$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4a76ef17-2f01-37a9-a111-42a266f553f5.roa File: 4a76ef17-2f01-37a9-a111-42a266f553f5.roa (raw, json) Hash identifier: DNki3xQdnYMBkQXEIIH8ssZ9y9qcQeFNKn5m/og8J0I= Subject key identifier: 9B:06:3A:ED:09:62:68:A3:F3:FF:68:15:DD:D0:3D:8E:AD:46:F3:23 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F20F7D31EB836FF0CA759412C Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4a76ef17-2f01-37a9-a111-42a266f553f5.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 134.185.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:d3:1e:b8:36:ff:0c:a7:59:41:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=ed42b595-9e75-443f-aa41-ad9d28443764 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:1a:9e:28:16:8a:a4:db:94:51:8f:b2:af:21: 92:88:c2:8e:12:8a:78:2d:51:ed:3c:b1:96:40:b8: f5:ef:d8:3b:a8:70:41:43:fe:2c:b5:d7:dc:4a:a2: 05:8c:2b:06:a1:8f:59:a9:33:23:d8:fb:07:ba:55: 12:97:88:cc:13:ae:d2:c3:26:e6:a0:7e:21:44:8b: ad:80:73:eb:6e:9d:57:83:05:b9:e6:27:dc:45:dc: 71:a3:f2:c0:a9:2e:42:00:cd:02:26:7b:f7:f6:19: 67:c6:21:10:df:55:ac:4a:b0:20:34:ad:20:b1:f6: ac:cc:09:48:3d:8c:93:c9:d5:71:47:b0:3c:d2:63: e4:63:9b:3c:db:9d:09:4b:33:7a:6b:f3:bb:47:73: 22:92:41:47:26:3c:f4:0a:40:13:a2:bd:e7:f4:dc: 79:92:08:c4:8b:8b:e0:46:5b:d8:48:e6:ba:90:f4: af:34:dc:de:03:d8:13:88:78:31:82:62:41:eb:8e: 38:1c:4a:6e:f4:70:0a:8f:2c:f3:59:d6:6b:04:4d: 4e:49:df:79:57:da:49:df:9f:37:f0:43:7d:0e:c8: f9:e7:a9:17:b3:6a:9f:0f:db:3a:42:38:49:d6:64: 92:fb:a3:cc:0e:ba:59:17:df:03:82:8c:dc:fb:46: 6f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:06:3A:ED:09:62:68:A3:F3:FF:68:15:DD:D0:3D:8E:AD:46:F3:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4a76ef17-2f01-37a9-a111-42a266f553f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.185.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:6f:7c:44:7e:d2:fa:42:8e:53:f3:c3:17:bd:5c:08:20:d9: 33:c8:99:49:8c:34:15:0d:c7:77:66:9c:12:ca:be:60:34:fe: d6:4e:c4:e5:cc:5f:b8:b2:56:f6:36:be:f1:61:e1:be:63:40: 06:f0:ed:c2:32:3e:91:9a:26:de:58:03:c2:37:70:ab:17:a5: 60:1c:ed:a9:b3:0a:f9:3c:c0:fc:9e:21:a7:0f:b1:1d:71:81: ff:e2:ae:8b:19:7d:e0:e5:72:0c:c9:fa:44:41:79:9d:e9:da: a6:d6:95:ad:29:44:04:19:42:55:25:14:0e:a1:e2:08:5b:c3: 27:9b:aa:c9:65:c3:b1:39:a8:83:a3:76:9b:b6:9f:d6:75:41: 71:21:78:e6:d2:07:d8:40:0b:36:4d:42:62:2b:a6:d0:79:b5: 5a:21:50:b4:15:78:15:e1:9e:87:75:4b:4e:9b:17:29:33:8c: 1c:f6:46:ef:bc:6b:04:46:8f:f3:ae:18:df:f8:fe:4a:45:6f: 3f:06:2c:a4:0e:0d:66:6e:57:91:53:0f:01:2b:e0:3a:cb:5b: bf:e9:9b:9b:63:b3:62:9f:f3:31:2d:09:85:7d:67:1e:72:04: 68:94:48:b0:47:1d:97:cc:fa:d9:cf:67:e8:2f:d5:d9:58:8f: 74:b8:f2:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g99MeuDb/DKdZQSwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk ZWQ0MmI1OTUtOWU3NS00NDNmLWFhNDEtYWQ5ZDI4NDQzNzY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhqeKBaKpNuUUY+yryGSiMKOEop4LVHtPLGW QLj179g7qHBBQ/4stdfcSqIFjCsGoY9ZqTMj2PsHulUSl4jME67SwybmoH4hRIut gHPrbp1XgwW55ifcRdxxo/LAqS5CAM0CJnv39hlnxiEQ31WsSrAgNK0gsfaszAlI PYyTydVxR7A80mPkY5s8250JSzN6a/O7R3MikkFHJjz0CkATor3n9Nx5kgjEi4vg RlvYSOa6kPSvNNzeA9gTiHgxgmJB6444HEpu9HAKjyzzWdZrBE1OSd95V9pJ3583 8EN9Dsj556kXs2qfD9s6QjhJ1mSS+6PMDrpZF98Dgozc+0ZvFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJsGOu0JYmij8/9oFd3QPY6tRvMjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNGE3NmVmMTctMmYwMS0z N2E5LWExMTEtNDJhMjY2ZjU1M2Y1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAhrlEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABlvfER+0vpCjlPzwxe9XAgg2TPImUmMNBUNx3dmnBLKvmA0/tZOxOXM X7iyVvY2vvFh4b5jQAbw7cIyPpGaJt5YA8I3cKsXpWAc7amzCvk8wPyeIacPsR1x gf/irosZfeDlcgzJ+kRBeZ3p2qbWla0pRAQZQlUlFA6h4ghbwyebqsllw7E5qIOj dpu2n9Z1QXEheObSB9hACzZNQmIrptB5tVohULQVeBXhnod1S06bFykzjBz2Ru+8 awRGj/OuGN/4/kpFbz8GLKQODWZuV5FTDwEr4DrLW7/pm5tjs2Kf8zEtCYV9Zx5y BGiUSLBHHZfM+tnPZ+gv1dlYj3S48oM= -----END CERTIFICATE-----Generated at Wed Sep 23 00:14:46 2026 by rpki-client