$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c907e05a-55b4-3b3b-950c-96b7b4b4a3f9.roa File: c907e05a-55b4-3b3b-950c-96b7b4b4a3f9.roa (raw, json) Hash identifier: xlb8LuuXRrNwVhuH+DBFMMnHr5yXp4ZFRRgO/QcNAzw= Subject key identifier: E7:A3:3D:0A:1E:AD:EE:D5:2A:E7:CA:FC:7E:F4:17:38:07:4A:A6:56 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F119CE7B11B04D6CFB517DE80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c907e05a-55b4-3b3b-950c-96b7b4b4a3f9.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 159.112.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9c:e7:b1:1b:04:d6:cf:b5:17:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=db1dfa3e-f56e-4c04-a8a0-96ba01eb058f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:cc:28:4c:85:0f:b2:20:a6:5b:a8:e2:bb:ba: 95:ec:2a:c7:72:57:53:1d:82:18:c3:62:c9:39:e3: 97:ba:6d:23:d5:86:ff:7f:87:85:c3:8d:81:bd:22: 40:73:b8:fc:58:d9:b5:ce:5f:cf:b3:7b:ca:cc:1b: ce:94:3f:90:99:c8:8c:92:62:aa:22:30:06:01:6a: b5:77:2e:78:3d:0e:0c:42:34:1c:72:9e:76:43:89: ed:f1:d0:72:f1:be:19:b6:ca:5c:f3:bc:ea:e9:a4: c4:8a:20:22:58:dd:a7:42:27:7b:0c:4f:7d:12:4f: f1:15:11:c1:a0:b8:2e:56:2e:76:a2:0c:56:d5:c2: a4:4a:1a:a5:3b:a6:3e:1a:9a:8a:55:d4:d9:bd:2b: 70:a6:5c:8d:53:56:b3:92:64:d1:bd:87:2b:0e:27: f5:8e:83:b5:d9:96:da:81:8b:d2:c3:a0:4f:b4:33: 10:a2:15:98:38:d7:20:ad:b1:ed:b7:db:38:fe:8e: 57:eb:06:0d:62:d9:8b:2b:a2:22:e1:b7:96:6f:f6: a2:96:23:63:03:e2:57:f1:8c:14:33:3a:2f:2f:bd: d1:e6:a8:7d:6c:25:33:80:74:f4:7a:e4:e6:b5:4a: a6:5a:9e:c9:c6:f0:be:34:2b:cb:3d:ef:55:d8:cf: db:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:A3:3D:0A:1E:AD:EE:D5:2A:E7:CA:FC:7E:F4:17:38:07:4A:A6:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c907e05a-55b4-3b3b-950c-96b7b4b4a3f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 159.112.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:6c:0d:40:e6:33:f5:e4:d6:1d:dc:5a:66:ca:bb:ac:c8:e5: e0:e5:59:13:20:41:40:f7:e7:5e:ec:76:43:2d:36:56:c5:dc: ed:78:32:70:41:b3:e7:93:e7:ef:16:56:65:1a:ff:02:66:09: 2e:33:55:72:3d:bb:b4:f9:72:f0:4e:fe:ee:10:28:68:97:15: 8b:36:6f:1c:42:22:c9:81:f7:3a:ec:c3:d3:51:77:9b:fa:89: b2:a4:0b:ee:a7:1d:2c:24:c1:d4:81:e7:87:05:09:2a:e1:64: 5f:8b:4b:d3:d5:0a:50:aa:7b:c4:11:c6:f9:07:b5:28:43:cc: 83:be:af:c6:65:9d:fe:1f:60:7c:78:2e:ae:5f:a0:e4:f2:d7: a3:57:c8:57:36:78:54:97:15:48:52:a3:e2:95:58:07:1e:d2: d2:5b:d8:3b:61:43:15:d0:6d:48:50:54:15:4c:3d:d6:4c:e9: 3a:45:ae:01:53:1d:56:61:8c:ea:f3:33:04:3b:ec:fb:34:d0: 80:4a:58:b1:ec:2d:e4:5d:48:7b:14:14:bc:aa:7e:cf:6c:ed: 9c:dc:d9:a9:c6:ab:ac:b3:b4:e9:e8:1d:d7:ed:7a:8e:5e:55: fc:e0:d2:e4:44:33:08:39:da:b0:f8:23:93:6b:f8:41:b7:0d: df:0c:21:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnOexGwTWz7UX3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk ZGIxZGZhM2UtZjU2ZS00YzA0LWE4YTAtOTZiYTAxZWIwNThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8woTIUPsiCmW6jiu7qV7CrHcldTHYIYw2LJ OeOXum0j1Yb/f4eFw42BvSJAc7j8WNm1zl/Ps3vKzBvOlD+QmciMkmKqIjAGAWq1 dy54PQ4MQjQccp52Q4nt8dBy8b4Ztspc87zq6aTEiiAiWN2nQid7DE99Ek/xFRHB oLguVi52ogxW1cKkShqlO6Y+GpqKVdTZvStwplyNU1azkmTRvYcrDif1joO12Zba gYvSw6BPtDMQohWYONcgrbHtt9s4/o5X6wYNYtmLK6Ii4beWb/ailiNjA+JX8YwU MzovL73R5qh9bCUzgHT0euTmtUqmWp7JxvC+NCvLPe9V2M/bTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOejPQoere7VKufK/H70FzgHSqZWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYzkwN2UwNWEtNTViNC0z YjNiLTk1MGMtOTZiN2I0YjRhM2Y5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEn3CwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGxsDUDmM/Xk1h3cWmbKu6zI5eDlWRMgQUD3517sdkMtNlbF3O14MnBB s+eT5+8WVmUa/wJmCS4zVXI9u7T5cvBO/u4QKGiXFYs2bxxCIsmB9zrsw9NRd5v6 ibKkC+6nHSwkwdSB54cFCSrhZF+LS9PVClCqe8QRxvkHtShDzIO+r8Zlnf4fYHx4 Lq5foOTy16NXyFc2eFSXFUhSo+KVWAce0tJb2DthQxXQbUhQVBVMPdZM6TpFrgFT HVZhjOrzMwQ77Ps00IBKWLHsLeRdSHsUFLyqfs9s7Zzc2anGq6yztOnoHdfteo5e Vfzg0uREMwg52rD4I5Nr+EG3Dd8MIaA= -----END CERTIFICATE-----Generated at Sat Sep 26 12:58:33 2026 by rpki-client