$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/07097658-3eae-3abe-843f-4f35dccb79c3.roa File: 07097658-3eae-3abe-843f-4f35dccb79c3.roa (raw, json) Hash identifier: yLfe1Z+x8qa2txKYsdZGXwv/5iRxq8lbn026+1qyfko= Subject key identifier: 59:64:5F:AA:A6:65:82:5D:B1:8C:73:AA:27:C4:09:B0:24:40:E4:59 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F4972FBD1732864089F6DA1C0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/07097658-3eae-3abe-843f-4f35dccb79c3.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 54253 IP address blocks: 204.216.96.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:fb:d1:73:28:64:08:9f:6d:a1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1c92f1bb-3d04-4bac-86ee-da9a94a0bf02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a6:0c:bc:d6:28:69:c6:43:29:3e:db:19:a1: 59:35:3f:2a:dd:1f:9a:db:c7:c5:ec:11:19:6e:44: 43:55:3b:49:52:13:d3:c6:bd:3a:d0:d5:a4:ac:21: f2:5b:95:9c:0b:00:d0:98:24:e4:b7:dd:d8:aa:e8: 8a:2f:47:9a:2a:f2:11:34:ab:45:17:3c:ec:00:5c: e5:7a:b7:d8:d2:97:38:a2:00:16:3e:fa:2c:6e:23: 9d:a4:f2:59:89:0a:fd:67:9b:24:0b:90:9b:0c:54: 76:50:d2:13:17:f8:49:69:d0:23:15:76:67:74:cb: 5d:d0:c0:7f:c5:ef:d3:c8:68:a4:54:25:0c:46:9c: bb:3e:1f:09:ab:39:ef:6b:46:7d:81:9d:8d:23:6d: fe:06:b7:59:dd:80:11:06:35:88:38:3d:e0:16:78: 2a:66:07:1b:c3:26:cf:14:93:a7:5b:34:74:8c:13: 35:85:a0:8d:7e:11:d1:e8:fb:23:c9:f7:12:74:68: 09:cb:b3:12:31:fe:81:38:83:9b:de:b5:45:53:3b: a5:46:8b:bb:c6:10:b1:d2:d0:04:f5:25:ef:4c:82: 7e:46:87:c0:2b:c0:be:e3:03:69:3c:e6:3e:c0:c3: 06:53:67:77:8e:47:29:6a:6c:33:ac:3d:dc:b9:c2: 0e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:64:5F:AA:A6:65:82:5D:B1:8C:73:AA:27:C4:09:B0:24:40:E4:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/07097658-3eae-3abe-843f-4f35dccb79c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 204.216.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:af:f5:79:c2:7d:e8:3e:01:c4:3b:71:c6:9d:09:21:e3:4b: 00:4f:82:11:e9:57:d2:23:5e:3f:31:36:cd:9c:1f:f3:77:12: f1:4f:f3:08:41:62:19:0a:7d:95:fe:b9:cf:ca:fb:97:86:a8: ba:2b:c4:18:3e:e5:f0:83:ec:d5:31:61:cf:4d:8b:a7:e4:ef: bd:6b:61:4d:2a:58:03:00:ce:07:25:d4:40:cb:d5:3e:25:22: f9:4d:37:3e:cc:2b:f8:62:f2:38:b7:ff:af:f8:99:7d:e4:0d: 28:d4:e5:de:f3:e4:a5:9c:d7:44:81:51:e3:a2:e6:2f:f8:7c: 25:52:03:7a:cf:4a:24:20:ae:bd:0e:f2:63:c7:64:6e:b2:80: 11:80:5b:f3:07:f1:ef:5f:10:bc:8a:dc:0f:be:69:22:d3:db: 76:53:be:09:3a:78:f0:70:f1:bc:ce:88:9e:43:b8:0a:53:5b: bc:b4:ae:25:d7:a1:70:3b:84:ba:f3:04:9b:8e:2d:68:8a:e9: eb:a1:2a:68:54:02:38:d4:10:e4:e2:59:31:20:d3:96:44:0d: 71:b4:b3:ed:27:86:b6:e6:2c:ab:aa:c4:e5:ea:ed:4c:53:3e: e0:d1:5b:08:e6:c2:28:16:86:e8:1a:fc:7f:61:02:8f:a0:40: d1:3c:61:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcvvRcyhkCJ9tocAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MWM5MmYxYmItM2QwNC00YmFjLTg2ZWUtZGE5YTk0YTBiZjAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqYMvNYoacZDKT7bGaFZNT8q3R+a28fF7BEZ bkRDVTtJUhPTxr060NWkrCHyW5WcCwDQmCTkt93YquiKL0eaKvIRNKtFFzzsAFzl erfY0pc4ogAWPvosbiOdpPJZiQr9Z5skC5CbDFR2UNITF/hJadAjFXZndMtd0MB/ xe/TyGikVCUMRpy7Ph8Jqznva0Z9gZ2NI23+BrdZ3YARBjWIOD3gFngqZgcbwybP FJOnWzR0jBM1haCNfhHR6PsjyfcSdGgJy7MSMf6BOIOb3rVFUzulRou7xhCx0tAE 9SXvTIJ+RofAK8C+4wNpPOY+wMMGU2d3jkcpamwzrD3cucIOsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFlkX6qmZYJdsYxzqifECbAkQORZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMDcwOTc2NTgtM2VhZS0z YWJlLTg0M2YtNGYzNWRjY2I3OWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzNhgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJuv9XnCfeg+AcQ7ccadCSHjSwBPghHpV9IjXj8xNs2cH/N3EvFP8whB YhkKfZX+uc/K+5eGqLorxBg+5fCD7NUxYc9Ni6fk771rYU0qWAMAzgcl1EDL1T4l IvlNNz7MK/hi8ji3/6/4mX3kDSjU5d7z5KWc10SBUeOi5i/4fCVSA3rPSiQgrr0O 8mPHZG6ygBGAW/MH8e9fELyK3A++aSLT23ZTvgk6ePBw8bzOiJ5DuApTW7y0riXX oXA7hLrzBJuOLWiK6euhKmhUAjjUEOTiWTEg05ZEDXG0s+0nhrbmLKuqxOXq7UxT PuDRWwjmwigWhuga/H9hAo+gQNE8YYs= -----END CERTIFICATE-----Generated at Sat Sep 26 03:08:35 2026 by rpki-client