$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/56f70746-2e06-3cd5-832a-03083450ecd7.roa File: 56f70746-2e06-3cd5-832a-03083450ecd7.roa (raw, json) Hash identifier: uMxNH90qG1FaqMV2Qo2nk8AgpdOiWPPy/HeLSxDqwT0= Subject key identifier: 4C:9F:89:B1:EE:46:DB:EC:34:CC:86:51:C8:D8:94:04:64:A2:1A:DE Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F11A1408A69673CEE7A593F00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/56f70746-2e06-3cd5-832a-03083450ecd7.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 132.145.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:a1:40:8a:69:67:3c:ee:7a:59:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=c5d6b05f-46c3-4f59-8dd9-27e530dcc629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f3:f4:ff:a0:e7:bd:94:89:e8:3d:9a:ff:1f: da:06:85:2f:da:86:b8:83:16:7b:1a:f5:37:37:3f: 4d:e5:28:e2:8a:e6:5d:d3:73:b8:93:1a:77:fc:05: c1:c6:fa:c5:ff:55:0e:c3:f7:e5:58:7b:c9:47:2f: 53:7b:92:c0:d0:fb:1d:ee:d2:b1:72:d6:aa:14:1a: b2:bd:f2:61:27:27:36:98:b1:6a:49:6f:e0:e3:37: 90:53:91:f0:ef:d4:46:6d:78:a2:11:50:b9:d0:38: e8:25:13:ff:2c:42:01:70:50:76:53:31:0d:0c:02: e8:60:8c:9a:5e:c1:ca:51:4b:d0:02:5f:66:fc:37: 76:af:ff:db:46:45:d7:e0:48:89:de:97:9c:d9:6b: 0e:f8:3d:ff:14:5c:54:f8:cb:61:1a:43:6d:35:c4: 83:de:3d:02:ce:a8:9e:f5:6e:05:51:af:3a:c7:22: 23:79:60:f0:d5:b4:8e:36:b9:0e:aa:1f:bd:15:30: a0:2f:6e:d6:96:d4:ff:2a:3c:25:ca:47:57:0a:c4: 32:92:e8:de:71:72:ec:b6:43:3d:b2:7f:d5:30:43: f4:20:72:16:81:b1:af:fa:0d:f4:dc:86:42:2c:7e: c7:17:3c:57:ab:fb:ad:68:7d:23:38:a4:d0:3c:38: 48:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:9F:89:B1:EE:46:DB:EC:34:CC:86:51:C8:D8:94:04:64:A2:1A:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/56f70746-2e06-3cd5-832a-03083450ecd7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 132.145.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:0f:67:73:47:44:4f:15:ea:f7:dd:68:73:5f:60:d0:a9:c9: 58:c5:65:fe:d9:18:8b:8a:f7:a8:ed:f9:58:fa:b8:86:ec:13: c7:b7:16:cc:62:1c:72:ce:ce:7c:10:7a:c5:9c:6f:f4:8b:c8: 19:3b:49:94:45:c0:3f:a6:53:57:16:52:c3:b6:71:92:00:57: 67:45:75:9e:72:73:52:ba:a6:0c:e3:a7:79:f7:4e:3e:9f:f3: 04:1f:2c:f6:49:97:3c:12:8e:57:79:89:59:a6:71:62:ab:9d: 14:b8:78:15:61:96:e1:f0:dc:94:65:c0:b9:d4:61:3b:10:ff: 21:26:8b:81:37:c2:05:68:16:86:a4:cd:31:97:63:87:23:81: 2d:0c:d5:f4:a9:4a:10:b3:dc:0f:d6:00:be:da:84:d3:a4:da: 35:13:b8:61:a6:c4:c1:00:57:b0:e1:4f:5b:3e:f3:62:e5:5e: 55:fb:75:d6:f3:4e:b6:78:f3:ee:18:81:08:3f:52:1e:b0:0d: 33:70:47:c4:3f:e7:07:df:62:0f:4a:53:da:0f:68:97:cf:a8: d0:28:9b:f4:06:e6:82:00:90:f3:a1:ee:b0:f5:02:02:dc:c2: d2:46:78:f1:d0:27:2f:e9:ad:8b:4a:38:6c:6d:06:a7:e2:88: 45:9a:2f:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RoUCKaWc87npZPwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk YzVkNmIwNWYtNDZjMy00ZjU5LThkZDktMjdlNTMwZGNjNjI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPP0/6DnvZSJ6D2a/x/aBoUv2oa4gxZ7GvU3 Nz9N5SjiiuZd03O4kxp3/AXBxvrF/1UOw/flWHvJRy9Te5LA0Psd7tKxctaqFBqy vfJhJyc2mLFqSW/g4zeQU5Hw79RGbXiiEVC50DjoJRP/LEIBcFB2UzENDALoYIya XsHKUUvQAl9m/Dd2r//bRkXX4EiJ3pec2WsO+D3/FFxU+MthGkNtNcSD3j0Czqie 9W4FUa86xyIjeWDw1bSONrkOqh+9FTCgL27WltT/KjwlykdXCsQykujecXLstkM9 sn/VMEP0IHIWgbGv+g303IZCLH7HFzxXq/utaH0jOKTQPDhIBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEyfibHuRtvsNMyGUcjYlARkohreMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNTZmNzA3NDYtMmUwNi0z Y2Q1LTgzMmEtMDMwODM0NTBlY2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDhJH4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKYPZ3NHRE8V6vfdaHNfYNCpyVjFZf7ZGIuK96jt+Vj6uIbsE8e3Fsxi HHLOznwQesWcb/SLyBk7SZRFwD+mU1cWUsO2cZIAV2dFdZ5yc1K6pgzjp3n3Tj6f 8wQfLPZJlzwSjld5iVmmcWKrnRS4eBVhluHw3JRlwLnUYTsQ/yEmi4E3wgVoFoak zTGXY4cjgS0M1fSpShCz3A/WAL7ahNOk2jUTuGGmxMEAV7DhT1s+82LlXlX7ddbz TrZ48+4YgQg/Uh6wDTNwR8Q/5wffYg9KU9oPaJfPqNAom/QG5oIAkPOh7rD1AgLc wtJGePHQJy/prYtKOGxtBqfiiEWaL5o= -----END CERTIFICATE-----Generated at Mon Sep 21 04:57:40 2026 by rpki-client