$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bb9123e7-70b3-3eb6-86b8-22385461c2e5.roa File: bb9123e7-70b3-3eb6-86b8-22385461c2e5.roa (raw, json) Hash identifier: VG2y1P+IiIj7/E1TdzDGjUC6D2F/V8E6OavOoWIFmfY= Subject key identifier: 95:8E:50:C2:D8:DE:19:5D:AB:92:D3:CC:20:EB:D2:D0:A8:75:49:4C Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F10BDA89DF186E6F0EF374140 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bb9123e7-70b3-3eb6-86b8-22385461c2e5.roa Signing time: Fri 04 Sep 2026 17:30:31 +0000 ROA not before: Fri 04 Sep 2026 17:30:31 +0000 ROA not after: Thu 03 Dec 2026 18:30:31 +0000 asID: 31898 IP address blocks: 147.5.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:10:bd:a8:9d:f1:86:e6:f0:ef:37:41:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 4 17:30:31 2026 GMT Not After : Dec 3 18:30:31 2026 GMT Subject: CN=29b422d5-01cf-47a4-8384-97b0d2ffad48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:94:25:70:52:64:48:ae:ab:9f:8b:05:35:26: b2:d7:a9:8a:31:80:66:4f:5d:36:29:cf:9f:70:da: 7b:6c:29:4a:db:4e:61:ae:30:dd:b5:5c:66:10:ff: 0c:e7:e8:5a:f8:28:e0:d6:61:b2:96:49:de:36:e7: a2:6f:5e:60:26:30:c2:6a:a2:63:63:e0:61:e6:3a: d5:39:22:b4:31:4a:55:45:4c:66:c7:73:d6:f5:b5: 48:fd:1f:44:ac:01:a8:39:50:9f:7a:50:8a:ca:e4: b4:6e:25:4d:0d:8c:f9:f2:68:ac:19:60:1d:46:a6: d1:5f:7b:73:4b:39:06:52:58:a3:1d:99:f9:58:01: f0:30:20:bc:4c:58:2c:0c:08:75:e3:14:3f:d4:92: 19:7c:e7:6f:15:15:11:48:69:1b:b7:15:d3:f8:bb: d9:9d:ea:f5:0c:57:71:72:fd:1f:ae:62:a5:c4:e5: 66:d6:68:d0:aa:4c:39:d2:3d:33:bf:ff:ae:5b:6f: 70:b2:ef:53:05:05:31:9a:d4:10:8b:83:f4:2d:90: f8:39:dc:19:ae:11:98:de:f4:73:06:80:9e:18:54: 0b:66:ca:b4:d4:6d:5c:82:a8:8f:9d:a0:52:7d:5a: 96:62:bd:d9:10:fb:d3:c4:b4:bc:3c:1a:39:15:11: 57:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:8E:50:C2:D8:DE:19:5D:AB:92:D3:CC:20:EB:D2:D0:A8:75:49:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bb9123e7-70b3-3eb6-86b8-22385461c2e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 147.5.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:b1:8f:e9:a2:8a:29:95:a7:67:00:b7:bd:81:a2:14:15:1c: b8:63:24:b1:d9:18:f6:8a:7f:d2:b0:2d:a3:46:8b:a8:3b:8c: e1:e8:61:0c:11:0a:17:1f:4b:c5:c2:10:e5:30:47:26:e7:f7: d0:64:e9:36:1d:81:88:1b:d7:79:2d:ef:72:0e:b7:a1:1e:8a: 6c:55:c8:a1:65:a0:d3:f1:79:cb:d3:e6:df:b9:ea:2d:24:79: ae:2c:3a:53:c8:18:cc:61:53:e1:da:92:0d:ff:a5:03:88:d1: b2:97:6c:2f:17:4b:ae:8a:e7:fd:56:d3:ab:e0:0b:cf:74:95: 3c:a8:09:23:52:1a:6c:2d:31:27:f1:c9:47:42:f2:54:95:60: af:0b:5d:0a:22:f2:e5:7d:41:36:66:d2:c7:53:cc:98:39:80: 3f:a3:53:a8:1c:20:70:1b:54:f9:8a:6e:8e:65:c5:5b:40:de: 79:fa:5c:91:98:c8:e0:fc:ea:d1:b5:5a:ed:d4:8b:0b:4e:a7: 7f:bd:ad:54:1b:a6:d1:50:1e:d3:4b:bb:95:6b:30:53:d4:f9: 26:ae:8f:98:29:9b:af:56:b1:1c:84:b0:e9:d7:89:82:b8:70: 04:3b:d1:67:4d:c9:26:e9:6d:93:ef:3a:43:22:34:d6:12:4c: 32:c9:88:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Qvaid8Ybm8O83QUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNDE3MzAzMVoXDTI2MTIwMzE4MzAzMVowLzEtMCsGA1UEAxMk MjliNDIyZDUtMDFjZi00N2E0LTgzODQtOTdiMGQyZmZhZDQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZQlcFJkSK6rn4sFNSay16mKMYBmT102Kc+f cNp7bClK205hrjDdtVxmEP8M5+ha+Cjg1mGylkneNueib15gJjDCaqJjY+Bh5jrV OSK0MUpVRUxmx3PW9bVI/R9ErAGoOVCfelCKyuS0biVNDYz58misGWAdRqbRX3tz SzkGUlijHZn5WAHwMCC8TFgsDAh14xQ/1JIZfOdvFRURSGkbtxXT+LvZner1DFdx cv0frmKlxOVm1mjQqkw50j0zv/+uW29wsu9TBQUxmtQQi4P0LZD4OdwZrhGY3vRz BoCeGFQLZsq01G1cgqiPnaBSfVqWYr3ZEPvTxLS8PBo5FRFX+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJWOUMLY3hldq5LTzCDr0tCodUlMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYmI5MTIzZTctNzBiMy0z ZWI2LTg2YjgtMjIzODU0NjFjMmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwURMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJCxj+miiimVp2cAt72BohQVHLhjJLHZGPaKf9KwLaNGi6g7jOHoYQwR ChcfS8XCEOUwRybn99Bk6TYdgYgb13kt73IOt6EeimxVyKFloNPxecvT5t+56i0k ea4sOlPIGMxhU+Hakg3/pQOI0bKXbC8XS66K5/1W06vgC890lTyoCSNSGmwtMSfx yUdC8lSVYK8LXQoi8uV9QTZm0sdTzJg5gD+jU6gcIHAbVPmKbo5lxVtA3nn6XJGY yOD86tG1Wu3UiwtOp3+9rVQbptFQHtNLu5VrMFPU+Sauj5gpm69WsRyEsOnXiYK4 cAQ70WdNySbpbZPvOkMiNNYSTDLJiLY= -----END CERTIFICATE-----Generated at Tue Sep 22 18:36:18 2026 by rpki-client