$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9da2c57a-bd84-33d8-a9c5-3c7715e05387.roa File: 9da2c57a-bd84-33d8-a9c5-3c7715e05387.roa (raw, json) Hash identifier: CUYvSFOf/e7gKsbw1iJtTuX7q8DsiBWRABewdfM2HAI= Subject key identifier: F7:81:9B:E5:F1:C1:6B:0B:FF:74:BD:6E:59:B3:0C:00:FA:05:7B:0A Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F1CC7A26012CA11559D261000 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9da2c57a-bd84-33d8-a9c5-3c7715e05387.roa Signing time: Wed 09 Sep 2026 01:00:11 +0000 ROA not before: Wed 09 Sep 2026 01:00:11 +0000 ROA not after: Tue 08 Dec 2026 02:00:11 +0000 asID: 31898 IP address blocks: 134.70.136.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1c:c7:a2:60:12:ca:11:55:9d:26:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 9 01:00:11 2026 GMT Not After : Dec 8 02:00:11 2026 GMT Subject: CN=adfa3eff-9f89-4a5f-aaef-0fef1383d896 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5a:1b:46:3b:1a:45:f4:68:67:9f:25:40:ff: d0:8c:36:f2:07:79:40:cf:33:3a:79:96:3b:e8:b4: b9:45:a1:91:24:0c:bf:2e:17:30:33:f1:c2:8f:74: e7:8f:d6:3b:46:aa:01:38:32:e7:a2:ab:6d:05:d4: 28:d5:43:06:a9:09:9a:fb:c6:3d:d8:a4:c5:0a:ce: 5b:a1:66:ea:e4:45:c0:95:43:7c:82:8f:e1:c4:58: 33:e6:b7:5e:b7:c3:36:1d:5e:b2:f7:fe:38:5d:64: ac:13:e8:4d:15:36:2e:dd:ff:76:41:ec:4a:a6:97: a1:02:83:04:23:4a:60:73:43:56:44:18:bd:1e:54: 1b:f6:0b:9f:c4:f1:27:d7:bc:d1:f2:b1:07:9d:6d: 6d:f9:25:99:8e:58:68:2b:61:ba:4a:bd:82:e0:cc: 83:c5:2b:c1:22:ab:d1:b8:09:f7:c1:ce:67:b3:17: e8:6d:d9:f7:52:6b:18:a5:4a:2c:da:11:c8:93:6d: 76:03:54:8e:dd:63:c6:f5:d7:a8:e1:f5:e5:1c:c0: ae:96:42:4b:65:47:96:ef:a3:1c:c3:5c:1f:bf:3b: 81:37:4b:2e:a9:e6:85:9c:b3:de:7d:4f:f5:78:01: 27:d4:37:3f:ff:3e:0f:ba:ad:b7:77:df:f5:ae:1e: 24:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:81:9B:E5:F1:C1:6B:0B:FF:74:BD:6E:59:B3:0C:00:FA:05:7B:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9da2c57a-bd84-33d8-a9c5-3c7715e05387.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.70.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:45:08:b9:47:49:d3:17:85:b4:ac:7a:34:34:e0:8d:db:ff: 5c:d8:9e:23:2b:34:78:fd:4f:29:d3:7f:3c:22:b2:ca:50:03: c9:8b:13:88:63:03:39:8c:a0:23:94:d4:94:8d:4d:8d:c1:19: 17:f1:0a:2f:41:3b:0c:c0:d4:da:8e:59:31:70:33:75:a9:e0: 74:59:ff:d7:fb:1f:ae:1d:71:7f:98:7a:4a:ff:52:5f:58:25: fa:44:67:4e:c4:8e:ce:2b:92:19:a5:31:70:6d:93:73:dd:8e: 46:8f:bd:64:71:36:de:75:1e:9d:25:36:e0:8c:5b:1f:8f:c8: 47:6a:ac:0f:8d:aa:2d:f4:b6:1e:bf:f3:bc:38:7f:24:8e:3e: a6:24:da:54:43:93:93:b3:ba:43:28:5e:11:ff:d3:a2:65:e5: 03:ae:b2:cc:03:9c:63:a3:84:86:0a:2f:24:d9:73:5c:99:fa: f0:94:c3:ec:03:a4:52:01:3c:87:f9:2e:b0:f7:ab:02:3c:5c: dc:80:30:c1:90:43:9a:37:e0:a7:81:a3:81:4c:89:21:a0:21: 70:c7:65:f4:99:28:74:73:36:57:10:de:f7:ae:22:8d:b5:5e: 53:31:92:ba:d6:8b:25:ed:c2:72:33:5c:35:de:07:b4:b8:08: 27:ec:84:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8cx6JgEsoRVZ0mEAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwOTAxMDAxMVoXDTI2MTIwODAyMDAxMVowLzEtMCsGA1UEAxMk YWRmYTNlZmYtOWY4OS00YTVmLWFhZWYtMGZlZjEzODNkODk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslobRjsaRfRoZ58lQP/QjDbyB3lAzzM6eZY7 6LS5RaGRJAy/LhcwM/HCj3Tnj9Y7RqoBODLnoqttBdQo1UMGqQma+8Y92KTFCs5b oWbq5EXAlUN8go/hxFgz5rdet8M2HV6y9/44XWSsE+hNFTYu3f92QexKppehAoME I0pgc0NWRBi9HlQb9gufxPEn17zR8rEHnW1t+SWZjlhoK2G6Sr2C4MyDxSvBIqvR uAn3wc5nsxfobdn3UmsYpUos2hHIk212A1SO3WPG9deo4fXlHMCulkJLZUeW76Mc w1wfvzuBN0suqeaFnLPefU/1eAEn1Dc//z4Puq23d9/1rh4k7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPeBm+XxwWsL/3S9blmzDAD6BXsKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOWRhMmM1N2EtYmQ4NC0z M2Q4LWE5YzUtM2M3NzE1ZTA1Mzg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhkaIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD1FCLlHSdMXhbSsejQ04I3b/1zYniMrNHj9TynTfzwisspQA8mLE4hj AzmMoCOU1JSNTY3BGRfxCi9BOwzA1NqOWTFwM3Wp4HRZ/9f7H64dcX+Yekr/Ul9Y JfpEZ07Ejs4rkhmlMXBtk3PdjkaPvWRxNt51Hp0lNuCMWx+PyEdqrA+Nqi30th6/ 87w4fySOPqYk2lRDk5OzukMoXhH/06Jl5QOusswDnGOjhIYKLyTZc1yZ+vCUw+wD pFIBPIf5LrD3qwI8XNyAMMGQQ5o34KeBo4FMiSGgIXDHZfSZKHRzNlcQ3veuIo21 XlMxkrrWiyXtwnIzXDXeB7S4CCfshOc= -----END CERTIFICATE-----Generated at Fri Sep 25 20:19:58 2026 by rpki-client