$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/db0d52d0-0a0d-36fe-a648-37a2d42e5765.roa File: db0d52d0-0a0d-36fe-a648-37a2d42e5765.roa (raw, json) Hash identifier: clpZmsBYx4wk65Y/SQGJuVjjZbe/1b/bNesF/o/inMU= Subject key identifier: 4F:39:A1:7D:81:5F:45:7F:90:AA:50:5F:C4:C6:66:E6:20:A1:C0:E8 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F0ED232D6B583437F34F67C00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/db0d52d0-0a0d-36fe-a648-37a2d42e5765.roa Signing time: Fri 04 Sep 2026 01:00:12 +0000 ROA not before: Fri 04 Sep 2026 01:00:12 +0000 ROA not after: Thu 03 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 134.70.206.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0e:d2:32:d6:b5:83:43:7f:34:f6:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 4 01:00:12 2026 GMT Not After : Dec 3 02:00:12 2026 GMT Subject: CN=a817f5c8-719d-4741-8212-f43fbe55912d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f9:a2:75:b6:cc:d1:86:3e:44:9d:a7:93:ed: b4:79:0d:a1:2f:86:7e:ab:9e:65:6c:11:05:e8:a7: 2b:c7:ac:57:c3:b1:65:6c:8d:cc:77:18:ab:24:e3: 30:ac:7b:b9:23:2d:d9:d0:74:03:9e:ed:80:9e:d3: 0f:15:27:a7:76:26:5c:d4:0d:62:79:f1:56:c5:24: 18:ac:6c:3f:0b:b1:f9:00:24:09:b3:ac:c3:32:a4: 65:36:44:4f:86:87:51:c2:fc:5c:4f:30:3d:1e:5e: 83:1f:e4:31:0e:76:b6:cd:ca:ab:fb:db:bd:42:28: 74:1e:ba:bf:17:3c:7c:17:17:6b:13:1d:ad:d5:8f: 23:01:1e:fc:60:1a:22:3b:60:a0:35:0a:81:0f:54: 90:df:08:f0:b5:4f:81:f1:36:68:75:e7:0e:e5:79: 75:46:0a:fa:73:ad:64:33:39:79:d7:c9:8d:08:fe: 2d:58:8f:ef:e8:6d:78:d6:b8:45:8d:31:57:d9:86: c1:8e:0e:82:e9:84:30:6a:ac:51:33:3f:ce:77:41: b4:b8:fe:d2:09:c7:09:83:a2:38:ac:6e:6f:9c:d7: e8:4c:20:89:1f:f0:ef:08:7e:3e:55:87:6c:d7:f7: 73:50:71:3e:da:32:ef:4e:e3:93:e2:85:98:ec:45: 8a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:39:A1:7D:81:5F:45:7F:90:AA:50:5F:C4:C6:66:E6:20:A1:C0:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/db0d52d0-0a0d-36fe-a648-37a2d42e5765.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.70.206.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:b6:2a:dd:f1:04:70:91:36:e1:e7:d6:33:1c:45:05:5c:95: fe:88:4c:f5:36:e2:32:ba:79:57:41:e4:d5:a3:07:c1:e8:fc: 23:f3:e6:31:a2:cb:08:04:bc:0a:a0:c6:93:40:78:f9:cc:c8: 74:4c:e3:b1:00:eb:bd:eb:0d:df:35:73:47:d9:b9:1e:fb:0d: 9d:5e:58:b7:87:ea:12:8b:df:4d:f9:26:79:70:0a:a9:25:3e: e2:60:95:16:1e:c4:55:2c:87:04:20:2f:15:f7:a0:17:44:a4: 06:6d:f0:93:54:8c:9b:ad:40:c6:30:bb:0f:50:85:ea:e0:1b: 28:c9:77:8c:84:f5:88:db:0a:46:56:75:f6:cb:d3:9a:9f:e1: a0:f3:fa:0f:e5:05:13:f6:1c:c9:37:e0:9b:4b:1f:5c:87:c4: a9:ae:bf:e7:c4:83:72:5b:dd:08:9d:f9:74:0b:89:dd:fd:ad: 85:93:8a:9c:25:5f:4b:96:2f:7c:d4:ee:35:bc:2c:4e:60:13: 39:a2:a1:73:74:9b:17:b5:d3:d0:10:b0:47:80:b4:56:50:15: 77:ec:d5:37:b4:39:03:92:4f:e0:0a:00:ba:5b:8e:ff:46:2b: b2:c1:1c:f3:4e:d2:7d:dc:94:cb:8f:71:2a:f0:31:4d:01:c5: 03:3a:32:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8O0jLWtYNDfzT2fAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNDAxMDAxMloXDTI2MTIwMzAyMDAxMlowLzEtMCsGA1UEAxMk YTgxN2Y1YzgtNzE5ZC00NzQxLTgyMTItZjQzZmJlNTU5MTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPmidbbM0YY+RJ2nk+20eQ2hL4Z+q55lbBEF 6Kcrx6xXw7FlbI3MdxirJOMwrHu5Iy3Z0HQDnu2AntMPFSendiZc1A1iefFWxSQY rGw/C7H5ACQJs6zDMqRlNkRPhodRwvxcTzA9Hl6DH+QxDna2zcqr+9u9Qih0Hrq/ Fzx8FxdrEx2t1Y8jAR78YBoiO2CgNQqBD1SQ3wjwtU+B8TZodecO5Xl1Rgr6c61k Mzl518mNCP4tWI/v6G141rhFjTFX2YbBjg6C6YQwaqxRMz/Od0G0uP7SCccJg6I4 rG5vnNfoTCCJH/DvCH4+VYds1/dzUHE+2jLvTuOT4oWY7EWKkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE85oX2BX0V/kKpQX8TGZuYgocDoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZGIwZDUyZDAtMGEwZC0z NmZlLWE2NDgtMzdhMmQ0MmU1NzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhkbOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+2Kt3xBHCRNuHn1jMcRQVclf6ITPU24jK6eVdB5NWjB8Ho/CPz5jGi ywgEvAqgxpNAePnMyHRM47EA673rDd81c0fZuR77DZ1eWLeH6hKL3035JnlwCqkl PuJglRYexFUshwQgLxX3oBdEpAZt8JNUjJutQMYwuw9QhergGyjJd4yE9YjbCkZW dfbL05qf4aDz+g/lBRP2HMk34JtLH1yHxKmuv+fEg3Jb3Qid+XQLid39rYWTipwl X0uWL3zU7jW8LE5gEzmioXN0mxe109AQsEeAtFZQFXfs1Te0OQOST+AKALpbjv9G K7LBHPNO0n3clMuPcSrwMU0BxQM6MkI= -----END CERTIFICATE-----Generated at Sun Sep 20 21:54:03 2026 by rpki-client