$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4f70a3f8-813b-3920-8073-8b9ddab71e29.roa File: 4f70a3f8-813b-3920-8073-8b9ddab71e29.roa (raw, json) Hash identifier: 0RWOW7q2RuuvrzsoPrXr7A0HQNA9usZxPCa7sVvi3EE= Subject key identifier: 3A:45:EF:4C:FD:80:08:69:46:E2:EC:5B:77:F3:39:AA:99:EF:A5:F5 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F02421867F1CF414D3642CC80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4f70a3f8-813b-3920-8073-8b9ddab71e29.roa Signing time: Sun 30 Aug 2026 13:00:11 +0000 ROA not before: Sun 30 Aug 2026 13:00:11 +0000 ROA not after: Sat 28 Nov 2026 14:00:11 +0000 asID: 31898 IP address blocks: 134.185.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:02:42:18:67:f1:cf:41:4d:36:42:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 30 13:00:11 2026 GMT Not After : Nov 28 14:00:11 2026 GMT Subject: CN=ec8ee8a5-53a1-42f8-8ccd-bcc35c7bcdf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:16:69:2d:22:40:66:5c:28:b2:32:ce:ce:60: 05:3e:98:cf:3a:6c:a8:96:65:d5:5b:b1:53:1a:75: d9:57:98:cc:1f:51:8a:36:90:49:ca:e9:91:53:b2: 4e:e8:7e:76:5f:29:20:f4:b1:9b:80:e4:ee:51:ea: 74:eb:19:e2:09:e4:8a:1d:f6:7a:dc:43:46:ea:94: e7:ee:9b:21:7e:aa:1b:99:05:ab:07:6d:fc:da:65: be:29:50:ea:a0:a5:f6:11:20:7e:80:59:30:21:67: 4b:64:7f:65:0c:99:29:52:06:aa:c1:11:ea:7c:3b: 8e:7f:6d:89:c6:3b:34:bd:f7:d3:1a:76:a1:ba:81: c8:c9:49:f8:c3:6d:b6:41:44:6c:e5:42:d1:db:6c: 3a:9c:c5:47:09:b3:f0:02:25:ab:2e:0b:83:db:11: 53:f7:f8:99:d2:5a:45:a2:ef:7f:e0:c3:00:69:a3: 3a:1a:95:e9:ed:48:2e:c9:0f:47:49:1c:75:e8:ee: eb:7d:fc:03:9a:20:b8:67:74:4a:1b:b5:ff:5f:c5: 43:03:36:04:18:30:61:4f:ac:8d:ba:cb:dd:52:f7: e7:1a:c5:f6:af:63:50:63:12:6e:a8:b1:53:88:46: 5c:ee:6a:f4:8f:e1:17:60:f3:5e:fa:38:4b:b4:e5: 97:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:45:EF:4C:FD:80:08:69:46:E2:EC:5B:77:F3:39:AA:99:EF:A5:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4f70a3f8-813b-3920-8073-8b9ddab71e29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.185.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:b1:59:47:98:1d:1c:62:30:8f:78:85:f2:32:0e:1d:13:5d: 9e:8b:5b:b3:69:5e:77:8d:bc:48:de:29:9d:44:9d:5d:27:e6: 88:22:de:07:45:75:9d:b1:38:8f:2a:fb:17:7f:8b:05:6f:72: 2a:4a:2f:3a:1a:e5:df:f5:0c:1a:ca:04:5c:c9:07:09:c3:9a: a0:6b:e7:7e:fa:dd:e9:41:65:dc:0b:02:5a:aa:01:ea:03:a2: 7c:4d:0c:12:ef:f9:81:2c:b7:40:47:66:f6:4c:68:37:11:c0: 1b:4a:a5:d3:83:7b:90:dd:0c:09:44:6a:56:6e:e6:b5:0b:63: a9:b1:68:f8:a7:bb:d2:0a:8c:c3:4c:0e:cc:a7:6e:ac:fb:46: fd:0d:4a:e6:18:72:7f:9c:7f:32:1a:9c:dc:02:d6:13:49:85: 99:08:d7:b1:86:0d:9b:67:e0:14:b2:19:0a:55:18:50:62:98: 64:e7:5c:a6:c1:3a:1b:ce:14:f2:67:da:8f:60:0d:28:1c:c9: 17:9e:bf:56:a3:82:8b:e1:3a:13:f1:cf:57:ab:ec:91:b0:4f: da:ed:df:47:91:87:41:87:fb:42:33:cb:17:62:3a:e3:16:9d: 5f:cc:fb:8f:15:b6:36:b5:a6:ea:3d:e6:90:19:73:8e:b0:94: c8:f0:b8:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8CQhhn8c9BTTZCzIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk ZWM4ZWU4YTUtNTNhMS00MmY4LThjY2QtYmNjMzVjN2JjZGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBZpLSJAZlwosjLOzmAFPpjPOmyolmXVW7FT GnXZV5jMH1GKNpBJyumRU7JO6H52Xykg9LGbgOTuUep06xniCeSKHfZ63ENG6pTn 7pshfqobmQWrB2382mW+KVDqoKX2ESB+gFkwIWdLZH9lDJkpUgaqwRHqfDuOf22J xjs0vffTGnahuoHIyUn4w222QURs5ULR22w6nMVHCbPwAiWrLguD2xFT9/iZ0lpF ou9/4MMAaaM6GpXp7UguyQ9HSRx16O7rffwDmiC4Z3RKG7X/X8VDAzYEGDBhT6yN usvdUvfnGsX2r2NQYxJuqLFTiEZc7mr0j+EXYPNe+jhLtOWXuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDpF70z9gAhpRuLsW3fzOaqZ76X1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNGY3MGEzZjgtODEzYi0z OTIwLTgwNzMtOGI5ZGRhYjcxZTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAhrlMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACmxWUeYHRxiMI94hfIyDh0TXZ6LW7NpXneNvEjeKZ1EnV0n5ogi3gdF dZ2xOI8q+xd/iwVvcipKLzoa5d/1DBrKBFzJBwnDmqBr53763elBZdwLAlqqAeoD onxNDBLv+YEst0BHZvZMaDcRwBtKpdODe5DdDAlEalZu5rULY6mxaPinu9IKjMNM Dsynbqz7Rv0NSuYYcn+cfzIanNwC1hNJhZkI17GGDZtn4BSyGQpVGFBimGTnXKbB OhvOFPJn2o9gDSgcyReev1ajgovhOhPxz1er7JGwT9rt30eRh0GH+0IzyxdiOuMW nV/M+48Vtja1puo95pAZc46wlMjwuKg= -----END CERTIFICATE-----Generated at Thu Sep 24 05:46:14 2026 by rpki-client