$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c3fb4c2b-2e88-3d08-85fd-80e791ebc446.roa File: c3fb4c2b-2e88-3d08-85fd-80e791ebc446.roa (raw, json) Hash identifier: +k38hULHmHeq7a7GH0Ud/02D2JrzVehdGLa0PmdDC+8= Subject key identifier: B7:7C:49:22:C6:7A:D2:CF:69:34:F0:92:C3:ED:35:0B:32:43:2F:44 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F20F7B75CE913271041454680 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c3fb4c2b-2e88-3d08-85fd-80e791ebc446.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 209.17.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:b7:5c:e9:13:27:10:41:45:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=cbf4050b-595a-4c11-a373-dd116210d06a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:96:ae:50:b4:c5:4f:6f:31:96:ce:d1:8d:2b: ee:e5:65:f2:0e:0a:d4:a8:9a:7e:56:80:72:38:78: 05:7d:70:14:de:ea:0b:7e:f0:d7:36:d3:ad:b3:de: 79:0e:28:a7:85:32:35:21:82:0d:f3:2a:7d:7c:3b: ef:82:67:fe:34:b1:43:31:a0:60:fa:6b:c7:55:69: 61:09:fa:f7:de:ec:4c:95:e8:3e:f3:e4:04:e0:25: fa:8b:93:cb:4e:0b:7d:60:33:13:96:32:da:68:2d: fe:60:b2:a7:c2:59:f6:85:e9:fc:fb:d2:f8:b9:ca: 8e:e2:cf:1c:f7:b7:2a:08:ea:c8:06:a4:bf:67:49: db:0d:08:42:2e:dc:3d:76:77:b8:c5:c9:d0:72:56: 80:fe:c9:5c:f5:dc:55:b1:97:89:23:30:b6:72:f4: 4e:82:90:40:0e:47:82:57:52:0d:74:26:a6:1c:9a: 59:98:9a:c8:c6:b2:fe:56:d2:a3:d1:f8:a2:70:24: 2f:71:10:a9:70:d5:30:9f:e1:3d:10:c6:3f:bc:0e: 5d:06:76:66:f0:a3:4f:d4:3c:8c:cc:32:e5:bc:3d: 52:7a:cf:7a:32:92:40:b8:fb:0e:cf:8d:98:f5:e5: fa:18:0f:cf:31:a4:01:90:13:57:7f:77:6e:3f:3a: 0c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:7C:49:22:C6:7A:D2:CF:69:34:F0:92:C3:ED:35:0B:32:43:2F:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c3fb4c2b-2e88-3d08-85fd-80e791ebc446.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 209.17.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:1c:42:48:6b:8b:d1:db:cf:12:60:ee:dc:d3:ea:db:bc:6c: 79:b1:41:80:8b:c8:54:04:d3:64:d3:08:f6:79:70:20:c3:60: 45:8c:fd:db:76:44:3f:9f:ce:ea:9f:e1:ec:91:45:7d:52:53: 8a:94:95:bf:a2:09:e3:d6:17:b8:8f:ed:cc:18:46:e8:ae:e3: d5:df:29:f1:37:61:6c:4f:25:72:00:6a:9a:6a:54:71:ee:f1: fa:99:90:50:37:fe:12:c2:b7:7d:01:dd:56:11:30:72:d7:23: 0a:70:44:42:6b:0d:8b:de:07:ea:a3:f8:76:06:9a:4e:1a:56: 94:51:ba:29:8b:6c:74:6c:7e:25:5d:12:1a:ac:c5:f5:d1:79: 7e:db:16:8f:36:ae:02:1c:4a:7b:71:f5:da:b7:c5:a5:2a:85: 91:92:8e:a5:a3:5f:d4:60:91:c5:76:f1:ff:65:45:43:98:03: 78:18:6b:2d:87:ab:33:e0:b0:0b:38:8d:a1:e7:76:90:df:17: cf:19:d2:3c:c5:25:57:6e:41:e3:c3:66:9d:4e:7a:88:39:c9: ec:3b:c1:aa:bf:8a:3a:47:01:6a:33:ad:93:a0:4a:75:8a:d6: 86:1f:e0:56:e9:35:16:ec:9c:07:df:1f:ce:c7:4b:46:2e:b8: 3d:a5:71:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g97dc6RMnEEFFRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk Y2JmNDA1MGItNTk1YS00YzExLWEzNzMtZGQxMTYyMTBkMDZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5auULTFT28xls7RjSvu5WXyDgrUqJp+VoBy OHgFfXAU3uoLfvDXNtOts955DiinhTI1IYIN8yp9fDvvgmf+NLFDMaBg+mvHVWlh Cfr33uxMleg+8+QE4CX6i5PLTgt9YDMTljLaaC3+YLKnwln2hen8+9L4ucqO4s8c 97cqCOrIBqS/Z0nbDQhCLtw9dne4xcnQclaA/slc9dxVsZeJIzC2cvROgpBADkeC V1INdCamHJpZmJrIxrL+VtKj0fiicCQvcRCpcNUwn+E9EMY/vA5dBnZm8KNP1DyM zDLlvD1Ses96MpJAuPsOz42Y9eX6GA/PMaQBkBNXf3duPzoMcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLd8SSLGetLPaTTwksPtNQsyQy9EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYzNmYjRjMmItMmU4OC0z ZDA4LTg1ZmQtODBlNzkxZWJjNDQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0RE0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwcQkhri9HbzxJg7tzT6tu8bHmxQYCLyFQE02TTCPZ5cCDDYEWM/dt2 RD+fzuqf4eyRRX1SU4qUlb+iCePWF7iP7cwYRuiu49XfKfE3YWxPJXIAappqVHHu 8fqZkFA3/hLCt30B3VYRMHLXIwpwREJrDYveB+qj+HYGmk4aVpRRuimLbHRsfiVd EhqsxfXReX7bFo82rgIcSntx9dq3xaUqhZGSjqWjX9RgkcV28f9lRUOYA3gYay2H qzPgsAs4jaHndpDfF88Z0jzFJVduQePDZp1Oeog5yew7waq/ijpHAWozrZOgSnWK 1oYf4FbpNRbsnAffH87HS0YuuD2lcU4= -----END CERTIFICATE-----Generated at Tue Sep 22 01:26:58 2026 by rpki-client