$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/63b35b89-d8f8-30d8-a34a-41a9ae10e5f1.roa File: 63b35b89-d8f8-30d8-a34a-41a9ae10e5f1.roa (raw, json) Hash identifier: Kv96w78tgM9f85Xh5cvV7gdm4egJj/k6GN8rOoCNSF0= Subject key identifier: 60:D1:36:14:1D:D9:83:FD:31:0C:6E:CC:62:95:7B:89:DC:06:81:81 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F10378B15C8A6E874AD6F83E0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/63b35b89-d8f8-30d8-a34a-41a9ae10e5f1.roa Signing time: Fri 04 Sep 2026 13:00:12 +0000 ROA not before: Fri 04 Sep 2026 13:00:12 +0000 ROA not after: Thu 03 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 168.138.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:10:37:8b:15:c8:a6:e8:74:ad:6f:83:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 4 13:00:12 2026 GMT Not After : Dec 3 14:00:12 2026 GMT Subject: CN=c0e249da-1f33-425d-bfcc-0b3944256dac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:14:fa:a8:13:3c:a6:d8:d5:44:7a:4c:d6:b3: de:40:98:07:db:0e:2c:ca:c5:42:2f:6c:63:a6:91: 31:e1:ef:16:4e:d3:f2:a0:27:b1:14:83:68:3f:52: cd:e0:03:0e:44:0f:40:3a:b4:d5:c2:b4:cd:de:df: 46:45:ae:ab:a9:34:b1:e0:47:30:93:02:f2:4a:9a: 54:c0:c0:2e:ba:77:b5:9b:60:bd:1f:be:3f:0a:7c: eb:f1:5f:c3:36:c0:51:1d:2d:00:88:32:11:eb:ed: e5:a4:b3:7c:fa:69:d9:1f:7f:98:b9:fe:c2:e2:88: 2e:fc:8b:be:82:d3:de:f6:46:6b:60:74:44:a7:35: b5:a3:47:16:9a:4a:55:1f:af:7a:d7:4b:19:e5:60: a0:87:ff:30:ae:09:29:43:14:10:b8:3f:95:1d:1d: 75:47:76:cd:c3:48:ac:1e:1b:4f:d6:b3:08:e6:4e: a0:6a:64:9e:8a:7a:12:71:a9:15:3e:23:d6:0f:22: dc:91:3d:3f:85:65:98:18:af:2e:b5:0f:c0:c4:82: 67:93:8f:44:02:3a:a3:c0:69:37:c7:60:88:5c:6b: 2a:cc:dc:9d:e1:80:a5:9c:68:f5:4b:a6:07:00:c1: 17:8b:f1:95:cd:7b:a0:6c:4b:56:c4:05:d0:cc:4f: 8f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:D1:36:14:1D:D9:83:FD:31:0C:6E:CC:62:95:7B:89:DC:06:81:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/63b35b89-d8f8-30d8-a34a-41a9ae10e5f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.138.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:50:92:ec:60:b4:5e:11:9f:2a:ee:4f:70:fd:c4:db:a8:d4: 68:8e:a1:48:e9:14:ec:0c:77:bb:99:44:65:90:1d:ca:b6:de: fe:89:d0:37:dd:64:b4:8d:10:40:bf:01:0a:52:fa:dc:4a:53: 2e:20:66:76:28:0a:ad:fc:70:5c:0c:13:2d:9f:f1:9c:7c:a1: 5a:7f:a1:cd:40:39:fd:d4:e5:f3:a2:73:73:d1:bb:1f:de:58: 88:95:8d:3a:b2:bc:3d:6c:90:19:ca:15:10:d5:8c:66:8b:3d: 75:42:56:87:fb:c6:79:1f:db:d5:4f:0d:1b:e7:8f:e0:8f:3d: fc:11:a4:a6:14:7c:32:59:2f:26:32:da:7d:25:25:5f:a0:e0: 76:dc:02:79:4b:06:12:ff:3b:3a:95:5c:11:5e:53:08:3c:a1: fc:d5:f0:41:72:43:92:1c:1a:0d:bd:ea:34:74:03:55:5b:84: c6:6b:27:46:b2:cb:d8:04:a6:be:47:62:e8:23:4a:f0:d0:f4: 39:ed:09:38:ff:0e:46:1e:5b:dd:20:46:1f:67:8d:16:1b:01: cc:d9:03:42:28:76:42:40:f3:ca:8e:4f:fc:bd:f1:94:d8:90: 5e:1c:2d:fb:64:70:4b:01:a3:90:e2:ea:19:3f:a5:07:56:da: a1:77:26:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8QN4sVyKbodK1vg+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNDEzMDAxMloXDTI2MTIwMzE0MDAxMlowLzEtMCsGA1UEAxMk YzBlMjQ5ZGEtMWYzMy00MjVkLWJmY2MtMGIzOTQ0MjU2ZGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxT6qBM8ptjVRHpM1rPeQJgH2w4sysVCL2xj ppEx4e8WTtPyoCexFINoP1LN4AMORA9AOrTVwrTN3t9GRa6rqTSx4EcwkwLySppU wMAuune1m2C9H74/Cnzr8V/DNsBRHS0AiDIR6+3lpLN8+mnZH3+Yuf7C4ogu/Iu+ gtPe9kZrYHREpzW1o0cWmkpVH69610sZ5WCgh/8wrgkpQxQQuD+VHR11R3bNw0is HhtP1rMI5k6gamSeinoScakVPiPWDyLckT0/hWWYGK8utQ/AxIJnk49EAjqjwGk3 x2CIXGsqzNyd4YClnGj1S6YHAMEXi/GVzXugbEtWxAXQzE+PuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGDRNhQd2YP9MQxuzGKVe4ncBoGBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNjNiMzViODktZDhmOC0z MGQ4LWEzNGEtNDFhOWFlMTBlNWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqIp4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFBQkuxgtF4RnyruT3D9xNuo1GiOoUjpFOwMd7uZRGWQHcq23v6J0Dfd ZLSNEEC/AQpS+txKUy4gZnYoCq38cFwMEy2f8Zx8oVp/oc1AOf3U5fOic3PRux/e WIiVjTqyvD1skBnKFRDVjGaLPXVCVof7xnkf29VPDRvnj+CPPfwRpKYUfDJZLyYy 2n0lJV+g4HbcAnlLBhL/OzqVXBFeUwg8ofzV8EFyQ5IcGg296jR0A1VbhMZrJ0ay y9gEpr5HYugjSvDQ9DntCTj/DkYeW90gRh9njRYbAczZA0IodkJA88qOT/y98ZTY kF4cLftkcEsBo5Di6hk/pQdW2qF3Jos= -----END CERTIFICATE-----Generated at Mon Sep 21 20:19:12 2026 by rpki-client