$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/43a86bc8-1cb9-3e74-bad9-f2239337528b.roa File: 43a86bc8-1cb9-3e74-bad9-f2239337528b.roa (raw, json) Hash identifier: F/Z0R4EyW73nsb3/Qc/pyxgNa98t5KN/D4fShdo+Qmo= Subject key identifier: 37:56:BE:3A:02:F5:AC:60:25:71:F1:71:65:F7:30:ED:06:7B:E5:42 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F46A7E1275B8BF83A246252C0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/43a86bc8-1cb9-3e74-bad9-f2239337528b.roa Signing time: Thu 24 Sep 2026 01:00:12 +0000 ROA not before: Thu 24 Sep 2026 01:00:12 +0000 ROA not after: Wed 23 Dec 2026 02:00:12 +0000 asID: 54253 IP address blocks: 134.185.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:46:a7:e1:27:5b:8b:f8:3a:24:62:52:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 24 01:00:12 2026 GMT Not After : Dec 23 02:00:12 2026 GMT Subject: CN=d3f637d1-71f2-465d-9bf7-20e697f45300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:5a:74:e6:9c:8f:53:4c:0e:d7:3a:9b:56:34: 21:89:63:0e:cd:67:57:13:c6:6b:b8:ea:22:a5:7e: 27:2d:d0:bb:25:14:71:cc:09:7b:5f:e7:51:b2:a3: 2d:e6:8b:6e:a2:1e:45:9a:12:d9:aa:4f:83:66:f5: c9:71:ea:b4:69:e2:ca:bd:d1:4b:89:ef:8b:5f:33: d3:61:31:d9:ef:c5:08:bc:b1:41:e3:a6:ec:cc:48: a7:2b:2e:cd:b6:13:97:1d:3f:6b:4b:74:b8:72:15: 1f:37:28:ba:3f:dc:dd:f7:1b:51:bf:0b:0a:3b:1b: 1a:b6:94:06:5f:00:8b:53:f6:d8:92:0e:b1:dd:0e: 8a:a1:67:b1:16:d3:da:1f:4f:03:1a:19:2f:b9:98: 21:1a:97:bf:3d:f4:3c:2c:50:88:97:b4:3a:9e:87: 58:6e:ee:93:d5:23:d5:70:19:c0:65:fa:6c:7c:ea: 3d:34:0f:b0:5e:0f:ff:59:1e:b8:bb:ba:3c:57:77: 6a:7c:d5:c4:a5:cd:c4:31:a3:f3:63:56:92:35:61: d9:c4:74:2d:1f:86:1f:8a:31:af:2c:5a:80:23:45: 49:a2:5b:8d:56:a7:b8:5e:59:12:31:77:ff:c6:1c: 3d:d8:c5:ff:78:43:63:d2:10:fe:91:d7:22:a5:9f: 76:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:56:BE:3A:02:F5:AC:60:25:71:F1:71:65:F7:30:ED:06:7B:E5:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/43a86bc8-1cb9-3e74-bad9-f2239337528b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.185.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:7b:c3:23:aa:1f:c0:8e:82:dc:d4:7b:89:92:37:ef:9c:0a: 62:26:e7:8b:3b:23:5c:b0:6f:ce:cc:66:03:3d:26:47:d3:84: 2c:23:e0:81:f3:b0:e5:7e:16:6c:05:af:c8:b4:c6:fd:5e:e7: 8b:cb:05:cb:85:fe:25:96:b6:28:da:da:0c:bf:b1:73:df:eb: 9f:0c:7c:7e:ad:32:90:56:3b:7b:c8:30:a5:ba:90:fa:91:33: 28:43:d1:5e:f0:b2:47:fb:6c:c6:75:e6:9b:3b:b3:64:da:63: 2a:52:15:43:e1:58:f6:e9:fa:12:74:a4:1a:5c:f7:bc:db:63: a2:b9:d3:36:2b:6b:47:c2:6c:1d:40:3b:b1:9d:1a:eb:be:ca: 39:b3:32:f8:9a:1b:04:c7:80:b3:af:ef:89:37:cb:e0:ca:e6: 99:d8:d6:3f:58:8a:bb:e9:c6:9b:cb:bc:22:26:9c:99:e5:4f: 86:1d:01:4b:58:09:36:4f:81:1a:f0:85:1d:6c:7e:08:b6:aa: 23:fe:b9:0d:3f:e6:cf:e0:31:03:c4:16:61:fa:fb:6e:09:f9: 84:de:37:87:4e:6b:27:2c:e4:4d:20:95:9c:3a:35:2b:ed:87: e5:a9:33:eb:78:46:05:0a:86:7d:2d:ae:64:ed:2d:ca:5a:28: 0c:91:ab:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Gp+EnW4v4OiRiUsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkyNDAxMDAxMloXDTI2MTIyMzAyMDAxMlowLzEtMCsGA1UEAxMk ZDNmNjM3ZDEtNzFmMi00NjVkLTliZjctMjBlNjk3ZjQ1MzAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVp05pyPU0wO1zqbVjQhiWMOzWdXE8ZruOoi pX4nLdC7JRRxzAl7X+dRsqMt5otuoh5FmhLZqk+DZvXJceq0aeLKvdFLie+LXzPT YTHZ78UIvLFB46bszEinKy7NthOXHT9rS3S4chUfNyi6P9zd9xtRvwsKOxsatpQG XwCLU/bYkg6x3Q6KoWexFtPaH08DGhkvuZghGpe/PfQ8LFCIl7Q6nodYbu6T1SPV cBnAZfpsfOo9NA+wXg//WR64u7o8V3dqfNXEpc3EMaPzY1aSNWHZxHQtH4YfijGv LFqAI0VJoluNVqe4XlkSMXf/xhw92MX/eENj0hD+kdcipZ92rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDdWvjoC9axgJXHxcWX3MO0Ge+VCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNDNhODZiYzgtMWNiOS0z ZTc0LWJhZDktZjIyMzkzMzc1MjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQChrkgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD97wyOqH8COgtzUe4mSN++cCmIm54s7I1ywb87MZgM9JkfThCwj4IHz sOV+FmwFr8i0xv1e54vLBcuF/iWWtija2gy/sXPf658MfH6tMpBWO3vIMKW6kPqR MyhD0V7wskf7bMZ15ps7s2TaYypSFUPhWPbp+hJ0pBpc97zbY6K50zYra0fCbB1A O7GdGuu+yjmzMviaGwTHgLOv74k3y+DK5pnY1j9YirvpxpvLvCImnJnlT4YdAUtY CTZPgRrwhR1sfgi2qiP+uQ0/5s/gMQPEFmH6+24J+YTeN4dOaycs5E0glZw6NSvt h+WpM+t4RgUKhn0trmTtLcpaKAyRq1w= -----END CERTIFICATE-----Generated at Sun Oct 4 19:42:25 2026 by rpki-client