$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d139e33b-daca-3fc5-8b2c-9d66d06396a0.roa File: d139e33b-daca-3fc5-8b2c-9d66d06396a0.roa (raw, json) Hash identifier: CGlZn0D1rhd+VP4GQF8k0xaOcCHQ42mpA218iGIrjJI= Subject key identifier: FC:F0:4B:A3:27:03:D5:43:E9:BF:1D:D5:E9:BE:C6:7B:45:6D:A9:89 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F130239651F9295E11A9ADC00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d139e33b-daca-3fc5-8b2c-9d66d06396a0.roa Signing time: Sat 05 Sep 2026 13:00:12 +0000 ROA not before: Sat 05 Sep 2026 13:00:12 +0000 ROA not after: Fri 04 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 147.154.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:13:02:39:65:1f:92:95:e1:1a:9a:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 5 13:00:12 2026 GMT Not After : Dec 4 14:00:12 2026 GMT Subject: CN=dd410c63-c7f4-49ff-a3c7-16dccb076d96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c6:58:53:9e:d5:d8:57:06:b7:69:13:ea:5f: 12:e0:5f:6c:b0:b6:ab:b6:56:ab:36:f2:6a:44:c5: a6:92:42:ce:47:81:83:fc:6b:13:69:45:c0:83:3c: 41:25:b2:51:f6:05:9f:a1:ff:42:57:77:95:10:8f: 06:e8:00:c2:ba:0f:c7:e1:25:df:3d:e8:6c:8e:3b: cb:57:45:b0:74:3e:03:ad:c3:fa:f1:a6:2d:90:a9: 97:12:7c:63:63:a3:83:a9:99:4d:34:19:dc:9d:e6: 7e:8f:d0:1d:6e:d2:f7:fe:ab:c9:c0:8c:f7:aa:82: d9:d8:74:cf:c1:7a:0c:8e:57:06:53:6a:47:0b:28: 75:07:d0:39:40:d8:05:3f:15:a3:66:f7:32:e3:a5: be:e1:b1:20:ee:a1:b3:dc:9f:ed:6b:82:9e:03:61: e3:88:b2:16:20:b4:88:48:70:58:19:15:ff:aa:e5: 33:52:5e:7e:e4:a2:49:8a:d9:98:17:a2:d3:39:39: e8:16:2a:5d:1d:0d:cd:a3:4e:75:ad:c9:2b:80:16: cc:44:41:c9:dc:67:45:5c:62:4f:d0:2d:25:b6:53: 60:06:da:df:f6:80:0d:89:fd:ee:68:94:d1:02:00: d7:b3:92:13:d5:9f:58:48:d8:57:43:88:7a:5d:7b: f6:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:F0:4B:A3:27:03:D5:43:E9:BF:1D:D5:E9:BE:C6:7B:45:6D:A9:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d139e33b-daca-3fc5-8b2c-9d66d06396a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 147.154.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:f7:4e:3d:60:1b:c4:97:4e:b4:c5:2d:fd:c6:9d:27:e5:0b: bc:78:ce:82:d7:53:de:c2:c2:40:ee:48:16:05:84:14:57:61: bb:0e:e0:e3:5a:bf:4f:e2:6b:11:c1:e2:5a:e7:df:24:7d:ec: 7b:44:b9:9e:40:a4:cd:d4:9e:ee:08:78:bf:bc:e4:52:cb:e4: 4d:dc:36:14:7c:d4:69:ae:1f:90:f4:7a:36:18:20:3f:a8:cd: 7f:eb:64:c3:8c:47:77:64:f6:da:69:27:f0:94:d8:97:8f:11: 85:62:08:5e:e3:20:c1:03:fe:08:e8:9f:3b:2f:bd:54:be:56: cb:e7:80:14:d3:85:db:42:b7:38:08:5c:86:77:4e:32:00:d0: 74:86:14:49:d1:41:36:8d:c2:71:f2:df:c2:74:06:12:55:1e: cd:a2:d6:89:bc:26:06:f0:74:c0:1f:ea:2e:af:a7:49:20:78: cd:b7:37:74:b8:f7:42:35:9c:2b:fa:4f:c4:3a:3d:ee:31:80: 04:41:31:b9:cb:ae:64:8e:6f:f7:28:fd:ac:80:ba:4e:60:22: 35:f0:88:9d:87:19:5e:67:d0:8b:a4:20:c7:15:ee:66:68:85: 06:c0:18:5f:93:26:3a:7b:ea:c0:8f:82:e8:f7:ac:88:4a:63: af:d2:7a:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8TAjllH5KV4Rqa3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNTEzMDAxMloXDTI2MTIwNDE0MDAxMlowLzEtMCsGA1UEAxMk ZGQ0MTBjNjMtYzdmNC00OWZmLWEzYzctMTZkY2NiMDc2ZDk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8ZYU57V2FcGt2kT6l8S4F9ssLartlarNvJq RMWmkkLOR4GD/GsTaUXAgzxBJbJR9gWfof9CV3eVEI8G6ADCug/H4SXfPehsjjvL V0WwdD4DrcP68aYtkKmXEnxjY6ODqZlNNBncneZ+j9AdbtL3/qvJwIz3qoLZ2HTP wXoMjlcGU2pHCyh1B9A5QNgFPxWjZvcy46W+4bEg7qGz3J/ta4KeA2HjiLIWILSI SHBYGRX/quUzUl5+5KJJitmYF6LTOTnoFipdHQ3No051rckrgBbMREHJ3GdFXGJP 0C0ltlNgBtrf9oANif3uaJTRAgDXs5IT1Z9YSNhXQ4h6XXv2gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPzwS6MnA9VD6b8d1em+xntFbamJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZDEzOWUzM2ItZGFjYS0z ZmM1LThiMmMtOWQ2NmQwNjM5NmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEk5pwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE33Tj1gG8SXTrTFLf3GnSflC7x4zoLXU97CwkDuSBYFhBRXYbsO4ONa v0/iaxHB4lrn3yR97HtEuZ5ApM3Unu4IeL+85FLL5E3cNhR81GmuH5D0ejYYID+o zX/rZMOMR3dk9tppJ/CU2JePEYViCF7jIMED/gjonzsvvVS+VsvngBTThdtCtzgI XIZ3TjIA0HSGFEnRQTaNwnHy38J0BhJVHs2i1om8JgbwdMAf6i6vp0kgeM23N3S4 90I1nCv6T8Q6Pe4xgARBMbnLrmSOb/co/ayAuk5gIjXwiJ2HGV5n0IukIMcV7mZo hQbAGF+TJjp76sCPguj3rIhKY6/Seug= -----END CERTIFICATE-----Generated at Tue Sep 22 09:04:58 2026 by rpki-client