$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3a4f00f3-9f39-31a3-be48-5aee62bee877.roa File: 3a4f00f3-9f39-31a3-be48-5aee62bee877.roa (raw, json) Hash identifier: aOQtUs47ntww07cubyW602IETXb8R7VXpQFdy4rzp7E= Subject key identifier: F6:FE:D0:F7:84:3E:E3:37:B0:AA:C4:58:5F:45:29:B0:BE:37:CA:AC Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F11A154C63049329A7BD46480 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3a4f00f3-9f39-31a3-be48-5aee62bee877.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 168.75.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:a1:54:c6:30:49:32:9a:7b:d4:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=7884a7da-0294-476d-aba5-82b1c12c3513 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:b8:4c:dc:fd:ea:13:e3:cf:35:ff:a6:12:40: d9:cb:e6:d6:93:37:f8:c0:4e:57:c2:7d:ee:88:08: 12:d9:ff:36:fb:92:3f:79:db:ea:36:64:e9:ef:f6: ad:ab:10:5f:be:8e:fc:28:15:36:48:53:e9:4c:b3: 07:1f:86:fe:94:f9:68:df:75:b8:90:36:28:b1:c0: 31:bc:2e:a3:4c:f2:1f:3a:62:52:f5:92:e0:79:b9: 03:2e:ce:8b:bb:f8:14:05:ac:de:eb:02:37:ff:99: 33:e6:22:1c:0f:c9:a3:15:9d:33:09:4c:94:80:1d: f9:04:29:7b:a3:d8:ea:61:d0:25:39:06:a2:67:80: 0a:40:bb:4c:0d:00:a9:19:63:4a:cf:bd:fb:6a:8d: 20:18:46:67:54:57:63:d9:3a:59:da:f0:a0:97:05: 06:1e:80:20:8c:ea:b4:00:e8:11:e7:f3:c1:6c:ef: ad:9b:11:b8:86:4f:0e:7b:0b:0c:53:0b:f7:b6:f7: 24:33:85:06:2b:11:51:fc:ca:ce:1d:d0:4f:00:5a: cf:c8:0e:28:02:c6:92:34:55:08:14:90:f2:60:48: 50:79:36:15:fc:8d:2d:20:ac:22:af:36:de:7b:9e: 54:d6:5e:16:5b:2d:db:5d:19:d6:77:54:3d:ce:5d: f2:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:FE:D0:F7:84:3E:E3:37:B0:AA:C4:58:5F:45:29:B0:BE:37:CA:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3a4f00f3-9f39-31a3-be48-5aee62bee877.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.75.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:57:98:04:b2:7a:d5:07:26:10:c8:d4:23:a4:f8:75:05:0e: 06:d8:99:19:35:87:78:1f:3b:ea:9c:6e:2f:f0:b6:8a:60:33: ba:05:8a:5d:72:4e:5e:28:d0:08:7e:af:2d:08:20:18:20:4b: d2:0f:dc:04:23:64:7c:66:bd:79:a0:e0:0b:67:f0:ba:a5:f0: a6:c6:67:52:f0:b9:51:fd:03:5d:ce:f1:77:4c:d5:10:ba:b1: 64:d6:09:66:dc:63:aa:24:06:60:d8:a4:2f:4e:55:f6:bf:13: bd:45:05:cc:b9:84:e1:e8:24:cb:2f:0e:cc:3d:b7:2f:58:e0: da:c3:d8:7b:1a:9b:a1:9b:be:51:ef:0c:36:bf:df:3f:c3:18: cf:4b:96:63:02:59:84:03:5b:f1:86:c6:fd:15:22:26:b8:1e: bd:ea:8f:bb:3f:f4:5c:99:38:ab:6c:68:b6:6b:1c:2c:b1:30: 35:46:df:76:4b:40:d1:2b:70:df:1c:54:35:93:a1:6f:a2:07: 6f:c2:71:50:dc:78:14:c8:c0:d5:a1:88:fe:58:b2:86:d6:13: 08:b5:0d:de:25:15:c0:a2:f5:b6:02:93:a0:9e:62:a0:f6:a5: 6b:0f:37:92:3f:6b:b0:53:a4:00:81:11:98:f1:bf:a4:f5:38: c0:b8:84:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RoVTGMEkymnvUZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk Nzg4NGE3ZGEtMDI5NC00NzZkLWFiYTUtODJiMWMxMmMzNTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7hM3P3qE+PPNf+mEkDZy+bWkzf4wE5Xwn3u iAgS2f82+5I/edvqNmTp7/atqxBfvo78KBU2SFPpTLMHH4b+lPlo33W4kDYoscAx vC6jTPIfOmJS9ZLgebkDLs6Lu/gUBaze6wI3/5kz5iIcD8mjFZ0zCUyUgB35BCl7 o9jqYdAlOQaiZ4AKQLtMDQCpGWNKz737ao0gGEZnVFdj2TpZ2vCglwUGHoAgjOq0 AOgR5/PBbO+tmxG4hk8OewsMUwv3tvckM4UGKxFR/MrOHdBPAFrPyA4oAsaSNFUI FJDyYEhQeTYV/I0tIKwirzbee55U1l4WWy3bXRnWd1Q9zl3y2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPb+0PeEPuM3sKrEWF9FKbC+N8qsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvM2E0ZjAwZjMtOWYzOS0z MWEzLWJlNDgtNWFlZTYyYmVlODc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqEtgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAdXmASyetUHJhDI1COk+HUFDgbYmRk1h3gfO+qcbi/wtopgM7oFil1y Tl4o0Ah+ry0IIBggS9IP3AQjZHxmvXmg4Atn8Lql8KbGZ1LwuVH9A13O8XdM1RC6 sWTWCWbcY6okBmDYpC9OVfa/E71FBcy5hOHoJMsvDsw9ty9Y4NrD2Hsam6GbvlHv DDa/3z/DGM9LlmMCWYQDW/GGxv0VIia4Hr3qj7s/9FyZOKtsaLZrHCyxMDVG33ZL QNErcN8cVDWToW+iB2/CcVDceBTIwNWhiP5YsobWEwi1Dd4lFcCi9bYCk6CeYqD2 pWsPN5I/a7BTpACBEZjxv6T1OMC4hCM= -----END CERTIFICATE-----Generated at Thu Sep 24 13:54:53 2026 by rpki-client