$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/888c5d9b-0c01-3a6f-b516-5d3dffac6ddf.roa File: 888c5d9b-0c01-3a6f-b516-5d3dffac6ddf.roa (raw, json) Hash identifier: uKg2NIsb1MuYIp5lFp8aFkDdde82FI+OlhlCyenQNWA= Subject key identifier: BA:CB:C2:27:44:D1:25:B7:90:AF:6F:1B:AB:41:C7:A0:7D:A4:B5:4E Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F11A1454EAA429E6206CB1E80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/888c5d9b-0c01-3a6f-b516-5d3dffac6ddf.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 130.61.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:a1:45:4e:aa:42:9e:62:06:cb:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=34fbd6d8-0a51-4f9c-8f86-e7d3f809e290 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:46:d1:5f:a3:ed:77:20:9b:eb:b7:9d:49:6f: 30:01:98:b1:b8:68:79:c2:75:65:d2:89:42:9b:6c: bb:5a:11:d7:92:d9:62:28:36:4c:57:3f:7a:bf:a7: a6:d0:ff:67:dc:d0:95:9e:05:e8:b1:9d:b2:e2:64: 4f:05:22:4c:51:5d:b9:ca:d4:29:82:ac:4a:5e:7c: ac:7c:1f:6e:e2:59:93:06:e7:27:b0:8e:b2:b7:e5: 85:2c:ee:43:f9:48:4d:b9:ca:e3:05:11:2c:91:63: 7f:97:70:d4:3d:e9:e6:9a:d2:b7:46:8b:bb:3e:70: 2e:0b:9a:33:ca:2b:17:10:4c:c4:04:a0:26:e4:da: 3b:f2:aa:d0:5d:b8:6e:04:ef:79:42:28:3f:29:94: dc:b5:79:59:79:6c:3a:36:a1:43:d1:c8:d1:6e:25: 5b:5c:67:ac:3d:03:77:fa:00:02:60:a3:37:34:3b: fd:88:7c:51:ee:7f:ec:c3:94:7a:30:2d:8b:44:ba: ac:9e:f4:49:b2:a8:88:8e:f9:2e:ac:43:85:29:d0: b3:64:c0:27:c1:fd:99:c9:fa:c4:55:12:bd:2c:af: a6:a3:f3:ce:3c:11:1c:8a:d2:a5:c7:e8:6f:79:64: e3:41:62:70:3a:10:5d:2a:b9:a1:b0:90:b6:d1:0c: 60:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:CB:C2:27:44:D1:25:B7:90:AF:6F:1B:AB:41:C7:A0:7D:A4:B5:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/888c5d9b-0c01-3a6f-b516-5d3dffac6ddf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 130.61.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:c8:a3:4f:1d:59:0f:8c:8d:21:1b:17:d5:77:3c:8b:a0:14: a2:7d:ff:ed:c2:11:d3:ba:08:24:bf:82:89:a6:e8:f4:45:89: 69:4f:73:49:1a:e1:c2:28:e0:3b:87:26:91:8b:a4:40:6c:b9: ac:57:c8:e1:4f:6a:29:50:b3:15:c3:70:98:08:19:37:ac:e7: f1:23:5d:e2:c5:44:23:22:30:ef:f0:10:83:9c:e4:a5:2a:8d: e3:9c:8a:62:df:68:2a:ad:24:12:26:42:1e:79:fc:5f:d6:e9: 59:33:57:87:ae:d6:40:6f:22:ed:38:59:dd:ac:bc:86:00:04: fa:4f:d2:d3:9b:88:d6:eb:c5:9c:bf:df:25:ed:24:29:08:9d: 2e:54:d6:f1:d5:c1:9e:6d:ee:3c:a4:08:15:fc:72:c4:58:a0: 67:b7:f1:3c:d9:74:82:f6:09:c7:08:15:c6:c9:dd:9f:e5:1c: 79:f5:ec:d6:c2:44:69:5e:e7:b6:c8:08:32:fa:b1:9a:c5:17: 35:49:b0:41:f4:d9:6a:dd:9d:86:26:49:b4:12:03:ce:77:a8: 7b:57:ab:15:81:ad:00:19:87:65:42:64:81:2c:36:02:8e:85: 46:8e:77:21:8b:16:25:94:82:da:de:99:89:b6:9a:42:c5:68: 96:a7:de:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RoUVOqkKeYgbLHoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk MzRmYmQ2ZDgtMGE1MS00ZjljLThmODYtZTdkM2Y4MDllMjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUbRX6PtdyCb67edSW8wAZixuGh5wnVl0olC m2y7WhHXktliKDZMVz96v6em0P9n3NCVngXosZ2y4mRPBSJMUV25ytQpgqxKXnys fB9u4lmTBucnsI6yt+WFLO5D+UhNucrjBREskWN/l3DUPenmmtK3Rou7PnAuC5oz yisXEEzEBKAm5No78qrQXbhuBO95Qig/KZTctXlZeWw6NqFD0cjRbiVbXGesPQN3 +gACYKM3NDv9iHxR7n/sw5R6MC2LRLqsnvRJsqiIjvkurEOFKdCzZMAnwf2ZyfrE VRK9LK+mo/POPBEcitKlx+hveWTjQWJwOhBdKrmhsJC20QxglwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLrLwidE0SW3kK9vG6tBx6B9pLVOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvODg4YzVkOWItMGMwMS0z YTZmLWI1MTYtNWQzZGZmYWM2ZGRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgj0IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKrIo08dWQ+MjSEbF9V3PIugFKJ9/+3CEdO6CCS/gomm6PRFiWlPc0ka 4cIo4DuHJpGLpEBsuaxXyOFPailQsxXDcJgIGTes5/EjXeLFRCMiMO/wEIOc5KUq jeOcimLfaCqtJBImQh55/F/W6VkzV4eu1kBvIu04Wd2svIYABPpP0tObiNbrxZy/ 3yXtJCkInS5U1vHVwZ5t7jykCBX8csRYoGe38TzZdIL2CccIFcbJ3Z/lHHn17NbC RGle57bICDL6sZrFFzVJsEH02WrdnYYmSbQSA853qHtXqxWBrQAZh2VCZIEsNgKO hUaOdyGLFiWUgtremYm2mkLFaJan3pI= -----END CERTIFICATE-----Generated at Wed Sep 23 12:58:12 2026 by rpki-client