$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d4288f84-cba1-3531-8b3d-4ba9fb0ffa13.roa File: d4288f84-cba1-3531-8b3d-4ba9fb0ffa13.roa (raw, json) Hash identifier: 44fYjwlwR8t8zK5DsrLrggFenYGJfRwCJ891vJzfwlY= Subject key identifier: C2:34:F3:07:61:B7:5C:C0:7A:95:A6:3E:13:AC:37:27:01:68:A9:32 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F49741ECED4D99595171E8B00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d4288f84-cba1-3531-8b3d-4ba9fb0ffa13.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 54253 IP address blocks: 170.9.96.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:1e:ce:d4:d9:95:95:17:1e:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1df1625c-3dde-4521-861f-ef517cf65a02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ad:9b:81:2e:f7:4a:dd:fb:90:92:a0:6f:24: 6e:ab:a1:e7:69:b9:a5:ad:b5:fc:2b:f1:36:c9:2a: 86:08:25:02:b0:df:f1:95:4e:79:35:ea:91:cf:54: 69:b8:b9:94:ed:bd:ed:67:29:3c:a8:8c:e4:ae:b6: fb:c2:91:f0:bc:46:95:ff:b8:bc:3d:22:01:d3:d8: df:b1:22:26:d7:40:48:cc:c0:62:cf:dc:2c:97:1a: 3b:ea:6a:f9:ed:e9:03:61:0d:b9:d0:86:09:9b:4a: f0:45:bd:1c:25:7f:ed:79:8c:03:ad:25:7a:45:f1: 4b:cf:b7:8f:6a:c9:92:91:39:da:a0:8b:b8:21:10: a9:fa:79:16:7d:85:0b:78:d7:b2:55:06:5b:29:64: 6b:37:09:9a:4d:f8:23:db:28:87:1c:0f:24:d5:a2: 30:c2:e0:81:8c:78:a7:1e:3d:92:ef:aa:00:c6:a1: eb:19:89:fa:14:f3:00:08:9f:99:e9:b5:a1:b7:fd: 59:3b:54:81:89:f3:92:d4:5c:14:ed:ce:df:cb:11: e7:2c:c3:5a:d2:a3:2e:6f:99:cf:15:02:e8:92:f6: 13:02:22:f8:6d:b1:65:06:d4:dc:ae:a4:b6:e4:a0: 78:52:76:76:c4:c5:73:4e:ef:3b:8a:74:11:58:ed: e3:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:34:F3:07:61:B7:5C:C0:7A:95:A6:3E:13:AC:37:27:01:68:A9:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d4288f84-cba1-3531-8b3d-4ba9fb0ffa13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 170.9.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:5c:f2:34:48:52:94:c5:c3:4d:6c:2a:29:04:e8:74:bb:c9: 9d:9f:82:af:56:c3:ff:ab:9b:ae:96:50:12:9f:7a:3a:de:2b: 6a:97:5a:6a:8f:d7:55:7a:27:e1:42:db:f2:27:73:38:ff:7b: 31:33:4e:68:df:26:4b:fb:49:a6:05:1b:60:f3:e6:91:95:1c: 01:37:54:c7:c6:1c:54:9a:56:45:f5:b8:41:54:8b:42:8e:5b: 5e:6d:f6:af:ed:56:0e:3a:fa:9a:bf:1a:57:fc:e1:99:e8:e9: 18:56:2a:dd:96:48:78:03:3d:ed:d9:40:bc:88:3b:d4:89:0a: a3:fc:ea:63:eb:c3:e9:b4:d2:d8:52:0f:b1:70:ac:5f:be:9f: bf:63:d8:62:6b:0a:56:28:0e:74:f3:b4:ae:b0:b4:10:32:bc: d3:44:8d:23:66:02:00:2f:14:e1:03:27:11:98:6c:11:2f:37: 72:7e:9e:a9:85:8d:1a:06:01:2f:38:af:14:c3:01:f4:38:2b: 22:fd:c7:ca:e3:56:cf:b1:c2:37:39:c9:82:e5:81:03:b6:8a: c0:97:d2:ff:aa:42:19:b0:b4:e5:0b:83:4b:f8:2f:f1:26:88: d1:12:4b:36:61:1b:8a:94:72:39:0f:b9:85:6a:47:e5:46:9a: 59:2f:38:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdB7O1NmVlRceiwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MWRmMTYyNWMtM2RkZS00NTIxLTg2MWYtZWY1MTdjZjY1YTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApK2bgS73St37kJKgbyRuq6HnabmlrbX8K/E2 ySqGCCUCsN/xlU55NeqRz1RpuLmU7b3tZyk8qIzkrrb7wpHwvEaV/7i8PSIB09jf sSIm10BIzMBiz9wslxo76mr57ekDYQ250IYJm0rwRb0cJX/teYwDrSV6RfFLz7eP asmSkTnaoIu4IRCp+nkWfYULeNeyVQZbKWRrNwmaTfgj2yiHHA8k1aIwwuCBjHin Hj2S76oAxqHrGYn6FPMACJ+Z6bWht/1ZO1SBifOS1FwU7c7fyxHnLMNa0qMub5nP FQLokvYTAiL4bbFlBtTcrqS25KB4UnZ2xMVzTu87inQRWO3jnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMI08wdht1zAepWmPhOsNycBaKkyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZDQyODhmODQtY2JhMS0z NTMxLThiM2QtNGJhOWZiMGZmYTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqglgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAANc8jRIUpTFw01sKikE6HS7yZ2fgq9Ww/+rm66WUBKfejreK2qXWmqP 11V6J+FC2/Inczj/ezEzTmjfJkv7SaYFG2Dz5pGVHAE3VMfGHFSaVkX1uEFUi0KO W15t9q/tVg46+pq/Glf84Zno6RhWKt2WSHgDPe3ZQLyIO9SJCqP86mPrw+m00thS D7FwrF++n79j2GJrClYoDnTztK6wtBAyvNNEjSNmAgAvFOEDJxGYbBEvN3J+nqmF jRoGAS84rxTDAfQ4KyL9x8rjVs+xwjc5yYLlgQO2isCX0v+qQhmwtOULg0v4L/Em iNESSzZhG4qUcjkPuYVqR+VGmlkvOAo= -----END CERTIFICATE-----Generated at Sat Sep 26 06:15:39 2026 by rpki-client