$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8bc3f3db-5a95-3768-96d8-2b31aac6cd03.roa File: 8bc3f3db-5a95-3768-96d8-2b31aac6cd03.roa (raw, json) Hash identifier: PA00BIqVWtpuE7A9eifImJbdWsC3fIZ+Tb3RO41uRt0= Subject key identifier: C8:FF:67:87:2A:72:A6:79:2F:2A:21:80:51:33:74:79:83:31:CE:CF Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F1B6246A87202580AE5914780 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8bc3f3db-5a95-3768-96d8-2b31aac6cd03.roa Signing time: Tue 08 Sep 2026 13:00:12 +0000 ROA not before: Tue 08 Sep 2026 13:00:12 +0000 ROA not after: Mon 07 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 147.154.64.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:62:46:a8:72:02:58:0a:e5:91:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 8 13:00:12 2026 GMT Not After : Dec 7 14:00:12 2026 GMT Subject: CN=a87b9d2e-c93e-4496-b5b2-ff81118389f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a7:4d:90:3e:ac:21:df:13:a0:2d:b0:62:26: 08:32:55:b7:1d:47:33:a0:88:d9:16:75:46:6a:63: 7c:7f:72:8f:ca:cf:ec:fb:2f:19:3f:26:2a:6e:1f: d6:44:d3:b2:1c:ad:a3:d9:70:03:f5:21:0b:ff:d5: bd:80:3e:b0:8a:40:40:e0:40:ef:e5:17:f6:75:95: 04:1f:41:24:cf:5e:ae:b7:7b:94:30:dc:a8:20:c9: af:de:3d:00:8c:fc:39:d8:da:fc:ef:1c:dc:0a:f4: 5e:79:be:68:db:69:21:aa:2c:8c:00:52:b0:29:c9: 9e:88:95:8d:a9:4c:55:6c:a0:c8:f6:55:6c:13:22: 1e:2a:08:6b:1b:d1:ae:c0:67:cd:74:fb:17:84:15: 65:bb:04:8e:91:9c:d4:66:37:89:bf:ff:20:62:25: 8d:31:51:5b:bb:14:2d:c8:0a:07:14:c0:4b:56:b3: cf:cf:0f:7a:40:6c:24:5b:4c:73:ad:76:36:e8:38: aa:49:6d:bd:fe:55:4a:c0:21:6f:60:25:c9:84:d1: af:32:d4:7f:1a:c4:57:48:05:29:3b:b9:75:ef:87: a5:5a:f3:e0:76:25:16:f3:b1:67:4d:95:58:92:5b: 6e:65:ae:08:fb:23:05:41:16:de:80:c4:13:82:7e: 18:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:FF:67:87:2A:72:A6:79:2F:2A:21:80:51:33:74:79:83:31:CE:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8bc3f3db-5a95-3768-96d8-2b31aac6cd03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 147.154.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:14:b7:85:52:91:23:e7:9f:81:63:4c:53:69:68:65:b0:28: 5e:80:a2:e5:25:a5:7e:46:75:62:c2:4b:4f:c8:b7:d8:63:8f: de:31:b8:63:53:16:ca:00:0c:4a:54:19:72:d0:64:55:30:be: 6e:33:25:7f:aa:a7:8f:e3:3b:56:11:f0:7e:a4:45:64:e2:fd: a8:51:5c:34:c6:7d:57:d3:aa:ee:3a:f7:81:80:07:21:92:83: d0:5f:72:01:d2:ea:75:5e:83:49:27:5e:9a:9c:1e:80:ac:24: 15:20:12:b1:14:34:5e:0e:4c:7b:1a:b4:4f:bd:06:7e:eb:78: e6:20:50:be:b0:7f:80:5a:fc:c3:78:19:99:54:76:99:1a:ae: 81:f6:0e:0d:c6:b2:e1:7a:b2:34:b7:56:49:6e:be:06:75:26: db:29:08:98:c5:3d:a2:2c:0e:2f:1a:61:d6:32:9c:27:4a:ee: e0:b4:06:8c:d4:d2:2e:7c:e8:37:3b:db:10:cf:1e:b9:0b:b0: 54:9d:e9:80:80:ca:14:12:74:28:60:2e:a0:ed:6f:fe:83:db: 75:b9:12:39:dd:b0:18:92:e4:79:97:34:b6:1e:ab:cb:7f:99: c3:ab:75:fb:c7:d4:0f:55:27:6f:b4:50:68:e3:90:8a:eb:26: 4b:5d:a7:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8bYkaocgJYCuWRR4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwODEzMDAxMloXDTI2MTIwNzE0MDAxMlowLzEtMCsGA1UEAxMk YTg3YjlkMmUtYzkzZS00NDk2LWI1YjItZmY4MTExODM4OWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6dNkD6sId8ToC2wYiYIMlW3HUczoIjZFnVG amN8f3KPys/s+y8ZPyYqbh/WRNOyHK2j2XAD9SEL/9W9gD6wikBA4EDv5Rf2dZUE H0Ekz16ut3uUMNyoIMmv3j0AjPw52Nr87xzcCvReeb5o22khqiyMAFKwKcmeiJWN qUxVbKDI9lVsEyIeKghrG9GuwGfNdPsXhBVluwSOkZzUZjeJv/8gYiWNMVFbuxQt yAoHFMBLVrPPzw96QGwkW0xzrXY26DiqSW29/lVKwCFvYCXJhNGvMtR/GsRXSAUp O7l174elWvPgdiUW87FnTZVYkltuZa4I+yMFQRbegMQTgn4YbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMj/Z4cqcqZ5LyohgFEzdHmDMc7PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOGJjM2YzZGItNWE5NS0z NzY4LTk2ZDgtMmIzMWFhYzZjZDAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDk5pAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI8Ut4VSkSPnn4FjTFNpaGWwKF6AouUlpX5GdWLCS0/It9hjj94xuGNT FsoADEpUGXLQZFUwvm4zJX+qp4/jO1YR8H6kRWTi/ahRXDTGfVfTqu4694GAByGS g9BfcgHS6nVeg0knXpqcHoCsJBUgErEUNF4OTHsatE+9Bn7reOYgUL6wf4Ba/MN4 GZlUdpkaroH2Dg3GsuF6sjS3VkluvgZ1JtspCJjFPaIsDi8aYdYynCdK7uC0BozU 0i586Dc72xDPHrkLsFSd6YCAyhQSdChgLqDtb/6D23W5EjndsBiS5HmXNLYeq8t/ mcOrdfvH1A9VJ2+0UGjjkIrrJktdp7w= -----END CERTIFICATE-----Generated at Mon Sep 21 09:22:11 2026 by rpki-client