$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b2e0d72c-a48c-312a-becf-4e9fb4fc0e83.roa File: b2e0d72c-a48c-312a-becf-4e9fb4fc0e83.roa (raw, json) Hash identifier: +Yik4+e6Lm+8+LsA0L9BTB8b1FhhuBFVKo8A0JnMkyI= Subject key identifier: 0A:84:EB:8D:64:C5:76:50:47:84:CA:5C:3C:F1:E9:7C:9B:B4:45:96 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F4974B0E4BB590DBB3B211EA0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b2e0d72c-a48c-312a-becf-4e9fb4fc0e83.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 54253 IP address blocks: 140.245.168.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:b0:e4:bb:59:0d:bb:3b:21:1e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0dfd3ca5-8056-4c5c-ac5f-fa518052d6a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b9:30:63:4d:52:81:65:bc:df:10:30:7e:84: 5d:8f:a6:a0:d8:bb:34:66:09:47:8e:9a:e0:65:9a: 56:2e:05:fd:39:27:34:5a:e3:5f:b2:b2:49:74:4c: 8b:e3:13:25:1c:e0:6b:bf:c6:6a:79:50:de:99:9d: c1:30:cb:3e:38:ea:8f:36:71:c0:99:8e:e5:cd:17: 86:47:92:28:c1:ac:4d:1c:be:ac:b8:d3:9c:9c:4b: 8c:a4:a1:cd:8f:89:7c:6c:19:fa:91:22:b9:ce:df: d8:42:86:56:28:3a:d3:2d:ee:51:74:55:fe:11:34: ef:a3:a2:d7:e6:52:9c:52:3f:0c:c0:c5:dc:1d:15: 34:a0:f9:b2:18:c1:00:b4:1f:57:23:bb:4a:8c:10: 57:88:d5:2e:ed:39:b5:55:e7:79:02:7d:d2:16:5b: a9:76:bc:7d:f6:4e:e0:df:e8:e5:8e:86:a0:74:fa: 1c:6d:ec:ab:0c:b0:44:48:55:9a:65:79:8d:26:09: c1:ce:e0:6f:fe:6f:54:75:5f:24:49:85:83:be:b1: 42:af:f8:dd:c9:8e:7f:e6:68:44:41:0c:70:59:96: b2:15:9c:42:70:9f:a2:58:a8:2f:6c:d0:11:a3:fa: 2d:aa:2e:23:cf:76:34:47:ba:a9:81:03:c3:38:05: f7:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:84:EB:8D:64:C5:76:50:47:84:CA:5C:3C:F1:E9:7C:9B:B4:45:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b2e0d72c-a48c-312a-becf-4e9fb4fc0e83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.245.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:a2:e7:f7:e4:8d:7b:57:f7:8a:54:7a:cc:b3:21:b5:c9:0c: 53:b3:a9:0b:c9:a0:60:02:3d:dc:32:5c:53:73:bf:50:75:86: 1f:b2:91:a5:09:3c:3c:31:a1:97:05:ca:f2:05:9b:7d:ca:cf: 12:11:52:d9:0f:82:42:46:a7:a2:20:9f:ab:70:ae:ab:f9:a7: 88:ee:23:fe:81:0f:a9:36:4d:11:d3:fe:4e:83:9b:ed:59:c0: ac:6e:e8:8a:13:f2:48:69:67:b1:ec:02:0b:4a:91:7c:6a:d7: 7a:29:da:0b:e4:e9:f4:eb:2a:aa:f9:c2:6a:ea:a9:12:e3:75: ab:c1:c0:e1:01:83:32:c1:16:27:65:cd:c3:00:96:a9:13:6c: a8:67:fa:7d:c8:42:cc:e9:b7:ef:0d:62:78:82:99:f8:af:9a: af:55:75:d4:1f:1f:56:15:a3:fa:f8:21:95:2e:33:f2:ec:a9: f9:cf:26:1f:24:3f:22:e2:f5:ff:cc:91:54:8b:ae:fa:00:5f: a5:52:2b:37:b3:b5:54:6d:cd:d3:3a:a1:c0:38:14:ee:89:cc: a1:db:5b:cc:d5:c0:3e:8c:51:b7:b7:f7:8e:24:61:36:60:a2: 2b:fb:15:45:2c:a4:c3:0f:2e:29:27:71:1b:1e:23:d4:39:be: bf:e5:18:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdLDku1kNuzshHqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MGRmZDNjYTUtODA1Ni00YzVjLWFjNWYtZmE1MTgwNTJkNmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrkwY01SgWW83xAwfoRdj6ag2Ls0ZglHjprg ZZpWLgX9OSc0WuNfsrJJdEyL4xMlHOBrv8ZqeVDemZ3BMMs+OOqPNnHAmY7lzReG R5IowaxNHL6suNOcnEuMpKHNj4l8bBn6kSK5zt/YQoZWKDrTLe5RdFX+ETTvo6LX 5lKcUj8MwMXcHRU0oPmyGMEAtB9XI7tKjBBXiNUu7Tm1Ved5An3SFlupdrx99k7g 3+jljoagdPocbeyrDLBESFWaZXmNJgnBzuBv/m9UdV8kSYWDvrFCr/jdyY5/5mhE QQxwWZayFZxCcJ+iWKgvbNARo/otqi4jz3Y0R7qpgQPDOAX37wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAqE641kxXZQR4TKXDzx6XybtEWWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYjJlMGQ3MmMtYTQ4Yy0z MTJhLWJlY2YtNGU5ZmI0ZmMwZTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDjPWoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIui5/fkjXtX94pUesyzIbXJDFOzqQvJoGACPdwyXFNzv1B1hh+ykaUJ PDwxoZcFyvIFm33KzxIRUtkPgkJGp6Ign6twrqv5p4juI/6BD6k2TRHT/k6Dm+1Z wKxu6IoT8khpZ7HsAgtKkXxq13op2gvk6fTrKqr5wmrqqRLjdavBwOEBgzLBFidl zcMAlqkTbKhn+n3IQszpt+8NYniCmfivmq9VddQfH1YVo/r4IZUuM/LsqfnPJh8k PyLi9f/MkVSLrvoAX6VSKzeztVRtzdM6ocA4FO6JzKHbW8zVwD6MUbe3944kYTZg oiv7FUUspMMPLikncRseI9Q5vr/lGI0= -----END CERTIFICATE-----Generated at Fri Sep 25 12:51:24 2026 by rpki-client