$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/39c89063-d777-3702-8ec9-a6874e2fae1d.roa File: 39c89063-d777-3702-8ec9-a6874e2fae1d.roa (raw, json) Hash identifier: bKzYA3WdOxZm1woWZtzbwwccFdyleQaCS1KSfBAolw0= Subject key identifier: 2A:FE:DE:B5:C5:8E:C9:D3:28:D5:EA:63:03:AE:EF:32:FE:7C:F9:3F Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F46A7F6CF6C9C244071E0DC80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/39c89063-d777-3702-8ec9-a6874e2fae1d.roa Signing time: Thu 24 Sep 2026 01:00:12 +0000 ROA not before: Thu 24 Sep 2026 01:00:12 +0000 ROA not after: Wed 23 Dec 2026 02:00:12 +0000 asID: 54253 IP address blocks: 40.233.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:46:a7:f6:cf:6c:9c:24:40:71:e0:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 24 01:00:12 2026 GMT Not After : Dec 23 02:00:12 2026 GMT Subject: CN=d4f451c6-e3ab-47f2-ac6b-20b8d32b0579 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:7b:d4:8b:42:50:bc:01:36:df:e6:1f:31:38: a0:3a:8c:40:a0:f6:7c:ee:a9:03:f5:c2:23:16:2e: 32:55:fb:c0:0e:9b:a7:5e:ee:2d:bb:c5:9e:40:24: b7:b7:eb:8d:ca:ae:12:b0:03:f0:d0:96:36:ab:74: 74:2d:9c:d0:d2:b3:8c:32:30:bd:db:8a:95:04:a2: 15:37:47:92:ef:bf:a1:80:30:69:8d:ba:89:59:11: a5:bf:10:8e:60:8a:4d:c2:54:0e:e1:34:f8:90:27: 1d:b5:0a:d5:b8:5a:29:b7:e6:41:72:38:85:ee:aa: df:70:71:7a:97:ec:fc:3e:f1:ac:7d:80:59:4a:32: 81:90:f3:57:d7:e8:3b:b0:59:bb:e5:b0:03:5d:aa: 7f:27:39:1e:96:19:9f:00:30:78:52:3a:af:09:f9: b8:00:6b:89:78:8f:eb:b9:7d:c2:2d:25:1f:f8:d2: 8c:21:24:50:6b:92:23:95:ae:09:6f:b8:c4:ac:87: cd:d5:2c:dc:33:fd:ed:34:53:62:ad:5e:df:8c:9f: 46:52:fb:44:30:90:87:b9:0c:18:ad:3b:4f:11:35: 44:3a:1a:6a:10:bb:c2:fe:19:2a:68:98:aa:a0:93: dc:79:7a:22:ad:c6:db:9f:f8:0b:8a:12:1c:eb:7f: bc:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:FE:DE:B5:C5:8E:C9:D3:28:D5:EA:63:03:AE:EF:32:FE:7C:F9:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/39c89063-d777-3702-8ec9-a6874e2fae1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 40.233.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:fb:04:12:2c:12:89:4a:71:93:c0:32:5a:8d:6a:32:3a:ed: c5:72:1e:49:b3:2c:cb:21:5e:a9:41:b8:d1:5d:da:a2:23:20: 35:72:d3:04:a9:cc:ca:fb:f0:07:62:76:c8:4e:fa:da:bc:3a: f2:71:e5:dc:2c:4b:74:bb:e7:06:c6:41:db:29:6d:72:cf:f3: 2f:e7:97:6d:dc:67:5e:a9:31:fd:08:bc:99:2b:b4:47:c7:38: e1:99:3b:a4:1a:f3:c7:e1:7b:85:16:b2:c6:69:a8:ba:41:88: 82:24:ee:0f:08:cc:62:18:bc:6a:2c:1a:6b:df:f0:dc:d6:19: cf:f5:61:50:ba:3a:64:e1:d7:a3:45:12:79:51:da:f7:b9:c4: 71:fd:92:ea:b5:66:e1:a0:48:2b:55:44:9a:e4:ef:ee:49:40: 9f:41:7f:10:67:8b:33:27:cb:37:96:2f:a7:fc:11:2b:c3:38: 3d:22:2f:19:d5:47:07:2a:95:db:b0:48:8a:c5:63:d4:42:6c: 0f:7f:13:4d:2d:6a:cf:a2:10:d6:ce:bc:3a:80:85:23:35:0a: 4e:72:6c:67:2e:86:f2:5b:8f:ce:2b:f1:e7:18:ad:58:bc:c3: be:06:e8:b2:1c:fd:10:71:a1:b9:33:03:1e:46:97:17:2e:18: d3:93:f9:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Gp/bPbJwkQHHg3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkyNDAxMDAxMloXDTI2MTIyMzAyMDAxMlowLzEtMCsGA1UEAxMk ZDRmNDUxYzYtZTNhYi00N2YyLWFjNmItMjBiOGQzMmIwNTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HvUi0JQvAE23+YfMTigOoxAoPZ87qkD9cIj Fi4yVfvADpunXu4tu8WeQCS3t+uNyq4SsAPw0JY2q3R0LZzQ0rOMMjC924qVBKIV N0eS77+hgDBpjbqJWRGlvxCOYIpNwlQO4TT4kCcdtQrVuFopt+ZBcjiF7qrfcHF6 l+z8PvGsfYBZSjKBkPNX1+g7sFm75bADXap/JzkelhmfADB4UjqvCfm4AGuJeI/r uX3CLSUf+NKMISRQa5Ijla4Jb7jErIfN1SzcM/3tNFNirV7fjJ9GUvtEMJCHuQwY rTtPETVEOhpqELvC/hkqaJiqoJPceXoircbbn/gLihIc63+8BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCr+3rXFjsnTKNXqYwOu7zL+fPk/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMzljODkwNjMtZDc3Ny0z NzAyLThlYzktYTY4NzRlMmZhZTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCKOkgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABj7BBIsEolKcZPAMlqNajI67cVyHkmzLMshXqlBuNFd2qIjIDVy0wSp zMr78AdidshO+tq8OvJx5dwsS3S75wbGQdspbXLP8y/nl23cZ16pMf0IvJkrtEfH OOGZO6Qa88fhe4UWssZpqLpBiIIk7g8IzGIYvGosGmvf8NzWGc/1YVC6OmTh16NF EnlR2ve5xHH9kuq1ZuGgSCtVRJrk7+5JQJ9BfxBnizMnyzeWL6f8ESvDOD0iLxnV RwcqlduwSIrFY9RCbA9/E00tas+iENbOvDqAhSM1Ck5ybGcuhvJbj84r8ecYrVi8 w74G6LIc/RBxobkzAx5GlxcuGNOT+SQ= -----END CERTIFICATE-----Generated at Sat Sep 26 07:23:11 2026 by rpki-client