$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e736cfb2-1b1b-3810-b679-059f15764b05.roa File: e736cfb2-1b1b-3810-b679-059f15764b05.roa (raw, json) Hash identifier: A7WXKUIELxpZ5YTuyLltBkIQhnkqDbCFGZ74Ph5FKFQ= Subject key identifier: 4C:CC:85:A1:73:CF:77:78:68:83:57:97:31:37:E9:EA:A2:02:2A:A6 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F46A7F37774E548201E7F1E60 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e736cfb2-1b1b-3810-b679-059f15764b05.roa Signing time: Thu 24 Sep 2026 01:00:12 +0000 ROA not before: Thu 24 Sep 2026 01:00:12 +0000 ROA not after: Wed 23 Dec 2026 02:00:12 +0000 asID: 54253 IP address blocks: 134.185.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:46:a7:f3:77:74:e5:48:20:1e:7f:1e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 24 01:00:12 2026 GMT Not After : Dec 23 02:00:12 2026 GMT Subject: CN=acb82c07-6614-46af-8c0b-7f5448b89d8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4b:58:f3:e8:97:d6:ab:91:99:b6:72:ea:fd: b4:ee:c8:44:7d:8a:07:53:cc:57:92:33:5b:7a:45: f8:eb:ee:85:78:78:06:6a:f9:d5:98:fc:f6:b1:fa: cb:41:18:b6:26:2c:98:ef:36:0b:3e:2e:93:30:20: b2:a6:f8:21:f3:f9:cf:f9:f8:ab:c7:cf:ca:db:14: dd:42:fa:78:b8:45:7d:f8:6c:cd:f5:77:bc:de:db: fc:ff:d5:c4:b8:3a:0b:b3:cd:2e:4a:f3:2a:c0:77: 95:5b:0f:a0:d5:80:55:43:bf:77:ef:5e:02:91:1c: 84:14:0f:91:f8:7d:50:c0:99:54:db:5a:78:cc:f0: 0a:51:aa:92:5d:14:02:4f:0c:b1:3f:05:6a:fb:c6: 37:a8:ca:8a:2f:11:fc:db:52:60:a3:52:2f:4a:29: 5f:c8:56:7a:c1:31:d7:01:8e:72:b4:90:eb:bf:c1: a2:8f:2b:36:8a:b3:45:e3:e5:6b:ee:65:6d:ab:f1: 58:e6:f6:3b:e5:80:e1:a3:66:8c:6f:90:03:a9:5a: 8c:a2:49:26:09:0a:cd:37:53:aa:41:34:ab:a8:ab: 23:b0:21:8e:a0:31:aa:d9:3b:19:f0:85:77:c5:ca: 29:c1:2a:b0:cd:54:d1:01:fa:63:20:4b:96:d5:39: a6:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:CC:85:A1:73:CF:77:78:68:83:57:97:31:37:E9:EA:A2:02:2A:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e736cfb2-1b1b-3810-b679-059f15764b05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.185.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:85:8c:7e:40:6d:6c:e2:4e:da:62:24:f7:37:31:42:d7:72: a1:fb:0a:e3:20:0a:04:ec:18:1b:61:55:3c:f7:15:b6:55:df: 20:e5:bb:ba:21:f5:59:df:ea:22:6f:09:13:10:c4:fb:56:e9: be:f2:84:eb:a6:8d:ca:d3:bf:73:00:93:ab:1d:60:93:4d:b5: 01:6d:29:92:cf:f1:e5:84:07:a4:1f:13:86:2c:db:b5:9a:f0: 09:03:8c:88:c3:c0:23:75:b0:cc:c5:81:7b:85:35:90:e6:43: 9c:c6:32:4e:b2:51:fb:4d:11:81:ca:51:61:d1:cd:ac:ba:d7: 07:bd:28:2b:48:ef:02:4f:dc:3b:91:b3:a6:01:b0:70:f2:90: 47:f9:4c:2c:e2:a6:8f:de:0c:2e:23:6e:b5:91:58:2d:fc:ab: 22:6c:4f:9d:e3:84:90:49:75:a7:ad:39:52:52:1b:99:79:0f: 3a:43:5c:86:a1:c9:14:0c:53:05:6b:b8:fd:b2:c9:97:41:92: 5b:0d:a8:e5:92:4e:28:22:b1:fa:33:4b:88:3e:15:ad:e4:ea: d5:32:82:bd:79:ce:01:1a:ad:57:0a:9a:de:55:18:4f:ba:99: f5:4f:eb:e9:c0:ef:a9:b3:d4:60:29:d3:a9:de:bb:a2:ce:7b: c1:04:cd:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Gp/N3dOVIIB5/HmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkyNDAxMDAxMloXDTI2MTIyMzAyMDAxMlowLzEtMCsGA1UEAxMk YWNiODJjMDctNjYxNC00NmFmLThjMGItN2Y1NDQ4Yjg5ZDhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0tY8+iX1quRmbZy6v207shEfYoHU8xXkjNb ekX46+6FeHgGavnVmPz2sfrLQRi2JiyY7zYLPi6TMCCypvgh8/nP+firx8/K2xTd Qvp4uEV9+GzN9Xe83tv8/9XEuDoLs80uSvMqwHeVWw+g1YBVQ793714CkRyEFA+R +H1QwJlU21p4zPAKUaqSXRQCTwyxPwVq+8Y3qMqKLxH821Jgo1IvSilfyFZ6wTHX AY5ytJDrv8Gijys2irNF4+Vr7mVtq/FY5vY75YDho2aMb5ADqVqMokkmCQrNN1Oq QTSrqKsjsCGOoDGq2TsZ8IV3xcopwSqwzVTRAfpjIEuW1TmmoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEzMhaFzz3d4aINXlzE36eqiAiqmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZTczNmNmYjItMWIxYi0z ODEwLWI2NzktMDU5ZjE1NzY0YjA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDhrkoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKqFjH5AbWziTtpiJPc3MULXcqH7CuMgCgTsGBthVTz3FbZV3yDlu7oh 9Vnf6iJvCRMQxPtW6b7yhOumjcrTv3MAk6sdYJNNtQFtKZLP8eWEB6QfE4Ys27Wa 8AkDjIjDwCN1sMzFgXuFNZDmQ5zGMk6yUftNEYHKUWHRzay61we9KCtI7wJP3DuR s6YBsHDykEf5TCzipo/eDC4jbrWRWC38qyJsT53jhJBJdaetOVJSG5l5DzpDXIah yRQMUwVruP2yyZdBklsNqOWSTigisfozS4g+Fa3k6tUygr15zgEarVcKmt5VGE+6 mfVP6+nA76mz1GAp06neu6LOe8EEzUw= -----END CERTIFICATE-----Generated at Thu Sep 24 23:29:57 2026 by rpki-client