$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/db887a0f-dcd8-3b4a-adf5-a1df7a5b3bb1.roa File: db887a0f-dcd8-3b4a-adf5-a1df7a5b3bb1.roa (raw, json) Hash identifier: s6nTDCxg8nSEDc8SV88buA+AbP5DiZATPLkdSprpqjI= Subject key identifier: E4:1E:FD:35:69:1A:62:BA:C2:81:F6:5E:22:07:8C:A3:0D:FA:F1:5C Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584FB3A678079A1DCE3661182380 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/db887a0f-dcd8-3b4a-adf5-a1df7a5b3bb1.roa Signing time: Mon 02 Nov 2026 02:00:13 +0000 ROA not before: Mon 02 Nov 2026 02:00:13 +0000 ROA not after: Sun 31 Jan 2027 02:00:13 +0000 asID: 31898 IP address blocks: 168.129.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b3:a6:78:07:9a:1d:ce:36:61:18:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Nov 2 02:00:13 2026 GMT Not After : Jan 31 02:00:13 2027 GMT Subject: CN=c7cfb620-040e-4bd5-b5ba-20ba3e52b1e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e3:e3:33:68:55:08:af:6c:d0:c5:d3:63:11: 80:1e:05:81:af:9a:5d:82:98:64:e3:5a:60:bc:5a: 79:89:cb:fc:67:ec:bc:de:66:b8:7f:d3:b0:1f:a2: d7:f4:50:18:8d:65:1c:c9:0a:4e:55:cf:49:dc:68: f7:b9:31:55:8e:51:55:bc:ee:b7:f8:fe:5c:7f:d7: 95:fb:28:03:02:50:53:33:3e:29:81:c0:19:f8:d6: 1b:50:ca:3a:d2:0c:ed:d0:35:0b:2d:c3:78:5a:7e: 0c:cd:05:26:4c:ad:9c:f2:61:90:38:f5:99:50:44: 57:99:ea:3b:a5:e8:f3:a3:dc:99:24:de:59:1c:4a: 81:34:42:2e:2f:4f:30:b0:c1:f4:27:36:24:ac:fb: f5:a9:1d:f1:6e:c8:f1:7f:e8:1b:06:fc:3c:ba:5c: a2:d1:3d:16:a3:b4:4b:a6:87:7a:1e:de:90:ce:2c: 33:34:29:09:f0:27:ab:75:f3:97:5f:69:1d:8a:30: 77:6f:45:43:65:74:2e:8c:bb:bc:cc:0c:ed:6f:95: 90:77:ba:05:05:1b:ef:69:62:20:ed:b4:24:4a:ae: 56:f1:69:7b:d1:6d:2c:d1:09:bf:1e:e1:f5:1b:0c: a4:65:41:5b:77:ae:68:67:03:db:a5:47:e2:97:a8: 36:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:1E:FD:35:69:1A:62:BA:C2:81:F6:5E:22:07:8C:A3:0D:FA:F1:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/db887a0f-dcd8-3b4a-adf5-a1df7a5b3bb1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.129.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:4b:ce:db:3d:be:e0:c1:65:41:69:9b:76:2f:6e:4b:8b:4f: 86:3b:c5:4f:a7:c2:65:10:41:22:ff:8b:64:f5:3b:cd:09:7c: b5:b9:a5:2f:3d:7e:4f:ef:3f:e5:97:ad:5b:a0:e5:5d:48:75: 72:10:47:4c:48:90:7a:fa:f6:0f:ed:6b:5c:b4:01:4c:8d:73: 9b:0b:ce:6c:78:03:57:10:ed:d2:b5:9f:03:3d:9e:e9:e2:69: e4:9e:01:bc:65:4e:df:4e:77:56:51:06:f8:e8:00:2e:9e:d8: c0:52:7b:8b:5d:51:73:51:65:2d:8d:69:08:42:43:24:00:5b: 0a:99:53:30:68:12:26:50:2e:d9:8f:3d:c3:e0:67:00:09:cc: 0c:5b:b2:a0:f3:27:b5:a6:a1:59:b0:2c:64:3a:96:28:e6:ef: 7d:02:c0:1e:cd:ec:ee:20:5f:60:e3:60:04:a8:14:58:87:81: 7a:ef:dd:2a:2a:ed:aa:9b:2f:58:97:94:46:0c:dd:c4:1a:e7: 82:cd:6d:22:09:10:96:74:cd:41:b0:8f:b1:8d:ea:1b:24:3e: 1c:e6:47:46:f2:15:d4:37:44:71:02:93:a0:d4:6d:0b:a4:33: 24:0f:cf:08:f6:31:02:5e:17:93:26:ba:bf:6b:ca:14:e6:3f: 5b:39:a2:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+zpngHmh3ONmEYI4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MTEwMjAyMDAxM1oXDTI3MDEzMTAyMDAxM1owLzEtMCsGA1UEAxMk YzdjZmI2MjAtMDQwZS00YmQ1LWI1YmEtMjBiYTNlNTJiMWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOPjM2hVCK9s0MXTYxGAHgWBr5pdgphk41pg vFp5icv8Z+y83ma4f9OwH6LX9FAYjWUcyQpOVc9J3Gj3uTFVjlFVvO63+P5cf9eV +ygDAlBTMz4pgcAZ+NYbUMo60gzt0DULLcN4Wn4MzQUmTK2c8mGQOPWZUERXmeo7 pejzo9yZJN5ZHEqBNEIuL08wsMH0JzYkrPv1qR3xbsjxf+gbBvw8ulyi0T0Wo7RL pod6Ht6QziwzNCkJ8CerdfOXX2kdijB3b0VDZXQujLu8zAztb5WQd7oFBRvvaWIg 7bQkSq5W8Wl70W0s0Qm/HuH1GwykZUFbd65oZwPbpUfil6g2CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOQe/TVpGmK6woH2XiIHjKMN+vFcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZGI4ODdhMGYtZGNkOC0z YjRhLWFkZjUtYTFkZjdhNWIzYmIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqIH4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1Lzts9vuDBZUFpm3YvbkuLT4Y7xU+nwmUQQSL/i2T1O80JfLW5pS89 fk/vP+WXrVug5V1IdXIQR0xIkHr69g/ta1y0AUyNc5sLzmx4A1cQ7dK1nwM9nuni aeSeAbxlTt9Od1ZRBvjoAC6e2MBSe4tdUXNRZS2NaQhCQyQAWwqZUzBoEiZQLtmP PcPgZwAJzAxbsqDzJ7WmoVmwLGQ6lijm730CwB7N7O4gX2DjYASoFFiHgXrv3Soq 7aqbL1iXlEYM3cQa54LNbSIJEJZ0zUGwj7GN6hskPhzmR0byFdQ3RHECk6DUbQuk MyQPzwj2MQJeF5Mmur9ryhTmP1s5ok0= -----END CERTIFICATE-----Generated at Sun Nov 15 21:45:35 2026 by rpki-client