$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8b82b4df-845d-3894-b28e-629c1e6f6c5d.roa File: 8b82b4df-845d-3894-b28e-629c1e6f6c5d.roa (raw, json) Hash identifier: +aJ+0uIUwKUsOscn1TJIKD5ewH2ZXUUotvxbkDNPTxc= Subject key identifier: 93:3B:37:E2:BD:6D:DB:13:70:91:3A:7C:C9:ED:F5:B8:F1:99:D1:5B Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F02422039EF27B819D463BE00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8b82b4df-845d-3894-b28e-629c1e6f6c5d.roa Signing time: Sun 30 Aug 2026 13:00:11 +0000 ROA not before: Sun 30 Aug 2026 13:00:11 +0000 ROA not after: Sat 28 Nov 2026 14:00:11 +0000 asID: 31898 IP address blocks: 192.29.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:02:42:20:39:ef:27:b8:19:d4:63:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 30 13:00:11 2026 GMT Not After : Nov 28 14:00:11 2026 GMT Subject: CN=bf145c9d-3534-4a51-9281-c79f4eca0736 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:0b:9d:29:d0:c7:fa:16:72:95:cd:42:63:53: c8:91:cd:46:58:1b:94:00:48:23:85:f3:ed:68:7c: dc:c5:6e:21:e7:70:93:53:76:a4:11:82:c2:b6:12: 5b:b7:04:b8:b8:77:a4:58:fe:40:9f:50:e8:9d:23: 37:58:9a:d7:5e:1f:00:a2:99:56:cb:e5:5f:f0:83: a7:c9:37:7b:41:66:aa:6f:8c:ba:86:d4:13:16:3c: b1:2c:1b:24:d0:5f:d4:4c:85:4e:4a:e4:8b:d9:39: 4e:8f:75:a2:9a:e8:5d:90:84:46:cc:39:5c:9d:ea: 68:bc:23:5e:21:fc:c9:1d:1c:64:70:07:84:2a:4f: 61:4d:f5:03:e4:8e:24:b8:74:9e:0a:c5:5d:2b:67: 34:80:fe:ef:4f:f5:ba:5f:7e:e2:00:8e:6f:2d:37: b3:12:6d:c3:ba:a2:3b:30:b4:be:2d:8b:f4:24:61: 96:18:28:07:2f:2b:de:61:c0:3e:5c:d3:5f:d4:53: 9d:f0:71:9d:9e:e7:19:3f:4e:b0:34:5b:e5:1c:36: 56:61:fa:51:33:71:5b:57:47:21:61:34:f8:43:01: 34:0d:9d:7a:de:95:fc:56:a4:45:11:54:51:cd:68: cb:08:fc:2c:d2:c6:01:44:a7:94:34:02:03:96:08: 4a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:3B:37:E2:BD:6D:DB:13:70:91:3A:7C:C9:ED:F5:B8:F1:99:D1:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8b82b4df-845d-3894-b28e-629c1e6f6c5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 192.29.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:4e:1f:82:22:26:9e:75:20:9a:68:96:bf:a5:ea:c2:6f:c0: fa:1a:b2:d8:3f:10:73:d9:05:6a:21:c0:3f:d5:2f:49:9d:24: 5a:54:59:ef:fa:a6:38:68:49:96:54:62:1c:56:67:a7:93:9f: 2c:af:47:17:e3:1e:c3:05:3e:6b:1f:63:a6:c3:00:98:a4:a9: db:2d:f1:98:df:88:21:db:1a:54:16:0d:13:3f:c2:05:7b:b1: 31:ea:dc:df:2f:aa:2b:d1:aa:00:94:ac:7a:30:21:02:de:04: bc:a9:fd:f0:ed:26:a8:13:44:00:c9:d1:df:3e:d8:6f:aa:8d: 62:26:a5:f4:9c:05:db:5c:67:9a:f4:fd:fa:d5:e6:39:aa:e0: 91:bd:14:38:79:c6:84:5b:92:eb:20:77:c1:7d:b9:75:3e:b9: 93:e3:ec:05:7c:05:8f:05:75:e7:5e:f1:49:45:57:0d:55:67: 53:38:76:c2:ac:8b:48:bc:a5:1b:fa:25:dc:82:6a:56:9f:94: 1d:8e:e5:da:30:93:ae:7f:81:7e:ee:b0:23:47:d9:3a:b3:11: f9:7e:e7:6a:ff:5f:2a:72:25:7c:16:b8:14:02:c6:f9:fc:11: 50:5a:ed:ba:d2:8a:87:50:56:7d:2e:78:7e:65:53:3a:29:c6: be:ce:ce:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8CQiA57ye4GdRjvgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk YmYxNDVjOWQtMzUzNC00YTUxLTkyODEtYzc5ZjRlY2EwNzM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowudKdDH+hZylc1CY1PIkc1GWBuUAEgjhfPt aHzcxW4h53CTU3akEYLCthJbtwS4uHekWP5An1DonSM3WJrXXh8AoplWy+Vf8IOn yTd7QWaqb4y6htQTFjyxLBsk0F/UTIVOSuSL2TlOj3WimuhdkIRGzDlcnepovCNe IfzJHRxkcAeEKk9hTfUD5I4kuHSeCsVdK2c0gP7vT/W6X37iAI5vLTezEm3DuqI7 MLS+LYv0JGGWGCgHLyveYcA+XNNf1FOd8HGdnucZP06wNFvlHDZWYfpRM3FbV0ch YTT4QwE0DZ163pX8VqRFEVRRzWjLCPws0sYBRKeUNAIDlghKGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJM7N+K9bdsTcJE6fMnt9bjxmdFbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOGI4MmI0ZGYtODQ1ZC0z ODk0LWIyOGUtNjI5YzFlNmY2YzVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwB3QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGROH4IiJp51IJpolr+l6sJvwPoastg/EHPZBWohwD/VL0mdJFpUWe/6 pjhoSZZUYhxWZ6eTnyyvRxfjHsMFPmsfY6bDAJikqdst8ZjfiCHbGlQWDRM/wgV7 sTHq3N8vqivRqgCUrHowIQLeBLyp/fDtJqgTRADJ0d8+2G+qjWImpfScBdtcZ5r0 /frV5jmq4JG9FDh5xoRbkusgd8F9uXU+uZPj7AV8BY8Fdede8UlFVw1VZ1M4dsKs i0i8pRv6JdyCalaflB2O5dowk65/gX7usCNH2TqzEfl+52r/XypyJXwWuBQCxvn8 EVBa7brSiodQVn0ueH5lUzopxr7Ozo4= -----END CERTIFICATE-----Generated at Tue Sep 22 13:07:06 2026 by rpki-client