$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/95214554-aa85-3bbc-abf0-3612bda2be04.roa File: 95214554-aa85-3bbc-abf0-3612bda2be04.roa (raw, json) Hash identifier: Poz8qUPsyu+YL1n9uRcOP9qnrBd1r8eTN7kXq+b7wac= Subject key identifier: 11:E6:E7:03:11:C2:4E:92:CE:06:08:D8:B3:0C:73:3C:48:FC:61:E3 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F11A14F442C186FB0302FA080 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/95214554-aa85-3bbc-abf0-3612bda2be04.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 137.131.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:a1:4f:44:2c:18:6f:b0:30:2f:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=50bccc56-7855-4c69-9e65-646d0fdcafb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a7:37:4b:8e:4c:d7:71:37:0e:08:ca:d5:61: f4:82:6f:f9:83:2c:d3:0c:d6:b9:73:ec:ad:17:23: bb:9b:46:ba:2d:27:fb:67:e4:76:20:1f:a5:e3:4a: 3e:26:be:b1:1d:04:72:e3:61:c6:07:a2:7b:5c:7b: d9:2f:8b:d5:39:1c:23:2c:90:c6:a1:79:28:83:26: f7:c1:2f:fe:a7:94:e3:1f:bc:c9:6d:aa:ce:b7:5a: ba:f3:84:b5:ad:b0:26:31:fb:14:97:63:5c:a6:c8: 5a:3d:22:ad:77:84:1c:d1:07:85:d4:7c:03:db:c7: 49:e9:54:2f:d8:c2:91:d8:fc:da:dc:18:1a:12:19: 22:99:f7:c0:b9:fb:15:c9:05:12:26:e5:39:f7:c3: 64:bf:0e:1b:ea:b1:6d:ae:fe:4d:bc:ea:b8:1d:7f: ed:ca:24:60:e7:e8:10:18:0a:ab:bd:33:b8:3d:03: 8d:f5:65:ca:bb:0a:53:ae:dc:ef:18:3f:f4:af:7d: 2b:37:b2:2a:9a:73:fb:2e:79:a1:9e:be:81:61:f0: 07:7d:86:31:2b:84:e4:64:7f:15:64:2c:ae:95:4d: 33:d7:b5:97:a6:d3:5b:38:41:cb:ac:b2:02:ee:f4: bf:f1:82:ff:4d:07:78:1e:3d:a7:7b:b0:98:18:3d: 9a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:E6:E7:03:11:C2:4E:92:CE:06:08:D8:B3:0C:73:3C:48:FC:61:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/95214554-aa85-3bbc-abf0-3612bda2be04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 137.131.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:0b:78:16:4d:66:60:e1:4f:e5:70:a4:24:ec:82:01:1b:2e: 64:b7:fc:ac:8c:1c:28:04:5d:12:ba:dc:cb:89:87:15:d9:98: 8b:b9:18:1a:84:60:55:1a:ec:7c:87:7b:c1:8f:6c:bf:e3:53: f0:77:56:01:b2:6a:46:b4:b6:ac:84:a4:f2:56:63:f8:fd:17: 72:7f:8f:78:30:bb:71:0c:e4:b0:08:dc:bf:1a:b5:8a:d6:0b: 7f:b2:a6:e6:ca:60:3d:06:2e:3e:f4:23:04:71:18:1d:9e:94: a7:ce:49:8a:20:46:65:86:1e:ce:03:11:f4:15:af:11:93:60: 35:16:ba:e0:e6:55:2c:f2:89:32:57:de:df:b5:92:71:eb:71: 3d:b0:34:5c:0a:1f:1d:03:b3:8e:5c:87:eb:cc:89:e8:44:cd: bc:02:84:bd:1a:3c:0f:9e:88:e3:c5:7d:e9:c6:db:92:04:1f: c5:8f:b1:ff:16:26:e9:d4:c5:ef:b8:0f:10:31:f7:25:02:13: 6d:48:e5:14:ce:a5:bf:bd:6d:0e:30:16:71:94:71:87:97:38: 00:e5:49:35:92:66:7e:ce:6b:e0:a3:8e:72:b1:55:a0:5f:f8: ed:0b:90:a4:de:b3:42:1c:05:05:32:cc:8b:88:fe:f0:b7:a0: 66:fc:57:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RoU9ELBhvsDAvoIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk NTBiY2NjNTYtNzg1NS00YzY5LTllNjUtNjQ2ZDBmZGNhZmIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6c3S45M13E3DgjK1WH0gm/5gyzTDNa5c+yt FyO7m0a6LSf7Z+R2IB+l40o+Jr6xHQRy42HGB6J7XHvZL4vVORwjLJDGoXkogyb3 wS/+p5TjH7zJbarOt1q684S1rbAmMfsUl2NcpshaPSKtd4Qc0QeF1HwD28dJ6VQv 2MKR2Pza3BgaEhkimffAufsVyQUSJuU598Nkvw4b6rFtrv5NvOq4HX/tyiRg5+gQ GAqrvTO4PQON9WXKuwpTrtzvGD/0r30rN7IqmnP7Lnmhnr6BYfAHfYYxK4TkZH8V ZCyulU0z17WXptNbOEHLrLIC7vS/8YL/TQd4Hj2ne7CYGD2aBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBHm5wMRwk6SzgYI2LMMczxI/GHjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOTUyMTQ1NTQtYWE4NS0z YmJjLWFiZjAtMzYxMmJkYTJiZTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHiYOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJcLeBZNZmDhT+VwpCTsggEbLmS3/KyMHCgEXRK63MuJhxXZmIu5GBqE YFUa7HyHe8GPbL/jU/B3VgGyaka0tqyEpPJWY/j9F3J/j3gwu3EM5LAI3L8atYrW C3+ypubKYD0GLj70IwRxGB2elKfOSYogRmWGHs4DEfQVrxGTYDUWuuDmVSzyiTJX 3t+1knHrcT2wNFwKHx0Ds45ch+vMiehEzbwChL0aPA+eiOPFfenG25IEH8WPsf8W JunUxe+4DxAx9yUCE21I5RTOpb+9bQ4wFnGUcYeXOADlSTWSZn7Oa+CjjnKxVaBf +O0LkKTes0IcBQUyzIuI/vC3oGb8V5Y= -----END CERTIFICATE-----Generated at Mon Sep 21 17:12:53 2026 by rpki-client