$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1ec20e74-a8ad-3fc9-91a1-562886e87b19.roa File: 1ec20e74-a8ad-3fc9-91a1-562886e87b19.roa (raw, json) Hash identifier: F9NrJsKfvU2vgKAbof6dTvOwWyjOpl18Yn+bM/zemh8= Subject key identifier: C1:16:FC:BA:0D:8A:DE:01:93:8C:BF:31:95:A3:50:9D:C1:70:F5:5E Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F119CEA067AAA4866A284F2C0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1ec20e74-a8ad-3fc9-91a1-562886e87b19.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 168.138.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9c:ea:06:7a:aa:48:66:a2:84:f2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=4933de5b-394b-47d7-8000-4624a06aff80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c9:77:48:4a:f9:93:1f:0e:dd:8f:34:69:b6: a4:16:53:1d:34:0b:ec:29:93:06:7d:66:5b:0f:f0: 13:e3:22:e8:88:77:9e:57:10:e6:f6:f5:e8:a1:7c: 33:b4:69:96:bb:71:53:b9:44:a2:42:a0:15:15:a8: 51:3d:03:2f:6e:ce:e8:2c:ab:89:67:7c:74:f8:14: 1d:66:39:3f:67:6f:b0:30:c2:bd:d4:ed:24:d0:b1: 3b:e2:e0:a0:bd:29:24:0f:78:25:fb:56:2e:c2:85: 21:2c:f3:1a:0f:77:9b:11:2e:10:41:8a:c1:6f:63: 8c:55:24:11:5a:0e:22:4e:b5:68:95:4a:d3:1c:0e: ca:d7:0c:9d:b2:ea:d2:17:77:b4:54:cd:65:f6:2a: d1:92:40:73:24:ac:70:08:46:72:4d:c1:90:3f:64: e3:96:31:67:f8:f8:85:c6:f3:8f:cd:60:d5:a6:08: 52:1a:51:e0:a9:e6:c9:f6:7b:c2:b0:51:35:c1:cb: 26:0a:f1:6b:21:20:dd:66:fa:2f:06:e3:e4:a5:1c: a0:72:dd:e9:85:e2:6c:24:1b:ec:08:72:e3:b4:d9: 45:de:d1:e1:b1:f3:50:60:3a:83:44:8e:a3:43:be: 95:dd:12:5b:a4:4e:50:48:31:ca:8e:7b:68:c5:0b: fe:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:16:FC:BA:0D:8A:DE:01:93:8C:BF:31:95:A3:50:9D:C1:70:F5:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1ec20e74-a8ad-3fc9-91a1-562886e87b19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.138.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:e3:e5:9f:af:61:48:62:34:8a:8a:75:a2:87:7d:d7:58:db: 93:c1:75:69:ae:fc:49:89:a4:aa:d5:fc:c4:72:2b:3a:61:d1: bd:d4:39:85:31:a4:07:90:8b:69:30:df:33:38:40:45:6a:96: d5:ef:f6:95:1e:fb:d3:10:ed:07:f3:11:02:59:79:7f:38:f0: b4:56:fc:94:f5:80:e6:cb:d4:7f:93:a9:49:81:ec:18:d2:d8: 1e:27:ec:90:9a:1b:4a:7d:04:fa:d6:e2:62:05:3b:a8:1a:86: 45:8b:56:af:b3:63:67:01:13:1e:bd:63:9c:76:2f:50:6b:41: 2b:dd:03:f7:dc:c9:9c:c5:6f:8f:53:cc:06:90:bf:21:79:f7: 65:6f:04:6c:81:a1:f5:03:3a:11:bb:12:3a:75:d6:df:bc:4c: 61:9c:4c:78:05:1e:1f:1b:f3:8d:53:9b:0d:aa:15:39:8d:5b: 2c:a5:2e:aa:3a:f8:4f:57:1a:5e:99:aa:18:a5:c5:a6:6d:5d: fb:ec:05:ba:a6:ed:4a:06:d3:ef:23:76:79:ea:f6:c6:20:31: 7b:69:37:b5:c3:ce:a3:98:8c:22:18:a6:a1:85:82:b7:bb:a4: 21:c8:e8:3d:68:90:92:2b:30:99:9a:c2:a7:6d:8e:a0:53:4d: 62:2a:ba:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnOoGeqpIZqKE8sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk NDkzM2RlNWItMzk0Yi00N2Q3LTgwMDAtNDYyNGEwNmFmZjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMl3SEr5kx8O3Y80abakFlMdNAvsKZMGfWZb D/AT4yLoiHeeVxDm9vXooXwztGmWu3FTuUSiQqAVFahRPQMvbs7oLKuJZ3x0+BQd Zjk/Z2+wMMK91O0k0LE74uCgvSkkD3gl+1YuwoUhLPMaD3ebES4QQYrBb2OMVSQR Wg4iTrVolUrTHA7K1wydsurSF3e0VM1l9irRkkBzJKxwCEZyTcGQP2TjljFn+PiF xvOPzWDVpghSGlHgqebJ9nvCsFE1wcsmCvFrISDdZvovBuPkpRygct3pheJsJBvs CHLjtNlF3tHhsfNQYDqDRI6jQ76V3RJbpE5QSDHKjntoxQv+LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMEW/LoNit4Bk4y/MZWjUJ3BcPVeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMWVjMjBlNzQtYThhZC0z ZmM5LTkxYTEtNTYyODg2ZTg3YjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqIqQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7j5Z+vYUhiNIqKdaKHfddY25PBdWmu/EmJpKrV/MRyKzph0b3UOYUx pAeQi2kw3zM4QEVqltXv9pUe+9MQ7QfzEQJZeX848LRW/JT1gObL1H+TqUmB7BjS 2B4n7JCaG0p9BPrW4mIFO6gahkWLVq+zY2cBEx69Y5x2L1BrQSvdA/fcyZzFb49T zAaQvyF592VvBGyBofUDOhG7Ejp11t+8TGGcTHgFHh8b841Tmw2qFTmNWyylLqo6 +E9XGl6ZqhilxaZtXfvsBbqm7UoG0+8jdnnq9sYgMXtpN7XDzqOYjCIYpqGFgre7 pCHI6D1okJIrMJmawqdtjqBTTWIqupA= -----END CERTIFICATE-----Generated at Sat Sep 26 00:17:33 2026 by rpki-client