$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2ea7a14c-3a84-32bc-9b35-2879cee2de4c.roa File: 2ea7a14c-3a84-32bc-9b35-2879cee2de4c.roa (raw, json) Hash identifier: /cvXrNiiyR4OG+ohhN0qtQa6QlgsvSDLkrnrLM7YnL4= Subject key identifier: F8:40:20:66:22:51:A7:11:DA:02:6F:93:5B:89:46:D3:59:E1:E1:37 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584EA78EF181E4897EE36E79E180 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2ea7a14c-3a84-32bc-9b35-2879cee2de4c.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 31898 IP address blocks: 147.5.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8e:f1:81:e4:89:7e:e3:6e:79:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=4c394cce-2ee6-42e7-b629-1e8d58441c08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:6d:98:42:d1:e7:6b:c2:20:cb:25:2f:e5:50: e5:21:69:6b:a2:80:9d:96:ca:d6:9c:a9:73:13:30: d6:61:11:8a:a6:75:d2:9a:70:a3:5e:6d:4d:6f:58: c6:da:4d:69:6a:2e:84:19:41:7d:c6:49:a4:00:9e: b0:67:d8:a8:df:50:dd:19:05:98:33:74:40:4e:5c: 9f:e9:f9:32:5e:35:61:ce:2c:15:91:93:3c:ac:df: ab:36:8d:e4:7a:92:dc:86:85:e3:5f:72:ac:5f:f3: bd:cd:32:1c:ed:89:ae:d5:77:23:18:5c:f8:8d:2f: 66:d9:36:79:33:5d:1c:75:44:c0:37:a3:17:47:fb: e3:2c:19:99:24:4a:a5:ff:53:57:5e:6b:93:7c:92: b2:47:20:fd:fa:ec:40:ce:a2:74:a8:b1:a2:ed:b3: 95:43:65:cc:f4:1f:74:b8:6a:4d:16:d6:2c:6a:34: 59:1f:71:1f:7e:c1:70:f5:8e:1f:71:52:ca:5a:62: 00:97:2c:f6:42:9c:00:2b:b3:98:9c:b3:9a:a1:b3: 01:63:9f:b3:ae:65:32:31:e6:27:27:05:5b:84:12: cd:c2:32:b0:3a:66:a2:5c:07:de:e3:c9:a1:5d:d4: e6:b6:f2:37:20:d1:51:4a:1b:b9:e1:6c:c6:8b:d4: 69:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:40:20:66:22:51:A7:11:DA:02:6F:93:5B:89:46:D3:59:E1:E1:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2ea7a14c-3a84-32bc-9b35-2879cee2de4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 147.5.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:8e:ee:79:fa:7c:dc:2d:02:e4:87:39:ff:1b:69:fb:17:bd: 68:1a:2f:21:21:d2:0c:93:30:01:4d:4c:98:3d:1d:fd:02:7c: 3c:a0:f7:9a:9e:fa:a5:44:b5:fe:dd:31:7c:32:3f:81:ac:87: c7:4e:4b:0e:55:d7:1f:85:44:ba:28:ad:10:77:2b:17:9c:90: 30:6f:07:f5:18:5c:1c:06:f9:8f:90:66:65:ab:ec:55:f4:5a: fc:bf:51:00:1e:0d:4f:1d:a1:ac:32:f5:d7:0e:23:bb:68:91: 51:41:99:fa:a0:bd:50:73:29:76:1d:cc:81:3e:8b:7e:8c:51: 46:d2:c0:01:85:c1:cb:95:8e:a9:c6:0f:ac:7d:ca:30:4a:b8: 93:90:5a:b2:7a:67:62:e4:55:5d:ec:df:72:d4:06:51:76:87: 66:1e:74:8d:f0:5d:0e:08:67:fa:a6:98:c6:5a:a9:b0:04:c0: e4:ff:67:08:d9:06:ad:e4:64:0a:4b:13:08:39:e9:68:2b:4b: 81:83:71:1d:30:93:35:52:1d:b8:f8:8f:f7:2e:49:fb:74:01: ea:0b:3d:0f:bc:57:81:7d:8a:05:58:29:66:2e:08:15:5f:ac: 78:51:11:ff:60:ff:45:92:02:71:09:1a:af:bf:03:db:3d:5b: 78:41:29:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6njvGB5Il+42554YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NGMzOTRjY2UtMmVlNi00MmU3LWI2MjktMWU4ZDU4NDQxYzA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoG2YQtHna8IgyyUv5VDlIWlrooCdlsrWnKlz EzDWYRGKpnXSmnCjXm1Nb1jG2k1pai6EGUF9xkmkAJ6wZ9io31DdGQWYM3RATlyf 6fkyXjVhziwVkZM8rN+rNo3kepLchoXjX3KsX/O9zTIc7Ymu1XcjGFz4jS9m2TZ5 M10cdUTAN6MXR/vjLBmZJEql/1NXXmuTfJKyRyD9+uxAzqJ0qLGi7bOVQ2XM9B90 uGpNFtYsajRZH3EffsFw9Y4fcVLKWmIAlyz2QpwAK7OYnLOaobMBY5+zrmUyMeYn JwVbhBLNwjKwOmaiXAfe48mhXdTmtvI3INFRShu54WzGi9RpIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPhAIGYiUacR2gJvk1uJRtNZ4eE3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMmVhN2ExNGMtM2E4NC0z MmJjLTliMzUtMjg3OWNlZTJkZTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHkwWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG6O7nn6fNwtAuSHOf8bafsXvWgaLyEh0gyTMAFNTJg9Hf0CfDyg95qe +qVEtf7dMXwyP4Gsh8dOSw5V1x+FRLoorRB3KxeckDBvB/UYXBwG+Y+QZmWr7FX0 Wvy/UQAeDU8doawy9dcOI7tokVFBmfqgvVBzKXYdzIE+i36MUUbSwAGFwcuVjqnG D6x9yjBKuJOQWrJ6Z2LkVV3s33LUBlF2h2YedI3wXQ4IZ/qmmMZaqbAEwOT/ZwjZ Bq3kZApLEwg56WgrS4GDcR0wkzVSHbj4j/cuSft0AeoLPQ+8V4F9igVYKWYuCBVf rHhREf9g/0WSAnEJGq+/A9s9W3hBKSc= -----END CERTIFICATE-----Generated at Thu Aug 27 06:17:57 2026 by rpki-client