$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/df8e25f4-8b4b-3c21-880e-f5f7620d8878.roa File: df8e25f4-8b4b-3c21-880e-f5f7620d8878.roa (raw, json) Hash identifier: FkObNb3A70XFfjY5lRqnxitQUi+gV6J2ruJHz1wpMMA= Subject key identifier: C7:DA:BE:6E:72:A7:12:57:EF:22:C9:2D:2B:CC:B7:9D:9E:81:EC:C0 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F0D6CD9EC49B1377A8E98F600 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/df8e25f4-8b4b-3c21-880e-f5f7620d8878.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 64.110.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:d9:ec:49:b1:37:7a:8e:98:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=e3b58665-be30-4e17-907c-bd0840fcaaa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:49:1c:2f:bd:ff:ff:29:a1:c9:9d:6a:5b:91: 59:5d:e6:50:f5:c9:9d:80:b1:b6:32:49:53:a6:87: 9d:b4:8b:82:ca:75:6f:dd:0f:d7:e5:c6:a2:d6:de: b7:60:bd:50:db:ca:5a:a7:e9:25:7c:b3:90:de:f7: 75:b0:b4:43:42:6b:52:7f:2b:b8:44:82:b6:9b:5e: e6:87:fd:05:82:23:fb:82:6c:e6:64:65:d3:56:fa: d1:04:60:f7:2c:4c:6a:dc:aa:ec:e5:48:64:6a:6a: 4c:5f:14:46:a7:b9:1d:97:53:f8:89:ed:ac:6e:10: f0:38:6a:9d:f5:27:f7:18:23:81:b4:1f:4d:5a:08: 0f:f9:ad:13:03:ef:92:88:08:e8:b8:66:47:a2:4a: 0a:f3:c1:f1:1d:f0:45:54:68:32:5f:79:55:00:a2: f1:dc:03:46:7f:21:fc:3a:87:48:93:e0:f2:fb:7d: cf:2f:8c:6f:7f:a5:74:98:aa:61:ef:7e:34:e6:45: 27:27:ff:77:89:90:27:26:59:7d:7d:c4:d2:35:36: 88:58:15:98:3a:3f:7c:d2:b2:23:ec:c3:fc:5b:02: a8:a0:bb:a6:c2:2b:a3:8f:5e:f7:2d:3a:a8:38:b7: e3:6f:c2:71:c5:4f:34:7a:3c:9c:1c:78:9d:f2:e0: 73:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:DA:BE:6E:72:A7:12:57:EF:22:C9:2D:2B:CC:B7:9D:9E:81:EC:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/df8e25f4-8b4b-3c21-880e-f5f7620d8878.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 64.110.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:6c:35:e7:f8:34:ab:ac:4b:fd:fb:0f:9e:cc:d1:8f:d2:d4: f6:24:ec:b1:24:51:e9:b2:be:7b:ce:60:ab:55:c9:ec:0b:b8: 9f:ea:d3:9b:64:cd:2c:d9:65:19:3d:50:73:b7:ed:f1:47:32: 78:90:cd:29:0a:b7:a9:dd:09:73:56:bd:ff:8d:b5:12:0d:24: 90:ef:8a:cc:1e:be:79:76:41:f3:d0:15:40:c9:a8:00:0f:d4: a1:d6:e8:27:5f:0c:56:08:6e:a5:0e:60:f7:f7:a4:03:d2:4f: fd:fb:6a:9e:62:c6:d0:48:a4:5f:5e:22:fe:0a:95:d5:76:6e: 48:9b:44:4b:94:85:50:13:00:3a:dc:97:95:be:5a:bd:5f:9b: ce:86:38:fd:8c:6c:18:6e:9b:7d:5a:46:f4:79:45:ff:5c:18: 5b:cf:66:5f:4b:24:d3:d0:18:4a:2a:2d:39:bb:2f:35:c7:67: c6:f2:bb:fa:9b:cc:bf:82:7c:04:9e:d1:12:0c:cf:8d:28:c9: f9:f8:66:96:d2:3a:34:0a:0b:6c:49:c0:bc:ef:c7:ed:35:78: da:69:7d:53:b3:e5:6f:8f:d9:63:c0:d8:e7:90:73:26:6f:06: 48:b7:a0:2e:75:94:11:68:35:67:cd:7b:a7:43:b4:3c:a6:55: ce:c1:57:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbNnsSbE3eo6Y9gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk ZTNiNTg2NjUtYmUzMC00ZTE3LTkwN2MtYmQwODQwZmNhYWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUkcL73//ymhyZ1qW5FZXeZQ9cmdgLG2MklT poedtIuCynVv3Q/X5cai1t63YL1Q28pap+klfLOQ3vd1sLRDQmtSfyu4RIK2m17m h/0FgiP7gmzmZGXTVvrRBGD3LExq3Krs5UhkampMXxRGp7kdl1P4ie2sbhDwOGqd 9Sf3GCOBtB9NWggP+a0TA++SiAjouGZHokoK88HxHfBFVGgyX3lVAKLx3ANGfyH8 OodIk+Dy+33PL4xvf6V0mKph73405kUnJ/93iZAnJll9fcTSNTaIWBWYOj980rIj 7MP8WwKooLumwiujj173LTqoOLfjb8JxxU80ejycHHid8uBzSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMfavm5ypxJX7yLJLSvMt52egezAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZGY4ZTI1ZjQtOGI0Yi0z YzIxLTg4MGUtZjVmNzYyMGQ4ODc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQG5AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZsNef4NKusS/37D57M0Y/S1PYk7LEkUemyvnvOYKtVyewLuJ/q05tk zSzZZRk9UHO37fFHMniQzSkKt6ndCXNWvf+NtRINJJDviswevnl2QfPQFUDJqAAP 1KHW6CdfDFYIbqUOYPf3pAPST/37ap5ixtBIpF9eIv4KldV2bkibREuUhVATADrc l5W+Wr1fm86GOP2MbBhum31aRvR5Rf9cGFvPZl9LJNPQGEoqLTm7LzXHZ8byu/qb zL+CfASe0RIMz40oyfn4ZpbSOjQKC2xJwLzvx+01eNppfVOz5W+P2WPA2OeQcyZv Bki3oC51lBFoNWfNe6dDtDymVc7BV2Q= -----END CERTIFICATE-----Generated at Sat Sep 26 18:57:44 2026 by rpki-client