$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a8aeac39-c794-349e-bef6-fb3c8890d20d.roa File: a8aeac39-c794-349e-bef6-fb3c8890d20d.roa (raw, json) Hash identifier: DcKNciJ+/u/GsMiuay++wwDVueC/D/gY0PYZQDd/xiQ= Subject key identifier: C0:30:58:84:ED:AE:B1:BD:9C:27:55:4C:AD:68:38:1C:33:99:4B:4C Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F11A14704A6EC1934766D3C6C Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a8aeac39-c794-349e-bef6-fb3c8890d20d.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 168.138.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:a1:47:04:a6:ec:19:34:76:6d:3c:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=e657d725-008b-404a-99df-e32e5ea474eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:2e:5b:eb:ac:6c:48:1a:ac:bd:9a:d4:72:82: 76:31:16:95:a4:e2:8b:f4:04:3c:fa:d7:65:cd:6f: ec:49:4f:25:84:14:ad:86:76:4b:e9:c7:5f:75:ed: ba:e4:c2:85:19:a7:e0:f3:74:b4:7f:51:18:01:ac: c8:da:83:f7:5c:c9:e1:bb:b4:9d:55:91:18:11:21: e7:ad:1c:8b:6e:83:17:73:61:b1:5f:fd:3b:65:cf: 94:f3:38:2c:97:5a:90:e5:bc:ec:db:18:2b:fa:98: 1b:83:86:f1:1a:65:f9:12:42:c6:dc:37:1d:46:61: 4a:50:fe:25:3b:32:be:9c:10:b1:50:04:29:67:26: 63:97:26:26:e9:19:a4:fa:9a:9f:33:71:6a:f8:25: a5:df:b9:4f:14:f2:24:c4:f6:c0:2d:0f:ed:35:ed: a3:b5:a1:e4:a8:29:6a:0b:23:2d:94:ab:ee:b0:c9: 61:92:67:0a:2f:48:32:c8:e5:8d:45:ef:72:f5:3b: be:09:72:8b:36:9e:56:3e:81:93:c4:d7:fe:6b:7a: 53:65:03:ed:1c:7c:0e:5a:f8:92:46:43:51:f0:71: 98:cd:cb:80:06:05:85:90:a0:01:f7:04:4c:84:18: ed:2a:93:03:19:83:97:df:c8:4a:24:6e:f9:15:20: dc:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:30:58:84:ED:AE:B1:BD:9C:27:55:4C:AD:68:38:1C:33:99:4B:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a8aeac39-c794-349e-bef6-fb3c8890d20d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.138.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:1c:1a:83:38:1a:c8:c5:96:38:40:29:09:1e:7d:be:0f:6b: 0a:ef:1a:27:f9:35:7f:1e:45:0e:39:a4:c6:f5:96:ad:c3:22: e5:5d:7c:66:62:46:31:50:f0:1e:00:b1:90:43:6a:0d:5d:08: 15:1f:be:36:60:6c:58:6f:54:d0:94:3a:2a:1c:ee:48:33:21: e2:65:56:00:2f:b6:ba:6a:50:03:30:ae:37:ca:61:51:2b:3b: a3:d4:57:b3:8e:b5:d8:f2:f0:0e:82:80:57:b9:61:c2:d5:28: a6:93:bb:16:8e:fa:93:af:60:2d:9c:ae:a4:64:4e:00:91:10: a6:8c:8b:96:51:0f:e8:d9:8f:55:1c:e6:8b:6e:53:f0:81:23: 39:bf:30:b4:95:4b:b0:f1:6b:0e:de:9c:fb:7d:74:e8:5c:f2: 4e:3c:15:b5:7a:ab:b9:42:06:4f:95:2a:a2:5a:8e:c3:8a:2c: e6:f7:fe:de:7f:0a:9d:45:c3:c5:0c:1a:cd:9a:99:5d:47:59: 9f:7b:e6:7a:2b:0e:6f:7f:d3:53:23:ef:1d:69:59:e7:f4:47: ee:ef:14:5a:65:59:6f:77:ec:c5:44:e5:11:7e:94:d7:dc:9e: 83:29:88:8a:88:15:d4:34:bc:7b:26:af:19:59:d2:56:7a:00: c8:02:02:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RoUcEpuwZNHZtPGwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTY1N2Q3MjUtMDA4Yi00MDRhLTk5ZGYtZTMyZTVlYTQ3NGViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmS5b66xsSBqsvZrUcoJ2MRaVpOKL9AQ8+tdl zW/sSU8lhBSthnZL6cdfde265MKFGafg83S0f1EYAazI2oP3XMnhu7SdVZEYESHn rRyLboMXc2GxX/07Zc+U8zgsl1qQ5bzs2xgr+pgbg4bxGmX5EkLG3DcdRmFKUP4l OzK+nBCxUAQpZyZjlyYm6Rmk+pqfM3Fq+CWl37lPFPIkxPbALQ/tNe2jtaHkqClq CyMtlKvusMlhkmcKL0gyyOWNRe9y9Tu+CXKLNp5WPoGTxNf+a3pTZQPtHHwOWviS RkNR8HGYzcuABgWFkKAB9wRMhBjtKpMDGYOX38hKJG75FSDcbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMAwWITtrrG9nCdVTK1oOBwzmUtMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYThhZWFjMzktYzc5NC0z NDllLWJlZjYtZmIzYzg4OTBkMjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqIp8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADkcGoM4GsjFljhAKQkefb4PawrvGif5NX8eRQ45pMb1lq3DIuVdfGZi RjFQ8B4AsZBDag1dCBUfvjZgbFhvVNCUOioc7kgzIeJlVgAvtrpqUAMwrjfKYVEr O6PUV7OOtdjy8A6CgFe5YcLVKKaTuxaO+pOvYC2crqRkTgCREKaMi5ZRD+jZj1Uc 5otuU/CBIzm/MLSVS7Dxaw7enPt9dOhc8k48FbV6q7lCBk+VKqJajsOKLOb3/t5/ Cp1Fw8UMGs2amV1HWZ975norDm9/01Mj7x1pWef0R+7vFFplWW937MVE5RF+lNfc noMpiIqIFdQ0vHsmrxlZ0lZ6AMgCAoI= -----END CERTIFICATE-----Generated at Wed Sep 23 02:20:26 2026 by rpki-client