$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cdcf5f2d-c821-3925-9895-3e8f727a3b0a.roa File: cdcf5f2d-c821-3925-9895-3e8f727a3b0a.roa (raw, json) Hash identifier: pKbg/OA0G0PhAd/3h3mv+qEVBUZFNtSQjMRw6G0BuJ8= Subject key identifier: 7E:7F:9A:62:C0:97:4D:46:62:D8:7B:AB:C8:52:12:46:1F:0E:D2:29 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F119CE651D5178D5B2AE30200 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cdcf5f2d-c821-3925-9895-3e8f727a3b0a.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 130.61.64.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9c:e6:51:d5:17:8d:5b:2a:e3:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=e7785d2f-fffa-4ba4-ac41-72c00088bbd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:4e:b9:2a:72:4e:f7:e9:8d:bc:19:69:f7:bb: a0:66:85:80:f1:48:b2:3e:3a:5e:68:11:0e:a1:ac: 55:b3:08:9a:c3:aa:cf:2e:ba:91:51:4f:56:9f:57: 3c:7d:2f:0f:50:aa:12:a3:8b:01:79:e2:ca:37:b6: bf:ce:85:1f:28:00:15:9f:3a:80:99:88:2f:b2:f2: db:62:e7:35:fc:e1:78:b2:6d:1f:68:72:a3:11:7f: c1:7b:52:87:07:96:08:6e:a6:a5:fc:f1:a3:ae:23: 3f:63:73:39:7a:ee:35:33:15:bc:fd:cd:6a:ef:52: c0:1f:a5:5f:20:4c:1a:11:93:7e:e4:e0:04:b4:56: d1:1a:5b:4e:d1:67:88:52:2f:ff:df:d9:c2:f1:00: ed:e3:c2:f7:b7:40:fa:39:fc:1d:87:43:4b:f9:f9: d5:14:a6:0e:aa:7a:90:23:d6:80:c1:ae:f1:f3:cd: b9:36:da:d0:ce:20:17:56:e9:d2:c7:00:11:fc:aa: 7f:9b:93:a2:64:a2:f2:c5:2c:94:dd:82:d2:86:91: 08:53:37:eb:c6:f5:09:c0:fd:d1:3b:e8:64:12:2a: 17:51:75:d4:ee:89:7c:93:d3:b4:ac:0f:78:f0:15: fc:dd:5c:d5:85:5c:a6:50:ae:7d:72:21:3b:56:98: ea:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:7F:9A:62:C0:97:4D:46:62:D8:7B:AB:C8:52:12:46:1F:0E:D2:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cdcf5f2d-c821-3925-9895-3e8f727a3b0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 130.61.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:c8:93:83:f2:1c:62:3a:b4:23:eb:a4:4b:37:25:5a:60:3a: b1:80:0a:cd:fc:80:ec:5c:2a:54:7f:12:3b:73:33:ed:36:30: 39:4c:35:0d:e5:b9:06:13:98:72:71:a3:ec:6f:ce:74:ca:82: fc:51:8c:8b:ad:fc:28:bf:0d:ce:78:a6:60:f0:d4:90:4d:1a: 8a:8f:e6:fa:fd:ae:38:8d:07:c4:01:d1:66:f3:62:30:8d:46: ac:0e:20:48:6a:7b:45:47:c3:c6:60:2f:66:19:bc:42:cf:e1: 3c:ec:1f:0a:42:98:b2:eb:8b:1e:55:00:84:26:9f:4f:bc:0f: 72:bd:cc:b3:d5:cb:19:82:2b:d0:58:10:86:f6:87:30:55:c5: 29:fc:53:31:f5:63:80:6d:15:7a:cf:72:57:49:09:74:37:f1: 99:87:0f:89:56:90:55:f7:7b:bf:0a:4f:b1:88:92:ec:0b:23: 6d:1a:6f:2f:e6:80:19:7e:f0:b8:a8:38:d6:c7:66:29:99:ce: e2:a9:23:69:e0:20:b6:83:a4:00:2a:0c:3a:6a:99:31:cc:e2: b9:d1:43:08:b8:bd:de:b4:cd:40:f7:7a:35:bd:c7:b1:70:71: 3d:25:0e:16:b6:f3:49:3e:01:23:ca:8c:d6:7c:77:d4:47:ee: 0b:2c:38:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnOZR1ReNWyrjAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTc3ODVkMmYtZmZmYS00YmE0LWFjNDEtNzJjMDAwODhiYmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgk65KnJO9+mNvBlp97ugZoWA8UiyPjpeaBEO oaxVswiaw6rPLrqRUU9Wn1c8fS8PUKoSo4sBeeLKN7a/zoUfKAAVnzqAmYgvsvLb Yuc1/OF4sm0faHKjEX/Be1KHB5YIbqal/PGjriM/Y3M5eu41MxW8/c1q71LAH6Vf IEwaEZN+5OAEtFbRGltO0WeIUi//39nC8QDt48L3t0D6Ofwdh0NL+fnVFKYOqnqQ I9aAwa7x8825NtrQziAXVunSxwAR/Kp/m5OiZKLyxSyU3YLShpEIUzfrxvUJwP3R O+hkEioXUXXU7ol8k9O0rA948BX83VzVhVymUK59ciE7VpjqPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH5/mmLAl01GYth7q8hSEkYfDtIpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvY2RjZjVmMmQtYzgyMS0z OTI1LTk4OTUtM2U4ZjcyN2EzYjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgj1AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHbIk4PyHGI6tCPrpEs3JVpgOrGACs38gOxcKlR/EjtzM+02MDlMNQ3l uQYTmHJxo+xvznTKgvxRjIut/Ci/Dc54pmDw1JBNGoqP5vr9rjiNB8QB0WbzYjCN RqwOIEhqe0VHw8ZgL2YZvELP4TzsHwpCmLLrix5VAIQmn0+8D3K9zLPVyxmCK9BY EIb2hzBVxSn8UzH1Y4BtFXrPcldJCXQ38ZmHD4lWkFX3e78KT7GIkuwLI20aby/m gBl+8LioONbHZimZzuKpI2ngILaDpAAqDDpqmTHM4rnRQwi4vd60zUD3ejW9x7Fw cT0lDha280k+ASPKjNZ8d9RH7gssOLg= -----END CERTIFICATE-----Generated at Sun Sep 20 23:16:06 2026 by rpki-client