$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/98845c1e-8e53-35c4-af2b-c88cd9de6718.roa File: 98845c1e-8e53-35c4-af2b-c88cd9de6718.roa (raw, json) Hash identifier: dP6gbDFvbxLduMFChvNNcPpXvSR85CP7Cb+XG/e898Q= Subject key identifier: F7:16:D4:C6:23:41:C4:B3:92:A2:07:C6:74:9E:AF:B7:D9:5B:2C:53 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F1B62479BD99ACB4114341A80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/98845c1e-8e53-35c4-af2b-c88cd9de6718.roa Signing time: Tue 08 Sep 2026 13:00:12 +0000 ROA not before: Tue 08 Sep 2026 13:00:12 +0000 ROA not after: Mon 07 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 168.129.66.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:62:47:9b:d9:9a:cb:41:14:34:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 8 13:00:12 2026 GMT Not After : Dec 7 14:00:12 2026 GMT Subject: CN=8ebd212e-b8af-417d-bfa5-692509b9853b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:af:d1:01:76:0e:99:68:0e:e2:83:8d:8d:52: ca:e0:c5:60:54:c0:db:87:1c:da:f3:d4:60:ee:66: 31:34:4c:1e:fe:f6:2f:3d:80:0b:29:35:31:7a:88: af:53:69:67:81:89:62:28:da:02:e6:f2:ce:26:81: 92:e3:f3:e0:5c:d6:7b:04:b5:64:da:bb:64:11:8a: 15:7b:a8:a4:c6:9a:e8:ea:b9:65:1e:56:49:d7:12: 38:21:32:bf:78:59:dc:f7:d4:9a:7b:41:5c:59:83: f7:b2:ee:7e:5b:e6:d9:62:03:eb:37:91:9b:13:ca: f4:98:d6:88:d0:67:22:0a:7d:bc:a2:0d:6c:55:97: 31:a5:e8:53:df:09:af:11:13:d2:c5:d9:3f:eb:c8: 19:8d:29:7c:61:4f:7c:d6:85:d7:48:b7:ee:64:1b: 08:ee:8c:0a:f4:0f:ae:df:f4:78:eb:cb:20:e3:d7: d4:96:dd:79:88:b6:93:3f:b7:a5:10:ea:2f:fb:3e: ac:a4:2b:9c:b7:b4:c7:95:ea:88:63:bc:5f:06:28: 68:2f:18:4e:9f:9b:58:9a:9b:2f:87:47:b3:3d:0c: 2e:ca:17:b5:c0:86:3c:5d:99:65:42:5f:6a:e8:3e: 81:13:84:95:81:c1:d8:b3:41:ad:d0:42:79:16:58: f1:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:16:D4:C6:23:41:C4:B3:92:A2:07:C6:74:9E:AF:B7:D9:5B:2C:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/98845c1e-8e53-35c4-af2b-c88cd9de6718.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.129.66.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:16:bd:96:93:9c:c0:4b:a2:cd:ae:b5:91:f2:46:66:05:ba: bd:03:ff:2f:b8:b8:07:d6:24:9b:64:68:d1:b3:c0:66:cd:78: ae:34:14:88:b0:5d:1f:54:11:c5:37:a3:df:a9:17:5e:b1:49: 87:66:65:cf:ae:dd:88:94:84:ef:51:4b:f3:55:ac:c1:a1:b8: f9:2f:44:7b:1f:ac:aa:e0:c6:62:b3:0f:99:2e:ab:e7:0d:0d: f3:67:89:98:66:55:9e:99:0e:1b:e3:a8:c7:0f:57:8e:28:8a: d5:b5:a1:ca:c4:5e:55:3d:58:9b:34:e8:6c:7c:99:1e:a2:95: 79:d2:e3:6a:0c:3e:bf:0c:f5:28:5f:86:87:ff:c3:26:18:02: b5:d5:cd:45:a8:8b:90:5c:e3:2d:34:cc:ad:70:f6:6d:e9:07: 90:88:67:86:ff:1f:ad:72:dc:df:8c:50:7a:46:81:90:94:37: cc:0f:f5:5a:7d:34:d5:20:f7:e6:5f:c3:43:79:28:45:16:de: 69:34:42:45:a8:2e:fa:70:3a:bb:e2:1b:5b:8f:91:d1:ba:a8: c9:b5:d9:66:69:b8:ad:b0:14:1c:81:3f:2c:80:79:8a:65:6c: 3c:e0:79:15:66:0d:81:ea:28:86:c9:d1:b8:b4:b9:24:39:41: c1:1f:40:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8bYkeb2ZrLQRQ0GoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwODEzMDAxMloXDTI2MTIwNzE0MDAxMlowLzEtMCsGA1UEAxMk OGViZDIxMmUtYjhhZi00MTdkLWJmYTUtNjkyNTA5Yjk4NTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAra/RAXYOmWgO4oONjVLK4MVgVMDbhxza89Rg 7mYxNEwe/vYvPYALKTUxeoivU2lngYliKNoC5vLOJoGS4/PgXNZ7BLVk2rtkEYoV e6ikxpro6rllHlZJ1xI4ITK/eFnc99Sae0FcWYP3su5+W+bZYgPrN5GbE8r0mNaI 0GciCn28og1sVZcxpehT3wmvERPSxdk/68gZjSl8YU981oXXSLfuZBsI7owK9A+u 3/R468sg49fUlt15iLaTP7elEOov+z6spCuct7THleqIY7xfBihoLxhOn5tYmpsv h0ezPQwuyhe1wIY8XZllQl9q6D6BE4SVgcHYs0Gt0EJ5FljxbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPcW1MYjQcSzkqIHxnSer7fZWyxTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOTg4NDVjMWUtOGU1My0z NWM0LWFmMmItYzg4Y2Q5ZGU2NzE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqIFCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJoWvZaTnMBLos2utZHyRmYFur0D/y+4uAfWJJtkaNGzwGbNeK40FIiw XR9UEcU3o9+pF16xSYdmZc+u3YiUhO9RS/NVrMGhuPkvRHsfrKrgxmKzD5kuq+cN DfNniZhmVZ6ZDhvjqMcPV44oitW1ocrEXlU9WJs06Gx8mR6ilXnS42oMPr8M9Shf hof/wyYYArXVzUWoi5Bc4y00zK1w9m3pB5CIZ4b/H61y3N+MUHpGgZCUN8wP9Vp9 NNUg9+Zfw0N5KEUW3mk0QkWoLvpwOrviG1uPkdG6qMm12WZpuK2wFByBPyyAeYpl bDzgeRVmDYHqKIbJ0bi0uSQ5QcEfQKU= -----END CERTIFICATE-----Generated at Tue Sep 22 18:58:34 2026 by rpki-client