$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cb48edd1-f44c-38ec-985c-27b4c9fcd130.roa File: cb48edd1-f44c-38ec-985c-27b4c9fcd130.roa (raw, json) Hash identifier: c5PoldOoJ9QuY7aXTkCm/Y1+x373fIipuBb5ovpNhRo= Subject key identifier: 46:C8:7A:D3:9E:69:9F:1C:3A:31:9A:3A:3C:DD:5F:DE:69:24:74:9B Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F103798A567922F7AABA534C0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cb48edd1-f44c-38ec-985c-27b4c9fcd130.roa Signing time: Fri 04 Sep 2026 13:00:12 +0000 ROA not before: Fri 04 Sep 2026 13:00:12 +0000 ROA not after: Thu 03 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 140.204.66.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:10:37:98:a5:67:92:2f:7a:ab:a5:34:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 4 13:00:12 2026 GMT Not After : Dec 3 14:00:12 2026 GMT Subject: CN=0da88925-dc51-48cc-ae87-f8e7d0bbe9e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d2:c4:56:b7:c5:d4:a2:fd:b3:83:dd:67:bb: 10:d7:08:f4:79:39:99:fb:73:d4:77:43:87:ab:5a: 91:8e:c2:c2:12:5a:45:fc:16:b6:9a:59:f4:19:4f: cc:a1:92:79:0b:49:63:bf:2c:68:dc:88:ca:12:68: 5f:71:0d:82:b1:95:c3:e9:fe:8d:22:89:38:0a:fd: 99:de:d9:1b:16:31:88:08:b1:c6:56:87:0e:11:bc: da:0b:f0:27:07:c6:06:eb:e4:31:af:a7:44:b5:f8: 1e:6a:d5:1b:77:d8:d1:50:a2:e7:e8:7f:59:5a:dd: 83:e9:b8:d5:92:b8:ce:06:ed:3b:2e:f8:64:18:a2: 51:98:3a:d4:38:e3:a3:c9:d2:9d:54:b9:f4:ec:19: c2:07:c3:76:65:9e:cc:7e:70:15:7b:e0:48:55:ae: 07:96:59:b0:2e:9c:0f:62:f5:74:3a:25:47:a0:34: 90:8a:84:dd:e9:fd:76:cf:86:07:53:1b:20:01:58: 5f:3f:96:ba:b9:b8:2a:60:5f:89:25:25:ea:91:61: db:ba:4f:e8:9b:1f:0c:5e:5b:58:55:5f:1c:13:aa: 14:7c:b4:7f:b0:5c:df:7a:4c:ef:89:dd:b7:05:95: e9:f3:04:2a:be:44:d4:be:f5:17:a9:f9:a1:de:0a: 69:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:C8:7A:D3:9E:69:9F:1C:3A:31:9A:3A:3C:DD:5F:DE:69:24:74:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cb48edd1-f44c-38ec-985c-27b4c9fcd130.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.66.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:1d:50:8a:0f:56:7d:99:ec:d4:84:12:2f:2c:ca:7c:50:26: b0:c1:8e:cb:b1:c5:9d:9f:0a:8f:29:1a:78:ab:77:1b:f4:c4: 02:75:34:6f:1c:24:fd:e0:e5:06:c3:65:63:15:d6:8a:b3:83: ed:d1:b8:79:94:30:ca:9a:f4:02:3d:3c:24:89:2e:e3:04:42: 43:c6:86:e5:4b:c6:bc:98:9b:06:13:1e:32:62:fa:9b:dc:4a: 8d:86:dc:ff:f1:60:ab:73:90:c0:38:86:ac:89:76:ee:4b:fb: 0f:e8:35:1b:a4:89:30:d5:c7:ae:64:05:f3:35:26:8f:d2:50: b0:cf:6c:cf:0a:ea:e0:e1:42:bd:f8:0c:41:8a:53:e9:55:d2: 0c:a8:a4:11:54:28:50:11:d6:84:26:b1:17:59:ed:bd:1c:94: 93:57:b7:03:e6:43:f7:d3:84:d1:5a:c9:b3:ca:e0:64:1e:b6: c0:ad:5c:c3:55:9c:6d:d6:a7:11:24:1a:b4:02:c6:35:99:99: b3:8d:78:27:8d:7f:37:f1:1c:11:16:07:4d:43:50:e5:28:51: c5:8e:1f:d8:d7:06:5a:24:e9:5e:04:94:ad:65:b7:84:8b:aa: c9:ec:0f:24:b3:b1:72:41:a3:8a:db:b4:f3:b8:b0:3d:10:eb: 77:b7:2b:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8QN5ilZ5IvequlNMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNDEzMDAxMloXDTI2MTIwMzE0MDAxMlowLzEtMCsGA1UEAxMk MGRhODg5MjUtZGM1MS00OGNjLWFlODctZjhlN2QwYmJlOWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldLEVrfF1KL9s4PdZ7sQ1wj0eTmZ+3PUd0OH q1qRjsLCElpF/Ba2mln0GU/MoZJ5C0ljvyxo3IjKEmhfcQ2CsZXD6f6NIok4Cv2Z 3tkbFjGICLHGVocOEbzaC/AnB8YG6+Qxr6dEtfgeatUbd9jRUKLn6H9ZWt2D6bjV krjOBu07LvhkGKJRmDrUOOOjydKdVLn07BnCB8N2ZZ7MfnAVe+BIVa4HllmwLpwP YvV0OiVHoDSQioTd6f12z4YHUxsgAVhfP5a6ubgqYF+JJSXqkWHbuk/omx8MXltY VV8cE6oUfLR/sFzfekzvid23BZXp8wQqvkTUvvUXqfmh3gpprwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEbIetOeaZ8cOjGaOjzdX95pJHSbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvY2I0OGVkZDEtZjQ0Yy0z OGVjLTk4NWMtMjdiNGM5ZmNkMTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMxCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFodUIoPVn2Z7NSEEi8synxQJrDBjsuxxZ2fCo8pGnirdxv0xAJ1NG8c JP3g5QbDZWMV1oqzg+3RuHmUMMqa9AI9PCSJLuMEQkPGhuVLxryYmwYTHjJi+pvc So2G3P/xYKtzkMA4hqyJdu5L+w/oNRukiTDVx65kBfM1Jo/SULDPbM8K6uDhQr34 DEGKU+lV0gyopBFUKFAR1oQmsRdZ7b0clJNXtwPmQ/fThNFaybPK4GQetsCtXMNV nG3WpxEkGrQCxjWZmbONeCeNfzfxHBEWB01DUOUoUcWOH9jXBlok6V4ElK1lt4SL qsnsDySzsXJBo4rbtPO4sD0Q63e3K2s= -----END CERTIFICATE-----Generated at Sat Sep 26 04:35:23 2026 by rpki-client