$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b7d39a27-d5d1-34b0-8990-97751fda0811.roa File: b7d39a27-d5d1-34b0-8990-97751fda0811.roa (raw, json) Hash identifier: aOGg9JvMVdj7d2i8HaXOmJThyqWUg+SmS73jjtIKxBo= Subject key identifier: 11:FA:AC:93:CF:1E:CD:A0:91:E4:0D:8B:75:D2:0D:C9:11:2F:81:27 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F0D6CF6CC6376E48BD5CC6300 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b7d39a27-d5d1-34b0-8990-97751fda0811.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 207.127.88.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:f6:cc:63:76:e4:8b:d5:cc:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=35259293-3837-4de5-a88e-cd624cc525a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ea:2e:1e:28:80:e8:32:af:02:03:b6:73:db: f7:3d:d2:b5:47:8f:02:3c:c0:45:32:80:29:31:63: 8d:86:87:ef:d9:23:b0:74:4d:f1:67:f2:3f:22:05: a0:53:a8:df:05:e0:76:29:52:a4:29:13:e9:57:2b: db:e0:fc:db:f6:27:21:10:14:9a:30:85:62:9f:09: 9d:e4:1f:fd:00:fc:d4:83:d5:4d:a9:57:25:ed:0c: 69:b7:8e:70:29:2b:63:a7:6f:98:d2:1d:b2:0e:1d: 13:7c:33:5c:b4:b8:6e:00:ea:1e:c9:40:6e:19:47: 87:fe:0b:c0:0f:3b:d5:aa:df:99:a5:f7:88:6e:52: c6:a3:b2:8b:7f:2b:35:96:0c:45:5b:93:2c:cb:ff: 57:0d:8d:90:ce:8a:78:71:02:81:7e:e7:78:cf:93: 19:2e:9b:1e:3e:cf:02:36:e8:88:00:51:07:ca:09: 9b:39:b7:ae:d6:1e:c8:41:d3:6d:35:1f:de:46:d9: 1e:13:f9:42:b4:ed:98:b3:79:98:65:44:c7:0f:b9: 62:f8:0e:40:98:0a:93:40:18:bd:20:12:cd:23:1d: dc:97:89:c6:73:af:f5:fa:aa:6d:27:5d:14:e1:79: 65:4c:58:2c:1f:bf:c7:e4:e4:da:da:de:c8:5e:a3: bc:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:FA:AC:93:CF:1E:CD:A0:91:E4:0D:8B:75:D2:0D:C9:11:2F:81:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b7d39a27-d5d1-34b0-8990-97751fda0811.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 207.127.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:84:b9:5b:40:7a:ef:a0:f2:b2:10:a6:de:35:d5:d1:d1:32: a1:32:f7:27:78:71:89:af:27:3e:4c:99:9f:a9:bf:5c:b7:d9: 83:5e:a4:c4:e9:7f:83:4b:1d:b4:ba:0a:1a:e4:7a:62:ea:7e: 9c:24:f5:4e:71:e5:2b:9b:3c:b7:e2:cf:62:ec:e5:b5:f2:ff: c5:e7:bc:3f:e8:52:bf:d8:74:65:59:1d:62:47:f0:a5:52:d8: b3:3f:58:c2:14:d4:52:bd:d7:d3:71:c0:3e:d8:92:d6:c6:5c: d1:a1:52:e4:33:19:7d:77:4e:26:13:68:ac:a5:d9:b2:2e:f2: 7d:4c:cd:0f:b2:9e:86:32:ca:18:73:33:72:07:93:1a:f7:1c: 91:b6:84:f8:8b:68:c1:28:61:5f:04:f0:b1:88:9d:69:36:10: 64:7f:99:16:45:fc:a8:6b:63:13:4d:fe:69:84:81:ed:bf:39: 6a:46:dc:1d:58:ae:79:cc:e8:33:4b:9a:bc:fa:0e:d0:8d:7a: 84:d3:c3:1f:03:ef:0a:5a:83:6a:c6:18:34:61:03:7b:69:39: 8a:4e:4c:3f:64:cc:32:fd:0e:bd:0e:d2:8d:1f:2a:67:0b:50: fa:6f:00:f5:32:80:a2:a9:fe:44:6d:7f:22:c8:5a:04:12:ac: 7e:f6:c7:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbPbMY3bki9XMYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk MzUyNTkyOTMtMzgzNy00ZGU1LWE4OGUtY2Q2MjRjYzUyNWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOouHiiA6DKvAgO2c9v3PdK1R48CPMBFMoAp MWONhofv2SOwdE3xZ/I/IgWgU6jfBeB2KVKkKRPpVyvb4Pzb9ichEBSaMIVinwmd 5B/9APzUg9VNqVcl7Qxpt45wKStjp2+Y0h2yDh0TfDNctLhuAOoeyUBuGUeH/gvA DzvVqt+ZpfeIblLGo7KLfys1lgxFW5Msy/9XDY2Qzop4cQKBfud4z5MZLpsePs8C NuiIAFEHygmbObeu1h7IQdNtNR/eRtkeE/lCtO2Ys3mYZUTHD7li+A5AmAqTQBi9 IBLNIx3cl4nGc6/1+qptJ10U4XllTFgsH7/H5OTa2t7IXqO83wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBH6rJPPHs2gkeQNi3XSDckRL4EnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYjdkMzlhMjctZDVkMS0z NGIwLTg5OTAtOTc3NTFmZGEwODExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDz39YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG2EuVtAeu+g8rIQpt411dHRMqEy9yd4cYmvJz5MmZ+pv1y32YNepMTp f4NLHbS6ChrkemLqfpwk9U5x5SubPLfiz2Ls5bXy/8XnvD/oUr/YdGVZHWJH8KVS 2LM/WMIU1FK919NxwD7YktbGXNGhUuQzGX13TiYTaKyl2bIu8n1MzQ+ynoYyyhhz M3IHkxr3HJG2hPiLaMEoYV8E8LGInWk2EGR/mRZF/KhrYxNN/mmEge2/OWpG3B1Y rnnM6DNLmrz6DtCNeoTTwx8D7wpag2rGGDRhA3tpOYpOTD9kzDL9Dr0O0o0fKmcL UPpvAPUygKKp/kRtfyLIWgQSrH72xzo= -----END CERTIFICATE-----Generated at Sat Sep 26 18:53:15 2026 by rpki-client