$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c8100fa0-014c-3d50-8a79-bb06f6b36d37.roa File: c8100fa0-014c-3d50-8a79-bb06f6b36d37.roa (raw, json) Hash identifier: tUEgPh9eI4QszG7tMxCzUHJFY2JnVCJEP4BJC9zmnGk= Subject key identifier: 19:4D:BC:D2:01:55:31:1C:AE:EA:0F:00:F7:62:CC:48:79:A1:10:F1 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584FB2410BFE8E01DEFCFA739900 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c8100fa0-014c-3d50-8a79-bb06f6b36d37.roa Signing time: Sun 01 Nov 2026 14:00:13 +0000 ROA not before: Sun 01 Nov 2026 14:00:13 +0000 ROA not after: Sat 30 Jan 2027 14:00:13 +0000 asID: 31898 IP address blocks: 134.65.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b2:41:0b:fe:8e:01:de:fc:fa:73:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Nov 1 14:00:13 2026 GMT Not After : Jan 30 14:00:13 2027 GMT Subject: CN=6e7af00c-167f-46ff-b387-76c62a8188d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ee:88:57:f1:9e:db:2d:58:bb:04:de:b5:ba: 68:ed:f4:f9:a0:e8:57:d5:58:3c:3c:e3:85:0c:bb: 8d:f1:79:64:65:f4:e5:cf:22:ad:7f:b2:37:e1:57: 27:ed:8f:0d:50:48:01:f4:04:32:c3:c5:33:f1:46: 1b:1f:ce:6e:32:60:f9:be:31:6a:18:ea:da:3e:e2: ba:a1:e9:eb:d4:0e:f7:f6:f5:9d:fc:fe:64:14:6d: 48:32:6a:d0:e8:04:02:9b:97:1a:f8:2e:d1:4e:b0: f7:16:a6:f9:aa:30:0c:dd:50:44:92:8c:ff:69:f9: ad:63:c6:c2:c6:18:13:66:50:f6:06:c3:51:5b:c3: 91:ba:47:fa:4f:6f:67:97:2b:9d:a0:1f:14:54:36: ae:b2:41:14:f6:65:e6:54:3c:ab:4a:a6:b9:99:35: 60:92:d8:39:2f:09:f2:76:64:3c:4d:ab:fd:b5:91: c0:c2:f6:bc:85:6a:10:55:dc:23:fa:fd:91:af:00: 47:76:f4:33:fd:6d:b2:e6:9e:8c:16:38:18:8e:d2: 6e:8f:a3:68:45:bf:e6:95:53:6c:b2:47:a7:a3:91: 71:6c:3b:7e:c6:05:47:81:36:36:8c:b3:3e:19:75: f4:36:52:18:c3:24:12:03:5e:c4:ff:cd:5b:b7:6c: e2:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:4D:BC:D2:01:55:31:1C:AE:EA:0F:00:F7:62:CC:48:79:A1:10:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c8100fa0-014c-3d50-8a79-bb06f6b36d37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.65.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:5d:4b:01:89:a9:90:b8:35:cd:e0:eb:65:c9:f5:db:52:04: e8:39:f8:35:d3:52:c4:9e:91:9e:ed:e6:28:b7:a0:aa:a2:c1: e3:d6:45:5b:19:4c:13:3b:ba:ea:af:02:bb:1d:54:d3:2a:b3: 2a:70:2c:e7:b2:e8:b4:da:d4:11:f5:33:55:4e:b2:5c:fa:13: c8:b8:00:46:75:1e:4c:84:b5:dd:57:64:b4:b4:6d:05:65:af: 5e:2c:91:6a:d1:72:42:ec:92:73:81:a9:04:e4:35:04:f0:75: ac:94:3e:bb:23:36:7d:a9:56:ae:82:68:6d:fe:20:f7:f5:c9: 51:f8:a0:93:eb:b2:d5:98:18:3e:d2:9c:1b:48:ce:bb:aa:04: b9:bc:af:13:5d:c1:23:49:78:5b:5c:6d:d3:88:c1:c2:f6:23: 4d:86:e5:27:3c:c9:0b:9c:4c:1f:63:9d:05:e0:4b:0c:64:1a: c0:43:8f:11:03:7f:78:eb:7a:5a:b8:5c:d7:98:9e:d1:3e:6c: b7:c0:89:8a:2d:c2:41:f9:af:8d:91:e6:49:36:3e:5f:8f:06: 98:d3:8f:e8:c7:7c:1d:2f:92:51:87:cc:e3:6e:12:8e:83:a8: c2:cd:a7:04:34:ca:d5:a0:79:4e:31:8d:00:aa:3d:0f:6f:52: c3:c0:dc:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+yQQv+jgHe/PpzmQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MTEwMTE0MDAxM1oXDTI3MDEzMDE0MDAxM1owLzEtMCsGA1UEAxMk NmU3YWYwMGMtMTY3Zi00NmZmLWIzODctNzZjNjJhODE4OGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuO6IV/Ge2y1YuwTetbpo7fT5oOhX1Vg8POOF DLuN8XlkZfTlzyKtf7I34Vcn7Y8NUEgB9AQyw8Uz8UYbH85uMmD5vjFqGOraPuK6 oenr1A739vWd/P5kFG1IMmrQ6AQCm5ca+C7RTrD3Fqb5qjAM3VBEkoz/afmtY8bC xhgTZlD2BsNRW8ORukf6T29nlyudoB8UVDauskEU9mXmVDyrSqa5mTVgktg5Lwny dmQ8Tav9tZHAwva8hWoQVdwj+v2RrwBHdvQz/W2y5p6MFjgYjtJuj6NoRb/mlVNs skeno5FxbDt+xgVHgTY2jLM+GXX0NlIYwyQSA17E/81bt2ziTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBlNvNIBVTEcruoPAPdizEh5oRDxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYzgxMDBmYTAtMDE0Yy0z ZDUwLThhNzktYmIwNmY2YjM2ZDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFhkHgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGNdSwGJqZC4Nc3g62XJ9dtSBOg5+DXTUsSekZ7t5ii3oKqiwePWRVsZ TBM7uuqvArsdVNMqsypwLOey6LTa1BH1M1VOslz6E8i4AEZ1HkyEtd1XZLS0bQVl r14skWrRckLsknOBqQTkNQTwdayUPrsjNn2pVq6CaG3+IPf1yVH4oJPrstWYGD7S nBtIzruqBLm8rxNdwSNJeFtcbdOIwcL2I02G5Sc8yQucTB9jnQXgSwxkGsBDjxED f3jrelq4XNeYntE+bLfAiYotwkH5r42R5kk2Pl+PBpjTj+jHfB0vklGHzONuEo6D qMLNpwQ0ytWgeU4xjQCqPQ9vUsPA3EU= -----END CERTIFICATE-----Generated at Sun Nov 15 18:38:08 2026 by rpki-client