$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f630e459-69dd-3a1f-8444-214c6afa0049.roa File: f630e459-69dd-3a1f-8444-214c6afa0049.roa (raw, json) Hash identifier: BNMiWvIy+JgyYA5i8+ZIDS8QnRO7xngansvvrMwPZF4= Subject key identifier: 2D:3F:DC:85:F3:83:FD:5B:A4:D7:61:83:83:1B:59:05:37:64:A8:0E Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F093CD1171B7C2B66C5143380 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f630e459-69dd-3a1f-8444-214c6afa0049.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 207.127.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:d1:17:1b:7c:2b:66:c5:14:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=dfc6e2b5-3689-4441-a810-e2881c7520ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:c9:0a:15:30:30:2a:cc:7d:74:ee:e0:20:2b: 09:78:3e:a3:26:fb:de:ba:a8:80:32:a6:dd:97:d4: 90:4c:1b:75:07:c2:b5:ae:5c:4f:4b:fe:4a:79:8d: 06:db:81:34:e1:5f:ee:05:b4:9e:8e:0d:f5:a2:4f: f4:92:8d:7e:a4:a1:0a:60:c1:52:30:c3:cf:33:4d: 85:3b:85:77:fd:4a:3d:1f:cd:09:32:cb:7d:bf:3a: f3:03:99:fe:e8:92:27:a0:66:f6:0d:9f:d4:24:3f: ef:67:c4:f0:b4:fd:18:04:f4:4e:37:95:dd:dc:56: 38:5e:f9:91:94:23:19:67:15:9f:d9:31:fb:1e:ff: 26:82:66:32:3f:3f:18:8f:78:3d:73:c5:fa:a8:d9: 6d:4f:bb:b4:68:97:a9:6f:8e:32:41:04:63:5c:13: 5b:f4:7a:6a:e2:f6:89:12:0e:57:57:d3:16:f8:35: a9:e6:26:a9:aa:29:05:f0:d0:a0:ac:a7:bd:83:2c: fc:5f:bc:c1:42:e8:71:cf:06:1e:4b:33:0d:67:31: 71:00:a1:ef:26:1b:88:ad:65:18:c7:89:88:db:5e: 88:c7:9b:3b:b5:1a:d9:42:c5:75:d0:10:97:e7:33: d8:71:5e:5e:43:33:b9:d5:0f:b9:0d:25:77:a9:0a: ea:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:3F:DC:85:F3:83:FD:5B:A4:D7:61:83:83:1B:59:05:37:64:A8:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f630e459-69dd-3a1f-8444-214c6afa0049.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 207.127.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:9f:40:3b:9b:be:7b:3e:e3:44:f3:e9:9c:f6:57:74:0e:20: 4b:1f:22:50:48:18:bf:1b:1a:f0:f3:37:a0:5a:f7:1e:80:81: c8:82:d0:06:9a:99:85:42:16:68:cb:68:2a:87:69:4f:9b:32: 29:86:04:9d:60:39:b6:30:db:40:44:1a:9a:a4:00:2b:91:ee: e0:40:a5:e0:42:66:55:97:14:c4:6b:62:3b:24:8e:90:9b:9e: 9f:f0:7a:5e:12:61:f0:08:f6:e6:48:a3:cb:d5:8e:7a:24:d9: 98:52:73:07:a9:33:e8:ce:f8:ca:ac:5b:d7:f8:c5:82:e9:e5: a1:c7:31:af:de:fc:55:2a:40:65:8a:df:c7:65:b7:c0:fa:da: 6f:fb:0a:09:41:09:1f:10:8e:41:69:c2:13:44:31:ce:5e:2a: 9f:eb:8b:e6:8b:84:f5:10:59:8b:8e:09:33:25:ec:ae:7e:9c: ad:be:c7:ab:6e:65:ba:e4:0d:92:03:00:0f:20:38:dd:22:9c: a8:f9:d4:1c:53:6a:9d:22:d9:e3:b7:fb:72:93:84:5b:81:98: 5b:d9:c8:54:53:d3:a6:68:eb:f8:23:8a:74:ee:ba:37:2b:ee: c1:e5:5a:05:31:41:01:4e:c4:33:c1:15:ec:e6:96:16:0b:21: 50:97:d9:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPNEXG3wrZsUUM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk ZGZjNmUyYjUtMzY4OS00NDQxLWE4MTAtZTI4ODFjNzUyMGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhckKFTAwKsx9dO7gICsJeD6jJvveuqiAMqbd l9SQTBt1B8K1rlxPS/5KeY0G24E04V/uBbSejg31ok/0ko1+pKEKYMFSMMPPM02F O4V3/Uo9H80JMst9vzrzA5n+6JInoGb2DZ/UJD/vZ8TwtP0YBPRON5Xd3FY4XvmR lCMZZxWf2TH7Hv8mgmYyPz8Yj3g9c8X6qNltT7u0aJepb44yQQRjXBNb9Hpq4vaJ Eg5XV9MW+DWp5iapqikF8NCgrKe9gyz8X7zBQuhxzwYeSzMNZzFxAKHvJhuIrWUY x4mI216Ix5s7tRrZQsV10BCX5zPYcV5eQzO51Q+5DSV3qQrqhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC0/3IXzg/1bpNdhg4MbWQU3ZKgOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZjYzMGU0NTktNjlkZC0z YTFmLTg0NDQtMjE0YzZhZmEwMDQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDz39gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFWfQDubvns+40Tz6Zz2V3QOIEsfIlBIGL8bGvDzN6Ba9x6AgciC0Aaa mYVCFmjLaCqHaU+bMimGBJ1gObYw20BEGpqkACuR7uBApeBCZlWXFMRrYjskjpCb np/wel4SYfAI9uZIo8vVjnok2ZhScwepM+jO+MqsW9f4xYLp5aHHMa/e/FUqQGWK 38dlt8D62m/7CglBCR8QjkFpwhNEMc5eKp/ri+aLhPUQWYuOCTMl7K5+nK2+x6tu ZbrkDZIDAA8gON0inKj51BxTap0i2eO3+3KThFuBmFvZyFRT06Zo6/gjinTuujcr 7sHlWgUxQQFOxDPBFezmlhYLIVCX2co= -----END CERTIFICATE-----Generated at Fri Oct 2 21:06:40 2026 by rpki-client