$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/825bd0b3-8b81-36b6-a918-a3192e7058dc.roa File: 825bd0b3-8b81-36b6-a918-a3192e7058dc.roa (raw, json) Hash identifier: TrjqGs9OHCIJe0YPRHOCxI7X/MPgU0Bn26KALpDBswQ= Subject key identifier: 8E:E1:AA:75:65:FC:91:95:1E:31:03:38:B4:2E:3C:AD:39:74:8F:09 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F1037A5CE0047CB038F51D1FA Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/825bd0b3-8b81-36b6-a918-a3192e7058dc.roa Signing time: Fri 04 Sep 2026 13:00:12 +0000 ROA not before: Fri 04 Sep 2026 13:00:12 +0000 ROA not after: Thu 03 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 134.70.130.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:10:37:a5:ce:00:47:cb:03:8f:51:d1:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 4 13:00:12 2026 GMT Not After : Dec 3 14:00:12 2026 GMT Subject: CN=ded7a7a2-31a8-4622-abe2-2c1087d87b3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e3:9a:09:80:57:6a:49:a4:5f:48:55:56:0e: 8e:b2:94:af:1c:86:1d:89:6a:ac:0c:c6:39:b3:e8: 34:99:a2:bc:c4:ab:a7:75:46:a7:fc:ec:f7:24:95: 36:80:d5:c1:a6:78:55:f1:c8:8e:84:a2:7d:e7:04: db:a9:fe:86:c9:2c:ec:7e:02:eb:7f:6e:49:fc:d7: 53:bc:fb:94:ac:00:a1:00:67:7c:11:7b:74:64:65: 3b:3b:da:68:b9:69:db:22:67:3c:3c:c6:4e:6c:59: 4b:f0:41:2f:f4:c6:07:bd:18:24:76:43:96:66:25: c5:01:d6:ef:4b:90:a9:f9:87:b7:47:d3:5a:aa:a3: 0f:9f:09:78:2e:03:db:53:f2:dd:8e:99:5b:23:dd: 9d:6e:85:27:96:43:48:58:c1:9a:06:e9:c6:09:29: 2b:46:3a:18:80:82:37:e1:f7:1c:40:38:08:7e:58: 1b:0e:e1:94:c0:b2:04:52:6c:a2:6e:33:94:64:f2: 8e:ba:55:bb:a3:53:50:2d:eb:c9:a9:7a:03:ef:00: 9b:11:b3:db:49:9e:08:11:1e:f7:f4:13:1b:33:b6: c7:d6:cc:68:49:97:31:80:a9:10:6e:2b:e1:4b:2b: 6d:71:e1:1d:73:2e:71:b4:0c:42:bc:59:cb:29:36: 56:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:E1:AA:75:65:FC:91:95:1E:31:03:38:B4:2E:3C:AD:39:74:8F:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/825bd0b3-8b81-36b6-a918-a3192e7058dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.70.130.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:e2:f7:4d:ae:4f:71:d1:25:d8:2c:ef:c8:1d:cc:59:30:8c: 2b:10:41:b2:22:e4:c6:da:91:8a:3b:46:18:0d:96:a1:3e:5b: b4:c2:f7:d8:68:d4:1a:bb:4d:03:7a:c2:32:f4:f9:fc:d5:4f: 47:36:e0:8a:97:41:1f:7f:f1:1e:ad:79:78:14:7b:e9:58:3d: 27:dc:98:1d:5c:91:3c:6f:f0:bf:5a:51:93:88:35:ef:a5:27: 59:7d:95:74:a2:6d:f1:04:22:2d:83:9f:89:f2:3c:b2:fa:22: be:66:52:df:7f:65:68:d3:12:ad:ec:8d:22:f1:62:91:1f:26: 2f:99:46:eb:e1:87:03:76:dc:ce:5e:70:f1:fe:c3:de:87:2a: d2:a5:c8:11:1b:79:43:09:c5:c2:fc:63:3e:58:f3:6d:7a:ab: 13:cd:ea:30:38:01:1b:1d:f1:0b:d9:76:18:00:cc:b6:a4:24: 91:ce:30:57:ab:77:84:97:98:95:3b:21:a3:2b:37:16:87:d5: 47:ec:d8:d5:23:dd:16:ae:b9:5d:37:af:53:40:b9:47:ae:a1: c5:20:e1:24:45:e8:a2:5f:ca:9b:18:d6:27:64:a1:c2:5f:24: 11:95:5b:d4:1e:f6:12:26:b5:82:01:9a:83:ba:bf:8b:88:07: f4:fb:51:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8QN6XOAEfLA49R0fowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNDEzMDAxMloXDTI2MTIwMzE0MDAxMlowLzEtMCsGA1UEAxMk ZGVkN2E3YTItMzFhOC00NjIyLWFiZTItMmMxMDg3ZDg3YjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeOaCYBXakmkX0hVVg6OspSvHIYdiWqsDMY5 s+g0maK8xKundUan/Oz3JJU2gNXBpnhV8ciOhKJ95wTbqf6GySzsfgLrf25J/NdT vPuUrAChAGd8EXt0ZGU7O9pouWnbImc8PMZObFlL8EEv9MYHvRgkdkOWZiXFAdbv S5Cp+Ye3R9NaqqMPnwl4LgPbU/LdjplbI92dboUnlkNIWMGaBunGCSkrRjoYgII3 4fccQDgIflgbDuGUwLIEUmyibjOUZPKOulW7o1NQLevJqXoD7wCbEbPbSZ4IER73 9BMbM7bH1sxoSZcxgKkQbivhSyttceEdcy5xtAxCvFnLKTZWKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI7hqnVl/JGVHjEDOLQuPK05dI8JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvODI1YmQwYjMtOGI4MS0z NmI2LWE5MTgtYTMxOTJlNzA1OGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhkaCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADbi902uT3HRJdgs78gdzFkwjCsQQbIi5MbakYo7RhgNlqE+W7TC99ho 1Bq7TQN6wjL0+fzVT0c24IqXQR9/8R6teXgUe+lYPSfcmB1ckTxv8L9aUZOINe+l J1l9lXSibfEEIi2Dn4nyPLL6Ir5mUt9/ZWjTEq3sjSLxYpEfJi+ZRuvhhwN23M5e cPH+w96HKtKlyBEbeUMJxcL8Yz5Y8216qxPN6jA4ARsd8QvZdhgAzLakJJHOMFer d4SXmJU7IaMrNxaH1Ufs2NUj3RauuV03r1NAuUeuocUg4SRF6KJfypsY1idkocJf JBGVW9Qe9hImtYIBmoO6v4uIB/T7UdM= -----END CERTIFICATE-----Generated at Tue Sep 22 13:21:57 2026 by rpki-client