$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/34c70483-2380-380b-96e0-159964dfe223.roa File: 34c70483-2380-380b-96e0-159964dfe223.roa (raw, json) Hash identifier: QXxDEPxCAcfXHSTjSThEBA6nTdWLepgWSdA49zraP1s= Subject key identifier: 9A:4B:AB:B9:8C:65:74:1A:56:A7:AA:5A:3C:20:54:90:CF:50:7F:8D Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F498B3E2CC0D05400A079A8C0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/34c70483-2380-380b-96e0-159964dfe223.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 157.137.42.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:3e:2c:c0:d0:54:00:a0:79:a8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=9edf7871-6b98-4c87-9892-066308b8b5de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:99:1d:47:35:47:db:dc:ea:ba:b8:25:cb:d8: 2d:6d:91:d1:90:5b:59:7e:79:c0:c4:01:ae:04:36: f9:5a:e2:72:57:43:9c:6b:a2:92:fa:fe:db:d3:22: 8a:c6:84:1d:fa:fa:e6:ab:51:ed:8f:b1:2f:93:a5: f1:3f:50:d6:de:98:7c:ac:3f:be:c9:df:f1:a9:08: 59:3b:f5:2b:c3:c1:92:7e:0a:ea:87:3c:5b:0e:2c: 60:35:82:da:e5:4e:82:7e:46:4b:7b:13:29:83:15: 00:74:4b:aa:4c:ad:78:86:44:e7:e2:92:04:6c:aa: e8:a7:51:2e:42:b9:67:10:88:f9:0c:3d:99:b1:4f: 04:b3:f8:8b:6f:60:1d:87:73:fd:ee:96:ca:0f:2b: c0:18:07:cb:35:20:9e:a3:8d:eb:3b:e8:d0:57:5b: 42:df:71:63:ca:52:8c:f0:b9:44:ab:6c:35:ee:d6: 2e:9f:b1:27:34:b9:c0:b5:08:97:41:ec:84:a1:ba: b3:91:6f:d1:36:e6:f8:a1:15:37:dd:b5:e1:3d:0c: 6a:9f:5b:72:7e:eb:f0:8d:ed:78:ab:55:56:8d:53: df:d4:39:75:a7:17:11:4b:ea:6f:32:a5:83:a7:97: ba:08:56:02:61:8a:5b:4b:5c:cf:44:a0:78:32:f5: c1:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:4B:AB:B9:8C:65:74:1A:56:A7:AA:5A:3C:20:54:90:CF:50:7F:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/34c70483-2380-380b-96e0-159964dfe223.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 157.137.42.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:f4:ee:e9:54:26:c7:e0:f4:17:85:08:0d:97:01:35:02:9e: ed:de:40:c6:18:0a:da:b4:00:6c:8b:82:70:c0:58:ec:b0:52: 05:32:8b:85:71:79:66:a8:c0:56:2c:fb:5a:f9:d6:85:36:89: a5:21:d5:ce:a3:0d:3a:f5:ab:14:95:09:cd:24:54:ad:d5:09: 1a:92:61:79:0b:6c:43:25:23:1d:02:2b:13:11:f5:c4:e9:6b: f0:e0:f0:b4:65:42:5d:02:fa:75:73:22:34:5d:05:f6:d6:b5: 9e:47:72:f6:ad:c8:ef:03:bf:80:8d:8c:c9:3a:e4:06:90:aa: 88:ea:5a:dc:49:56:78:a8:ab:2f:12:d7:2d:aa:d2:df:c3:07: 9e:7d:bc:ea:e2:30:29:ad:d4:0c:49:5c:f7:06:47:14:8c:08: bb:70:53:f0:74:90:85:86:d0:54:ed:c4:ab:33:49:7b:1d:f7: f9:f2:e8:de:1a:7e:a1:e4:85:3f:0e:97:d0:d1:2c:06:89:a9: 71:bf:0a:d7:47:2f:63:e5:a3:5f:ec:88:08:e5:41:86:a5:9c: 35:d9:26:a5:e7:9d:f3:a2:74:46:2e:3d:d4:53:74:c9:9f:a5: 2b:32:4a:ae:63:66:bf:5a:35:58:09:7b:bc:2b:e0:35:6b:e5: e0:07:80:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jiz4swNBUAKB5qMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OWVkZjc4NzEtNmI5OC00Yzg3LTk4OTItMDY2MzA4YjhiNWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JkdRzVH29zqurgly9gtbZHRkFtZfnnAxAGu BDb5WuJyV0Oca6KS+v7b0yKKxoQd+vrmq1Htj7Evk6XxP1DW3ph8rD++yd/xqQhZ O/Urw8GSfgrqhzxbDixgNYLa5U6CfkZLexMpgxUAdEuqTK14hkTn4pIEbKrop1Eu QrlnEIj5DD2ZsU8Es/iLb2Adh3P97pbKDyvAGAfLNSCeo43rO+jQV1tC33FjylKM 8LlEq2w17tYun7EnNLnAtQiXQeyEobqzkW/RNub4oRU33bXhPQxqn1tyfuvwje14 q1VWjVPf1Dl1pxcRS+pvMqWDp5e6CFYCYYpbS1zPRKB4MvXBRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJpLq7mMZXQaVqeqWjwgVJDPUH+NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMzRjNzA0ODMtMjM4MC0z ODBiLTk2ZTAtMTU5OTY0ZGZlMjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnYkqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFj07ulUJsfg9BeFCA2XATUCnu3eQMYYCtq0AGyLgnDAWOywUgUyi4Vx eWaowFYs+1r51oU2iaUh1c6jDTr1qxSVCc0kVK3VCRqSYXkLbEMlIx0CKxMR9cTp a/Dg8LRlQl0C+nVzIjRdBfbWtZ5HcvatyO8Dv4CNjMk65AaQqojqWtxJVnioqy8S 1y2q0t/DB559vOriMCmt1AxJXPcGRxSMCLtwU/B0kIWG0FTtxKszSXsd9/ny6N4a fqHkhT8Ol9DRLAaJqXG/CtdHL2Plo1/siAjlQYalnDXZJqXnnfOidEYuPdRTdMmf pSsySq5jZr9aNVgJe7wr4DVr5eAHgGY= -----END CERTIFICATE-----Generated at Sun Sep 27 00:10:01 2026 by rpki-client