$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/84f9b7d5-4e53-35ad-9b20-8e248c4d01ce.roa File: 84f9b7d5-4e53-35ad-9b20-8e248c4d01ce.roa (raw, json) Hash identifier: 70UZQfKmdA3hggRK3BN0X9ChgbXJpiWKHFFdshK94UA= Subject key identifier: B7:6D:98:B0:58:B9:4C:3E:95:D6:28:F0:40:05:55:F9:CB:E1:6D:EB Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F119CFDB3B1408E702C977400 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/84f9b7d5-4e53-35ad-9b20-8e248c4d01ce.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 146.235.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9c:fd:b3:b1:40:8e:70:2c:97:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=d8bd1abc-1a81-4bbb-8f57-8d45f5532e65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:90:da:b1:36:6d:9e:aa:8e:1e:12:c3:9e:98: f1:a9:b7:76:1f:44:9e:f3:74:8c:a5:c6:bc:14:b5: ea:e6:17:8e:e4:04:e0:15:10:6d:71:dd:8f:47:c5: 88:81:33:5c:e4:7a:17:9d:5a:a4:dd:e1:ea:60:ac: 76:95:20:1e:8e:4f:bf:13:de:9f:72:fd:83:dd:10: f3:cf:06:15:79:5d:2d:d4:ae:03:33:d1:20:fc:73: 29:11:ce:ce:01:bb:16:d2:30:b4:fe:8c:3a:f3:91: bd:b1:5b:af:0a:a7:17:ea:b1:16:7f:00:0a:a3:4f: 72:98:00:57:c4:d5:9b:c9:a0:4c:6d:2c:87:b4:b6: 50:5b:65:6a:59:64:c9:34:0d:47:98:84:a5:b0:62: fd:9d:9c:15:a8:3f:f8:50:27:2f:18:b7:f9:65:85: 8e:62:c7:16:37:b8:a8:5a:88:6e:3b:db:a7:4d:69: f1:1e:36:ef:40:23:75:13:1e:3a:73:6a:ea:11:8f: 67:0b:6f:e1:a6:98:22:1c:46:87:6b:98:be:3f:7e: 3b:07:e0:41:eb:0e:ba:18:b3:f2:47:8f:56:b8:38: b8:ed:d2:b7:89:9a:70:43:ff:fc:8b:6e:80:33:01: ed:4d:31:44:96:76:06:8f:66:4c:f2:d6:14:ff:79: 08:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:6D:98:B0:58:B9:4C:3E:95:D6:28:F0:40:05:55:F9:CB:E1:6D:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/84f9b7d5-4e53-35ad-9b20-8e248c4d01ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 146.235.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:3a:9f:23:e1:35:17:5d:0a:19:c5:59:ed:a6:b7:bf:d7:0f: ce:92:75:21:1d:f7:7b:b4:4c:eb:e7:92:c5:d3:c6:ce:ff:06: b0:29:49:96:d9:59:2d:dd:34:c0:55:94:36:c0:c1:84:d7:46: e4:02:59:47:7f:79:bc:a9:84:a0:49:16:c0:11:77:39:00:86: af:b1:94:02:91:2d:dd:bf:2c:7d:3f:7f:0a:12:10:d6:07:da: 9d:5a:1b:95:9d:3d:ee:ca:36:8b:66:71:47:eb:67:e1:3d:8f: 39:ad:d6:58:df:10:a3:aa:1c:4e:cd:90:80:b6:b2:5a:67:a1: 3e:2e:e7:fc:82:20:aa:7e:fc:03:ec:17:7d:0e:7b:01:45:53: 52:37:93:6b:b1:14:22:31:51:bd:14:66:ac:8d:89:dc:04:db: 41:18:81:16:78:0e:22:d6:ba:63:bb:98:fa:b0:6a:0e:72:21: 7e:0d:33:1d:57:ce:3a:29:10:57:67:5d:4c:85:29:ed:4f:57: db:55:bd:eb:85:5d:ea:b0:91:25:b8:8b:84:e5:5b:82:63:06: a8:9e:9a:c4:02:69:7f:ee:31:42:62:38:26:04:78:fb:0f:71: c7:af:ab:93:ae:cf:4c:29:33:6b:11:33:f8:c5:4d:c3:3b:4f: 0d:2d:f2:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnP2zsUCOcCyXdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDhiZDFhYmMtMWE4MS00YmJiLThmNTctOGQ0NWY1NTMyZTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZDasTZtnqqOHhLDnpjxqbd2H0Se83SMpca8 FLXq5heO5ATgFRBtcd2PR8WIgTNc5HoXnVqk3eHqYKx2lSAejk+/E96fcv2D3RDz zwYVeV0t1K4DM9Eg/HMpEc7OAbsW0jC0/ow685G9sVuvCqcX6rEWfwAKo09ymABX xNWbyaBMbSyHtLZQW2VqWWTJNA1HmISlsGL9nZwVqD/4UCcvGLf5ZYWOYscWN7io WohuO9unTWnxHjbvQCN1Ex46c2rqEY9nC2/hppgiHEaHa5i+P347B+BB6w66GLPy R49WuDi47dK3iZpwQ//8i26AMwHtTTFElnYGj2ZM8tYU/3kIbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLdtmLBYuUw+ldYo8EAFVfnL4W3rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvODRmOWI3ZDUtNGU1My0z NWFkLTliMjAtOGUyNDhjNGQwMWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEkuvgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAU6nyPhNRddChnFWe2mt7/XD86SdSEd93u0TOvnksXTxs7/BrApSZbZ WS3dNMBVlDbAwYTXRuQCWUd/ebyphKBJFsARdzkAhq+xlAKRLd2/LH0/fwoSENYH 2p1aG5WdPe7KNotmcUfrZ+E9jzmt1ljfEKOqHE7NkIC2slpnoT4u5/yCIKp+/APs F30OewFFU1I3k2uxFCIxUb0UZqyNidwE20EYgRZ4DiLWumO7mPqwag5yIX4NMx1X zjopEFdnXUyFKe1PV9tVveuFXeqwkSW4i4TlW4JjBqiemsQCaX/uMUJiOCYEePsP ccevq5Ouz0wpM2sRM/jFTcM7Tw0t8oA= -----END CERTIFICATE-----Generated at Mon Sep 21 09:23:54 2026 by rpki-client