$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ecd62359-95d1-322b-a070-e2e848c10486.roa File: ecd62359-95d1-322b-a070-e2e848c10486.roa (raw, json) Hash identifier: +UnTsAg6U50+5Uo5vv4TuCfizL87UrSrP/2SPWpcMyI= Subject key identifier: 58:AC:20:62:D2:BF:E6:27:EF:A7:DD:AB:44:CB:84:3F:EE:B8:2C:58 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F1B6256B8CA24186FCE3E4998 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ecd62359-95d1-322b-a070-e2e848c10486.roa Signing time: Tue 08 Sep 2026 13:00:12 +0000 ROA not before: Tue 08 Sep 2026 13:00:12 +0000 ROA not after: Mon 07 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 147.154.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:62:56:b8:ca:24:18:6f:ce:3e:49:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 8 13:00:12 2026 GMT Not After : Dec 7 14:00:12 2026 GMT Subject: CN=afd86bc6-81e1-4f51-8bbf-88fcc51d10a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:b5:31:09:08:21:b4:dd:7d:70:5f:e8:a7:5c: 35:00:9a:05:8d:d9:5e:84:06:6a:28:7e:b8:ac:95: 19:13:ac:fc:d6:9a:7a:cc:b3:a1:32:76:10:d3:0d: 5d:52:fc:f0:b2:c4:53:e5:63:6c:3f:cd:fd:c9:e3: 2a:f5:f9:69:4e:5d:a2:27:38:83:7d:ac:b6:d5:df: 49:54:0d:13:4a:67:26:de:f3:1a:85:2a:dd:ea:dd: ca:21:63:f6:72:7b:32:e7:04:00:0c:d8:df:4c:58: 08:5c:fe:e1:8a:03:0c:4c:7f:3d:ab:c2:fe:e6:b5: e3:94:1c:22:93:e5:3e:95:a6:6f:02:25:7f:cb:1d: 04:05:0a:f8:4d:b3:36:0e:80:91:5d:4e:0a:05:ae: fe:77:02:de:96:55:c6:38:62:d9:27:08:2a:fd:1d: 8f:21:fe:4b:eb:92:9d:da:4e:0a:3e:4f:de:1d:a0: d8:05:b0:b5:d1:b0:b3:6c:9a:c5:53:29:ce:d4:e3: 59:1a:40:9f:d4:99:2a:d9:45:06:a8:cc:d2:12:84: 5a:33:89:7c:e5:2d:55:64:c5:ee:58:3b:c6:b1:65: 5c:a4:4d:d0:64:70:45:0f:07:cb:68:05:e8:34:0e: 2a:c1:84:46:f7:81:17:51:f0:84:da:e3:47:d2:ca: 7e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:AC:20:62:D2:BF:E6:27:EF:A7:DD:AB:44:CB:84:3F:EE:B8:2C:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ecd62359-95d1-322b-a070-e2e848c10486.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 147.154.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:5c:6d:57:ce:de:c7:d5:d8:98:80:c0:c3:e2:50:cb:1d:0f: 4c:c9:d3:f0:af:98:7f:ce:cc:95:eb:36:82:b8:c0:00:74:43: 17:72:36:c6:07:4f:00:38:03:27:ed:00:aa:79:4f:b8:53:1a: ad:dc:16:f2:ed:3d:89:c8:80:52:c7:89:23:c8:45:4d:e7:0b: 57:e1:b7:83:ca:b9:02:0d:e6:d9:bf:98:81:8f:6b:df:26:48: ff:65:29:8b:f0:70:2c:af:ec:cb:aa:2a:30:3c:7b:a8:71:1c: 50:8c:d7:c4:6a:8b:2e:65:14:a9:b3:d3:87:e7:49:a8:76:74: 1e:60:9c:65:f6:fe:a0:0b:c8:06:3d:3f:58:ff:91:dc:09:ec: 97:25:61:03:0f:83:d2:2a:00:cf:8e:36:be:39:a3:0d:7b:6d: 25:87:4e:24:9f:8a:1a:c3:80:ca:05:7d:e3:7b:3f:50:ca:ec: 74:e3:d8:db:89:97:10:c1:f8:1f:48:ca:96:de:18:57:e1:8e: f4:cf:86:3c:c9:f4:fb:ae:d6:65:09:39:d0:6b:b9:ae:e4:31: af:48:13:d6:23:75:f4:af:79:e9:01:87:f5:29:8c:b0:ca:77: 46:38:22:6c:19:eb:7e:c5:42:f7:55:1c:9c:41:72:56:c3:41: 5b:ae:3e:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8bYla4yiQYb84+SZgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwODEzMDAxMloXDTI2MTIwNzE0MDAxMlowLzEtMCsGA1UEAxMk YWZkODZiYzYtODFlMS00ZjUxLThiYmYtODhmY2M1MWQxMGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbUxCQghtN19cF/op1w1AJoFjdlehAZqKH64 rJUZE6z81pp6zLOhMnYQ0w1dUvzwssRT5WNsP839yeMq9flpTl2iJziDfay21d9J VA0TSmcm3vMahSrd6t3KIWP2cnsy5wQADNjfTFgIXP7higMMTH89q8L+5rXjlBwi k+U+laZvAiV/yx0EBQr4TbM2DoCRXU4KBa7+dwLellXGOGLZJwgq/R2PIf5L65Kd 2k4KPk/eHaDYBbC10bCzbJrFUynO1ONZGkCf1Jkq2UUGqMzSEoRaM4l85S1VZMXu WDvGsWVcpE3QZHBFDwfLaAXoNA4qwYRG94EXUfCE2uNH0sp+OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFisIGLSv+Yn76fdq0TLhD/uuCxYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZWNkNjIzNTktOTVkMS0z MjJiLWEwNzAtZTJlODQ4YzEwNDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEk5oAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZcbVfO3sfV2JiAwMPiUMsdD0zJ0/CvmH/OzJXrNoK4wAB0QxdyNsYH TwA4AyftAKp5T7hTGq3cFvLtPYnIgFLHiSPIRU3nC1fht4PKuQIN5tm/mIGPa98m SP9lKYvwcCyv7MuqKjA8e6hxHFCM18Rqiy5lFKmz04fnSah2dB5gnGX2/qALyAY9 P1j/kdwJ7JclYQMPg9IqAM+ONr45ow17bSWHTiSfihrDgMoFfeN7P1DK7HTj2NuJ lxDB+B9IypbeGFfhjvTPhjzJ9Puu1mUJOdBrua7kMa9IE9YjdfSveekBh/UpjLDK d0Y4ImwZ637FQvdVHJxBclbDQVuuPok= -----END CERTIFICATE-----Generated at Mon Sep 21 13:41:55 2026 by rpki-client