$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f2ea5235-8f2a-3f42-9519-2c9a34ff6168.roa File: f2ea5235-8f2a-3f42-9519-2c9a34ff6168.roa (raw, json) Hash identifier: eIz8Nr1EZzELiAOHvRJpnLJXOeGk8JmcoQuFUR1kBFo= Subject key identifier: AA:EE:FC:AD:21:32:EE:F0:16:C1:9E:3E:39:85:06:2B:32:0A:F9:2B Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F13023F9EE3B1CDD208579980 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f2ea5235-8f2a-3f42-9519-2c9a34ff6168.roa Signing time: Sat 05 Sep 2026 13:00:12 +0000 ROA not before: Sat 05 Sep 2026 13:00:12 +0000 ROA not after: Fri 04 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 207.135.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:13:02:3f:9e:e3:b1:cd:d2:08:57:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 5 13:00:12 2026 GMT Not After : Dec 4 14:00:12 2026 GMT Subject: CN=644a007b-ff07-44b4-a903-9042d216d321 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5b:05:11:cb:92:8c:ab:e3:77:7a:05:4a:2a: 26:cc:dd:3b:ba:5c:97:e0:40:66:fe:a3:5c:7f:30: 9a:58:90:78:a7:6e:75:06:0a:aa:36:a2:70:ee:6f: ab:3e:fc:cb:9f:5f:97:e0:bb:a6:0e:30:db:71:19: 09:44:72:70:59:63:f9:85:8f:fd:18:16:cd:0e:30: 7e:0e:df:34:db:93:ce:05:42:32:f2:cc:8a:4f:3a: 6d:a9:93:af:45:45:7d:c9:2a:d7:36:ca:ce:65:57: 32:44:cd:1b:b9:d2:e6:08:f9:8a:e5:3e:1b:f2:c3: a3:f8:fa:2b:b6:c1:bc:3d:eb:8a:69:da:8b:81:a0: 06:e9:67:c8:17:0a:96:f1:54:8d:b6:4e:61:25:17: 27:15:02:98:68:02:25:fd:79:a6:47:61:d3:fa:c1: 99:a6:67:c5:ad:1a:a3:c6:8c:e3:a8:b3:81:43:d4: e1:6e:09:29:f4:60:5a:63:70:bf:38:d1:c9:73:73: 34:16:66:a1:17:50:c6:f3:1f:f6:ad:5f:a4:2a:f7: 5a:80:f7:45:75:73:06:64:1a:0f:64:59:ad:60:8d: 35:86:87:ae:d0:e2:9d:07:66:42:1d:af:b3:8f:47: 36:6a:4d:1b:1d:c2:f1:d7:54:49:ff:dc:11:d3:4a: 0b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:EE:FC:AD:21:32:EE:F0:16:C1:9E:3E:39:85:06:2B:32:0A:F9:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f2ea5235-8f2a-3f42-9519-2c9a34ff6168.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 207.135.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:d8:14:c8:73:b0:3f:6e:3b:bb:b4:ac:70:e8:29:5c:d0:1f: 5a:7b:50:4c:7f:7f:0e:ac:c7:8f:ca:d3:d1:cc:b5:77:b9:5d: 53:a3:67:65:68:f0:4d:df:44:33:94:c8:b9:26:51:f0:b4:03: 76:c6:74:0d:ea:d3:2e:a1:ed:fb:32:39:c5:0c:7f:2f:3b:cb: e3:ae:5e:ae:84:bf:62:07:1f:29:74:58:98:23:12:ce:ec:b6: c3:5f:dc:09:66:26:cb:a9:e1:8f:01:85:ed:67:d3:41:93:20: ee:de:0c:12:d1:ca:2d:87:d6:3c:4c:0e:98:bc:26:f1:23:c6: 3d:46:f0:20:35:dd:8c:52:38:0c:f0:06:ba:6b:bc:6d:79:9e: 3f:7d:b5:b4:44:dd:95:98:d5:6e:9a:d7:41:c0:1a:5c:7a:8d: 0a:47:da:b3:e2:89:1d:b6:c5:4e:5d:b5:70:fd:eb:20:c0:cf: 34:8d:55:35:17:3b:c8:7c:c5:ea:5f:38:e5:37:b5:4a:33:78: 27:63:59:bf:70:df:7f:da:99:0a:85:a2:6b:9b:82:74:13:aa: 98:9c:ea:a3:88:d7:01:bb:7f:3f:5a:ce:3c:ee:e1:5f:02:8f: 42:1a:9a:8e:7c:ae:50:04:ce:f4:0c:eb:57:c9:f4:8e:ca:94: 7f:d7:b7:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8TAj+e47HN0ghXmYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNTEzMDAxMloXDTI2MTIwNDE0MDAxMlowLzEtMCsGA1UEAxMk NjQ0YTAwN2ItZmYwNy00NGI0LWE5MDMtOTA0MmQyMTZkMzIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlsFEcuSjKvjd3oFSiomzN07ulyX4EBm/qNc fzCaWJB4p251BgqqNqJw7m+rPvzLn1+X4LumDjDbcRkJRHJwWWP5hY/9GBbNDjB+ Dt8025POBUIy8syKTzptqZOvRUV9ySrXNsrOZVcyRM0budLmCPmK5T4b8sOj+Por tsG8PeuKadqLgaAG6WfIFwqW8VSNtk5hJRcnFQKYaAIl/XmmR2HT+sGZpmfFrRqj xozjqLOBQ9Thbgkp9GBaY3C/ONHJc3M0FmahF1DG8x/2rV+kKvdagPdFdXMGZBoP ZFmtYI01hoeu0OKdB2ZCHa+zj0c2ak0bHcLx11RJ/9wR00oLnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKru/K0hMu7wFsGePjmFBisyCvkrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZjJlYTUyMzUtOGYyYS0z ZjQyLTk1MTktMmM5YTM0ZmY2MTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz4ccMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7YFMhzsD9uO7u0rHDoKVzQH1p7UEx/fw6sx4/K09HMtXe5XVOjZ2Vo 8E3fRDOUyLkmUfC0A3bGdA3q0y6h7fsyOcUMfy87y+OuXq6Ev2IHHyl0WJgjEs7s tsNf3AlmJsup4Y8Bhe1n00GTIO7eDBLRyi2H1jxMDpi8JvEjxj1G8CA13YxSOAzw BrprvG15nj99tbRE3ZWY1W6a10HAGlx6jQpH2rPiiR22xU5dtXD96yDAzzSNVTUX O8h8xepfOOU3tUozeCdjWb9w33/amQqFomubgnQTqpic6qOI1wG7fz9azjzu4V8C j0Iamo58rlAEzvQM61fJ9I7KlH/Xtww= -----END CERTIFICATE-----Generated at Tue Sep 22 20:35:39 2026 by rpki-client