$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7afe701f-55d7-3d3d-b025-de469d0ca0f0.roa File: 7afe701f-55d7-3d3d-b025-de469d0ca0f0.roa (raw, json) Hash identifier: DdrftxgTHsPl6oMHK4rXkC90m4/RaE5Rvu74gd+cZ8U= Subject key identifier: 68:F0:E6:B1:69:7B:AE:C4:9E:9C:4A:C4:48:77:30:63:0B:14:AF:FB Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584EF181FC19F012FB032B5B06C0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7afe701f-55d7-3d3d-b025-de469d0ca0f0.roa Signing time: Mon 24 Aug 2026 13:00:12 +0000 ROA not before: Mon 24 Aug 2026 13:00:12 +0000 ROA not after: Sun 22 Nov 2026 14:00:12 +0000 asID: 31898 IP address blocks: 132.145.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f1:81:fc:19:f0:12:fb:03:2b:5b:06:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 24 13:00:12 2026 GMT Not After : Nov 22 14:00:12 2026 GMT Subject: CN=db1cdc56-c928-4898-9394-e6440820b4fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:4e:19:d2:6f:54:46:ec:0b:81:b5:9e:e5:59: 8f:db:cd:29:9b:1f:13:49:58:ed:d0:c9:6c:48:e5: 8b:2a:58:60:8f:d3:43:7e:a1:60:af:fe:84:47:3c: 7f:43:a1:75:f8:c3:83:d0:88:d9:b3:c9:2d:58:d7: 2a:dc:9c:f0:41:ef:94:41:ba:b8:a0:a3:68:2e:47: a5:c6:49:ad:44:4b:2c:fc:ed:82:20:e2:1e:63:7b: 94:ec:50:e3:1f:ce:a0:60:b7:f7:98:53:1c:ec:8f: 31:25:20:e9:b9:a9:cf:54:a5:b8:54:98:18:79:66: ab:d0:d6:cb:3a:47:b3:f9:26:50:53:e5:6a:45:f4: 51:fb:d2:07:5a:a8:be:64:75:0f:9c:e7:e2:84:ad: e0:4a:e6:4a:55:10:1a:05:e4:dd:24:73:a7:99:b9: 9c:52:f5:fd:b0:0d:0e:63:d7:ee:ea:66:5f:1b:4b: e8:ef:0f:11:ae:c3:19:e2:43:73:0a:ba:f0:d8:ed: bc:f1:03:8e:c9:a6:d1:38:66:40:f7:98:34:e0:4c: e4:66:df:e9:32:05:22:81:55:70:41:ab:28:d2:00: 38:67:98:93:35:9b:ac:42:da:a8:18:84:ee:1f:86: 60:4c:e8:41:2e:ba:1b:cf:4e:f3:cc:59:a8:3a:ba: bc:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:F0:E6:B1:69:7B:AE:C4:9E:9C:4A:C4:48:77:30:63:0B:14:AF:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7afe701f-55d7-3d3d-b025-de469d0ca0f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 132.145.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:fd:b9:c6:53:3b:fe:51:8f:8a:10:ce:84:75:b8:b0:b6:dd: 27:b3:d4:f5:88:0f:98:97:2e:c7:70:46:47:13:30:6f:7e:8b: 00:16:75:77:61:d6:70:df:7f:51:e4:af:d6:78:fe:8e:c4:fe: bf:4e:70:84:ed:99:d9:f7:7f:dc:db:d9:8b:8e:e3:42:07:34: 63:52:a7:bf:00:fc:c7:77:ab:dc:4d:e2:14:fb:43:ae:9f:f2: 56:8e:11:43:cb:5f:be:27:5c:ba:ab:47:ad:1f:a8:f8:38:62: 32:89:c2:a3:a6:b8:1f:8b:ac:ca:ad:d1:29:77:d3:c1:c7:2f: 2e:22:ab:e2:1f:13:35:bb:6d:72:4f:8b:ae:1e:1c:60:1e:fd: ad:3c:f3:0c:3a:db:65:62:55:67:4c:47:88:36:bf:09:c8:47: 62:a1:62:13:27:51:50:8b:f6:d0:49:2d:6a:10:c5:b8:0d:f6: d5:f3:73:04:98:5e:0f:2c:f0:4e:0e:e8:63:4f:cc:d9:62:d9: e4:f3:8a:d5:5b:59:7c:11:a7:a1:b4:ae:d2:42:a9:69:59:3e: c6:60:7a:cb:ce:cb:a9:39:a4:63:59:cb:82:df:6c:0b:52:92: 9f:a2:4f:b9:2f:80:f6:d4:b2:9f:5b:cd:1c:d1:45:21:ea:d0: d7:4b:19:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7xgfwZ8BL7AytbBsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDgyNDEzMDAxMloXDTI2MTEyMjE0MDAxMlowLzEtMCsGA1UEAxMk ZGIxY2RjNTYtYzkyOC00ODk4LTkzOTQtZTY0NDA4MjBiNGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgU4Z0m9URuwLgbWe5VmP280pmx8TSVjt0Mls SOWLKlhgj9NDfqFgr/6ERzx/Q6F1+MOD0IjZs8ktWNcq3JzwQe+UQbq4oKNoLkel xkmtREss/O2CIOIeY3uU7FDjH86gYLf3mFMc7I8xJSDpuanPVKW4VJgYeWar0NbL Okez+SZQU+VqRfRR+9IHWqi+ZHUPnOfihK3gSuZKVRAaBeTdJHOnmbmcUvX9sA0O Y9fu6mZfG0vo7w8RrsMZ4kNzCrrw2O288QOOyabROGZA95g04EzkZt/pMgUigVVw Qaso0gA4Z5iTNZusQtqoGITuH4ZgTOhBLrobz07zzFmoOrq8RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGjw5rFpe67EnpxKxEh3MGMLFK/7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvN2FmZTcwMWYtNTVkNy0z ZDNkLWIwMjUtZGU0NjlkMGNhMGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEhJEQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACr9ucZTO/5Rj4oQzoR1uLC23Sez1PWID5iXLsdwRkcTMG9+iwAWdXdh 1nDff1Hkr9Z4/o7E/r9OcITtmdn3f9zb2YuO40IHNGNSp78A/Md3q9xN4hT7Q66f 8laOEUPLX74nXLqrR60fqPg4YjKJwqOmuB+LrMqt0Sl308HHLy4iq+IfEzW7bXJP i64eHGAe/a088ww622ViVWdMR4g2vwnIR2KhYhMnUVCL9tBJLWoQxbgN9tXzcwSY Xg8s8E4O6GNPzNli2eTzitVbWXwRp6G0rtJCqWlZPsZgesvOy6k5pGNZy4LfbAtS kp+iT7kvgPbUsp9bzRzRRSHq0NdLGc4= -----END CERTIFICATE-----Generated at Thu Aug 27 09:37:48 2026 by rpki-client