$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c06b4056-8c47-3fcd-b684-3c8e78dec7f8.roa File: c06b4056-8c47-3fcd-b684-3c8e78dec7f8.roa (raw, json) Hash identifier: ysXBgVJqP5k9clfDrQorjPkO4DnrzY+Y7OsPQfzPvyw= Subject key identifier: 42:75:7A:E9:4D:F5:52:11:C3:FC:3C:05:FA:6C:87:65:7E:19:19:C7 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F103789F8A889A6AE46F57180 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c06b4056-8c47-3fcd-b684-3c8e78dec7f8.roa Signing time: Fri 04 Sep 2026 13:00:12 +0000 ROA not before: Fri 04 Sep 2026 13:00:12 +0000 ROA not after: Thu 03 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 204.216.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:10:37:89:f8:a8:89:a6:ae:46:f5:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 4 13:00:12 2026 GMT Not After : Dec 3 14:00:12 2026 GMT Subject: CN=274e6e55-b8c2-465b-b0a3-3b4bdd3084d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e9:8f:7d:1e:cf:79:d9:7b:e8:d6:4c:b8:09: bc:e2:95:3f:c4:82:15:09:8d:c0:39:a8:ff:e9:0f: 30:b8:71:03:6e:85:2b:a2:2a:f3:6d:1c:2f:49:05: 4a:13:fc:f1:40:db:18:19:22:c1:57:b6:35:75:71: aa:55:01:dd:24:c9:5c:35:32:93:56:04:7e:77:f0: 56:13:ae:26:bc:09:74:77:2b:76:6e:6f:25:19:7a: 4f:04:f1:38:30:4c:2d:d0:39:3b:f1:70:15:74:19: 82:e0:9c:43:b5:f0:fc:29:d4:0d:05:05:aa:78:48: 10:3b:1b:0b:d6:93:dd:ea:f3:c6:ac:23:a4:00:b0: 03:6b:06:91:28:10:14:80:ae:ea:d5:48:c1:9d:2f: 78:15:86:77:af:44:0e:0f:a3:af:64:0b:e8:f6:52: 3d:73:63:64:c4:f6:9b:93:b9:6c:f9:9a:71:da:19: 62:7f:61:0a:83:7e:66:b0:c9:92:40:f3:2b:b7:99: bf:9e:a9:6a:0d:da:84:78:a9:33:5f:ff:5d:5d:d4: ca:37:ba:fc:8c:56:85:07:dc:fd:0d:40:2f:b2:dc: d6:1e:44:3c:68:5a:04:a8:c9:3a:76:db:77:19:fa: 09:23:86:d9:35:56:47:09:e6:9b:b9:d8:41:d3:d5: 52:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:75:7A:E9:4D:F5:52:11:C3:FC:3C:05:FA:6C:87:65:7E:19:19:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c06b4056-8c47-3fcd-b684-3c8e78dec7f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 204.216.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:82:4b:d8:69:83:3b:fb:c9:ce:02:63:66:5b:f4:8f:03:2b: a6:3b:c3:dc:c7:2d:85:6b:03:7b:a1:99:3b:1a:65:12:ea:c9: 63:66:eb:c3:c0:4a:08:40:ec:4d:4b:18:fa:38:f7:98:92:93: 6a:d3:82:c1:dd:93:aa:a8:d8:f7:31:80:0b:0f:b5:26:de:59: d2:7b:d2:03:c2:18:0c:04:d7:84:75:4b:e7:4e:44:14:7d:3d: 07:d0:7e:9e:9b:48:8c:d5:35:1e:68:08:61:cc:57:7f:05:b9: c3:1f:90:81:61:4a:36:10:c3:71:02:df:a9:f9:bf:16:6d:00: 57:26:be:4a:7e:bd:d6:22:df:7b:e2:01:0c:f8:03:33:08:86: 1b:8c:1b:5d:56:92:a8:35:73:4b:61:51:75:ba:b8:e9:86:85: 00:39:b7:7b:4c:ca:8b:0d:1c:89:58:9c:31:ee:15:3b:1b:a1: 62:71:bc:93:c8:21:d2:0b:47:cd:f4:f2:bd:f5:16:1d:aa:5a: e5:c2:33:78:59:bc:56:f7:ad:e1:ab:c9:96:4b:af:cc:78:e7: ac:d4:fe:8c:62:6b:8a:73:45:f2:b1:03:6a:3f:63:f3:42:df: b2:8f:08:e2:f4:63:45:73:c7:5c:f9:2f:af:f9:00:c8:ea:d9: 58:26:a8:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8QN4n4qImmrkb1cYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNDEzMDAxMloXDTI2MTIwMzE0MDAxMlowLzEtMCsGA1UEAxMk Mjc0ZTZlNTUtYjhjMi00NjViLWIwYTMtM2I0YmRkMzA4NGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1emPfR7Pedl76NZMuAm84pU/xIIVCY3AOaj/ 6Q8wuHEDboUroirzbRwvSQVKE/zxQNsYGSLBV7Y1dXGqVQHdJMlcNTKTVgR+d/BW E64mvAl0dyt2bm8lGXpPBPE4MEwt0Dk78XAVdBmC4JxDtfD8KdQNBQWqeEgQOxsL 1pPd6vPGrCOkALADawaRKBAUgK7q1UjBnS94FYZ3r0QOD6OvZAvo9lI9c2NkxPab k7ls+Zpx2hlif2EKg35msMmSQPMrt5m/nqlqDdqEeKkzX/9dXdTKN7r8jFaFB9z9 DUAvstzWHkQ8aFoEqMk6dtt3GfoJI4bZNVZHCeabudhB09VSgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJ1eulN9VIRw/w8Bfpsh2V+GRnHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYzA2YjQwNTYtOGM0Ny0z ZmNkLWI2ODQtM2M4ZTc4ZGVjN2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGzNiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWCS9hpgzv7yc4CY2Zb9I8DK6Y7w9zHLYVrA3uhmTsaZRLqyWNm68PA SghA7E1LGPo495iSk2rTgsHdk6qo2PcxgAsPtSbeWdJ70gPCGAwE14R1S+dORBR9 PQfQfp6bSIzVNR5oCGHMV38FucMfkIFhSjYQw3EC36n5vxZtAFcmvkp+vdYi33vi AQz4AzMIhhuMG11Wkqg1c0thUXW6uOmGhQA5t3tMyosNHIlYnDHuFTsboWJxvJPI IdILR8308r31Fh2qWuXCM3hZvFb3reGryZZLr8x456zU/oxia4pzRfKxA2o/Y/NC 37KPCOL0Y0Vzx1z5L6/5AMjq2VgmqF8= -----END CERTIFICATE-----Generated at Tue Sep 22 18:45:59 2026 by rpki-client