$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7b3f8cf1-9f9f-3bcb-a2ba-111deef17f7b.roa File: 7b3f8cf1-9f9f-3bcb-a2ba-111deef17f7b.roa (raw, json) Hash identifier: dla0zZ38zd2Rk4vNbCoNDPQUIwDw9y1j1EhwHyY0sh8= Subject key identifier: 97:31:C7:BA:DB:BA:DF:6D:A4:9F:DF:38:C2:FF:2F:61:6A:DC:D5:97 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584FB241082C0F1F36B6CF76AF80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7b3f8cf1-9f9f-3bcb-a2ba-111deef17f7b.roa Signing time: Sun 01 Nov 2026 14:00:13 +0000 ROA not before: Sun 01 Nov 2026 14:00:13 +0000 ROA not after: Sat 30 Jan 2027 14:00:13 +0000 asID: 31898 IP address blocks: 64.110.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b2:41:08:2c:0f:1f:36:b6:cf:76:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Nov 1 14:00:13 2026 GMT Not After : Jan 30 14:00:13 2027 GMT Subject: CN=687f71a8-d65c-4c31-b9fc-38fa66a8ccdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8a:56:e0:53:80:78:03:fd:84:a3:3c:c9:4c: ca:e7:92:05:8b:d7:16:62:87:3a:75:f4:bf:c4:5b: c1:db:7f:25:d4:f4:53:d2:69:86:85:3d:ae:5f:1a: a1:72:f4:b6:43:ee:c1:b7:ab:a4:7f:47:1b:c1:ef: cd:62:d7:5a:e0:e5:9a:fb:2c:13:98:58:cc:64:d0: a7:ef:a5:3c:35:99:72:15:b0:46:a3:76:2a:e0:39: 3a:ff:bb:1a:46:6e:18:fe:5f:9a:1a:7f:1a:23:04: c8:cf:ac:d3:ca:8b:cb:ac:80:9b:24:3b:a5:6e:d7: 27:66:43:8d:f3:5a:e8:00:cf:4c:57:6d:db:2e:48: 4f:f8:f1:2c:6a:1f:57:29:39:d1:5c:26:ad:92:5e: 70:43:a8:7b:9b:67:6a:eb:4c:d5:53:e6:42:d9:af: 5a:65:da:b2:b0:63:04:6a:7a:bb:53:3c:19:88:5f: 73:af:42:14:32:f2:49:53:fe:2c:e9:8f:73:da:b8: 43:1c:d6:3e:74:d0:04:57:9a:79:de:c1:e2:24:80: 59:dd:a8:06:9c:b0:4c:7a:bd:ac:b6:e4:2e:da:88: e2:df:0b:8c:95:8b:88:2f:ff:da:8e:42:24:3b:f6: d0:8e:0f:b8:f3:6b:26:ec:c6:c4:fc:e9:87:85:7a: 9a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:31:C7:BA:DB:BA:DF:6D:A4:9F:DF:38:C2:FF:2F:61:6A:DC:D5:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7b3f8cf1-9f9f-3bcb-a2ba-111deef17f7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 64.110.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:58:49:3d:a3:8f:88:cd:3c:57:bb:6f:47:fc:ca:16:bb:81: 4c:48:26:95:de:50:14:b7:b6:11:ef:25:19:0f:74:16:1a:a1: 87:eb:5d:14:26:a5:cb:2b:03:3e:e3:d0:31:fa:7b:43:d3:79: 40:9f:f2:35:a6:b7:63:18:b4:25:20:01:67:ad:b4:b0:75:02: fb:fb:d1:9f:18:8d:64:fd:c7:fb:59:7c:f6:67:96:80:8c:62: 2d:77:22:9b:fc:e2:8e:53:52:41:33:6c:c3:e3:08:2f:ac:bb: a7:44:99:c1:31:e3:2d:4d:53:ad:e1:96:09:67:50:07:bd:45: fb:d7:56:92:b4:9c:f7:7f:2c:eb:f1:88:25:9c:f1:78:a7:ec: 0a:9c:5e:15:1e:a4:89:b2:16:40:b3:ad:d5:c6:6e:09:ff:ef: fb:cd:c8:d0:81:c7:2b:a8:c1:fe:79:54:64:f6:57:90:88:e0: 8e:62:a0:0b:c1:f1:65:0c:10:8d:4e:6b:63:e8:22:a4:17:6b: 36:73:1d:9e:a1:7f:e1:31:74:84:0b:42:77:85:c7:8b:93:3d: af:3b:f6:06:51:a9:f7:df:e4:99:3d:76:87:b4:6d:0b:b4:3e: 9b:01:1f:ea:3b:f3:f3:b3:39:14:27:48:fb:41:2e:46:5a:d2: 58:c4:33:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+yQQgsDx82ts92r4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MTEwMTE0MDAxM1oXDTI3MDEzMDE0MDAxM1owLzEtMCsGA1UEAxMk Njg3ZjcxYTgtZDY1Yy00YzMxLWI5ZmMtMzhmYTY2YThjY2RjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIpW4FOAeAP9hKM8yUzK55IFi9cWYoc6dfS/ xFvB238l1PRT0mmGhT2uXxqhcvS2Q+7Bt6ukf0cbwe/NYtda4OWa+ywTmFjMZNCn 76U8NZlyFbBGo3Yq4Dk6/7saRm4Y/l+aGn8aIwTIz6zTyovLrICbJDulbtcnZkON 81roAM9MV23bLkhP+PEsah9XKTnRXCatkl5wQ6h7m2dq60zVU+ZC2a9aZdqysGME anq7UzwZiF9zr0IUMvJJU/4s6Y9z2rhDHNY+dNAEV5p53sHiJIBZ3agGnLBMer2s tuQu2oji3wuMlYuIL//ajkIkO/bQjg+482sm7MbE/OmHhXqa1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJcxx7rbut9tpJ/fOML/L2Fq3NWXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvN2IzZjhjZjEtOWY5Zi0z YmNiLWEyYmEtMTExZGVlZjE3ZjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQG54MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJxYST2jj4jNPFe7b0f8yha7gUxIJpXeUBS3thHvJRkPdBYaoYfrXRQm pcsrAz7j0DH6e0PTeUCf8jWmt2MYtCUgAWettLB1Avv70Z8YjWT9x/tZfPZnloCM Yi13Ipv84o5TUkEzbMPjCC+su6dEmcEx4y1NU63hlglnUAe9RfvXVpK0nPd/LOvx iCWc8Xin7AqcXhUepImyFkCzrdXGbgn/7/vNyNCBxyuowf55VGT2V5CI4I5ioAvB 8WUMEI1Oa2PoIqQXazZzHZ6hf+ExdIQLQneFx4uTPa879gZRqfff5Jk9doe0bQu0 PpsBH+o78/OzORQnSPtBLkZa0ljEM5U= -----END CERTIFICATE-----Generated at Sun Nov 15 14:46:28 2026 by rpki-client