$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/db0d52d0-0a0d-36fe-a648-37a2d42e5765.roa File: db0d52d0-0a0d-36fe-a648-37a2d42e5765.roa (raw, json) Hash identifier: 7OJ4XM9sxGaMDqdYkRp10t8/K1KGBfLr4ajsO5swfIE= Subject key identifier: DD:57:63:7B:EE:32:40:CD:DC:F1:71:FE:76:15:C2:42:15:FB:BA:AF Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584FB0BDE70CA51AB367A8A59C80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/db0d52d0-0a0d-36fe-a648-37a2d42e5765.roa Signing time: Sun 01 Nov 2026 01:00:13 +0000 ROA not before: Sun 01 Nov 2026 01:00:13 +0000 ROA not after: Sat 30 Jan 2027 02:00:13 +0000 asID: 31898 IP address blocks: 134.70.206.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b0:bd:e7:0c:a5:1a:b3:67:a8:a5:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Nov 1 01:00:13 2026 GMT Not After : Jan 30 02:00:13 2027 GMT Subject: CN=0253758e-4e8f-476b-a26a-513e786d5e15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:95:a0:a1:60:0d:39:aa:a6:25:10:a2:79:b5: ca:1a:ea:13:89:4c:7e:8b:cb:0e:c0:4e:e9:66:23: cf:20:e0:16:57:7f:10:04:d7:8b:f5:87:33:cc:72: 26:7b:79:63:ce:8b:03:c2:7a:14:f4:dc:4c:e5:3c: 7f:42:81:12:f1:2f:6c:9c:06:50:12:48:1d:3a:74: 6c:ab:a3:1e:c2:81:c7:83:06:14:c8:65:56:4b:6e: 1f:79:92:eb:00:6e:ee:2e:bc:36:06:71:fb:7a:06: 3d:38:a6:a7:78:8b:68:46:cb:dc:97:41:2b:2b:00: 86:ad:14:04:7b:de:63:d4:84:5c:24:25:b8:13:6e: 48:ee:2a:93:e9:84:56:43:67:73:47:18:4d:84:62: 65:b8:ec:79:91:03:83:69:a2:4c:82:48:61:dd:5f: 19:ad:d2:09:0e:3f:66:2a:d2:ee:03:28:95:be:8c: 74:00:d1:ab:ce:49:7d:d4:75:9f:26:2b:37:ce:b6: 63:aa:38:7c:39:b5:4b:84:b1:05:ee:7b:12:56:cd: d1:00:35:7a:49:9d:f8:e2:98:fb:5d:81:e5:21:8c: d8:fa:bc:9b:62:5b:d4:f5:7f:28:b0:c1:3d:6b:69: 67:94:b8:05:d1:0d:43:d7:e5:72:14:1c:85:c2:f9: 5e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:57:63:7B:EE:32:40:CD:DC:F1:71:FE:76:15:C2:42:15:FB:BA:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/db0d52d0-0a0d-36fe-a648-37a2d42e5765.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.70.206.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:87:26:18:9a:7f:df:ce:72:19:da:7f:4f:83:ac:3c:b0:36: 2c:f7:f0:1e:59:d0:4c:88:26:ca:40:7c:f2:4c:e9:57:3d:cc: 07:0b:98:6c:1a:0d:57:50:7f:f6:f6:99:a6:f7:9f:c7:00:33: b7:9a:22:a0:06:b5:e5:bf:23:11:a4:be:47:62:cb:57:88:d6: 2c:c0:97:db:15:f7:74:2e:18:92:61:5e:a6:93:23:fc:88:a7: 31:1b:12:0c:c7:3a:0f:de:7a:0c:f9:90:40:e7:f5:ad:c5:e3: ee:30:2f:f9:ce:55:87:f5:06:bd:b1:80:c4:53:a3:ab:fd:36: b9:39:30:71:c2:00:fb:b2:92:9d:bc:dc:dc:04:b9:e7:b9:f5: 26:e1:46:21:f6:c2:61:a7:fc:62:6e:43:b7:fa:c7:73:01:e0: 17:e6:5a:e9:62:7a:4d:45:c7:a8:55:0b:72:5c:9f:10:7a:b9: 98:5e:3c:e1:6e:55:56:2d:9e:3e:15:2f:28:2e:b7:14:8c:5f: e4:4f:83:90:4e:5a:ef:31:29:2f:ad:ef:6a:1d:ad:1b:21:bd: b2:75:b7:cd:ae:0f:b5:c6:dd:7e:4b:e9:43:d0:65:1e:26:07: 60:e2:83:1c:4a:b6:ff:9f:36:d9:b9:87:74:6e:fb:c0:21:8b: f1:81:90:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+wvecMpRqzZ6ilnIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MTEwMTAxMDAxM1oXDTI3MDEzMDAyMDAxM1owLzEtMCsGA1UEAxMk MDI1Mzc1OGUtNGU4Zi00NzZiLWEyNmEtNTEzZTc4NmQ1ZTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJWgoWANOaqmJRCiebXKGuoTiUx+i8sOwE7p ZiPPIOAWV38QBNeL9YczzHIme3ljzosDwnoU9NxM5Tx/QoES8S9snAZQEkgdOnRs q6MewoHHgwYUyGVWS24feZLrAG7uLrw2BnH7egY9OKaneItoRsvcl0ErKwCGrRQE e95j1IRcJCW4E25I7iqT6YRWQ2dzRxhNhGJluOx5kQODaaJMgkhh3V8ZrdIJDj9m KtLuAyiVvox0ANGrzkl91HWfJis3zrZjqjh8ObVLhLEF7nsSVs3RADV6SZ344pj7 XYHlIYzY+rybYlvU9X8osME9a2lnlLgF0Q1D1+VyFByFwvleawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN1XY3vuMkDN3PFx/nYVwkIV+7qvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZGIwZDUyZDAtMGEwZC0z NmZlLWE2NDgtMzdhMmQ0MmU1NzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhkbOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6HJhiaf9/Ochnaf0+DrDywNiz38B5Z0EyIJspAfPJM6Vc9zAcLmGwa DVdQf/b2mab3n8cAM7eaIqAGteW/IxGkvkdiy1eI1izAl9sV93QuGJJhXqaTI/yI pzEbEgzHOg/eegz5kEDn9a3F4+4wL/nOVYf1Br2xgMRTo6v9Nrk5MHHCAPuykp28 3NwEuee59SbhRiH2wmGn/GJuQ7f6x3MB4BfmWuliek1Fx6hVC3JcnxB6uZhePOFu VVYtnj4VLygutxSMX+RPg5BOWu8xKS+t72odrRshvbJ1t82uD7XG3X5L6UPQZR4m B2DigxxKtv+fNtm5h3Ru+8Ahi/GBkJU= -----END CERTIFICATE-----Generated at Sun Nov 15 19:21:54 2026 by rpki-client