$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bd60b089-8be1-3cdc-9f5d-9fea6e29f831.roa File: bd60b089-8be1-3cdc-9f5d-9fea6e29f831.roa (raw, json) Hash identifier: QgIkXeLjw2FgE3d0roxga67PeUlII5GdZrJJ9Lwe7G8= Subject key identifier: A1:18:22:00:43:C2:1B:41:1E:21:8C:71:1E:B6:B3:67:54:F2:BB:A1 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F1CC7A4039B446EBD6B2F5D20 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bd60b089-8be1-3cdc-9f5d-9fea6e29f831.roa Signing time: Wed 09 Sep 2026 01:00:11 +0000 ROA not before: Wed 09 Sep 2026 01:00:11 +0000 ROA not after: Tue 08 Dec 2026 02:00:11 +0000 asID: 31898 IP address blocks: 140.204.122.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1c:c7:a4:03:9b:44:6e:bd:6b:2f:5d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 9 01:00:11 2026 GMT Not After : Dec 8 02:00:11 2026 GMT Subject: CN=0a974d1e-ee78-42d0-b7d3-d41d7370725f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:0a:8e:66:0e:48:65:20:9f:dd:2c:12:be:ee: a8:67:4c:e1:fd:b5:69:39:57:17:bb:7d:65:be:57: 67:c4:0c:aa:23:03:98:0b:77:79:f4:a6:53:dd:c5: 7d:8f:51:a1:b9:0d:fa:ef:f4:d3:98:52:66:0f:97: 2c:0e:e4:aa:2b:9d:ec:09:b4:73:9c:ca:f7:93:d7: a6:af:01:ea:ef:6d:fe:68:5b:dc:98:09:82:cf:2f: 57:57:68:4a:86:b1:dd:fa:8e:2e:42:c6:75:15:b9: 2e:20:e4:1b:34:3f:83:ac:7c:8b:a2:c5:4c:f1:9c: 94:14:f8:5c:84:de:a1:c5:f7:7c:84:41:be:81:a1: e8:93:f9:00:79:a0:c1:53:d6:f6:ed:9e:be:96:0e: ff:7d:2c:e4:4c:b8:8f:aa:5d:3a:cf:3c:00:06:31: 3f:cd:ad:16:bb:bd:df:7b:9e:82:33:f5:b5:c1:0c: 85:e6:27:46:3f:fd:8a:32:13:ec:e2:34:95:25:24: b3:57:0c:1e:64:fd:27:7a:ae:bb:11:9f:24:cd:b4: bf:5d:9e:13:59:17:e2:3a:8b:e2:70:d2:5c:f7:dc: 4a:eb:7f:be:b2:81:74:55:eb:13:b4:d0:30:21:2f: 5e:89:b6:34:32:4d:fa:f3:60:b3:74:3a:df:3a:a3: 3b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:18:22:00:43:C2:1B:41:1E:21:8C:71:1E:B6:B3:67:54:F2:BB:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bd60b089-8be1-3cdc-9f5d-9fea6e29f831.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.122.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:1f:00:03:41:ba:37:6c:6c:0e:80:10:b7:b7:96:04:35:49: 86:84:81:53:93:45:ad:7b:43:ed:ce:ce:38:66:e4:ed:c6:0b: ed:e6:6b:b3:2b:d9:b1:6a:45:76:c4:86:8e:d6:1c:41:65:a5: a9:a0:7a:92:76:70:df:d5:bd:91:87:60:0e:86:9d:00:48:b0: c0:30:4a:93:73:a8:35:38:41:e3:12:fb:f0:81:b0:03:99:0a: 3b:01:42:05:9b:46:d0:2d:04:ea:16:a0:52:a2:b4:91:42:6c: 16:31:29:4c:71:51:99:a4:f0:0e:5a:5e:c7:ba:e9:f5:21:be: df:9d:ad:4f:fb:b4:26:36:e1:61:40:11:90:80:28:2d:84:0b: e7:4d:23:37:c6:7a:19:78:a3:26:33:95:25:b3:e5:39:f6:5f: c5:1c:6a:d9:7d:10:cd:ea:01:e3:90:e0:a7:6d:7d:4f:c3:60: 67:77:c7:12:54:ed:63:57:f6:0f:4a:56:73:f8:70:7d:56:08: e5:f2:ef:7b:57:33:cc:3d:fd:d2:78:17:a6:e1:11:3b:dc:4c: b7:d5:16:11:a1:2d:1f:4c:00:eb:b7:b9:6c:67:9e:60:7b:38: 37:4a:2b:8d:bd:16:2b:df:93:c6:f4:2e:c0:4a:f1:a7:a1:0e: 21:cc:76:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8cx6QDm0RuvWsvXSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwOTAxMDAxMVoXDTI2MTIwODAyMDAxMVowLzEtMCsGA1UEAxMk MGE5NzRkMWUtZWU3OC00MmQwLWI3ZDMtZDQxZDczNzA3MjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngqOZg5IZSCf3SwSvu6oZ0zh/bVpOVcXu31l vldnxAyqIwOYC3d59KZT3cV9j1GhuQ367/TTmFJmD5csDuSqK53sCbRznMr3k9em rwHq723+aFvcmAmCzy9XV2hKhrHd+o4uQsZ1FbkuIOQbND+DrHyLosVM8ZyUFPhc hN6hxfd8hEG+gaHok/kAeaDBU9b27Z6+lg7/fSzkTLiPql06zzwABjE/za0Wu73f e56CM/W1wQyF5idGP/2KMhPs4jSVJSSzVwweZP0neq67EZ8kzbS/XZ4TWRfiOovi cNJc99xK63++soF0VesTtNAwIS9eibY0Mk3682CzdDrfOqM7bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKEYIgBDwhtBHiGMcR62s2dU8ruhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYmQ2MGIwODktOGJlMS0z Y2RjLTlmNWQtOWZlYTZlMjlmODMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMx6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAwfAANBujdsbA6AELe3lgQ1SYaEgVOTRa17Q+3Ozjhm5O3GC+3ma7Mr 2bFqRXbEho7WHEFlpamgepJ2cN/VvZGHYA6GnQBIsMAwSpNzqDU4QeMS+/CBsAOZ CjsBQgWbRtAtBOoWoFKitJFCbBYxKUxxUZmk8A5aXse66fUhvt+drU/7tCY24WFA EZCAKC2EC+dNIzfGehl4oyYzlSWz5Tn2X8Ucatl9EM3qAeOQ4KdtfU/DYGd3xxJU 7WNX9g9KVnP4cH1WCOXy73tXM8w9/dJ4F6bhETvcTLfVFhGhLR9MAOu3uWxnnmB7 ODdKK429Fivfk8b0LsBK8aehDiHMdv8= -----END CERTIFICATE-----Generated at Sun Sep 20 23:16:09 2026 by rpki-client