$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c3aee60c-17be-3d6e-a062-eace2af95bd4.roa File: c3aee60c-17be-3d6e-a062-eace2af95bd4.roa (raw, json) Hash identifier: w18asdYADmqNOAuDyNaSliz84SI99DQcWz0ESDpbilc= Subject key identifier: 97:48:0E:DB:7A:B2:58:33:E2:EB:B7:9F:60:44:6C:2D:99:A0:B9:B3 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584FB0BDFA055347788C0FC38F80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c3aee60c-17be-3d6e-a062-eace2af95bd4.roa Signing time: Sun 01 Nov 2026 01:00:13 +0000 ROA not before: Sun 01 Nov 2026 01:00:13 +0000 ROA not after: Sat 30 Jan 2027 02:00:13 +0000 asID: 31898 IP address blocks: 64.181.146.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b0:bd:fa:05:53:47:78:8c:0f:c3:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Nov 1 01:00:13 2026 GMT Not After : Jan 30 02:00:13 2027 GMT Subject: CN=35226d57-625a-46e1-80ff-318b067a7540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a5:f2:f0:6a:25:a8:4e:bd:19:3a:59:e8:47: 22:ab:b8:d0:1f:c7:67:c1:42:15:d5:97:de:34:72: 7a:d5:ef:9e:44:21:a2:88:be:ab:8b:7d:53:33:f5: 13:ca:0e:83:6f:f8:40:77:1a:87:ae:ea:4d:81:f4: 7f:9c:d6:ae:39:66:8d:3a:fc:86:8b:35:95:07:83: 3a:5f:d2:d3:bc:7e:3f:52:48:95:73:fd:01:10:ab: 8d:50:f9:ba:22:fe:98:47:45:8f:fe:b3:6b:85:77: 35:c8:47:bf:32:ea:d7:83:02:7d:55:07:75:2c:c7: a1:19:74:35:16:e2:f0:e2:99:b8:a5:b5:d4:97:04: c1:b1:8b:f0:d6:ca:2a:25:38:fc:c5:b1:4d:bc:1c: d6:ed:01:c6:43:3e:59:2d:fd:93:33:60:ab:ed:37: 40:ad:c9:bc:df:32:74:5e:01:3f:af:36:24:bc:c7: c3:f0:13:41:b7:80:a2:79:63:b1:3e:56:b2:0a:6a: 3f:30:17:b1:24:ab:1a:2e:cf:06:98:7c:9c:dd:6a: 8e:49:fb:24:bd:d2:78:71:3c:02:58:29:66:0c:c4: 42:e1:42:82:79:27:06:78:c6:2c:bf:20:83:80:47: e9:d9:06:33:96:70:7b:96:fd:1f:37:ee:62:03:34: 6d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:48:0E:DB:7A:B2:58:33:E2:EB:B7:9F:60:44:6C:2D:99:A0:B9:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c3aee60c-17be-3d6e-a062-eace2af95bd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 64.181.146.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:df:a3:b5:22:18:31:2e:3a:e1:3b:c5:ec:3d:0b:2a:10:2d: d5:20:db:ae:3a:35:1d:68:9c:64:5f:1f:77:7e:4f:cc:3f:8d: cf:77:4c:27:fd:6f:71:06:4b:d5:b7:e8:b6:53:79:5b:31:58: 3b:83:00:90:b4:7b:96:f6:b0:d4:ac:01:6f:a4:93:28:98:48: 1a:99:e3:38:c1:ee:6b:98:1a:68:61:0b:3e:bd:6e:12:6b:07: ab:83:fe:03:44:2e:3e:e5:b1:9b:3a:af:c0:9a:53:33:bf:5f: 99:ed:cf:b8:59:74:83:a4:f3:c0:21:1c:20:a2:3e:4f:35:33: 20:96:50:55:1e:18:1b:12:b3:0e:6a:28:5a:87:15:42:1b:58: 20:29:1d:ee:78:59:7e:e6:55:19:77:cf:04:0f:7e:f4:9a:61: 54:03:2d:4e:17:3b:49:2a:27:b3:4f:41:4e:52:13:77:66:42: d6:b5:01:f8:3d:6c:b4:2c:4a:75:90:ee:fa:55:5e:75:b2:57: 59:23:1d:f6:c4:fe:b2:70:45:53:73:e6:78:75:ba:fe:5c:72: ff:2e:78:ef:9f:6b:83:66:7c:12:fe:66:15:43:ea:12:1d:9b: 25:8c:39:93:08:fb:21:09:a7:db:82:fd:1d:ba:38:d5:fa:1d: de:a0:3b:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+wvfoFU0d4jA/Dj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MTEwMTAxMDAxM1oXDTI3MDEzMDAyMDAxM1owLzEtMCsGA1UEAxMk MzUyMjZkNTctNjI1YS00NmUxLTgwZmYtMzE4YjA2N2E3NTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qXy8GolqE69GTpZ6Eciq7jQH8dnwUIV1Zfe NHJ61e+eRCGiiL6ri31TM/UTyg6Db/hAdxqHrupNgfR/nNauOWaNOvyGizWVB4M6 X9LTvH4/UkiVc/0BEKuNUPm6Iv6YR0WP/rNrhXc1yEe/MurXgwJ9VQd1LMehGXQ1 FuLw4pm4pbXUlwTBsYvw1soqJTj8xbFNvBzW7QHGQz5ZLf2TM2Cr7TdArcm83zJ0 XgE/rzYkvMfD8BNBt4CieWOxPlayCmo/MBexJKsaLs8GmHyc3WqOSfskvdJ4cTwC WClmDMRC4UKCeScGeMYsvyCDgEfp2QYzlnB7lv0fN+5iAzRtkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJdIDtt6slgz4uu3n2BEbC2ZoLmzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYzNhZWU2MGMtMTdiZS0z ZDZlLWEwNjItZWFjZTJhZjk1YmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQLWSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAzfo7UiGDEuOuE7xew9CyoQLdUg2646NR1onGRfH3d+T8w/jc93TCf9 b3EGS9W36LZTeVsxWDuDAJC0e5b2sNSsAW+kkyiYSBqZ4zjB7muYGmhhCz69bhJr B6uD/gNELj7lsZs6r8CaUzO/X5ntz7hZdIOk88AhHCCiPk81MyCWUFUeGBsSsw5q KFqHFUIbWCApHe54WX7mVRl3zwQPfvSaYVQDLU4XO0kqJ7NPQU5SE3dmQta1Afg9 bLQsSnWQ7vpVXnWyV1kjHfbE/rJwRVNz5nh1uv5ccv8ueO+fa4NmfBL+ZhVD6hId myWMOZMI+yEJp9uC/R26ONX6Hd6gOzw= -----END CERTIFICATE-----Generated at Thu Nov 5 18:44:51 2026 by rpki-client