$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e667a587-7d67-3858-99bd-94b2cfe7fd02.roa File: e667a587-7d67-3858-99bd-94b2cfe7fd02.roa (raw, json) Hash identifier: At2IFUEFLghBtaSc0LI9lkFLKFJY2KYwBnZ83kKo/Pk= Subject key identifier: A8:5E:92:45:5F:77:D1:9D:09:F7:AE:D8:37:69:67:83:62:83:7E:98 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F1B62554C8B2D7ADBBFD81580 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e667a587-7d67-3858-99bd-94b2cfe7fd02.roa Signing time: Tue 08 Sep 2026 13:00:12 +0000 ROA not before: Tue 08 Sep 2026 13:00:12 +0000 ROA not after: Mon 07 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 134.70.24.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:62:55:4c:8b:2d:7a:db:bf:d8:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 8 13:00:12 2026 GMT Not After : Dec 7 14:00:12 2026 GMT Subject: CN=b7f9e598-13ee-4bf1-89e9-bb1131129ff1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:2a:9e:8b:8a:78:70:14:d6:37:31:9d:a7:a5: e7:74:03:f5:58:dd:f0:aa:ac:38:c3:37:a0:2b:c1: 9f:46:f8:39:a8:0a:a7:24:bd:5e:40:dc:e1:c9:c7: 70:e2:e6:0e:1f:02:c8:06:fa:21:f3:33:ca:e6:7b: 30:1d:75:93:8b:4f:14:ab:27:26:ae:4f:39:38:9d: 50:2e:cd:53:93:ed:97:cf:73:4e:44:b3:fa:d4:32: a4:3b:05:c2:a8:8e:67:77:79:61:93:19:72:34:b1: 5a:ed:e8:41:68:64:78:77:78:83:fa:f8:38:d3:63: d6:d0:39:30:6b:02:dc:f9:14:15:48:57:6d:14:8a: 6e:7c:b2:92:a3:3c:cc:e7:ba:79:97:52:63:2b:05: 5b:06:9f:17:c1:9c:02:ae:7f:3e:54:95:e7:82:e2: bd:88:de:4f:5e:bf:f3:49:f9:11:e6:52:ca:cb:68: 4f:6e:f2:e1:e1:f6:47:73:ac:ca:c6:2a:d3:0e:b1: 2c:83:a9:a3:9a:19:b0:13:83:20:25:4c:f3:65:96: 32:b7:b8:dd:7a:0b:75:e3:89:b0:cd:e9:5a:6f:28: 80:1a:a6:e8:83:4e:65:f8:42:50:8e:eb:10:b9:8f: f4:4e:d1:68:85:8a:f4:13:0e:fa:74:57:b5:fe:3d: 33:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:5E:92:45:5F:77:D1:9D:09:F7:AE:D8:37:69:67:83:62:83:7E:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e667a587-7d67-3858-99bd-94b2cfe7fd02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.70.24.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:2e:66:95:57:bf:72:f4:48:a4:c6:73:66:ab:24:38:71:b8: d3:27:4d:5b:04:b4:04:7c:9e:2d:e5:d4:16:44:80:10:6c:26: c4:c4:d8:fa:c5:1e:24:23:d7:d1:d1:47:3f:00:41:02:a3:a7: 04:b0:b4:33:df:90:58:22:8a:b2:fe:4d:19:99:d0:2e:20:8a: e1:34:bd:d9:9d:85:f0:e3:f4:43:af:c7:1b:62:9a:2e:59:1c: 8f:b1:ea:77:1a:e0:77:d0:87:65:d2:04:69:a9:f1:99:c7:73: bd:19:19:cd:33:f0:d4:73:3d:54:6c:0f:1d:e5:bd:00:3e:bf: ca:59:26:3a:a7:fc:96:5e:c4:d1:33:e0:69:9c:4e:c2:b0:e0: 9e:13:f3:b1:77:69:17:cf:f0:85:3f:71:b7:f6:e9:26:a3:04: 23:dd:90:5d:52:08:95:0b:eb:76:d0:f1:f3:f4:1f:7c:f0:38: fa:d6:f3:e5:49:73:5e:1f:3c:26:ff:c3:9a:00:a1:db:f7:b2: 5e:e2:4a:9c:04:f5:a2:dd:e5:52:70:53:9b:32:a0:48:fd:01: 81:0f:b9:54:31:01:14:2d:63:2b:36:9d:4c:35:b3:27:14:47: 17:bb:df:2c:e3:d1:7b:c2:59:33:79:8e:83:be:e8:e8:56:d7: 47:04:f4:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8bYlVMiy1627/YFYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwODEzMDAxMloXDTI2MTIwNzE0MDAxMlowLzEtMCsGA1UEAxMk YjdmOWU1OTgtMTNlZS00YmYxLTg5ZTktYmIxMTMxMTI5ZmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSqei4p4cBTWNzGdp6XndAP1WN3wqqw4wzeg K8GfRvg5qAqnJL1eQNzhycdw4uYOHwLIBvoh8zPK5nswHXWTi08Uqycmrk85OJ1Q Ls1Tk+2Xz3NORLP61DKkOwXCqI5nd3lhkxlyNLFa7ehBaGR4d3iD+vg402PW0Dkw awLc+RQVSFdtFIpufLKSozzM57p5l1JjKwVbBp8XwZwCrn8+VJXnguK9iN5PXr/z SfkR5lLKy2hPbvLh4fZHc6zKxirTDrEsg6mjmhmwE4MgJUzzZZYyt7jdegt144mw zelabyiAGqbog05l+EJQjusQuY/0TtFohYr0Ew76dFe1/j0zkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKhekkVfd9GdCfeu2DdpZ4Nig36YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZTY2N2E1ODctN2Q2Ny0z ODU4LTk5YmQtOTRiMmNmZTdmZDAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhkYYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIIuZpVXv3L0SKTGc2arJDhxuNMnTVsEtAR8ni3l1BZEgBBsJsTE2PrF HiQj19HRRz8AQQKjpwSwtDPfkFgiirL+TRmZ0C4giuE0vdmdhfDj9EOvxxtimi5Z HI+x6nca4HfQh2XSBGmp8ZnHc70ZGc0z8NRzPVRsDx3lvQA+v8pZJjqn/JZexNEz 4GmcTsKw4J4T87F3aRfP8IU/cbf26SajBCPdkF1SCJUL63bQ8fP0H3zwOPrW8+VJ c14fPCb/w5oAodv3sl7iSpwE9aLd5VJwU5syoEj9AYEPuVQxARQtYys2nUw1sycU Rxe73yzj0XvCWTN5joO+6OhW10cE9Ec= -----END CERTIFICATE-----Generated at Wed Sep 23 08:47:56 2026 by rpki-client