$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e8315f57-16b8-33a3-a6d2-7b2855a20a2b.roa File: e8315f57-16b8-33a3-a6d2-7b2855a20a2b.roa (raw, json) Hash identifier: kQqXaJBZeUbBb2y+vw9cnllCq1XRmrMPSOU5ugt5N0k= Subject key identifier: 75:0A:91:CE:88:F8:24:C7:B7:DF:2E:AA:34:8B:16:E6:78:33:DB:97 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F1302417C744D05F2474285E0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e8315f57-16b8-33a3-a6d2-7b2855a20a2b.roa Signing time: Sat 05 Sep 2026 13:00:12 +0000 ROA not before: Sat 05 Sep 2026 13:00:12 +0000 ROA not after: Fri 04 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 134.70.8.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:13:02:41:7c:74:4d:05:f2:47:42:85:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 5 13:00:12 2026 GMT Not After : Dec 4 14:00:12 2026 GMT Subject: CN=127ff163-575a-4c5d-b350-3df5c4481d4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:53:fd:f5:4d:c3:0d:cc:a0:74:b0:22:22:4e: ae:17:15:1c:8d:86:c3:b4:0c:3f:60:b5:e7:c7:25: 65:a1:4b:03:00:31:14:85:ee:b1:c3:20:90:80:6b: 40:20:70:48:8a:c3:c0:78:7a:23:ac:8d:62:80:f5: 35:3c:76:64:c5:61:f1:71:7a:43:cc:84:2c:0f:a0: b9:22:7a:37:08:c7:dc:85:57:8e:28:da:e7:04:1a: 99:14:73:f5:7b:87:41:de:f7:a7:7a:f1:05:c6:80: da:33:2e:fd:8b:d3:17:98:34:3e:7d:ba:28:0c:6e: ac:5b:8b:b8:79:4f:00:56:95:18:74:7a:af:32:de: c0:90:9f:10:f8:66:02:c2:33:df:7f:c8:cf:1c:eb: 77:cb:71:b0:a4:94:49:96:cf:73:51:e6:29:bf:3f: 3d:d0:4c:0c:61:10:66:f0:72:a3:09:6e:53:f2:74: 2d:b7:26:bf:fd:5c:0f:85:c9:e1:5d:f7:f5:11:9e: db:6a:e1:04:80:c5:73:76:0e:c3:9b:be:01:4d:78: 8c:89:65:58:58:e8:95:1f:81:b5:e1:07:75:83:a4: 68:3a:89:f7:52:37:4c:e8:51:44:72:43:aa:8d:72: 9d:9c:54:0e:97:3f:28:23:91:d0:83:80:41:ef:75: 35:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:0A:91:CE:88:F8:24:C7:B7:DF:2E:AA:34:8B:16:E6:78:33:DB:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e8315f57-16b8-33a3-a6d2-7b2855a20a2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.70.8.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:d3:97:9e:4f:62:18:a9:aa:22:13:02:4c:e9:dc:0b:e5:d9: 2e:24:3a:20:ff:6c:c7:2c:b7:87:ef:d2:04:99:04:b1:33:1f: 3c:d2:5b:6b:23:27:28:39:3c:da:a8:5a:8a:5d:6a:bf:33:c9: 2c:fa:64:f9:a5:4d:83:b6:c0:29:ce:c7:ae:ca:7a:07:a4:0c: dd:24:24:54:54:5b:6c:27:e8:ae:64:b4:3c:1d:66:2a:de:71: 1a:0b:7c:d9:1e:75:90:19:5d:d6:34:2c:53:ec:4c:31:21:45: 27:24:b6:2c:6f:a4:a5:0d:37:9b:fa:0b:7c:c2:77:73:72:ea: 89:b5:ab:1d:f3:57:85:20:f5:09:32:f6:2e:b0:89:c7:85:07: 9c:fe:39:66:48:a9:47:e9:d9:6d:e9:bb:16:2b:1b:79:82:5d: 9f:f4:57:88:1a:95:99:32:03:c5:0f:95:b4:72:d8:b2:81:80: 2d:99:f0:ad:e2:7c:3b:88:5f:0e:13:e6:f4:bb:e8:cf:0d:fb: 47:ec:df:db:a1:71:69:f2:d8:97:d1:af:69:9c:9c:05:8a:05: ff:bc:62:c2:88:ad:7e:5d:8e:e7:5e:1a:05:1b:74:97:f3:56: a0:ea:04:b2:5f:65:e9:9b:44:d0:e6:fa:dd:de:52:36:fe:d5: 47:6f:3f:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8TAkF8dE0F8kdCheAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNTEzMDAxMloXDTI2MTIwNDE0MDAxMlowLzEtMCsGA1UEAxMk MTI3ZmYxNjMtNTc1YS00YzVkLWIzNTAtM2RmNWM0NDgxZDRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFP99U3DDcygdLAiIk6uFxUcjYbDtAw/YLXn xyVloUsDADEUhe6xwyCQgGtAIHBIisPAeHojrI1igPU1PHZkxWHxcXpDzIQsD6C5 Ino3CMfchVeOKNrnBBqZFHP1e4dB3venevEFxoDaMy79i9MXmDQ+fbooDG6sW4u4 eU8AVpUYdHqvMt7AkJ8Q+GYCwjPff8jPHOt3y3GwpJRJls9zUeYpvz890EwMYRBm 8HKjCW5T8nQttya//VwPhcnhXff1EZ7bauEEgMVzdg7Dm74BTXiMiWVYWOiVH4G1 4Qd1g6RoOon3UjdM6FFEckOqjXKdnFQOlz8oI5HQg4BB73U1vQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHUKkc6I+CTHt98uqjSLFuZ4M9uXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZTgzMTVmNTctMTZiOC0z M2EzLWE2ZDItN2IyODU1YTIwYTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhkYIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKzTl55PYhipqiITAkzp3Avl2S4kOiD/bMcst4fv0gSZBLEzHzzSW2sj Jyg5PNqoWopdar8zySz6ZPmlTYO2wCnOx67KegekDN0kJFRUW2wn6K5ktDwdZire cRoLfNkedZAZXdY0LFPsTDEhRScktixvpKUNN5v6C3zCd3Ny6om1qx3zV4Ug9Qky 9i6wiceFB5z+OWZIqUfp2W3puxYrG3mCXZ/0V4galZkyA8UPlbRy2LKBgC2Z8K3i fDuIXw4T5vS76M8N+0fs39uhcWny2JfRr2mcnAWKBf+8YsKIrX5djudeGgUbdJfz VqDqBLJfZembRNDm+t3eUjb+1UdvP+s= -----END CERTIFICATE-----Generated at Thu Sep 24 10:09:26 2026 by rpki-client