$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b38a6c3d-c939-34be-b98d-94f5b7d3facf.roa File: b38a6c3d-c939-34be-b98d-94f5b7d3facf.roa (raw, json) Hash identifier: pOxZQplujXA16xHse6vEm5KsESfiE36Qp5clfwcGqA4= Subject key identifier: DC:F9:14:CE:FA:09:C9:9A:2D:00:3A:A5:F3:CE:2F:62:3A:E3:51:9F Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F093CD4F3EA558A9DD4050580 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b38a6c3d-c939-34be-b98d-94f5b7d3facf.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 134.70.114.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:d4:f3:ea:55:8a:9d:d4:05:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=08c4ff7f-cbbf-4f2c-95b3-2ad4a6def261 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:5c:e6:94:47:13:56:90:d2:c2:fb:0c:00:ca: 2a:f9:2d:4f:d5:80:0b:c7:57:d4:d9:9d:19:ab:15: 4a:3e:a0:30:be:ee:ec:d2:2e:a7:41:a8:4c:90:4b: c5:5e:9f:ce:7d:ef:66:69:4d:f5:47:d7:f9:ab:77: 77:12:91:dd:c2:3a:cd:3d:6b:6d:21:f9:e5:69:a9: 4d:62:00:48:64:ea:81:8f:20:26:2f:a7:9e:ee:6e: 97:05:69:03:91:29:3c:90:e9:28:82:5b:6e:08:73: 7f:1b:a7:00:65:c0:85:97:4d:00:1a:e9:71:78:8e: 50:a8:fe:e7:0e:ca:20:11:93:9f:4d:16:62:e3:9a: 15:18:05:78:d0:d1:16:26:54:2b:47:3c:05:96:9b: f2:a2:ce:96:a3:a5:66:93:20:c7:78:f7:32:47:75: 6e:9c:44:63:90:96:5c:f1:47:39:b0:97:1a:54:d4: 64:d1:ec:ef:7a:5a:ff:9a:88:a0:35:fb:4c:77:67: 20:c7:26:8e:37:0e:7a:61:88:a0:82:83:e0:33:00: 45:e1:e2:59:84:61:76:7c:12:66:80:85:9c:a3:92: 3c:7d:b4:2f:3c:0a:05:82:a4:91:15:b2:3d:4e:be: 6b:d1:ba:0a:8a:11:c8:cc:ba:12:ce:3f:ec:a7:a3: 02:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:F9:14:CE:FA:09:C9:9A:2D:00:3A:A5:F3:CE:2F:62:3A:E3:51:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b38a6c3d-c939-34be-b98d-94f5b7d3facf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.70.114.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:fd:11:48:d6:c7:50:dd:1d:4e:66:25:05:67:07:4f:73:0b: fb:29:fb:ae:5a:da:01:ab:e3:d2:2a:7d:69:d0:c3:bf:63:0b: c6:4d:ba:11:2a:3e:9b:0c:e9:d0:c9:7f:38:88:76:b1:de:12: af:e0:f6:b8:76:53:0a:0d:c5:f6:47:76:9c:9d:f0:46:1d:a4: a7:fb:ce:fc:75:0e:34:74:e7:33:74:0d:cc:45:db:57:f2:e5: 41:6e:dd:7a:15:7c:68:9d:7e:47:52:69:e8:a6:9d:24:52:25: 5e:c4:fe:97:ba:1c:e0:48:b5:c0:4f:b7:b8:e3:47:b2:1d:8d: c1:1b:8d:c4:8c:a2:8f:31:bd:1c:40:3f:75:6c:f0:83:43:f1: 22:2a:99:ea:d0:af:d9:fc:d1:3d:a6:9a:2d:f3:aa:79:d8:8e: 7c:91:55:9b:04:14:3f:00:5d:e8:1c:5b:6e:8d:b9:44:a7:24: 3f:20:7f:5d:ba:9b:ce:05:d8:a5:a8:a5:e4:ab:ea:04:d4:56: 67:6a:8d:85:9b:44:c5:40:93:56:df:71:06:a8:68:20:fd:e2: 3d:be:bf:7a:f7:51:f2:94:a8:14:cf:aa:af:95:58:3f:62:85: 2b:23:39:ad:39:2d:d6:be:9e:2a:c7:cf:9e:f4:0f:43:82:05: 22:43:1d:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPNTz6lWKndQFBYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk MDhjNGZmN2YtY2JiZi00ZjJjLTk1YjMtMmFkNGE2ZGVmMjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1zmlEcTVpDSwvsMAMoq+S1P1YALx1fU2Z0Z qxVKPqAwvu7s0i6nQahMkEvFXp/Ofe9maU31R9f5q3d3EpHdwjrNPWttIfnlaalN YgBIZOqBjyAmL6ee7m6XBWkDkSk8kOkogltuCHN/G6cAZcCFl00AGulxeI5QqP7n DsogEZOfTRZi45oVGAV40NEWJlQrRzwFlpvyos6Wo6VmkyDHePcyR3VunERjkJZc 8Uc5sJcaVNRk0ezvelr/moigNftMd2cgxyaONw56YYiggoPgMwBF4eJZhGF2fBJm gIWco5I8fbQvPAoFgqSRFbI9Tr5r0boKihHIzLoSzj/sp6MCTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNz5FM76CcmaLQA6pfPOL2I641GfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYjM4YTZjM2QtYzkzOS0z NGJlLWI5OGQtOTRmNWI3ZDNmYWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhkZyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADr9EUjWx1DdHU5mJQVnB09zC/sp+65a2gGr49IqfWnQw79jC8ZNuhEq PpsM6dDJfziIdrHeEq/g9rh2UwoNxfZHdpyd8EYdpKf7zvx1DjR05zN0DcxF21fy 5UFu3XoVfGidfkdSaeimnSRSJV7E/pe6HOBItcBPt7jjR7IdjcEbjcSMoo8xvRxA P3Vs8IND8SIqmerQr9n80T2mmi3zqnnYjnyRVZsEFD8AXegcW26NuUSnJD8gf126 m84F2KWopeSr6gTUVmdqjYWbRMVAk1bfcQaoaCD94j2+v3r3UfKUqBTPqq+VWD9i hSsjOa05Lda+nirHz570D0OCBSJDHUE= -----END CERTIFICATE-----Generated at Mon Sep 21 20:21:08 2026 by rpki-client