$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ea93b4be-e82c-3dc0-8651-f6e5a5642082.roa File: ea93b4be-e82c-3dc0-8651-f6e5a5642082.roa (raw, json) Hash identifier: rljTf+aQHBwxcFxMoTYDLDpxJ4T58zj4jQYq24E9vzI= Subject key identifier: F6:E4:6A:0F:02:EC:11:77:50:E1:B7:00:9B:FC:01:9E:FB:91:D1:CA Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F130241E51E1D761B2B2F8D80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ea93b4be-e82c-3dc0-8651-f6e5a5642082.roa Signing time: Sat 05 Sep 2026 13:00:12 +0000 ROA not before: Sat 05 Sep 2026 13:00:12 +0000 ROA not after: Fri 04 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 68.233.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:13:02:41:e5:1e:1d:76:1b:2b:2f:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 5 13:00:12 2026 GMT Not After : Dec 4 14:00:12 2026 GMT Subject: CN=68652229-8e93-4623-9539-12efdf8bea52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:a2:2c:b0:a8:7d:9a:c3:42:32:29:79:d2:af: 7a:3a:b2:c4:ea:86:84:d9:bb:9f:44:ed:de:2d:4c: ee:39:39:fe:df:cd:0f:ad:5a:74:ab:5e:9a:d9:da: 9a:af:d2:0d:6f:30:e8:54:51:fc:58:9d:85:fc:32: 2e:2e:d5:88:25:a6:fd:1d:05:82:60:18:85:02:21: 8b:50:71:40:6c:49:8e:d8:00:81:f5:98:70:ad:61: 24:4f:13:2c:ca:8b:b4:a3:c7:23:6d:7a:0b:fa:6b: 91:79:07:0d:3b:c6:b3:bd:4a:42:d6:a7:9d:48:24: 84:83:22:9d:df:f9:ff:96:68:94:c8:08:42:a7:a6: a5:96:16:0b:0e:d6:a8:c8:b0:df:02:e9:b2:4a:a5: 28:e1:59:78:8c:6e:c0:97:ec:37:37:a6:ec:65:af: 66:f0:56:2f:8e:89:34:e4:2c:42:51:9c:6a:11:1f: 1f:be:b8:13:ef:be:dd:54:92:35:a0:4c:30:9c:d9: 0b:9e:b4:0a:a1:2b:84:38:cc:fc:4f:6f:57:90:6d: 2f:39:df:87:1d:c0:ea:3e:8a:19:86:12:98:8a:f3: 4e:74:e9:5d:37:86:ff:81:a1:46:57:43:a1:24:dc: 6a:e2:63:da:82:4f:ad:df:57:e7:df:f0:14:fe:c7: e9:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:E4:6A:0F:02:EC:11:77:50:E1:B7:00:9B:FC:01:9E:FB:91:D1:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ea93b4be-e82c-3dc0-8651-f6e5a5642082.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 68.233.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:a8:84:0c:67:76:a1:a0:cc:3b:de:34:b0:bc:57:b9:07:16: d0:1c:5b:dd:9a:66:2d:59:c1:fd:0e:ce:64:12:22:7a:3d:07: a2:df:83:98:20:83:81:2d:5f:3a:16:2a:4b:26:84:bd:f1:e9: 8a:ad:1c:31:aa:62:2b:d1:20:9e:17:37:06:c4:61:2b:b8:23: 8f:84:d2:32:d9:ce:98:f1:2e:3c:68:7a:54:72:dd:27:9c:65: a3:c3:68:b0:11:44:b8:a8:36:d9:ce:15:26:61:ef:47:dd:7e: d9:9d:d9:f6:22:dc:3e:76:24:ef:cc:a1:cd:a0:ff:24:7c:02: 23:37:39:4d:da:fb:95:b3:aa:b1:fc:67:e1:80:72:27:1c:66: 43:c4:65:43:06:9f:60:c7:73:52:25:25:97:5a:0f:0b:fb:a9: bc:ae:b5:7f:d5:0e:24:3f:5e:a3:8d:a4:42:7b:36:d2:f6:cb: 37:fe:a9:a2:41:77:d4:11:d2:aa:63:6b:e3:84:fa:b4:e3:bc: 30:18:bb:f6:8d:ad:86:fa:ee:39:5b:ed:f8:00:91:fe:ad:c6: 04:67:96:41:4c:2f:fa:b1:c1:b1:1d:bc:93:b0:2a:8e:a8:cf: ec:5c:64:b0:0f:b0:88:af:2c:7b:b6:d7:28:df:c5:1f:62:cb: f1:be:ce:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8TAkHlHh12GysvjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNTEzMDAxMloXDTI2MTIwNDE0MDAxMlowLzEtMCsGA1UEAxMk Njg2NTIyMjktOGU5My00NjIzLTk1MzktMTJlZmRmOGJlYTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKIssKh9msNCMil50q96OrLE6oaE2bufRO3e LUzuOTn+380PrVp0q16a2dqar9INbzDoVFH8WJ2F/DIuLtWIJab9HQWCYBiFAiGL UHFAbEmO2ACB9ZhwrWEkTxMsyou0o8cjbXoL+muReQcNO8azvUpC1qedSCSEgyKd 3/n/lmiUyAhCp6allhYLDtaoyLDfAumySqUo4Vl4jG7Al+w3N6bsZa9m8FYvjok0 5CxCUZxqER8fvrgT777dVJI1oEwwnNkLnrQKoSuEOMz8T29XkG0vOd+HHcDqPooZ hhKYivNOdOldN4b/gaFGV0OhJNxq4mPagk+t31fn3/AU/sfp8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPbkag8C7BF3UOG3AJv8AZ77kdHKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZWE5M2I0YmUtZTgyYy0z ZGMwLTg2NTEtZjZlNWE1NjQyMDgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDROl4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAeohAxndqGgzDveNLC8V7kHFtAcW92aZi1Zwf0OzmQSIno9B6Lfg5gg g4EtXzoWKksmhL3x6YqtHDGqYivRIJ4XNwbEYSu4I4+E0jLZzpjxLjxoelRy3Sec ZaPDaLARRLioNtnOFSZh70fdftmd2fYi3D52JO/Moc2g/yR8AiM3OU3a+5WzqrH8 Z+GAciccZkPEZUMGn2DHc1IlJZdaDwv7qbyutX/VDiQ/XqONpEJ7NtL2yzf+qaJB d9QR0qpja+OE+rTjvDAYu/aNrYb67jlb7fgAkf6txgRnlkFML/qxwbEdvJOwKo6o z+xcZLAPsIivLHu21yjfxR9iy/G+zhU= -----END CERTIFICATE-----Generated at Tue Sep 22 20:44:37 2026 by rpki-client