$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b5cf17f1-a48c-369e-acb1-f07f37e89bee.roa File: b5cf17f1-a48c-369e-acb1-f07f37e89bee.roa (raw, json) Hash identifier: B9JUQcUO4++xnc2k8cK6bZXfnOwKMSxl4K1nr4R3eLk= Subject key identifier: D1:43:02:39:51:D6:80:A9:57:23:F5:89:BB:43:B9:FC:E0:7A:AB:6D Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F46A7F4E3C6113FE87F167280 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b5cf17f1-a48c-369e-acb1-f07f37e89bee.roa Signing time: Thu 24 Sep 2026 01:00:12 +0000 ROA not before: Thu 24 Sep 2026 01:00:12 +0000 ROA not after: Wed 23 Dec 2026 02:00:12 +0000 asID: 54253 IP address blocks: 134.185.136.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:46:a7:f4:e3:c6:11:3f:e8:7f:16:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 24 01:00:12 2026 GMT Not After : Dec 23 02:00:12 2026 GMT Subject: CN=aa15c563-7527-4cac-883f-cb6c80281c11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:77:3e:d7:00:fc:0e:6a:7f:12:59:ab:6d:f8: a8:46:84:9e:ef:af:65:5b:7a:81:3d:c8:81:7c:db: ab:ea:4b:56:f5:d0:a2:4f:56:78:97:f3:4f:65:e8: 0a:0d:0c:cf:31:0a:86:22:91:23:b4:2f:40:67:d6: bb:df:5c:16:43:40:dc:04:41:48:32:8c:39:6d:fc: 35:8c:53:7a:58:f3:fd:60:63:a2:c6:a2:06:2a:c3: 02:14:cb:06:c1:bd:52:e6:57:61:52:5c:54:df:a2: 7e:6e:63:4c:b1:f7:71:8a:e4:a1:06:d5:b3:4b:60: 5f:19:35:3c:0e:0e:2d:0e:44:f1:17:22:7a:5c:34: 8e:82:04:d5:81:66:56:1d:a0:4a:ad:fe:a8:e2:da: 51:bd:43:9c:35:42:20:7c:9b:03:b5:05:71:da:cc: 44:05:26:cc:71:45:9a:46:fc:0b:07:15:22:c3:0b: f4:46:11:99:df:1d:34:88:fb:01:f4:23:a6:2b:cf: 9a:bc:f0:18:09:6a:21:f4:b6:64:20:89:57:f4:ad: 5e:62:1f:b8:83:f8:fa:91:08:bd:08:b5:a8:09:1c: e4:07:cc:e9:d0:ad:bd:66:07:da:f8:ed:f4:01:4a: 45:4e:d5:a0:03:24:f9:0a:e0:79:1f:ca:a2:6b:70: 74:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:43:02:39:51:D6:80:A9:57:23:F5:89:BB:43:B9:FC:E0:7A:AB:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b5cf17f1-a48c-369e-acb1-f07f37e89bee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.185.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:8f:31:52:e4:6b:58:85:03:a2:d1:ba:38:84:5b:48:be:37: a5:82:1e:43:7a:0b:1f:d1:57:32:d5:e2:52:eb:f4:5e:d5:3c: 24:18:05:bd:de:ec:9d:a5:dd:3d:be:06:c5:de:a5:42:bb:24: 11:40:b9:13:d3:1f:0f:ca:b7:e0:05:8c:47:5b:c5:af:1c:7b: 07:81:fd:23:ed:ee:8d:2a:41:e9:50:db:26:29:93:aa:90:28: 01:54:f1:e2:d8:19:1b:c3:a8:54:bc:6e:ce:91:f7:9d:a1:fa: 3e:8c:f7:5f:56:4d:7c:25:d0:8e:a7:c4:5a:5f:e7:c7:d1:de: 6d:05:9a:0b:4b:14:55:76:79:06:9c:70:87:01:6c:2b:4a:10: 9f:1a:a7:4d:5a:f6:37:8f:cf:a7:0f:eb:21:4b:44:31:0d:f9: fa:b5:80:4c:a3:04:47:56:92:6f:9a:72:1b:ac:c5:f0:61:49: 38:8c:75:3e:5f:11:de:ac:20:4a:54:eb:c2:d3:8c:61:dc:a4: f4:e4:ee:d0:28:0f:0f:80:de:04:39:51:5f:63:7e:f0:95:1f: a5:36:18:c6:d3:f9:a9:d7:13:f6:5d:de:11:42:c9:40:09:0f: 6c:da:5e:ec:aa:8d:44:88:aa:8d:49:2d:91:7d:d6:22:64:be: da:e6:04:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Gp/TjxhE/6H8WcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkyNDAxMDAxMloXDTI2MTIyMzAyMDAxMlowLzEtMCsGA1UEAxMk YWExNWM1NjMtNzUyNy00Y2FjLTg4M2YtY2I2YzgwMjgxYzExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHc+1wD8Dmp/ElmrbfioRoSe769lW3qBPciB fNur6ktW9dCiT1Z4l/NPZegKDQzPMQqGIpEjtC9AZ9a731wWQ0DcBEFIMow5bfw1 jFN6WPP9YGOixqIGKsMCFMsGwb1S5ldhUlxU36J+bmNMsfdxiuShBtWzS2BfGTU8 Dg4tDkTxFyJ6XDSOggTVgWZWHaBKrf6o4tpRvUOcNUIgfJsDtQVx2sxEBSbMcUWa RvwLBxUiwwv0RhGZ3x00iPsB9COmK8+avPAYCWoh9LZkIIlX9K1eYh+4g/j6kQi9 CLWoCRzkB8zp0K29Zgfa+O30AUpFTtWgAyT5CuB5H8qia3B0QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNFDAjlR1oCpVyP1ibtDufzgeqttMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYjVjZjE3ZjEtYTQ4Yy0z NjllLWFjYjEtZjA3ZjM3ZTg5YmVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDhrmIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHOPMVLka1iFA6LRujiEW0i+N6WCHkN6Cx/RVzLV4lLr9F7VPCQYBb3e 7J2l3T2+BsXepUK7JBFAuRPTHw/Kt+AFjEdbxa8ceweB/SPt7o0qQelQ2yYpk6qQ KAFU8eLYGRvDqFS8bs6R952h+j6M919WTXwl0I6nxFpf58fR3m0FmgtLFFV2eQac cIcBbCtKEJ8ap01a9jePz6cP6yFLRDEN+fq1gEyjBEdWkm+achusxfBhSTiMdT5f Ed6sIEpU68LTjGHcpPTk7tAoDw+A3gQ5UV9jfvCVH6U2GMbT+anXE/Zd3hFCyUAJ D2zaXuyqjUSIqo1JLZF91iJkvtrmBEk= -----END CERTIFICATE-----Generated at Fri Sep 25 20:35:20 2026 by rpki-client