$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cba1ea27-c319-3bf2-b91e-7cf05915f7be.roa File: cba1ea27-c319-3bf2-b91e-7cf05915f7be.roa (raw, json) Hash identifier: M62excsD6bmf3Z1ogyJkt/EhCDPhVpwgIj3RIdnZgZE= Subject key identifier: A6:5E:15:60:A4:2E:52:E5:D9:ED:45:58:E6:C6:EC:51:5E:31:E5:D7 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F11A14A79E7C1170F98BFEDE8 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cba1ea27-c319-3bf2-b91e-7cf05915f7be.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 64.181.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:a1:4a:79:e7:c1:17:0f:98:bf:ed:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=4c672cb1-8e14-4d49-bf88-4839434e5ffd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:c7:7e:c8:1e:61:70:a1:1e:36:a1:06:5f:cd: 02:a6:1c:6f:9b:3a:df:3e:64:f8:3a:a4:05:ed:c5: e7:d8:9e:aa:ae:88:6f:81:a8:b8:5e:55:4f:b9:f7: f0:a2:bf:8b:90:c2:15:d5:88:a8:18:70:48:98:90: b2:90:b1:cc:39:1a:46:d9:0a:e1:51:7d:2a:51:d6: 1f:07:96:59:b7:9c:2a:fe:65:60:da:a2:4a:b6:2c: c0:18:98:e3:00:cb:dd:64:02:2c:a6:30:6e:50:65: fb:1d:c1:53:e0:ac:98:ba:ad:28:f1:86:3f:8b:69: 53:cb:11:b2:1c:c8:93:5e:d2:32:82:2f:c6:e9:7e: 7d:4e:de:63:d0:ae:d7:2f:7b:a2:70:62:f5:9d:c1: 4a:05:2d:6c:3d:95:93:6a:77:99:d1:ef:5f:a5:ec: 6a:d1:38:8e:07:ab:e9:5c:f7:fe:ef:e9:2f:10:b6: 65:6a:4a:e6:7c:84:37:1a:7c:a4:af:81:fd:50:1a: e1:f8:7b:03:b4:40:23:d6:80:1c:3d:90:0a:49:af: 3c:50:cc:dd:bf:f8:2e:df:c4:eb:9e:f3:ef:94:15: e1:da:c4:50:89:c4:10:6d:61:01:05:c7:d0:a7:18: 2f:97:72:d5:9b:06:62:ba:bf:49:c8:0f:ae:40:84: aa:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:5E:15:60:A4:2E:52:E5:D9:ED:45:58:E6:C6:EC:51:5E:31:E5:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cba1ea27-c319-3bf2-b91e-7cf05915f7be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 64.181.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:5d:fe:f1:0d:63:9e:b3:e3:87:91:e9:30:32:a7:3b:1f:7b: b8:a9:65:9a:b6:2f:6c:ac:ae:bb:c5:b4:a2:5f:b6:b4:f8:67: 8a:c9:e8:c1:cb:2b:e3:f7:46:c7:ea:64:5c:36:2d:35:e6:cc: 82:23:d4:d6:a5:00:47:b4:28:6c:a0:14:9f:33:b3:ad:a1:1a: ee:7d:67:d7:46:08:bb:b8:20:fb:7c:c5:59:33:66:79:8d:b3: f5:d8:3f:3d:3c:43:20:8f:f0:f6:50:13:5b:9d:23:d3:75:82: e0:71:aa:c0:ed:d9:34:f4:8a:6d:77:e4:13:cb:3d:fa:e1:51: 9b:9e:20:15:1e:e8:ed:07:8a:92:23:3d:52:ec:1a:a9:ec:b8: fc:f7:25:21:24:d2:49:35:11:8d:ac:b8:f5:55:a9:c4:f5:db: 58:2c:c8:15:bc:07:87:94:27:82:dc:54:76:12:fe:89:7a:5c: 11:4c:86:93:26:28:1d:27:e9:28:bd:f5:db:74:1a:d5:69:33: 35:3e:a3:0d:15:3a:93:20:8f:a8:5e:10:b4:3f:c1:b3:a9:0a: 99:44:0a:b9:38:78:2b:ee:5f:09:23:ac:24:aa:36:2a:f6:16: 31:df:9d:e8:df:a4:70:60:ce:c0:2a:66:df:9b:bf:b8:71:5a: 4a:76:44:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RoUp558EXD5i/7egwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk NGM2NzJjYjEtOGUxNC00ZDQ5LWJmODgtNDgzOTQzNGU1ZmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8d+yB5hcKEeNqEGX80CphxvmzrfPmT4OqQF 7cXn2J6qrohvgai4XlVPuffwor+LkMIV1YioGHBImJCykLHMORpG2QrhUX0qUdYf B5ZZt5wq/mVg2qJKtizAGJjjAMvdZAIspjBuUGX7HcFT4KyYuq0o8YY/i2lTyxGy HMiTXtIygi/G6X59Tt5j0K7XL3uicGL1ncFKBS1sPZWTaneZ0e9fpexq0TiOB6vp XPf+7+kvELZlakrmfIQ3Gnykr4H9UBrh+HsDtEAj1oAcPZAKSa88UMzdv/gu38Tr nvPvlBXh2sRQicQQbWEBBcfQpxgvl3LVmwZiur9JyA+uQISqWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKZeFWCkLlLl2e1FWObG7FFeMeXXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvY2JhMWVhMjctYzMxOS0z YmYyLWI5MWUtN2NmMDU5MTVmN2JlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQLWEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACld/vENY56z44eR6TAypzsfe7ipZZq2L2ysrrvFtKJftrT4Z4rJ6MHL K+P3RsfqZFw2LTXmzIIj1NalAEe0KGygFJ8zs62hGu59Z9dGCLu4IPt8xVkzZnmN s/XYPz08QyCP8PZQE1udI9N1guBxqsDt2TT0im135BPLPfrhUZueIBUe6O0HipIj PVLsGqnsuPz3JSEk0kk1EY2suPVVqcT121gsyBW8B4eUJ4LcVHYS/ol6XBFMhpMm KB0n6Si99dt0GtVpMzU+ow0VOpMgj6heELQ/wbOpCplECrk4eCvuXwkjrCSqNir2 FjHfnejfpHBgzsAqZt+bv7hxWkp2RAI= -----END CERTIFICATE-----Generated at Sun Sep 20 22:03:19 2026 by rpki-client