$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e3affef1-b310-3e3b-80e1-87cd2958e7b5.roa File: e3affef1-b310-3e3b-80e1-87cd2958e7b5.roa (raw, json) Hash identifier: R+ODPq3Fe1voin3HNw+fQE6S1+HlANk6ergxJr++750= Subject key identifier: 0E:54:A4:D5:94:78:27:47:F4:88:AF:13:8B:B1:8F:69:35:57:39:51 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F11A14E829F8848258CEF4300 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e3affef1-b310-3e3b-80e1-87cd2958e7b5.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 134.70.152.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:a1:4e:82:9f:88:48:25:8c:ef:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=9a4e426b-5a80-4cce-87a0-c96ac4d351d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a3:1f:f7:a7:65:7c:29:ab:49:99:c6:68:25: c9:33:3e:29:14:79:fd:e3:00:3b:a3:b1:46:67:2f: 4b:5f:02:e0:0f:27:e5:8c:45:84:bd:82:5a:36:89: 5e:05:a4:20:7b:c9:85:08:80:55:fb:23:35:31:df: 7a:63:b3:e9:9c:e8:86:61:22:b9:80:1f:84:d6:68: 01:a1:0b:fc:b5:0c:ce:65:a2:a9:d9:8d:c0:aa:53: 9f:da:5c:98:a4:c8:ce:b6:a4:7e:0f:59:d4:7e:ac: 48:13:38:7b:4d:78:b9:04:c7:89:46:f4:b0:82:2a: 4c:06:d8:b1:9d:5f:74:67:23:3b:11:c1:e1:a3:a7: fd:3b:85:5b:98:84:b9:fc:b5:89:7e:46:64:86:a7: d0:a7:a8:7d:50:33:b0:d8:d5:b3:d2:ea:dd:d7:b5: e7:03:02:dd:4f:56:c1:21:d0:78:98:ca:e5:b8:a6: 7a:33:09:7e:85:9d:4c:0d:32:45:14:63:c0:4b:53: c7:58:51:2a:e5:3c:4b:5f:d0:05:ce:1f:5d:bd:0a: d7:eb:41:c8:7f:6b:b9:13:c0:c1:01:cc:27:2c:35: 90:96:c4:f6:04:e2:ec:64:d1:fe:58:63:f2:8c:5e: ec:84:c1:d1:04:1f:fe:0a:8e:a8:63:79:4c:67:42: 74:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:54:A4:D5:94:78:27:47:F4:88:AF:13:8B:B1:8F:69:35:57:39:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e3affef1-b310-3e3b-80e1-87cd2958e7b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.70.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:5d:f1:da:13:4e:5f:c9:94:42:53:40:17:f6:94:cb:bd:41: 09:74:f7:bd:59:59:30:ed:dd:24:63:c9:23:e4:ed:07:f3:bc: 97:19:e7:1d:2e:f1:94:7f:6a:7e:46:57:45:33:68:cf:1b:5e: 30:a6:a2:81:3f:78:ca:06:b2:81:63:8a:3d:fd:17:73:b5:3b: de:c5:f7:0c:a3:02:21:9c:36:be:47:15:80:32:8f:71:e3:a6: 9e:e6:90:23:ef:e3:4a:0e:53:c1:8d:73:26:6f:69:60:c7:a4: 36:b3:36:41:71:73:85:7c:ab:d5:ca:5c:b8:9a:8a:d6:32:ee: ab:29:c8:90:88:8e:8c:b8:1d:67:83:8c:9f:d2:4f:8c:75:9f: 24:57:1e:e9:6f:74:e3:e9:df:ef:e4:06:bc:1c:5f:0d:1a:71: cd:60:84:d2:8a:f8:26:6d:12:6f:18:a8:e3:2a:9c:e5:3d:c7: 2b:17:3f:ae:ed:6d:e5:86:b9:16:e3:8f:af:71:48:0d:ad:00: 95:7a:43:ec:1b:00:3c:60:85:3a:be:c1:ac:5e:94:28:aa:e4: 5a:88:b9:10:04:b2:5e:e2:aa:5d:e2:d7:7e:11:94:e1:72:a6: aa:e0:02:a3:b3:6f:d8:1e:88:e1:59:80:29:bb:57:a1:b2:fe: 55:04:c0:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RoU6Cn4hIJYzvQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk OWE0ZTQyNmItNWE4MC00Y2NlLTg3YTAtYzk2YWM0ZDM1MWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qMf96dlfCmrSZnGaCXJMz4pFHn94wA7o7FG Zy9LXwLgDyfljEWEvYJaNoleBaQge8mFCIBV+yM1Md96Y7PpnOiGYSK5gB+E1mgB oQv8tQzOZaKp2Y3AqlOf2lyYpMjOtqR+D1nUfqxIEzh7TXi5BMeJRvSwgipMBtix nV90ZyM7EcHho6f9O4VbmIS5/LWJfkZkhqfQp6h9UDOw2NWz0urd17XnAwLdT1bB IdB4mMrluKZ6Mwl+hZ1MDTJFFGPAS1PHWFEq5TxLX9AFzh9dvQrX60HIf2u5E8DB AcwnLDWQlsT2BOLsZNH+WGPyjF7shMHRBB/+Co6oY3lMZ0J0iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA5UpNWUeCdH9IivE4uxj2k1VzlRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZTNhZmZlZjEtYjMxMC0z ZTNiLTgwZTEtODdjZDI5NThlN2I1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhkaYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJxd8doTTl/JlEJTQBf2lMu9QQl0971ZWTDt3SRjySPk7QfzvJcZ5x0u 8ZR/an5GV0UzaM8bXjCmooE/eMoGsoFjij39F3O1O97F9wyjAiGcNr5HFYAyj3Hj pp7mkCPv40oOU8GNcyZvaWDHpDazNkFxc4V8q9XKXLiaitYy7qspyJCIjoy4HWeD jJ/ST4x1nyRXHulvdOPp3+/kBrwcXw0acc1ghNKK+CZtEm8YqOMqnOU9xysXP67t beWGuRbjj69xSA2tAJV6Q+wbADxghTq+waxelCiq5FqIuRAEsl7iql3i134RlOFy pqrgAqOzb9geiOFZgCm7V6Gy/lUEwL0= -----END CERTIFICATE-----Generated at Mon Sep 21 21:25:57 2026 by rpki-client