$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ae217f31-f4f7-3512-b277-8b32cf98d957.roa File: ae217f31-f4f7-3512-b277-8b32cf98d957.roa (raw, json) Hash identifier: x03IMl3I0tCflltRfBR21N5Tql1tO7MpkbC97G96J7Q= Subject key identifier: 3E:F5:15:1C:26:9A:53:87:55:62:C9:6C:19:57:6B:F0:19:D6:0E:01 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F10BDA7F783E98838637C9EC0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ae217f31-f4f7-3512-b277-8b32cf98d957.roa Signing time: Fri 04 Sep 2026 17:30:31 +0000 ROA not before: Fri 04 Sep 2026 17:30:31 +0000 ROA not after: Thu 03 Dec 2026 18:30:31 +0000 asID: 31898 IP address blocks: 147.5.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:10:bd:a7:f7:83:e9:88:38:63:7c:9e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 4 17:30:31 2026 GMT Not After : Dec 3 18:30:31 2026 GMT Subject: CN=9b8c136f-bff3-4eea-bf7d-387af905235c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:98:86:dc:18:a6:b8:a2:d9:11:b5:f3:8d:a5: 99:05:0c:16:11:82:1a:cb:1f:e8:3d:2f:e3:9e:f2: 0a:f7:8b:fa:16:32:08:f1:3e:1d:22:d7:39:dc:fc: ef:da:4f:62:2d:c2:f1:f1:c5:f1:c4:46:b0:93:df: 56:ef:52:4e:47:60:30:b6:5a:06:a1:3f:ac:94:ae: b2:8b:18:db:82:5f:78:4a:ef:94:6f:63:f6:f6:19: b2:f7:ff:75:63:25:66:05:6e:f7:b1:e9:3e:65:07: b7:b7:8b:d0:72:b1:0d:db:32:7e:d2:c4:e9:06:df: ed:c3:9d:73:5e:94:b4:a6:47:4e:ff:ab:65:d3:5b: 58:fe:e4:e9:b2:9e:04:00:22:4d:c8:46:66:6c:f8: 70:2f:e1:5c:a7:04:73:9f:5c:94:39:b2:cd:ae:13: 2c:9c:8f:af:e7:90:03:df:99:23:96:b7:9f:28:8d: 73:0e:92:73:c1:cf:b2:b0:5a:0a:b1:ff:77:94:aa: c5:a6:ff:b0:f8:8f:87:38:7d:de:20:be:34:5c:34: 6c:91:1e:33:0a:c5:1c:37:a9:fb:c0:9d:90:38:e1: be:0b:05:48:07:1b:e9:d1:a9:43:fd:a4:3f:d7:8c: 8f:90:cd:50:ec:16:96:77:13:97:de:f5:58:db:c9: 83:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:F5:15:1C:26:9A:53:87:55:62:C9:6C:19:57:6B:F0:19:D6:0E:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ae217f31-f4f7-3512-b277-8b32cf98d957.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 147.5.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:5f:28:8b:50:01:47:2f:b4:94:2c:cd:f1:16:d4:d3:8b:1f: f6:5d:97:aa:16:86:83:3e:f6:1b:b8:d7:12:29:80:b2:f7:f4: 4d:b1:e5:13:16:cd:0d:6b:a6:f6:db:4b:b4:90:d7:88:f8:e5: d5:01:aa:5a:ba:9d:74:18:de:ec:f3:05:2f:79:b6:47:3d:f4: fc:91:64:6f:a3:7d:2a:1b:15:c9:95:74:42:f6:3b:29:3f:b9: 91:92:d4:e7:a3:8e:fb:29:19:5e:77:a6:14:6c:62:0a:9e:54: 2a:3d:dc:0b:45:ff:68:df:c4:a9:02:1f:d8:7d:23:5a:3c:8f: 7d:d4:86:69:fb:6d:86:c3:1a:c6:30:cd:5d:92:f4:bb:85:6e: 97:d6:6d:f8:d7:1b:f5:8e:83:8d:37:1c:ae:06:36:15:71:98: 4d:6b:50:eb:1f:d9:19:34:45:4d:13:86:ef:76:7f:39:6d:4b: f2:70:7b:90:fd:53:fd:ad:66:1b:07:ce:1f:5c:c7:b4:60:34: 21:19:b0:98:c6:37:1b:56:fc:cd:0f:6c:22:30:2c:48:62:3f: 6a:a0:20:c6:f1:69:27:4e:65:a9:b9:75:56:e7:ae:00:28:2c: 8c:58:10:01:a6:20:db:87:06:e6:a6:e4:31:64:43:50:a2:73: 86:45:46:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Qvaf3g+mIOGN8nsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNDE3MzAzMVoXDTI2MTIwMzE4MzAzMVowLzEtMCsGA1UEAxMk OWI4YzEzNmYtYmZmMy00ZWVhLWJmN2QtMzg3YWY5MDUyMzVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5iG3BimuKLZEbXzjaWZBQwWEYIayx/oPS/j nvIK94v6FjII8T4dItc53Pzv2k9iLcLx8cXxxEawk99W71JOR2AwtloGoT+slK6y ixjbgl94Su+Ub2P29hmy9/91YyVmBW73sek+ZQe3t4vQcrEN2zJ+0sTpBt/tw51z XpS0pkdO/6tl01tY/uTpsp4EACJNyEZmbPhwL+FcpwRzn1yUObLNrhMsnI+v55AD 35kjlrefKI1zDpJzwc+ysFoKsf93lKrFpv+w+I+HOH3eIL40XDRskR4zCsUcN6n7 wJ2QOOG+CwVIBxvp0alD/aQ/14yPkM1Q7BaWdxOX3vVY28mDHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD71FRwmmlOHVWLJbBlXa/AZ1g4BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYWUyMTdmMzEtZjRmNy0z NTEyLWIyNzctOGIzMmNmOThkOTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwUBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEBfKItQAUcvtJQszfEW1NOLH/Zdl6oWhoM+9hu41xIpgLL39E2x5RMW zQ1rpvbbS7SQ14j45dUBqlq6nXQY3uzzBS95tkc99PyRZG+jfSobFcmVdEL2Oyk/ uZGS1OejjvspGV53phRsYgqeVCo93AtF/2jfxKkCH9h9I1o8j33Uhmn7bYbDGsYw zV2S9LuFbpfWbfjXG/WOg403HK4GNhVxmE1rUOsf2Rk0RU0Thu92fzltS/Jwe5D9 U/2tZhsHzh9cx7RgNCEZsJjGNxtW/M0PbCIwLEhiP2qgIMbxaSdOZam5dVbnrgAo LIxYEAGmINuHBuam5DFkQ1Cic4ZFRq8= -----END CERTIFICATE-----Generated at Sat Sep 26 11:02:52 2026 by rpki-client