$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c545ee41-25d1-3f84-a10c-b4b80607c07d.roa File: c545ee41-25d1-3f84-a10c-b4b80607c07d.roa (raw, json) Hash identifier: OFvgK/GBU0uEvwP7jjr4OixXVcj8mgnopzRXROhH50E= Subject key identifier: 14:B7:56:EA:42:61:68:82:1B:15:54:32:51:7E:2A:5D:BF:47:2E:06 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F46A7E3A3CA9E35B941095760 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c545ee41-25d1-3f84-a10c-b4b80607c07d.roa Signing time: Thu 24 Sep 2026 01:00:12 +0000 ROA not before: Thu 24 Sep 2026 01:00:12 +0000 ROA not after: Wed 23 Dec 2026 02:00:12 +0000 asID: 54253 IP address blocks: 134.185.160.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:46:a7:e3:a3:ca:9e:35:b9:41:09:57:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 24 01:00:12 2026 GMT Not After : Dec 23 02:00:12 2026 GMT Subject: CN=0f73ddc7-50c0-4494-89dc-ddcbed09a108 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e0:97:bc:42:8e:53:fd:1f:c3:41:90:17:e4: de:4a:4d:7a:78:d4:67:ec:cf:27:44:6b:a8:74:46: d8:dc:f4:2b:b1:49:21:38:c3:51:f6:7a:0f:55:e1: 79:8d:d2:84:c0:5e:19:92:75:84:57:b3:e8:f8:09: 23:ed:63:c5:28:b7:1c:76:ee:bb:9e:b7:ef:73:cc: cb:8f:61:9b:77:3e:20:f3:ae:fe:ee:87:ad:47:ff: 0a:aa:ca:74:b2:fd:51:0f:d9:aa:b9:67:f8:2c:a4: ed:30:e7:76:b9:79:0f:f6:d2:1c:5b:a5:85:18:83: a0:82:0d:59:c3:1a:6a:d6:4f:1e:2c:fc:0c:5f:55: 09:fe:4d:2f:94:31:50:d0:00:5d:39:af:f0:10:85: bc:86:49:ad:84:17:7a:ff:ae:45:a2:81:fd:e0:dd: 56:6d:fa:50:ae:ec:02:f7:c7:1c:a3:11:20:2f:21: 4a:8d:18:73:f7:99:ff:c0:de:38:17:bb:d6:b2:fe: 4c:44:5e:74:9f:a8:75:e1:f5:09:7e:e3:d6:84:75: 28:c5:d3:95:7a:13:29:b7:f6:f9:e2:65:fe:31:0c: 94:a1:e9:08:29:70:46:be:54:ac:0f:e5:c0:9d:b9: 66:97:51:fe:cf:62:2f:63:9f:c7:4c:98:bd:21:b9: b4:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:B7:56:EA:42:61:68:82:1B:15:54:32:51:7E:2A:5D:BF:47:2E:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c545ee41-25d1-3f84-a10c-b4b80607c07d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.185.160.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:d6:ef:3d:6e:90:1d:3f:46:03:05:9a:51:dd:3d:ce:d8:b5: d4:bb:81:6c:49:04:b1:5c:5e:25:10:fa:b0:38:1e:e4:7b:d9: 32:c5:35:e5:e4:5d:fc:97:30:0b:d0:ca:42:95:7f:02:91:9a: 04:05:d4:86:9b:aa:3b:ee:2c:a8:72:aa:11:3b:2b:4c:1b:27: 50:12:58:68:9e:c6:5b:48:10:0f:30:f1:40:1f:1f:52:34:5b: fd:73:7d:3e:a6:83:96:cf:10:fc:06:3c:5f:eb:ae:37:6a:e5: 90:e5:73:21:a8:12:6f:6b:2b:5d:4f:92:55:ce:02:22:e6:b8: 75:19:02:7c:c6:e7:f0:f8:20:07:41:ad:15:94:8e:ae:54:be: e5:da:96:76:e1:2d:00:00:67:f9:cc:90:9f:cb:3f:0c:a2:4f: 95:33:bb:9b:18:54:a4:1b:94:27:79:52:d2:0c:3a:f6:08:0b: 99:08:3b:48:82:85:41:c3:e5:b9:28:b4:98:49:f1:26:6e:8b: da:38:f7:69:8f:1a:79:92:5e:6e:0a:f5:06:13:a5:d0:0e:be: 21:11:37:b4:45:13:f2:25:eb:7b:20:8c:ba:6e:5a:83:8f:13: 4f:c6:59:15:cf:44:27:73:93:54:a4:d1:1b:d1:ec:8c:69:d6: 4e:dc:e2:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Gp+Ojyp41uUEJV2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkyNDAxMDAxMloXDTI2MTIyMzAyMDAxMlowLzEtMCsGA1UEAxMk MGY3M2RkYzctNTBjMC00NDk0LTg5ZGMtZGRjYmVkMDlhMTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uCXvEKOU/0fw0GQF+TeSk16eNRn7M8nRGuo dEbY3PQrsUkhOMNR9noPVeF5jdKEwF4ZknWEV7Po+Akj7WPFKLccdu67nrfvc8zL j2Gbdz4g867+7oetR/8Kqsp0sv1RD9mquWf4LKTtMOd2uXkP9tIcW6WFGIOggg1Z wxpq1k8eLPwMX1UJ/k0vlDFQ0ABdOa/wEIW8hkmthBd6/65FooH94N1WbfpQruwC 98ccoxEgLyFKjRhz95n/wN44F7vWsv5MRF50n6h14fUJfuPWhHUoxdOVehMpt/b5 4mX+MQyUoekIKXBGvlSsD+XAnblml1H+z2IvY5/HTJi9Ibm0PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBS3VupCYWiCGxVUMlF+Kl2/Ry4GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYzU0NWVlNDEtMjVkMS0z Zjg0LWExMGMtYjRiODA2MDdjMDdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQChrmgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHXW7z1ukB0/RgMFmlHdPc7YtdS7gWxJBLFcXiUQ+rA4HuR72TLFNeXk XfyXMAvQykKVfwKRmgQF1IabqjvuLKhyqhE7K0wbJ1ASWGiexltIEA8w8UAfH1I0 W/1zfT6mg5bPEPwGPF/rrjdq5ZDlcyGoEm9rK11PklXOAiLmuHUZAnzG5/D4IAdB rRWUjq5UvuXalnbhLQAAZ/nMkJ/LPwyiT5Uzu5sYVKQblCd5UtIMOvYIC5kIO0iC hUHD5bkotJhJ8SZui9o492mPGnmSXm4K9QYTpdAOviERN7RFE/Il63sgjLpuWoOP E0/GWRXPRCdzk1Sk0RvR7Ixp1k7c4jE= -----END CERTIFICATE-----Generated at Fri Sep 25 00:19:14 2026 by rpki-client