$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4c7520d0-a1d2-3cce-991a-6ef3572795b4.roa File: 4c7520d0-a1d2-3cce-991a-6ef3572795b4.roa (raw, json) Hash identifier: 74j7hhG6gqJxsh13kFPB8/iRXfKclQSYirc9EE8b7iU= Subject key identifier: AC:98:DD:17:76:7C:70:10:04:5C:22:B8:E7:B8:36:F2:4C:58:D3:8A Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F103797A46FF840920C270440 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4c7520d0-a1d2-3cce-991a-6ef3572795b4.roa Signing time: Fri 04 Sep 2026 13:00:12 +0000 ROA not before: Fri 04 Sep 2026 13:00:12 +0000 ROA not after: Thu 03 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 193.123.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:10:37:97:a4:6f:f8:40:92:0c:27:04:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 4 13:00:12 2026 GMT Not After : Dec 3 14:00:12 2026 GMT Subject: CN=86f77199-1edb-407a-ab4b-6dc92873dfdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:f0:22:78:16:1a:33:58:f9:b0:2c:97:2d:4b: b5:49:d1:3b:e1:66:90:b3:27:9c:5a:4f:2f:7d:d2: 37:d1:9a:2f:a9:47:c7:e8:cd:58:55:4d:4f:d2:b0: b3:67:e9:c8:3e:55:de:34:f6:57:74:46:66:1d:01: ec:e5:f9:a1:78:cb:dd:57:5c:b3:8a:0b:1a:12:d3: e6:52:35:c7:79:71:54:aa:dc:64:c0:9b:ec:60:e1: 76:cb:df:8c:d2:51:35:7a:f1:55:64:2a:a7:c4:23: 5c:44:86:f7:3a:3d:0e:39:ca:d9:b4:dc:6f:db:2e: d8:94:15:59:93:16:28:a5:d0:08:53:c4:d7:ae:20: 19:cc:60:d1:65:90:3c:93:28:81:37:9f:81:23:e0: 34:fa:79:b1:42:ef:d7:e3:1d:d3:39:39:af:b1:c5: a2:4a:fd:62:ce:b2:5f:b0:87:35:85:dd:9b:30:a0: 8a:03:46:48:71:4d:d8:cb:6a:9d:72:ac:dc:6b:72: bb:0d:7e:28:eb:6b:27:26:0b:7d:76:c9:e8:24:d1: 73:ab:24:2a:2b:ab:9c:17:09:91:39:eb:82:d8:57: a1:83:dc:03:f7:68:a3:ba:53:71:e6:49:5e:7d:e3: 04:03:42:da:4a:35:35:e8:91:42:5f:bf:e0:ad:6a: 3d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:98:DD:17:76:7C:70:10:04:5C:22:B8:E7:B8:36:F2:4C:58:D3:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4c7520d0-a1d2-3cce-991a-6ef3572795b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 193.123.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:4b:5c:43:38:e9:ea:09:14:79:71:95:64:21:94:40:7c:55: 02:7e:22:d8:93:7a:2d:f6:4d:db:08:b5:e4:92:52:b8:45:df: 06:32:55:db:d7:df:a4:cc:d3:a0:9e:b5:0f:94:d9:77:79:ee: 77:c7:d1:65:88:cc:11:ac:5b:7e:77:33:f2:54:38:88:98:25: e8:d2:29:1c:05:4e:1b:89:1d:78:2d:9b:75:bb:f9:c1:e3:7c: 28:08:31:b7:a6:71:89:ab:bc:99:fa:03:9c:ff:38:83:b8:b0: 96:f1:c6:99:d6:5e:28:80:43:e5:b2:67:5d:57:e1:e4:d2:ec: 29:f7:5e:33:53:fc:7e:e6:78:2c:b7:a3:e0:f3:07:87:3f:15: 93:6e:52:d5:99:46:e1:12:24:da:ce:9f:33:f3:42:2b:02:2e: 47:16:90:84:a4:dd:7c:0c:84:24:53:0c:56:dc:1e:e3:25:2c: b2:8c:ef:78:06:97:b6:80:0c:79:ae:77:26:4b:1e:75:8a:86: 74:70:03:ff:91:a3:9f:64:8d:96:72:4f:5f:c9:cb:49:26:7f: d4:82:56:91:a0:eb:62:c4:f1:1c:ae:e2:76:07:66:3e:28:58: 9f:bb:7b:9f:15:67:44:c9:5a:92:8d:ba:32:d7:90:c1:51:3c: 4e:dd:d1:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8QN5ekb/hAkgwnBEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNDEzMDAxMloXDTI2MTIwMzE0MDAxMlowLzEtMCsGA1UEAxMk ODZmNzcxOTktMWVkYi00MDdhLWFiNGItNmRjOTI4NzNkZmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvAieBYaM1j5sCyXLUu1SdE74WaQsyecWk8v fdI30ZovqUfH6M1YVU1P0rCzZ+nIPlXeNPZXdEZmHQHs5fmheMvdV1yzigsaEtPm UjXHeXFUqtxkwJvsYOF2y9+M0lE1evFVZCqnxCNcRIb3Oj0OOcrZtNxv2y7YlBVZ kxYopdAIU8TXriAZzGDRZZA8kyiBN5+BI+A0+nmxQu/X4x3TOTmvscWiSv1izrJf sIc1hd2bMKCKA0ZIcU3Yy2qdcqzca3K7DX4o62snJgt9dsnoJNFzqyQqK6ucFwmR OeuC2Fehg9wD92ijulNx5klefeMEA0LaSjU16JFCX7/grWo9BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKyY3Rd2fHAQBFwiuOe4NvJMWNOKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNGM3NTIwZDAtYTFkMi0z Y2NlLTk5MWEtNmVmMzU3Mjc5NWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFwXsgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK1LXEM46eoJFHlxlWQhlEB8VQJ+ItiTei32TdsIteSSUrhF3wYyVdvX 36TM06CetQ+U2Xd57nfH0WWIzBGsW353M/JUOIiYJejSKRwFThuJHXgtm3W7+cHj fCgIMbemcYmrvJn6A5z/OIO4sJbxxpnWXiiAQ+WyZ11X4eTS7Cn3XjNT/H7meCy3 o+DzB4c/FZNuUtWZRuESJNrOnzPzQisCLkcWkISk3XwMhCRTDFbcHuMlLLKM73gG l7aADHmudyZLHnWKhnRwA/+Ro59kjZZyT1/Jy0kmf9SCVpGg62LE8Ryu4nYHZj4o WJ+7e58VZ0TJWpKNujLXkMFRPE7d0c8= -----END CERTIFICATE-----Generated at Tue Sep 22 09:19:50 2026 by rpki-client