$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/65d46364-fbf1-3a66-a0d0-8ced9efcbe66.roa File: 65d46364-fbf1-3a66-a0d0-8ced9efcbe66.roa (raw, json) Hash identifier: 4fEVYziOzyaz+yyAjlkSN/0mpzMgw4J1CSapCLtgq0g= Subject key identifier: C0:23:9F:8A:B3:7A:AF:A8:1B:C4:56:C8:F3:A5:4B:A0:B0:4C:82:D3 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F11A15BCDEDACA2A6D6CC47E0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/65d46364-fbf1-3a66-a0d0-8ced9efcbe66.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 132.145.72.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:a1:5b:cd:ed:ac:a2:a6:d6:cc:47:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=2a58799f-78f3-4f43-a253-0b69c32aac86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:9f:2d:b0:59:37:6c:2c:6e:19:8f:16:3d:b0: 03:32:2a:47:1d:d1:69:03:ae:f6:4a:4e:f3:00:9a: f4:78:6a:51:ed:76:56:72:c2:4e:07:6a:6a:ec:ef: 06:e3:03:ab:6e:e5:f8:4c:6a:6e:b3:6b:02:a4:37: 84:79:ea:53:32:4e:e5:ae:cc:34:fb:69:17:57:79: 45:07:0f:26:26:8d:78:96:f1:50:2b:39:78:40:2d: 6f:37:9f:cc:66:00:5c:a3:69:63:ea:61:d5:00:36: 3e:75:c9:13:82:94:60:7e:94:97:10:35:a2:ef:f2: 70:ec:f6:25:f0:82:57:7f:df:7c:91:a1:43:7b:fa: b8:3f:10:26:35:c8:23:0b:7a:f4:c0:54:db:80:ef: 1f:8b:de:f9:b1:a0:8c:3c:67:49:68:1c:67:92:76: 6b:5c:2f:38:38:04:56:78:18:61:f8:03:4b:2e:dd: 77:3e:3e:a3:f2:99:e9:07:e2:b9:f4:7f:a7:c1:2a: 30:4e:3b:22:a0:a6:1e:e0:f5:0e:f2:e0:cf:e0:8f: 3e:47:04:c6:1a:ea:ef:a8:8e:77:d1:3b:e8:6d:20: cb:25:04:74:2c:ec:87:37:0f:35:c8:37:3a:b1:b8: a7:04:90:fd:e1:1f:0e:7d:45:49:22:a5:1f:de:c3: a6:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:23:9F:8A:B3:7A:AF:A8:1B:C4:56:C8:F3:A5:4B:A0:B0:4C:82:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/65d46364-fbf1-3a66-a0d0-8ced9efcbe66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 132.145.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:d8:f6:d1:57:76:2a:b2:c4:57:a8:81:1a:a1:b2:9e:4d:08: 8d:8b:34:53:06:14:f0:ea:ba:61:0b:0c:4c:6a:85:df:10:f7: 47:63:f4:7c:52:04:7e:15:9f:bf:e7:21:fa:d3:50:6c:82:c5: 15:59:dc:b3:6f:7b:eb:2e:e7:6f:27:d3:28:39:45:28:1c:9c: 2e:f0:5e:f1:ad:14:a2:7e:d4:82:49:f5:86:5f:93:4d:a3:d2: 31:ea:43:a4:64:72:4a:01:84:24:14:35:d3:ba:f1:31:b5:ec: d8:5d:ba:a2:08:2b:9a:d1:05:44:b6:fc:32:bc:9c:6f:b2:6c: f4:6c:a0:74:8f:0e:a6:bd:70:dc:3b:36:b9:d1:72:2c:ec:9f: 71:5a:bc:34:ae:d5:4e:81:ea:9e:13:38:d4:01:4d:6d:70:fd: 6a:e4:ad:28:44:28:fb:68:20:fd:21:f7:d2:d0:92:86:52:4c: ec:16:9f:68:72:df:aa:3c:ba:47:ab:de:5d:a9:24:a0:90:e8: 72:20:e6:fc:b3:af:8a:87:9b:2e:d5:1b:d9:c5:a6:8c:5a:4e: d9:71:8b:27:19:bf:b2:44:02:fc:03:85:4a:78:81:2f:2d:19: 05:f0:ca:63:83:55:4d:61:42:7d:ba:d9:ed:99:66:ee:6d:ea: aa:34:cd:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RoVvN7ayiptbMR+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk MmE1ODc5OWYtNzhmMy00ZjQzLWEyNTMtMGI2OWMzMmFhYzg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJ8tsFk3bCxuGY8WPbADMipHHdFpA672Sk7z AJr0eGpR7XZWcsJOB2pq7O8G4wOrbuX4TGpus2sCpDeEeepTMk7lrsw0+2kXV3lF Bw8mJo14lvFQKzl4QC1vN5/MZgBco2lj6mHVADY+dckTgpRgfpSXEDWi7/Jw7PYl 8IJXf998kaFDe/q4PxAmNcgjC3r0wFTbgO8fi975saCMPGdJaBxnknZrXC84OARW eBhh+ANLLt13Pj6j8pnpB+K59H+nwSowTjsioKYe4PUO8uDP4I8+RwTGGurvqI53 0TvobSDLJQR0LOyHNw81yDc6sbinBJD94R8OfUVJIqUf3sOmkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMAjn4qzeq+oG8RWyPOlS6CwTILTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNjVkNDYzNjQtZmJmMS0z YTY2LWEwZDAtOGNlZDllZmNiZTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDhJFIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHrY9tFXdiqyxFeogRqhsp5NCI2LNFMGFPDqumELDExqhd8Q90dj9HxS BH4Vn7/nIfrTUGyCxRVZ3LNve+su528n0yg5RSgcnC7wXvGtFKJ+1IJJ9YZfk02j 0jHqQ6RkckoBhCQUNdO68TG17NhduqIIK5rRBUS2/DK8nG+ybPRsoHSPDqa9cNw7 NrnRcizsn3FavDSu1U6B6p4TONQBTW1w/WrkrShEKPtoIP0h99LQkoZSTOwWn2hy 36o8uker3l2pJKCQ6HIg5vyzr4qHmy7VG9nFpoxaTtlxiycZv7JEAvwDhUp4gS8t GQXwymODVU1hQn262e2ZZu5t6qo0zUQ= -----END CERTIFICATE-----Generated at Sat Sep 26 13:41:39 2026 by rpki-client