$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4374ed77-fe24-3463-832e-9cf2154ac15c.roa File: 4374ed77-fe24-3463-832e-9cf2154ac15c.roa (raw, json) Hash identifier: sPRfCB0pWiT/EpkY3rUilSk8PhpLIIHQpDYmtWK4sRw= Subject key identifier: 59:E1:CA:43:AD:D8:49:C4:74:04:4A:98:C9:6D:CA:97:49:C9:E9:A1 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F1037879B1CFC097532EDE980 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4374ed77-fe24-3463-832e-9cf2154ac15c.roa Signing time: Fri 04 Sep 2026 13:00:12 +0000 ROA not before: Fri 04 Sep 2026 13:00:12 +0000 ROA not after: Thu 03 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 207.127.108.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:10:37:87:9b:1c:fc:09:75:32:ed:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 4 13:00:12 2026 GMT Not After : Dec 3 14:00:12 2026 GMT Subject: CN=714a9cfc-2701-46ac-a17c-5da7d5f1153e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d2:89:2c:b8:a4:51:b7:bc:fe:32:47:2b:8e: 0a:80:cb:ec:2e:4b:94:5a:71:6e:c5:82:d9:c9:f9: 13:6c:91:68:b9:78:2c:f6:cb:6c:c7:ba:e1:47:a2: 0c:de:0d:fd:87:b5:11:5b:24:86:0e:cf:72:2c:46: 48:ca:9e:79:24:b7:b7:fc:6a:48:57:44:0e:a0:9f: 4c:2f:d6:e3:23:39:b9:2e:27:99:96:e4:a8:6e:09: ad:b1:f1:2e:52:f6:9e:7b:ba:9f:65:56:fb:f8:74: a1:5f:b2:a2:43:22:ff:80:48:20:51:ee:a6:43:e9: 4b:94:b9:34:71:de:26:4b:28:f0:7c:3f:fc:c2:c5: be:98:9d:39:fb:9b:cf:b8:5d:c6:e2:08:bf:a0:e9: 23:f5:57:05:6d:f2:80:73:e1:0a:6b:76:4e:06:b6: 8e:10:8c:69:ff:0f:56:3e:83:82:b9:f7:7e:03:c3: e3:e5:dd:20:ff:66:a5:bc:a4:82:75:73:e9:12:86: a5:0b:64:a4:fb:e3:94:28:13:d0:e9:51:bc:15:1c: 5c:ab:91:11:c8:fc:80:a1:b0:02:e0:18:b3:3f:bb: 6a:4d:5d:66:70:83:b2:e4:c5:be:b6:e1:bc:9c:2d: f0:a1:f2:e6:ac:22:32:3c:bc:89:01:a6:11:08:0b: 63:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:E1:CA:43:AD:D8:49:C4:74:04:4A:98:C9:6D:CA:97:49:C9:E9:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4374ed77-fe24-3463-832e-9cf2154ac15c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 207.127.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:5b:0a:c3:73:9d:99:64:d0:94:dd:53:e5:fe:71:58:78:5d: 38:5d:8c:f1:e9:66:d7:02:aa:0d:5f:97:9b:b4:5d:56:2c:51: d0:79:6b:1b:04:a7:08:37:79:30:6d:23:08:fb:1b:b0:7d:b8: 52:8b:49:a3:e4:f9:d2:c4:c3:8e:22:af:77:2d:36:ea:e9:b0: e2:57:df:f2:32:cb:e1:8f:45:27:55:5c:ae:d9:03:64:2b:ce: 50:4b:95:35:d0:fd:73:26:36:b8:94:07:27:03:df:f5:2d:35: 2e:06:6a:9a:ff:d0:9b:88:e0:db:b8:3d:77:ba:ae:1a:fd:ef: 1d:19:da:ce:38:b1:29:ac:98:67:c4:4a:2c:2b:7c:0a:51:29: b4:74:2f:f8:2e:37:59:c3:d4:15:fb:53:7e:50:90:cf:33:cb: 23:84:7a:11:0a:44:20:15:4f:a1:62:5d:70:94:ed:2f:08:fa: d5:05:9e:f9:d4:29:41:bb:31:1c:ea:c1:cd:42:ae:9f:ca:95: 5f:b6:dc:45:89:ac:a0:bc:aa:c9:c4:48:25:2f:f3:c5:54:24: 02:c4:6c:c5:e0:ff:bf:92:1b:41:7d:1a:67:bb:48:29:65:d7: da:26:74:22:91:33:a6:2e:84:bf:6d:ae:35:3f:e6:03:ee:6a: b8:4e:b9:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8QN4ebHPwJdTLt6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNDEzMDAxMloXDTI2MTIwMzE0MDAxMlowLzEtMCsGA1UEAxMk NzE0YTljZmMtMjcwMS00NmFjLWExN2MtNWRhN2Q1ZjExNTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNKJLLikUbe8/jJHK44KgMvsLkuUWnFuxYLZ yfkTbJFouXgs9stsx7rhR6IM3g39h7URWySGDs9yLEZIyp55JLe3/GpIV0QOoJ9M L9bjIzm5LieZluSobgmtsfEuUvaee7qfZVb7+HShX7KiQyL/gEggUe6mQ+lLlLk0 cd4mSyjwfD/8wsW+mJ05+5vPuF3G4gi/oOkj9VcFbfKAc+EKa3ZOBraOEIxp/w9W PoOCufd+A8Pj5d0g/2alvKSCdXPpEoalC2Sk++OUKBPQ6VG8FRxcq5ERyPyAobAC 4BizP7tqTV1mcIOy5MW+tuG8nC3wofLmrCIyPLyJAaYRCAtjZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFnhykOt2EnEdARKmMltypdJyemhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNDM3NGVkNzctZmUyNC0z NDYzLTgzMmUtOWNmMjE1NGFjMTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz39sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHFbCsNznZlk0JTdU+X+cVh4XThdjPHpZtcCqg1fl5u0XVYsUdB5axsE pwg3eTBtIwj7G7B9uFKLSaPk+dLEw44ir3ctNurpsOJX3/Iyy+GPRSdVXK7ZA2Qr zlBLlTXQ/XMmNriUBycD3/UtNS4Gapr/0JuI4Nu4PXe6rhr97x0Z2s44sSmsmGfE SiwrfApRKbR0L/guN1nD1BX7U35QkM8zyyOEehEKRCAVT6FiXXCU7S8I+tUFnvnU KUG7MRzqwc1Crp/KlV+23EWJrKC8qsnESCUv88VUJALEbMXg/7+SG0F9Gme7SCll 19omdCKRM6YuhL9trjU/5gPuarhOuaU= -----END CERTIFICATE-----Generated at Thu Sep 24 11:31:18 2026 by rpki-client