$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5727cbdf-4286-3c34-a6ca-ff648602e504.roa File: 5727cbdf-4286-3c34-a6ca-ff648602e504.roa (raw, json) Hash identifier: t77L8Oeny0edoKS8wlN8BiBkfrRRZpnoR4asHqz8PiA= Subject key identifier: D6:7C:18:0C:FB:B3:1C:72:3D:93:FE:A0:E7:0C:A8:60:2A:A7:5D:7F Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F0D6CF84B9E63119974B74E00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5727cbdf-4286-3c34-a6ca-ff648602e504.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 168.129.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:f8:4b:9e:63:11:99:74:b7:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=b3321691-1ec6-4bfe-94c0-6a114ee55eff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fa:e9:2d:de:c7:b6:78:09:48:34:80:60:a8: 2e:d7:18:b0:b9:6f:99:d4:26:ed:fb:af:31:0f:74: ce:f7:47:84:a1:25:63:e3:5a:6e:95:42:7b:3a:34: dc:be:35:9a:1f:af:64:38:7b:ed:21:13:e8:9b:9a: 04:34:5a:33:fd:e1:7c:c2:b4:66:f3:a7:19:70:af: 82:15:a7:08:5a:8f:25:ae:aa:07:99:98:f1:2a:81: 63:3c:77:4f:ce:5f:cb:ae:1e:83:31:2c:7d:53:3d: 42:b5:c7:05:a6:c3:fb:b7:74:23:7c:e6:58:99:b0: 2b:2c:29:d7:cd:bf:b9:0f:1b:4d:51:a1:8f:9d:94: 8b:d0:e3:a2:80:28:3a:f1:e5:3e:f4:02:54:64:91: 1c:00:a5:0b:60:90:c1:c9:22:15:da:1d:50:df:66: 72:15:0c:89:64:35:64:c3:ba:12:fd:73:76:29:dd: 65:21:8d:2d:3a:60:80:1e:67:31:5b:46:e1:84:c9: c7:46:fe:8b:34:e8:5c:ec:f0:41:89:f1:35:c4:1a: f3:30:32:e9:7f:c7:a2:7f:ba:18:bb:14:a2:6e:16: ff:73:38:aa:f0:07:9a:d5:70:53:ff:c3:04:ab:3f: 7d:35:3c:9b:fd:e9:0b:a8:57:4f:6a:45:f2:f6:5c: fe:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:7C:18:0C:FB:B3:1C:72:3D:93:FE:A0:E7:0C:A8:60:2A:A7:5D:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5727cbdf-4286-3c34-a6ca-ff648602e504.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.129.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:b1:7b:1a:c5:0e:8f:e1:31:db:9f:b8:56:11:67:56:eb:da: c1:dc:65:4f:85:5d:24:30:6a:30:66:13:5e:d6:c3:8c:25:80: 3d:a3:f9:d4:d4:c6:f1:aa:81:79:72:8c:43:9a:76:e9:b9:0b: 83:b9:c6:34:bc:50:de:cf:3d:a6:48:2c:a3:6b:18:c5:54:fa: ca:58:0c:d2:77:4d:b7:cf:83:75:a0:0c:85:fb:c1:c1:7e:78: f4:33:d5:9f:a2:f7:df:95:bd:e7:45:0e:c2:c1:08:65:7d:32: 81:8f:20:b0:1e:62:ba:1f:76:d3:d9:84:8b:54:c3:83:cd:8a: cb:02:09:d1:e9:af:3f:23:f7:82:62:28:1d:1c:ef:f0:21:dc: 7b:b0:75:5e:bf:3f:2a:55:cf:f1:b1:44:41:9c:75:11:dd:4f: 36:77:5d:96:c0:2d:39:f3:04:99:db:f8:96:97:57:e1:42:67: b0:ff:57:1c:2c:72:a7:5a:77:38:11:ad:e9:5a:44:60:7e:28: 1b:15:c8:38:8f:4b:3b:c1:6f:9b:23:22:fd:7e:2e:a6:a0:2e: 6b:47:89:fb:a2:8e:66:f3:44:48:9f:81:a5:46:0a:52:be:4b: b5:20:e4:3a:1d:36:65:af:dc:9d:c4:fd:77:4a:2b:97:41:a7: 35:5a:58:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbPhLnmMRmXS3TgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk YjMzMjE2OTEtMWVjNi00YmZlLTk0YzAtNmExMTRlZTU1ZWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfrpLd7HtngJSDSAYKgu1xiwuW+Z1Cbt+68x D3TO90eEoSVj41pulUJ7OjTcvjWaH69kOHvtIRPom5oENFoz/eF8wrRm86cZcK+C FacIWo8lrqoHmZjxKoFjPHdPzl/Lrh6DMSx9Uz1CtccFpsP7t3QjfOZYmbArLCnX zb+5DxtNUaGPnZSL0OOigCg68eU+9AJUZJEcAKULYJDBySIV2h1Q32ZyFQyJZDVk w7oS/XN2Kd1lIY0tOmCAHmcxW0bhhMnHRv6LNOhc7PBBifE1xBrzMDLpf8eif7oY uxSibhb/cziq8Aea1XBT/8MEqz99NTyb/ekLqFdPakXy9lz+jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNZ8GAz7sxxyPZP+oOcMqGAqp11/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNTcyN2NiZGYtNDI4Ni0z YzM0LWE2Y2EtZmY2NDg2MDJlNTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqIH3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB2xexrFDo/hMdufuFYRZ1br2sHcZU+FXSQwajBmE17Ww4wlgD2j+dTU xvGqgXlyjEOadum5C4O5xjS8UN7PPaZILKNrGMVU+spYDNJ3TbfPg3WgDIX7wcF+ ePQz1Z+i99+VvedFDsLBCGV9MoGPILAeYrofdtPZhItUw4PNissCCdHprz8j94Ji KB0c7/Ah3HuwdV6/PypVz/GxREGcdRHdTzZ3XZbALTnzBJnb+JaXV+FCZ7D/Vxws cqdadzgRrelaRGB+KBsVyDiPSzvBb5sjIv1+LqagLmtHifuijmbzREifgaVGClK+ S7Ug5DodNmWv3J3E/XdKK5dBpzVaWAk= -----END CERTIFICATE-----Generated at Mon Sep 21 19:19:27 2026 by rpki-client