$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d825c937-f261-35ea-bb30-5c6f8ed8a0d8.roa File: d825c937-f261-35ea-bb30-5c6f8ed8a0d8.roa (raw, json) Hash identifier: W6v3jmwawWd4i8HT/qBOA3XT+FBEwYMS7CO59VGKRA8= Subject key identifier: 17:D7:70:E4:B0:2F:53:E0:06:2D:20:90:56:E7:C6:31:A6:F7:8F:1D Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F0D6CF78D5D798111804CCE00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d825c937-f261-35ea-bb30-5c6f8ed8a0d8.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 207.127.104.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:f7:8d:5d:79:81:11:80:4c:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=3e3375f0-5f17-43f3-9657-8479e2eb2f1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:06:3b:8e:32:11:72:df:16:47:68:67:cf:94: 3b:a1:9d:44:44:42:b2:8c:e9:7b:ac:bb:0a:29:24: 3a:63:16:06:65:1d:34:2d:de:e9:fe:5d:5f:6c:52: 8d:b9:e8:85:b3:8f:41:c5:0e:7f:d2:e5:10:38:48: 67:c5:b6:5f:1f:29:4e:ba:10:31:ea:4f:bc:c7:10: 22:a8:c3:c0:58:d7:21:d5:a7:30:6f:35:52:a5:39: f8:10:04:62:5f:36:5d:21:4f:bd:57:20:fd:b9:3a: d7:99:55:c2:7b:6d:85:b2:ba:24:dd:b2:e6:fc:6c: df:de:bb:78:1d:ab:a4:db:de:3f:ed:fd:10:cd:74: fa:84:9d:a1:42:8c:df:26:b9:a9:0c:26:71:45:00: 1f:49:19:56:b6:8a:8a:5f:92:fc:c7:78:a7:1e:b5: 57:d2:20:32:bc:36:a4:4f:fb:3f:46:c1:6f:a4:a8: 20:d3:fb:0d:31:3f:a3:5a:a5:0f:95:f4:dd:e6:64: 5a:9c:46:1b:1f:3e:af:92:4c:4b:6a:5f:ba:27:31: 57:51:53:03:80:4d:5f:5d:c6:99:ef:7b:7a:ff:fe: f1:a9:bc:aa:b8:55:b1:bd:a3:25:86:e9:a0:02:75: 1b:86:ef:bc:2a:b8:ce:a9:f8:e7:e3:e9:79:18:da: ad:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:D7:70:E4:B0:2F:53:E0:06:2D:20:90:56:E7:C6:31:A6:F7:8F:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d825c937-f261-35ea-bb30-5c6f8ed8a0d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 207.127.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:0b:61:d5:8b:b9:a1:6e:f7:c1:19:f5:09:bd:4e:90:bb:35: 18:bf:82:18:c4:2b:3a:bc:e4:d5:ba:c4:39:78:93:8b:cf:ea: c6:31:bf:40:53:51:1c:41:3b:40:23:1b:48:93:70:41:54:0b: a5:29:46:4e:9a:21:4a:0d:a8:8f:6c:ed:8c:ee:ad:26:f5:8e: 9d:44:95:72:ff:a6:c6:e5:c5:32:6e:13:81:76:9f:41:10:ac: 88:eb:07:8b:c6:93:87:f7:ce:f2:f3:22:3b:a7:ec:cc:85:5e: d8:87:2f:03:5e:5c:25:00:e1:24:5c:fe:ba:ce:0b:12:66:6e: f3:af:4f:64:f1:85:7f:2f:66:4c:46:2b:75:22:d4:3e:9a:92: bd:8d:b9:fa:f5:f3:2e:1d:0e:be:7a:9f:07:5d:7b:88:67:08: b3:ed:bf:00:26:b2:62:9d:8a:0a:dd:84:de:31:19:f7:8d:c0: c9:6d:ed:be:2b:26:77:12:d0:55:d9:a0:b8:13:36:01:eb:75: 34:e7:37:ba:4c:2a:c5:bf:6d:08:22:38:15:25:ea:25:79:2a: c6:35:f6:df:14:37:85:c0:4f:d9:df:14:6d:d8:f4:52:58:43: aa:36:36:bb:c8:1f:6c:ce:98:f3:48:47:cc:ee:ad:f7:86:59: f9:de:09:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbPeNXXmBEYBMzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk M2UzMzc1ZjAtNWYxNy00M2YzLTk2NTctODQ3OWUyZWIyZjFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAY7jjIRct8WR2hnz5Q7oZ1EREKyjOl7rLsK KSQ6YxYGZR00Ld7p/l1fbFKNueiFs49BxQ5/0uUQOEhnxbZfHylOuhAx6k+8xxAi qMPAWNch1acwbzVSpTn4EARiXzZdIU+9VyD9uTrXmVXCe22Fsrok3bLm/Gzf3rt4 Hauk294/7f0QzXT6hJ2hQozfJrmpDCZxRQAfSRlWtoqKX5L8x3inHrVX0iAyvDak T/s/RsFvpKgg0/sNMT+jWqUPlfTd5mRanEYbHz6vkkxLal+6JzFXUVMDgE1fXcaZ 73t6//7xqbyquFWxvaMlhumgAnUbhu+8KrjOqfjn4+l5GNqtNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBfXcOSwL1PgBi0gkFbnxjGm948dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZDgyNWM5MzctZjI2MS0z NWVhLWJiMzAtNWM2ZjhlZDhhMGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz39oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKsLYdWLuaFu98EZ9Qm9TpC7NRi/ghjEKzq85NW6xDl4k4vP6sYxv0BT URxBO0AjG0iTcEFUC6UpRk6aIUoNqI9s7YzurSb1jp1ElXL/psblxTJuE4F2n0EQ rIjrB4vGk4f3zvLzIjun7MyFXtiHLwNeXCUA4SRc/rrOCxJmbvOvT2TxhX8vZkxG K3Ui1D6akr2Nufr18y4dDr56nwdde4hnCLPtvwAmsmKdigrdhN4xGfeNwMlt7b4r JncS0FXZoLgTNgHrdTTnN7pMKsW/bQgiOBUl6iV5KsY19t8UN4XAT9nfFG3Y9FJY Q6o2NrvIH2zOmPNIR8zurfeGWfneCWM= -----END CERTIFICATE-----Generated at Tue Sep 22 11:15:25 2026 by rpki-client