$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fcfdd68f-6145-3b71-8451-1265ffc31ff6.roa File: fcfdd68f-6145-3b71-8451-1265ffc31ff6.roa (raw, json) Hash identifier: kWVbfsRgki8ilGQn+6ZCH11FOyLTd9LKmCs9fV2lt0A= Subject key identifier: 88:18:C2:B1:F8:75:92:3D:F7:71:5D:89:19:8B:39:BF:BA:2E:F9:61 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F0D6CFC3AD427BE3E7E11E2B8 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fcfdd68f-6145-3b71-8451-1265ffc31ff6.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 134.70.156.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:fc:3a:d4:27:be:3e:7e:11:e2:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=7a294635-9384-44fe-b1af-98ec5b26b762 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:1a:b3:9e:48:d3:cd:3b:6e:36:0d:17:95:00: 03:46:d9:d9:9a:52:61:c2:d4:a0:6b:a8:78:2b:4d: eb:0b:4f:da:bd:bb:a7:f3:ea:d4:aa:7e:c5:49:f5: e9:9b:5c:ae:6e:16:1d:04:08:67:2c:a3:ee:82:ce: ec:0f:5d:90:50:e6:c1:dc:b8:94:30:bd:b1:4e:46: 06:fd:46:85:6e:30:68:e5:f6:cf:c3:be:6b:66:fd: f4:3d:11:3c:79:33:40:01:12:ca:62:ed:b1:bb:82: f5:43:db:61:36:a7:1b:02:ca:46:8c:1a:0e:4c:f4: 9c:a9:d7:21:fa:95:f5:be:e9:48:a1:4d:3d:b5:f6: 13:1e:09:e5:8d:12:8e:66:0a:98:24:ae:33:b1:c3: 2e:70:d2:2a:1d:51:35:1b:73:e8:f1:81:70:03:ad: 6a:57:7a:0a:27:e3:62:8a:b4:41:e5:23:df:d3:3c: f0:68:72:cb:a8:cb:e3:7e:da:71:fb:12:7d:24:90: 67:04:6e:f9:9f:ac:0d:06:e2:fd:45:84:a2:a2:53: 70:f3:ed:ff:b0:f8:90:04:97:47:a4:37:fd:ed:de: 06:ad:e4:9b:3f:2f:d0:c4:40:75:bf:4b:9e:20:80: 4b:f4:80:2f:88:3a:95:10:d7:84:13:02:50:64:92: a2:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:18:C2:B1:F8:75:92:3D:F7:71:5D:89:19:8B:39:BF:BA:2E:F9:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fcfdd68f-6145-3b71-8451-1265ffc31ff6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.70.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:0e:3f:c9:96:07:a5:29:d2:e1:a1:ee:2a:ab:cb:9f:f2:f4: c7:b8:b3:17:72:95:39:28:98:a0:3a:a9:e9:40:36:be:38:5d: 74:47:ce:34:cf:57:61:84:7a:36:92:8d:2e:e0:4a:52:07:d7: 64:66:95:20:d6:70:6d:e5:3f:34:6c:e9:71:4c:82:a9:86:e1: 77:75:43:8d:21:1b:ba:fc:16:c2:ae:db:bf:8f:71:01:06:b6: 9b:d7:68:c6:6b:15:34:62:e0:78:71:ff:c7:ca:75:af:96:bf: a4:6a:ed:1a:72:d9:e4:63:53:26:9b:f2:df:11:0d:d8:5e:49: c2:a0:05:23:9e:3f:3c:e9:f2:42:29:f3:1e:b2:54:f1:b7:b5: 7b:c7:a2:bb:95:5c:ca:bf:67:e6:0a:5c:9d:b1:e3:b9:9a:55: 06:04:09:97:ee:d1:37:02:03:85:20:f2:f8:11:c9:b8:49:4f: fd:49:19:ce:0c:b5:93:c0:86:49:f4:9b:ea:29:de:1b:83:65: 9c:c6:de:ac:ca:d1:a1:8d:5e:b9:33:dd:aa:74:ff:6a:a6:59: 0a:72:74:a6:60:50:b7:bc:50:7c:8f:f4:29:db:96:de:af:f7: 53:13:f7:7d:9b:34:4e:62:17:45:9b:a0:15:93:4a:76:39:de: e6:b1:a2:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbPw61Ce+Pn4R4rgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk N2EyOTQ2MzUtOTM4NC00NGZlLWIxYWYtOThlYzViMjZiNzYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRqznkjTzTtuNg0XlQADRtnZmlJhwtSga6h4 K03rC0/avbun8+rUqn7FSfXpm1yubhYdBAhnLKPugs7sD12QUObB3LiUML2xTkYG /UaFbjBo5fbPw75rZv30PRE8eTNAARLKYu2xu4L1Q9thNqcbAspGjBoOTPScqdch +pX1vulIoU09tfYTHgnljRKOZgqYJK4zscMucNIqHVE1G3Po8YFwA61qV3oKJ+Ni irRB5SPf0zzwaHLLqMvjftpx+xJ9JJBnBG75n6wNBuL9RYSiolNw8+3/sPiQBJdH pDf97d4GreSbPy/QxEB1v0ueIIBL9IAviDqVENeEEwJQZJKiCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIgYwrH4dZI993FdiRmLOb+6LvlhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZmNmZGQ2OGYtNjE0NS0z YjcxLTg0NTEtMTI2NWZmYzMxZmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhkacMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4OP8mWB6Up0uGh7iqry5/y9Me4sxdylTkomKA6qelANr44XXRHzjTP V2GEejaSjS7gSlIH12RmlSDWcG3lPzRs6XFMgqmG4Xd1Q40hG7r8FsKu27+PcQEG tpvXaMZrFTRi4Hhx/8fKda+Wv6Rq7Rpy2eRjUyab8t8RDdheScKgBSOePzzp8kIp 8x6yVPG3tXvHoruVXMq/Z+YKXJ2x47maVQYECZfu0TcCA4Ug8vgRybhJT/1JGc4M tZPAhkn0m+op3huDZZzG3qzK0aGNXrkz3ap0/2qmWQpydKZgULe8UHyP9Cnblt6v 91MT932bNE5iF0WboBWTSnY53uaxouE= -----END CERTIFICATE-----Generated at Tue Sep 22 18:25:17 2026 by rpki-client