$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9e673f2a-1dbe-32e9-9b51-578abbc51fa1.roa File: 9e673f2a-1dbe-32e9-9b51-578abbc51fa1.roa (raw, json) Hash identifier: kZJEEN+QaNnt1yv/umIr4hxYdRbCwTK7Mgqy2bgEDvU= Subject key identifier: 75:4F:83:DA:1B:04:E4:D3:DC:31:43:B5:26:8D:73:A1:C8:11:7B:CA Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F0ED22F8E681E70C804E188F0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9e673f2a-1dbe-32e9-9b51-578abbc51fa1.roa Signing time: Fri 04 Sep 2026 01:00:12 +0000 ROA not before: Fri 04 Sep 2026 01:00:12 +0000 ROA not after: Thu 03 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 168.129.184.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0e:d2:2f:8e:68:1e:70:c8:04:e1:88:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 4 01:00:12 2026 GMT Not After : Dec 3 02:00:12 2026 GMT Subject: CN=b9ecce1c-f02b-46e2-9782-57b1a178d128 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:34:e4:bf:de:e7:38:68:77:c8:52:8e:72:2d: 66:3e:df:0c:54:b8:04:e6:76:36:21:be:73:c5:bf: e6:48:5c:be:cb:d7:6f:44:ad:d0:da:65:48:29:dd: 83:79:26:40:8a:96:d7:e9:f3:1b:ea:56:41:89:10: c5:90:3f:fa:dc:19:b2:6c:de:4b:12:1a:19:c4:9a: c3:45:fc:95:ec:5c:30:a6:c4:d0:33:1d:26:5e:cb: e6:87:12:e3:7d:eb:2d:a3:70:7c:1c:bf:b5:3a:57: 53:bc:f5:3e:db:e2:bc:1a:b6:b9:33:83:d9:4f:3a: 8b:50:46:ef:7e:b4:13:d5:71:d5:06:44:d8:34:7a: f6:cf:db:e6:4f:cd:6e:3c:32:77:58:94:63:23:75: 46:df:4f:c6:a4:0a:7b:ac:84:8c:82:0c:13:ad:f7: c7:94:cf:3e:03:0b:f0:62:bb:15:a8:a6:ec:52:17: bc:09:fc:91:21:40:0b:0e:9d:fa:d9:02:0f:f8:b1: 3c:d2:e2:ef:64:07:03:45:b7:7c:7f:7b:8c:72:01: 1a:ff:69:00:b7:e9:5c:6c:1d:ee:d6:3b:43:b3:2a: 05:70:0c:44:1e:d9:40:5f:e4:cd:4b:68:a6:09:92: 6f:dc:cf:a7:29:3c:17:12:0c:ae:75:2b:27:06:a3: 52:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:4F:83:DA:1B:04:E4:D3:DC:31:43:B5:26:8D:73:A1:C8:11:7B:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9e673f2a-1dbe-32e9-9b51-578abbc51fa1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.129.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:15:dd:e0:a5:6c:57:78:cc:90:9e:d1:eb:c5:80:c4:76:03: 7d:e0:bc:49:85:31:cb:2f:5c:66:17:bb:47:92:bf:53:77:c5: 2c:c8:6c:61:c2:d1:02:0b:f2:09:8b:cc:89:49:09:fc:85:05: d5:3a:d6:b6:5c:a5:85:83:cc:77:b9:69:41:01:b7:dc:47:ee: 0a:aa:75:62:da:f7:1f:e8:e5:38:fe:04:37:fb:77:e8:f0:28: 79:8a:43:fd:4a:39:de:cb:ee:56:aa:68:c4:92:fc:96:fe:9f: b0:49:71:29:ac:0e:99:58:f1:99:73:ca:04:18:c9:97:9e:72: b6:7e:92:c0:a9:28:d9:64:9f:42:fe:f3:15:40:37:d8:15:1d: 81:1d:05:e2:39:62:98:96:fc:7e:2d:09:56:91:97:64:c7:6b: 9d:2d:56:b7:eb:9c:71:8d:c1:14:cc:96:59:f5:73:6b:55:6e: 9f:1b:81:16:8e:80:88:71:a9:c2:77:14:d3:c5:a4:3e:ca:5d: 24:5d:e4:1f:f6:09:b4:93:c8:f8:b5:32:0c:da:01:55:ee:be: d3:b1:d2:99:80:9d:99:43:2b:91:88:2b:9e:af:97:65:d7:13: 5b:37:17:55:60:b5:a1:41:e5:1e:d1:31:ab:08:11:2d:7f:95: 38:19:a0:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8O0i+OaB5wyAThiPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNDAxMDAxMloXDTI2MTIwMzAyMDAxMlowLzEtMCsGA1UEAxMk YjllY2NlMWMtZjAyYi00NmUyLTk3ODItNTdiMWExNzhkMTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizTkv97nOGh3yFKOci1mPt8MVLgE5nY2Ib5z xb/mSFy+y9dvRK3Q2mVIKd2DeSZAipbX6fMb6lZBiRDFkD/63BmybN5LEhoZxJrD RfyV7FwwpsTQMx0mXsvmhxLjfesto3B8HL+1OldTvPU+2+K8Gra5M4PZTzqLUEbv frQT1XHVBkTYNHr2z9vmT81uPDJ3WJRjI3VG30/GpAp7rISMggwTrffHlM8+Awvw YrsVqKbsUhe8CfyRIUALDp362QIP+LE80uLvZAcDRbd8f3uMcgEa/2kAt+lcbB3u 1jtDsyoFcAxEHtlAX+TNS2imCZJv3M+nKTwXEgyudSsnBqNS8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHVPg9obBOTT3DFDtSaNc6HIEXvKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOWU2NzNmMmEtMWRiZS0z MmU5LTliNTEtNTc4YWJiYzUxZmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqIG4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADQV3eClbFd4zJCe0evFgMR2A33gvEmFMcsvXGYXu0eSv1N3xSzIbGHC 0QIL8gmLzIlJCfyFBdU61rZcpYWDzHe5aUEBt9xH7gqqdWLa9x/o5Tj+BDf7d+jw KHmKQ/1KOd7L7laqaMSS/Jb+n7BJcSmsDplY8ZlzygQYyZeecrZ+ksCpKNlkn0L+ 8xVAN9gVHYEdBeI5YpiW/H4tCVaRl2THa50tVrfrnHGNwRTMlln1c2tVbp8bgRaO gIhxqcJ3FNPFpD7KXSRd5B/2CbSTyPi1MgzaAVXuvtOx0pmAnZlDK5GIK56vl2XX E1s3F1VgtaFB5R7RMasIES1/lTgZoI8= -----END CERTIFICATE-----Generated at Tue Sep 22 05:27:38 2026 by rpki-client