$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9c073be5-f04a-3ab1-910d-1b608de5a527.roa File: 9c073be5-f04a-3ab1-910d-1b608de5a527.roa (raw, json) Hash identifier: 9ztOABRXl+F78U91Y9Ece+w/WGlWX1VtxxAMriFo69Y= Subject key identifier: 06:57:19:85:3E:48:FB:87:7B:D3:34:5F:DF:4F:99:25:BA:4E:49:33 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F20F7D20E0CFDBE0178AE9EA0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9c073be5-f04a-3ab1-910d-1b608de5a527.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 144.33.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:d2:0e:0c:fd:be:01:78:ae:9e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=e847413e-50d9-452d-bb24-c5b6cc20b0bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:de:88:68:b3:da:02:9b:aa:7d:59:f6:fc:c7: 9e:80:02:bb:a0:c2:35:b1:b4:20:e3:9d:8f:ec:36: 1d:78:98:1e:d6:ee:21:ca:1b:7e:ab:c6:fa:d9:d3: c3:69:ac:f4:0b:a9:05:f4:8f:03:38:d5:fc:fb:b2: b7:26:80:8f:43:68:59:68:f9:b3:be:08:b8:7a:0a: 11:d6:35:db:2a:ee:25:f9:9c:55:68:6a:db:33:e8: f5:ab:d7:6a:d0:60:2b:d3:3e:93:3c:40:e9:35:68: 34:4e:2f:42:0a:02:cc:b2:07:b9:69:ae:21:23:2e: 6c:1b:f5:9e:b4:36:51:8b:6a:41:be:07:03:2c:c2: 58:1b:2b:43:6c:84:bd:eb:74:5c:f6:04:07:c7:9d: 4b:8c:20:06:5a:26:ea:86:3d:ae:5e:73:12:48:d5: cb:db:ac:f5:a2:9c:42:a0:26:56:d1:46:ca:78:c4: 21:ed:08:9e:0e:aa:d7:ac:6f:1b:5e:6a:2a:ab:0f: a2:39:2a:3b:1c:f4:fb:c5:b5:a7:fc:58:fd:c7:60: b1:87:b2:63:9f:4d:09:17:fc:db:3d:13:58:04:73: 4c:17:d1:a9:9c:4a:a8:b7:2a:dc:51:ba:7c:a6:63: 4f:30:09:b8:52:09:6a:f6:fa:1e:0d:7f:01:0a:02: 9c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:57:19:85:3E:48:FB:87:7B:D3:34:5F:DF:4F:99:25:BA:4E:49:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9c073be5-f04a-3ab1-910d-1b608de5a527.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 144.33.47.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:74:b6:28:0f:3f:4a:c8:5c:bd:68:9d:b0:cd:c7:b8:86:96: 5d:8c:c2:7c:55:33:79:c5:1a:a0:44:52:a6:cd:2c:8f:15:d5: 82:9a:9b:06:1c:c0:e9:b0:b4:d4:8e:15:0e:be:6d:53:0d:bf: 4f:25:e3:b7:f4:91:14:b7:69:71:f7:5b:43:c9:4a:28:2e:42: a6:4f:5d:17:cd:08:58:5f:aa:fb:3d:4a:2e:2e:be:6a:db:94: 08:59:a6:2d:98:8d:c2:ed:1a:59:eb:6e:18:27:83:23:6c:c4: 72:4a:f8:dd:fb:64:44:62:0d:95:65:55:a3:6d:e5:f0:f3:c4: fb:04:2c:56:9c:b0:70:75:60:11:93:3f:6b:b4:d1:1d:58:92: 9f:38:79:e5:0b:05:20:05:65:2e:d6:f1:8e:32:59:44:82:3a: ba:00:19:6a:fc:a8:d1:85:0b:1e:3f:7d:7a:da:87:eb:39:db: 92:5d:7b:9e:61:36:a4:70:8b:d4:8b:ed:7b:5f:19:d6:69:2b: ca:93:81:0e:08:a9:69:f2:28:a8:2f:bd:66:7c:4b:df:e0:6e: 3b:5c:a6:97:1a:96:51:7c:65:1e:2f:49:a7:c7:cb:81:ce:a4: 63:ca:72:17:b2:81:ba:6d:1b:ea:a6:17:e3:d4:f3:81:2b:e6: 1d:d1:e9:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g99IODP2+AXiunqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk ZTg0NzQxM2UtNTBkOS00NTJkLWJiMjQtYzViNmNjMjBiMGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhN6IaLPaApuqfVn2/MeegAK7oMI1sbQg452P 7DYdeJge1u4hyht+q8b62dPDaaz0C6kF9I8DONX8+7K3JoCPQ2hZaPmzvgi4egoR 1jXbKu4l+ZxVaGrbM+j1q9dq0GAr0z6TPEDpNWg0Ti9CCgLMsge5aa4hIy5sG/We tDZRi2pBvgcDLMJYGytDbIS963Rc9gQHx51LjCAGWibqhj2uXnMSSNXL26z1opxC oCZW0UbKeMQh7QieDqrXrG8bXmoqqw+iOSo7HPT7xbWn/Fj9x2Cxh7Jjn00JF/zb PRNYBHNMF9GpnEqotyrcUbp8pmNPMAm4Uglq9voeDX8BCgKc9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAZXGYU+SPuHe9M0X99PmSW6TkkzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOWMwNzNiZTUtZjA0YS0z YWIxLTkxMGQtMWI2MDhkZTVhNTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkCEvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHx0tigPP0rIXL1onbDNx7iGll2MwnxVM3nFGqBEUqbNLI8V1YKamwYc wOmwtNSOFQ6+bVMNv08l47f0kRS3aXH3W0PJSiguQqZPXRfNCFhfqvs9Si4uvmrb lAhZpi2YjcLtGlnrbhgngyNsxHJK+N37ZERiDZVlVaNt5fDzxPsELFacsHB1YBGT P2u00R1Ykp84eeULBSAFZS7W8Y4yWUSCOroAGWr8qNGFCx4/fXrah+s525Jde55h NqRwi9SL7XtfGdZpK8qTgQ4IqWnyKKgvvWZ8S9/gbjtcppcallF8ZR4vSafHy4HO pGPKcheygbptG+qmF+PU84Er5h3R6XI= -----END CERTIFICATE-----Generated at Tue Oct 6 13:57:09 2026 by rpki-client