$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f0dfcb1e-ba9f-3e7b-9f92-4ed1127986e9.roa File: f0dfcb1e-ba9f-3e7b-9f92-4ed1127986e9.roa (raw, json) Hash identifier: qcQI0X0QatK2RzOJ4m2QFh543AmoURPp0lQ6Jr9jIuA= Subject key identifier: 6D:AE:13:8E:C2:95:20:BD:CC:09:30:8F:AB:81:3A:1F:52:7C:C0:60 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F093CD4E6571641CF89EBC700 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f0dfcb1e-ba9f-3e7b-9f92-4ed1127986e9.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 134.70.176.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:d4:e6:57:16:41:cf:89:eb:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=76d502da-5381-4e36-9a83-34e40a56eb66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d2:48:58:ee:66:13:e4:e0:3d:54:8b:4c:7e: 3d:85:1d:2b:e7:92:1f:b6:10:b7:76:5e:5e:42:be: a1:1b:2b:ac:ee:6c:b0:b4:f7:b0:3b:26:83:63:e3: cf:28:9a:a3:5f:7f:a2:b9:73:b3:4c:55:2d:d2:c9: 3a:62:fe:3a:91:36:98:df:f9:e4:df:91:1d:90:f7: b4:a1:7f:6e:bf:67:22:cd:90:64:7f:6c:2f:a8:68: 16:b0:99:14:f0:db:9d:93:05:4d:61:d4:b5:d6:7e: 0d:0d:af:bf:77:29:ed:8c:03:04:8f:f9:34:a1:33: c6:30:4f:6c:0d:cc:16:e7:c0:21:fa:de:a1:a5:d0: d1:c0:13:68:61:a8:84:7f:d5:69:60:66:9c:a0:b7: 3a:3e:5d:05:c1:e3:8d:ec:d4:46:0f:f4:3c:23:54: 6c:d8:e5:37:23:99:f4:43:58:17:57:5c:ef:61:77: 86:6e:7a:d7:04:14:10:07:a7:84:3d:d6:41:6a:db: 17:2c:7a:f2:1a:a3:97:59:5f:35:e4:66:a9:3a:cf: 1f:c2:28:58:73:e3:7d:f4:b7:8b:45:62:06:f2:5b: 2d:1d:b2:9f:ce:1a:ac:4f:ae:6f:83:cc:7b:a2:fa: 16:b5:40:88:bb:44:f9:1f:bc:6b:f0:51:27:4f:9d: b4:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:AE:13:8E:C2:95:20:BD:CC:09:30:8F:AB:81:3A:1F:52:7C:C0:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f0dfcb1e-ba9f-3e7b-9f92-4ed1127986e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.70.176.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:98:b4:29:10:fa:11:3a:b3:89:21:a9:7f:d3:e3:c6:b1:f4: f3:44:54:6e:18:18:8e:45:b1:e3:ce:74:b9:8b:b1:13:98:de: b0:43:19:bd:44:90:b7:42:24:99:c2:8f:2a:cb:75:9b:32:d2: 9f:89:20:eb:de:7f:f0:fb:f2:a5:61:eb:b4:e3:be:c8:27:0f: c5:c7:e6:eb:4a:f4:5a:00:c6:6c:d0:2f:a7:ee:53:82:5c:7d: a2:81:63:f5:d9:49:fc:a2:0d:04:09:37:71:c6:d7:f0:62:01: 19:85:63:f3:1a:81:43:69:32:e1:a9:53:f8:03:32:f6:59:99: f9:b7:72:3e:9e:f2:02:a6:0b:c1:a6:1d:07:ec:03:66:e0:81: d6:c9:2e:0e:5e:87:4f:bc:f2:ac:f7:84:98:9d:92:95:da:69: 87:30:49:2e:4a:9d:d5:ad:da:fa:2b:ed:23:98:d0:0b:e8:b2: f2:11:d4:7a:5f:21:83:63:1b:cc:10:5e:45:e3:42:36:78:1d: 54:3a:2c:e6:46:34:38:e2:55:ed:09:c9:84:47:3c:ae:14:bc: ed:e9:ee:48:e4:6d:75:fc:42:72:bd:20:94:3f:bf:47:cd:eb: a5:d1:05:22:bd:d9:09:8a:c7:46:31:89:00:3f:1f:2e:1e:16: 3b:6e:86:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPNTmVxZBz4nrxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk NzZkNTAyZGEtNTM4MS00ZTM2LTlhODMtMzRlNDBhNTZlYjY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9JIWO5mE+TgPVSLTH49hR0r55IfthC3dl5e Qr6hGyus7mywtPewOyaDY+PPKJqjX3+iuXOzTFUt0sk6Yv46kTaY3/nk35EdkPe0 oX9uv2cizZBkf2wvqGgWsJkU8NudkwVNYdS11n4NDa+/dyntjAMEj/k0oTPGME9s DcwW58Ah+t6hpdDRwBNoYaiEf9VpYGacoLc6Pl0FweON7NRGD/Q8I1Rs2OU3I5n0 Q1gXV1zvYXeGbnrXBBQQB6eEPdZBatsXLHryGqOXWV815GapOs8fwihYc+N99LeL RWIG8lstHbKfzhqsT65vg8x7ovoWtUCIu0T5H7xr8FEnT520PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG2uE47ClSC9zAkwj6uBOh9SfMBgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZjBkZmNiMWUtYmE5Zi0z ZTdiLTlmOTItNGVkMTEyNzk4NmU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhkawMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJuYtCkQ+hE6s4khqX/T48ax9PNEVG4YGI5FsePOdLmLsROY3rBDGb1E kLdCJJnCjyrLdZsy0p+JIOvef/D78qVh67TjvsgnD8XH5utK9FoAxmzQL6fuU4Jc faKBY/XZSfyiDQQJN3HG1/BiARmFY/MagUNpMuGpU/gDMvZZmfm3cj6e8gKmC8Gm HQfsA2bggdbJLg5eh0+88qz3hJidkpXaaYcwSS5KndWt2vor7SOY0AvosvIR1Hpf IYNjG8wQXkXjQjZ4HVQ6LOZGNDjiVe0JyYRHPK4UvO3p7kjkbXX8QnK9IJQ/v0fN 66XRBSK92QmKx0YxiQA/Hy4eFjtuhgo= -----END CERTIFICATE-----Generated at Mon Sep 21 13:54:32 2026 by rpki-client