$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e6970d7f-65c7-3f5f-86c4-9dca3a270f2b.roa File: e6970d7f-65c7-3f5f-86c4-9dca3a270f2b.roa (raw, json) Hash identifier: myulD/blNIqY+yn8L72tsK2WJQRVeFyyYPCOnWkrb30= Subject key identifier: A6:FA:9D:E0:68:0B:FF:B8:12:E9:0F:5B:AB:EC:9A:44:47:E0:FF:FD Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F11A1448502A41D879BF8A980 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e6970d7f-65c7-3f5f-86c4-9dca3a270f2b.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 204.216.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:a1:44:85:02:a4:1d:87:9b:f8:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=5bf7529f-3ee7-495f-8b1e-3be6766ecbeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:26:b9:85:28:6e:9d:51:f5:6a:e6:ef:a6:34: d4:d2:90:3d:7a:4f:45:c4:a1:ac:23:ae:48:23:7b: 60:27:2a:d9:19:c9:39:e7:d1:8f:0a:9f:2c:7d:c8: 23:2c:74:33:1d:5a:18:c3:84:99:ce:67:77:ba:ed: 17:88:58:2b:08:98:92:37:ec:92:bb:ca:78:d1:3a: 47:be:8d:88:85:04:90:0c:c1:ae:f6:8d:9f:c4:4b: ff:f7:3e:2c:c6:e8:f1:eb:75:46:b0:79:cb:bb:4f: fb:20:3f:22:e7:44:6d:a8:0e:8c:2e:f9:9e:9d:99: 72:b4:03:9c:bc:32:50:f3:f9:d8:bf:32:7e:4a:3a: 3a:63:b9:05:01:af:65:28:7f:3c:07:a5:e7:f9:ec: b1:d6:b4:40:58:7a:e3:4a:b2:57:d3:25:92:8a:e0: 74:f4:ac:0c:73:e1:1f:bf:f7:6d:d1:28:e1:10:0d: 95:ee:ca:37:0a:05:f6:82:98:33:83:80:25:66:2d: c7:06:78:6d:b5:40:5f:a5:80:f6:a1:c1:4d:86:00: 84:bf:5b:d8:ff:3b:98:a6:2d:0c:88:0b:ba:57:cb: ac:5b:eb:95:67:42:0f:39:40:9c:c1:12:b8:16:74: 6e:e8:59:dc:3b:56:f1:c7:b2:ac:56:62:03:02:32: de:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:FA:9D:E0:68:0B:FF:B8:12:E9:0F:5B:AB:EC:9A:44:47:E0:FF:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e6970d7f-65c7-3f5f-86c4-9dca3a270f2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 204.216.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:92:3e:73:e7:c6:69:0b:a9:7d:2a:5e:d0:ef:93:04:ec:ef: 2d:6e:e5:c3:03:56:b1:88:d6:9b:4c:ff:01:d1:91:3b:48:84: da:e8:33:66:37:af:64:5d:51:2e:11:d7:53:9d:9a:b2:f3:e0: 7c:96:e1:a5:71:de:f1:ac:d3:e2:39:2e:5f:de:82:8f:f4:49: 06:2a:3c:cb:74:b9:48:fa:17:6d:1f:56:1b:55:7f:96:2a:c9: f7:2f:c8:86:27:ca:12:f7:b6:c0:a5:51:be:16:05:fd:3f:f9: 41:a9:d6:22:c1:9d:77:dc:7e:02:94:54:b2:1e:db:f9:9e:97: 76:31:d1:ea:e3:80:21:60:eb:f8:d0:78:fc:97:ce:a9:3d:82: ab:44:b0:da:9b:e1:7f:98:93:0b:a7:ce:62:d5:f3:f0:00:6a: 73:d9:8e:97:f4:ad:4d:3c:07:65:fe:50:4f:e9:4e:6d:55:a9: 3f:fb:6d:56:36:33:39:01:61:68:57:67:8a:89:57:18:81:09: c9:b5:6f:4a:a9:fe:56:7b:98:3b:a2:49:7b:7f:49:21:e1:9a: f6:f9:43:f5:9b:3c:8d:2b:84:5a:e5:d3:d9:05:27:1a:ee:06: 83:b9:73:99:3b:85:5f:f6:63:c2:37:01:bc:41:02:95:e6:13: 02:66:f7:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RoUSFAqQdh5v4qYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk NWJmNzUyOWYtM2VlNy00OTVmLThiMWUtM2JlNjc2NmVjYmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCa5hShunVH1aubvpjTU0pA9ek9FxKGsI65I I3tgJyrZGck559GPCp8sfcgjLHQzHVoYw4SZzmd3uu0XiFgrCJiSN+ySu8p40TpH vo2IhQSQDMGu9o2fxEv/9z4sxujx63VGsHnLu0/7ID8i50RtqA6MLvmenZlytAOc vDJQ8/nYvzJ+Sjo6Y7kFAa9lKH88B6Xn+eyx1rRAWHrjSrJX0yWSiuB09KwMc+Ef v/dt0SjhEA2V7so3CgX2gpgzg4AlZi3HBnhttUBfpYD2ocFNhgCEv1vY/zuYpi0M iAu6V8usW+uVZ0IPOUCcwRK4FnRu6FncO1bxx7KsVmIDAjLe+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKb6neBoC/+4EukPW6vsmkRH4P/9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZTY5NzBkN2YtNjVjNy0z ZjVmLTg2YzQtOWRjYTNhMjcwZjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzNh4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACiSPnPnxmkLqX0qXtDvkwTs7y1u5cMDVrGI1ptM/wHRkTtIhNroM2Y3 r2RdUS4R11OdmrLz4HyW4aVx3vGs0+I5Ll/ego/0SQYqPMt0uUj6F20fVhtVf5Yq yfcvyIYnyhL3tsClUb4WBf0/+UGp1iLBnXfcfgKUVLIe2/mel3Yx0erjgCFg6/jQ ePyXzqk9gqtEsNqb4X+YkwunzmLV8/AAanPZjpf0rU08B2X+UE/pTm1VqT/7bVY2 MzkBYWhXZ4qJVxiBCcm1b0qp/lZ7mDuiSXt/SSHhmvb5Q/WbPI0rhFrl09kFJxru BoO5c5k7hV/2Y8I3AbxBApXmEwJm94M= -----END CERTIFICATE-----Generated at Tue Sep 22 03:11:20 2026 by rpki-client