40:4b:64:81:21:2c:50:a7:83:04:dc:0c:9c:92: c1:62:d6:17:b6:72:a8:96:3d:fe:dc:ff:ec:df:9b: ef:52:8f:70:b6:70:fa:37:e3:83:72:84:98:36:a9: b9:8c:2d:6c:bb:ea:98:6f:b8:75:db:84:54:5b:0b: 10:2f:50:4e:a8:12:3d:56:8f:f5:72:f6:e2:c6:51: c1:d5:a2:27:f3:dd:4a:27:9a:cd:db:be:db:5f:df: e5:89:45:da:23:2b:17:40:83:34:1e:78:1f:8a:d4: 62:3a:d3:ea:dc:80:c2:b4:27:f2:75:65:48:c0:d8: f9:28:b2:b3:e0:9a:1c:e2:17:1d:66:0a:37:5d:2e: c5:0c:f4:33:ac:94:5b:6b:4d:44:86:ed:ed:d9:87: 48:c2:1a:63:23:3d:7b:a2:b8:77:b9:05:76:18:e8: 76:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:56:24:58:AD:8B:FA:65:0E:4E:1E:B1:39:8E:D4:DA:20:03:93:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/37b4e2cd-1de2-3e9e-8542-033cf217eb7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 193.123.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:bd:03:54:c5:08:da:6b:fc:aa:82:07:e5:23:44:8d:29:6b: ab:22:a0:96:ff:67:7f:2c:82:d3:5a:b8:6a:3c:a4:94:8d:69: 65:3b:48:f2:39:5b:08:80:ba:db:17:82:1b:8c:b3:47:cd:80: 27:99:cb:e7:3d:11:29:46:3a:ee:4b:ba:1b:d9:1e:cc:76:61: bc:70:60:39:e2:da:f3:d8:66:d1:77:7c:fc:09:e1:49:a8:19: 0d:0e:79:ae:15:c1:51:c0:69:4d:ed:ad:38:6e:e6:78:a9:0d: ff:f5:c6:88:db:b7:36:39:ce:da:26:d8:ff:36:17:ab:bc:26: 3d:b9:fc:d4:9e:f4:2f:20:22:68:85:5a:83:9c:28:79:ea:41: 26:ec:65:9e:39:c1:d4:fb:30:0d:5c:fc:9f:6b:a8:b8:e0:7a: 11:90:cc:e5:dc:c9:41:c2:1a:5f:84:31:59:c6:fe:e6:f0:42: e2:70:4e:f9:41:32:4a:c7:71:65:ab:f7:05:59:d1:1d:67:df: 0c:62:e4:7d:67:5b:6b:5a:7f:e7:13:95:09:86:d6:cc:2b:c3: 20:fb:ea:46:aa:8f:fb:5f:de:3d:85:9b:a5:68:d0:01:c3:91: 1c:d4:a3:08:c3:96:b3:23:d1:2c:af:e9:a7:2c:97:c5:e0:20: bf:b7:eb:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8TAkdcQQx6aE5JS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNTEzMDAxMloXDTI2MTIwNDE0MDAxMlowLzEtMCsGA1UEAxMk ZjU0OWY4NDktNWQzNS00ZjIxLThmMTMtY2IzMWU5Y2NhOTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5HqkBD+JNqV9TB+HPXuau0do+y5JhBpne+IV ZrMnhhyv371d+dyIZ604ktHKERPV+d7DwXVmH9y0sH61Zl7eSP14XR88NbQ33L0j oHz+ndzGpPnNMFbjeWZ7QEtkgSEsUKeDBNwMnJLBYtYXtnKolj3+3P/s35vvUo9w tnD6N+ODcoSYNqm5jC1su+qYb7h124RUWwsQL1BOqBI9Vo/1cvbixlHB1aIn891K J5rN277bX9/liUXaIysXQIM0HngfitRiOtPq3IDCtCfydWVIwNj5KLKz4Joc4hcd Zgo3XS7FDPQzrJRba01Ehu3t2YdIwhpjIz17orh3uQV2GOh2awIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPVWJFiti/plDk4esTmO1NogA5MpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMzdiNGUyY2QtMWRlMi0z ZTllLTg1NDItMDMzY2YyMTdlYjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFwXsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACe9A1TFCNpr/KqCB+UjRI0pa6sioJb/Z38sgtNauGo8pJSNaWU7SPI5 WwiAutsXghuMs0fNgCeZy+c9ESlGOu5LuhvZHsx2YbxwYDni2vPYZtF3fPwJ4Umo GQ0Oea4VwVHAaU3trThu5nipDf/1xojbtzY5ztom2P82F6u8Jj25/NSe9C8gImiF WoOcKHnqQSbsZZ45wdT7MA1c/J9rqLjgehGQzOXcyUHCGl+EMVnG/ubwQuJwTvlB MkrHcWWr9wVZ0R1n3wxi5H1nW2taf+cTlQmG1swrwyD76kaqj/tf3j2Fm6Vo0AHD kRzUowjDlrMj0Syv6acsl8XgIL+361Y= -----END CERTIFICATE-----Generated at Mon Sep 21 10:07:29 2026 by rpki-client