$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/437dc54a-5df5-31db-a160-9f56a183b007.roa File: 437dc54a-5df5-31db-a160-9f56a183b007.roa (raw, json) Hash identifier: mv89HdVSLNxZQFxQJMR0a31Ks5hgM75U93sv4vr+Tko= Subject key identifier: 18:4C:F7:B1:DF:F7:4C:0D:15:53:82:95:99:4C:4E:52:AE:F2:03:CB Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F119CFF2D8F05E591CC8C9400 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/437dc54a-5df5-31db-a160-9f56a183b007.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 146.235.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9c:ff:2d:8f:05:e5:91:cc:8c:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=c413782a-0f2b-43f5-924e-5a5be7bb72b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ed:5d:d9:d2:28:75:58:56:4b:2e:14:22:af: e2:71:77:3d:4c:2b:c1:38:16:18:c5:a6:f4:53:54: f0:c9:49:99:29:93:85:66:25:7d:09:5b:9d:78:c6: bf:86:1c:ef:16:d6:2c:09:c1:ef:3e:03:b8:95:ae: b5:94:05:83:9b:6a:47:1f:d8:32:9f:57:ab:21:de: bc:92:ae:ee:78:c5:1c:8c:84:79:8a:98:4f:33:f4: f6:73:0a:cd:8c:36:15:3b:3a:b7:b1:76:59:37:d1: 6e:0b:a0:ad:83:f3:57:1b:49:67:19:34:1f:a0:d4: 1d:01:a1:b3:33:8b:45:db:dd:18:8a:6d:28:97:30: d1:d0:49:a4:62:29:4f:41:3b:b8:1e:91:2f:7c:8b: 38:1b:06:bc:30:c7:fa:e9:cc:c6:b2:3d:4a:87:e2: 83:d9:1d:f7:55:a6:a1:81:36:ae:04:ec:39:33:f2: 40:d3:1e:a5:04:ce:18:62:ed:0b:a7:cc:f9:18:c4: 5e:ac:58:34:0d:59:78:c8:f2:0f:d6:86:30:5d:be: 26:d4:4a:b9:11:2c:fc:2a:42:c4:9e:14:af:9c:83: 95:54:5b:fd:3f:7a:cb:50:75:42:a5:18:10:33:e9: c7:47:2f:7f:b3:80:86:a9:c7:96:73:58:46:d3:5a: a6:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:4C:F7:B1:DF:F7:4C:0D:15:53:82:95:99:4C:4E:52:AE:F2:03:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/437dc54a-5df5-31db-a160-9f56a183b007.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 146.235.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:6a:f6:eb:3f:02:89:bd:88:66:7a:fd:32:fa:ae:86:55:9c: 7c:10:5b:f7:16:57:f8:47:12:74:82:9c:dd:a9:22:e1:c2:a1: 03:71:de:97:1e:53:39:ec:77:3d:08:74:49:ce:8e:2d:dc:da: df:eb:58:3c:82:89:bd:4b:3f:c6:f9:35:d5:65:80:e1:66:f1: 88:97:38:25:d8:89:0b:9a:90:19:8c:56:d6:c1:f5:2c:72:78: c0:65:1c:17:b9:a2:9e:ec:80:ae:21:28:6e:25:6a:97:d9:a2: a1:35:ba:75:01:7f:de:69:a4:19:93:78:86:f6:98:b8:1b:4a: 48:49:19:e9:5f:ee:40:e2:26:16:50:ac:43:ad:3f:37:8c:c6: fa:d4:be:03:25:db:a8:58:7f:a3:c4:29:d4:bf:52:0b:93:81: 82:fc:a8:fa:09:88:0a:c0:71:04:a7:57:0e:5f:2b:72:b1:81: 4b:49:66:83:81:04:32:4f:4a:51:a2:15:00:c5:1c:19:b5:b3: e4:2c:35:a1:2b:e7:29:10:56:2f:e1:11:a4:9a:21:bf:0a:39: 57:17:41:6c:80:d9:15:bd:c6:bc:54:99:32:ed:f3:08:d0:8a: c6:54:90:cf:9e:67:38:1f:fe:97:c2:59:01:72:b7:0b:82:1c: 3c:34:f7:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnP8tjwXlkcyMlAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk YzQxMzc4MmEtMGYyYi00M2Y1LTkyNGUtNWE1YmU3YmI3MmI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlu1d2dIodVhWSy4UIq/icXc9TCvBOBYYxab0 U1TwyUmZKZOFZiV9CVudeMa/hhzvFtYsCcHvPgO4la61lAWDm2pHH9gyn1erId68 kq7ueMUcjIR5iphPM/T2cwrNjDYVOzq3sXZZN9FuC6Ctg/NXG0lnGTQfoNQdAaGz M4tF290Yim0olzDR0EmkYilPQTu4HpEvfIs4Gwa8MMf66czGsj1Kh+KD2R33Vaah gTauBOw5M/JA0x6lBM4YYu0Lp8z5GMRerFg0DVl4yPIP1oYwXb4m1Eq5ESz8KkLE nhSvnIOVVFv9P3rLUHVCpRgQM+nHRy9/s4CGqceWc1hG01qmswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBhM97Hf90wNFVOClZlMTlKu8gPLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNDM3ZGM1NGEtNWRmNS0z MWRiLWExNjAtOWY1NmExODNiMDA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDkusYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHFq9us/Aom9iGZ6/TL6roZVnHwQW/cWV/hHEnSCnN2pIuHCoQNx3pce Uznsdz0IdEnOji3c2t/rWDyCib1LP8b5NdVlgOFm8YiXOCXYiQuakBmMVtbB9Sxy eMBlHBe5op7sgK4hKG4lapfZoqE1unUBf95ppBmTeIb2mLgbSkhJGelf7kDiJhZQ rEOtPzeMxvrUvgMl26hYf6PEKdS/UguTgYL8qPoJiArAcQSnVw5fK3KxgUtJZoOB BDJPSlGiFQDFHBm1s+QsNaEr5ykQVi/hEaSaIb8KOVcXQWyA2RW9xrxUmTLt8wjQ isZUkM+eZzgf/pfCWQFytwuCHDw091o= -----END CERTIFICATE-----Generated at Tue Sep 22 15:14:36 2026 by rpki-client