$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3ecb5906-31e0-3fe3-8251-5763a022e151.roa File: 3ecb5906-31e0-3fe3-8251-5763a022e151.roa (raw, json) Hash identifier: urZ18UjQ8KTyWnWUwoaIBFYGPUl4Fz1TL06009MNLyY= Subject key identifier: 6A:C0:62:C3:A8:54:C4:04:0B:EE:69:8B:63:32:DA:D4:0F:33:6A:7A Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F0D6CDA7ADB2893BDE0178500 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3ecb5906-31e0-3fe3-8251-5763a022e151.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 207.135.16.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:da:7a:db:28:93:bd:e0:17:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=d7a532c4-78be-460e-aa37-98ba17707efc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:2f:b6:b4:6c:22:22:de:ef:b2:d3:16:f1:64: 71:60:79:ba:fc:d8:13:78:ca:b3:91:27:a9:9d:03: f1:b3:04:d0:b0:94:d1:78:90:73:9e:8b:70:ef:6c: 1f:95:66:2a:61:90:f5:5b:ff:80:df:c1:c8:ee:ff: af:06:8f:0c:ec:e4:ef:47:d2:95:3e:d4:0d:45:25: 64:48:88:74:90:1f:80:b0:e7:49:82:eb:a2:b5:26: 10:c7:7c:e5:aa:36:0b:20:bc:7a:23:fc:31:12:36: 9f:77:1c:37:b7:d9:cd:ea:fe:73:22:94:db:5c:4f: a6:c9:3e:34:c0:b2:eb:18:6f:03:75:90:08:d7:44: 13:c7:72:ed:0c:c0:8f:c9:bc:e1:2b:48:51:dd:3e: 5b:44:e6:5d:3e:5d:b7:8a:35:62:6b:55:e3:f2:9d: 28:f9:33:4c:42:58:c1:4c:2a:9b:97:e1:9d:56:f0: 60:d0:a3:5f:2d:ec:0d:e4:17:c9:cc:d0:1c:93:bf: 37:6e:81:7a:e7:14:c8:96:9e:07:37:f9:b2:01:f0: 23:c4:a5:ab:db:93:26:07:0f:5b:b2:00:38:74:f2: ff:49:d2:49:5f:07:ce:e3:41:6b:e3:47:e7:bb:8b: 92:70:13:cf:70:ef:d0:3e:54:84:fd:40:1e:f3:52: 61:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:C0:62:C3:A8:54:C4:04:0B:EE:69:8B:63:32:DA:D4:0F:33:6A:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3ecb5906-31e0-3fe3-8251-5763a022e151.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 207.135.16.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:34:7d:57:fd:fd:65:ab:52:3f:f4:81:10:5f:ca:55:57:49: ad:b0:41:29:30:5e:79:3c:c6:1d:02:66:cc:24:06:2c:40:77: 9e:0e:4f:c2:3f:b5:47:b7:70:45:87:dd:3e:5f:8f:96:ba:e8: 33:6e:fd:9b:d8:22:a9:7c:bb:7c:94:b1:21:b9:09:20:61:ce: 91:a8:6d:fa:7f:47:ce:70:7c:f2:df:36:2b:7d:fa:8a:c9:93: 98:33:22:c2:85:74:f9:11:94:89:09:a3:e9:be:59:39:3b:32: 94:b1:f8:99:f5:e3:16:a4:04:32:ee:75:73:11:cb:29:6a:d7: f3:6d:d4:ff:95:f3:b5:a3:fe:1a:a3:53:93:09:91:86:e1:8d: cd:9f:81:7b:04:a6:f0:dd:bd:77:61:42:45:9c:b4:01:30:aa: e1:5b:c9:2e:e8:1f:84:5b:40:a7:d5:91:84:48:5a:7a:89:23: 33:a3:23:b8:96:9f:7c:93:a4:f1:9b:ae:18:01:12:c3:0f:55: 54:de:18:23:20:29:39:d4:55:17:ba:83:8b:81:c2:be:50:1f: 4d:a3:b8:a2:c4:3f:fa:fd:ab:be:b7:6a:5e:0c:12:80:93:b9: d1:0a:fd:29:1c:ff:fa:4a:cd:89:b2:a6:34:e3:96:f7:ea:6f: 15:dd:e0:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbNp62yiTveAXhQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk ZDdhNTMyYzQtNzhiZS00NjBlLWFhMzctOThiYTE3NzA3ZWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjC+2tGwiIt7vstMW8WRxYHm6/NgTeMqzkSep nQPxswTQsJTReJBznotw72wflWYqYZD1W/+A38HI7v+vBo8M7OTvR9KVPtQNRSVk SIh0kB+AsOdJguuitSYQx3zlqjYLILx6I/wxEjafdxw3t9nN6v5zIpTbXE+myT40 wLLrGG8DdZAI10QTx3LtDMCPybzhK0hR3T5bROZdPl23ijVia1Xj8p0o+TNMQljB TCqbl+GdVvBg0KNfLewN5BfJzNAck783boF65xTIlp4HN/myAfAjxKWr25MmBw9b sgA4dPL/SdJJXwfO40Fr40fnu4uScBPPcO/QPlSE/UAe81JhQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGrAYsOoVMQEC+5pi2My2tQPM2p6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvM2VjYjU5MDYtMzFlMC0z ZmUzLTgyNTEtNTc2M2EwMjJlMTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz4cQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACI0fVf9/WWrUj/0gRBfylVXSa2wQSkwXnk8xh0CZswkBixAd54OT8I/ tUe3cEWH3T5fj5a66DNu/ZvYIql8u3yUsSG5CSBhzpGobfp/R85wfPLfNit9+orJ k5gzIsKFdPkRlIkJo+m+WTk7MpSx+Jn14xakBDLudXMRyylq1/Nt1P+V87Wj/hqj U5MJkYbhjc2fgXsEpvDdvXdhQkWctAEwquFbyS7oH4RbQKfVkYRIWnqJIzOjI7iW n3yTpPGbrhgBEsMPVVTeGCMgKTnUVRe6g4uBwr5QH02juKLEP/r9q763al4MEoCT udEK/Skc//pKzYmypjTjlvfqbxXd4A8= -----END CERTIFICATE-----Generated at Tue Sep 22 06:20:50 2026 by rpki-client