$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fc3c9a71-297c-3669-8a10-ecd6cc302677.roa File: fc3c9a71-297c-3669-8a10-ecd6cc302677.roa (raw, json) Hash identifier: w+6O2ZDncvEviXgle6r275D7bXLlaLd2Ne1+P5zoqb8= Subject key identifier: C4:7D:B9:C9:B0:7F:3B:55:57:5E:F4:49:B2:E2:B9:2E:0B:5A:1E:3B Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F4974D1F85DE163C15411E980 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fc3c9a71-297c-3669-8a10-ecd6cc302677.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 54253 IP address blocks: 131.186.100.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:d1:f8:5d:e1:63:c1:54:11:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3cb8dba7-0f53-4daf-918c-9e1f4b42e21c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:7e:8a:6b:43:0d:5b:f1:51:31:cf:61:40:3c: 6a:e0:64:f2:6b:4d:9e:e1:84:99:38:6d:8a:8f:b7: f2:82:46:75:48:b9:86:22:d0:86:0d:a5:05:4d:e4: 03:25:58:45:fa:2b:08:6f:7a:a7:39:75:a3:d2:f5: f1:8d:d5:36:9f:2d:f9:18:7f:48:7a:c9:de:63:a8: 50:92:70:2a:bb:00:87:19:60:70:c2:fd:d1:b1:74: 0f:c1:45:75:09:26:c6:2f:7c:21:bc:7b:23:89:29: 69:9f:f8:1f:93:b8:94:91:e6:a8:46:70:6b:4f:85: 57:c7:44:fe:9a:15:ee:07:e8:6b:41:29:f6:3b:27: e1:da:17:c3:0d:45:a1:e1:1c:21:87:3b:d1:a3:f0: 5e:06:e2:0b:20:ef:26:10:ca:4c:99:04:a9:a4:f7: fa:62:06:8b:d8:3e:68:99:92:74:77:b1:e9:82:b2: 68:9d:52:8b:8e:a3:8c:26:24:f6:a2:4f:8a:fa:35: 02:cb:b4:ae:a6:05:e2:12:2d:05:ef:1f:70:c3:81: 0d:79:cd:dc:c3:a0:7a:85:29:17:2d:ac:da:d7:d7: bb:a3:6e:26:ec:a5:e2:ea:8c:d8:c2:a7:a2:9b:0f: 85:ea:bc:72:03:9c:b9:62:15:27:eb:7e:3f:02:b2: e2:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:7D:B9:C9:B0:7F:3B:55:57:5E:F4:49:B2:E2:B9:2E:0B:5A:1E:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fc3c9a71-297c-3669-8a10-ecd6cc302677.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 131.186.100.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:7a:60:db:58:92:37:79:3d:90:e0:76:26:2d:b4:e1:ca:cc: 60:b8:15:d0:64:52:16:95:3b:56:87:10:b8:f8:d3:5b:b6:fd: 31:82:8f:08:76:a5:b9:12:b1:e4:a0:84:50:91:c6:f1:66:90: 3b:47:b1:e7:ff:d5:59:11:9f:80:f4:bf:13:e6:41:73:46:f2: 97:2c:d2:48:91:17:ab:d3:96:ab:d5:6b:56:e8:48:8d:93:01: 99:90:9a:06:f6:c1:97:d2:45:e2:20:e2:54:d7:3f:55:9e:3a: a8:fc:ad:65:ca:bd:f6:85:2a:41:6f:5e:6f:b4:eb:e6:4e:4a: a2:85:96:01:b5:f3:91:f2:19:7c:7c:df:cc:d7:09:08:64:30: 0f:45:31:dc:5c:aa:5c:f8:11:14:ce:54:c2:ca:f7:bf:16:7f: 6b:c8:e4:0b:04:03:2b:73:44:0b:d4:79:ff:5a:a4:77:ef:41: 78:df:7e:56:bf:47:30:04:9e:3c:53:d2:c1:5f:31:b5:75:8f: 45:c4:36:b4:58:39:40:93:d2:f3:f2:34:63:ff:f0:0f:ad:0f: 89:34:a8:8d:8a:16:a2:bd:6a:19:72:a2:d6:1d:9a:05:a9:72: 58:14:41:c6:53:c3:f5:13:b2:b4:71:f8:a7:d1:b5:68:6c:f6: 4c:d9:b4:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdNH4XeFjwVQR6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk M2NiOGRiYTctMGY1My00ZGFmLTkxOGMtOWUxZjRiNDJlMjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk36Ka0MNW/FRMc9hQDxq4GTya02e4YSZOG2K j7fygkZ1SLmGItCGDaUFTeQDJVhF+isIb3qnOXWj0vXxjdU2ny35GH9IesneY6hQ knAquwCHGWBwwv3RsXQPwUV1CSbGL3whvHsjiSlpn/gfk7iUkeaoRnBrT4VXx0T+ mhXuB+hrQSn2Oyfh2hfDDUWh4RwhhzvRo/BeBuILIO8mEMpMmQSppPf6YgaL2D5o mZJ0d7HpgrJonVKLjqOMJiT2ok+K+jUCy7SupgXiEi0F7x9ww4ENec3cw6B6hSkX Laza19e7o24m7KXi6ozYwqeimw+F6rxyA5y5YhUn634/ArLilwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMR9ucmwfztVV170SbLiuS4LWh47MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZmMzYzlhNzEtMjk3Yy0z NjY5LThhMTAtZWNkNmNjMzAyNjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBg7pkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFF6YNtYkjd5PZDgdiYttOHKzGC4FdBkUhaVO1aHELj401u2/TGCjwh2 pbkSseSghFCRxvFmkDtHsef/1VkRn4D0vxPmQXNG8pcs0kiRF6vTlqvVa1boSI2T AZmQmgb2wZfSReIg4lTXP1WeOqj8rWXKvfaFKkFvXm+06+ZOSqKFlgG185HyGXx8 38zXCQhkMA9FMdxcqlz4ERTOVMLK978Wf2vI5AsEAytzRAvUef9apHfvQXjffla/ RzAEnjxT0sFfMbV1j0XENrRYOUCT0vPyNGP/8A+tD4k0qI2KFqK9ahlyotYdmgWp clgUQcZTw/UTsrRx+KfRtWhs9kzZtPM= -----END CERTIFICATE-----Generated at Sat Sep 26 03:53:26 2026 by rpki-client