$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/869a3451-e0d8-3d5c-912a-49fc8a86910c.roa File: 869a3451-e0d8-3d5c-912a-49fc8a86910c.roa (raw, json) Hash identifier: Jd+KRorSKpfEdNLPwWhrqitg8JL7H8LgooBDcVNuyOo= Subject key identifier: DC:06:A9:01:84:70:3A:82:31:F6:BE:9F:04:BA:65:0B:0D:8B:20:2A Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584EF1822D7B3218EDEF582B4880 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/869a3451-e0d8-3d5c-912a-49fc8a86910c.roa Signing time: Mon 24 Aug 2026 13:00:12 +0000 ROA not before: Mon 24 Aug 2026 13:00:12 +0000 ROA not after: Sun 22 Nov 2026 14:00:12 +0000 asID: 31898 IP address blocks: 132.145.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f1:82:2d:7b:32:18:ed:ef:58:2b:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 24 13:00:12 2026 GMT Not After : Nov 22 14:00:12 2026 GMT Subject: CN=25e3e662-1246-400c-950f-fc09758cc3b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:65:d9:ef:f9:fa:db:53:b3:f1:a0:18:a3:f8: 27:ac:98:ac:b4:4d:ba:10:89:04:9e:3c:d5:de:31: 85:02:4a:9a:75:a0:f6:0a:59:30:23:a8:aa:eb:b3: ab:2e:a6:fc:b3:f4:34:4d:96:67:86:45:fc:16:54: 80:43:80:78:59:65:d6:56:8a:30:33:c6:42:7d:fc: b5:02:f6:65:30:4a:2d:1e:e8:66:e5:5d:e5:ed:92: 06:4f:06:09:8f:d1:57:ad:2f:d6:71:f8:0e:0b:48: 02:4b:06:71:0a:7e:de:0d:64:ed:db:80:e1:6f:e1: 61:56:d9:b3:4f:84:2e:53:6c:5c:f8:1c:95:10:3e: 27:24:3f:d6:95:55:89:f2:f7:4e:bf:e0:44:5e:67: 17:93:77:2f:ae:1a:1c:5f:65:25:b0:7a:28:36:a5: ed:15:5c:d1:31:9f:3e:70:dd:8f:f4:ce:4e:4a:5d: 6d:15:2a:0f:15:11:80:d2:6e:9e:b0:cf:8a:62:fb: 9a:7b:60:10:b1:67:ad:1a:ea:53:2c:2c:47:85:7c: 97:c5:21:23:ff:de:d6:5f:dd:77:e0:d7:f2:57:3f: 03:9e:19:68:89:b4:0a:20:90:bc:00:30:ad:ac:fd: a6:90:c0:91:04:ed:59:89:30:ec:fe:82:a2:bf:27: f8:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:06:A9:01:84:70:3A:82:31:F6:BE:9F:04:BA:65:0B:0D:8B:20:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/869a3451-e0d8-3d5c-912a-49fc8a86910c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 132.145.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:d4:d2:32:57:b3:11:55:08:90:74:04:dc:cb:49:f6:bb:fc: 10:d6:7f:7f:7c:8f:bc:40:a9:9a:cd:19:b1:f1:70:ea:7c:f8: 3b:3c:10:8c:f0:85:92:16:d0:7d:92:2d:ac:4f:c5:06:bf:98: 21:71:3d:35:0c:5e:5c:ce:73:3f:46:15:a4:1d:cd:49:03:2d: 74:fa:e3:3c:c7:90:ff:7c:7f:28:6e:96:8f:20:f5:5e:99:5f: 4f:37:89:bc:ce:e2:90:a2:a7:45:cd:0b:ed:26:8d:e8:91:34: 43:0d:30:04:01:35:ca:d9:6a:b8:0d:7e:83:3f:03:62:0b:94: c4:59:b4:b1:5a:ad:08:76:31:9f:b5:26:a3:f1:88:2a:e5:a4: f9:04:2d:bc:fa:ce:9f:b7:ba:ba:fd:63:0e:0c:ef:18:97:ec: 6c:a5:a4:f2:ef:25:c1:70:bf:ca:54:03:d0:3b:71:0b:7e:e0: a6:42:d7:51:2f:81:aa:c6:1b:b6:81:31:c0:16:cd:22:66:37: 3d:9f:fc:7c:ae:72:37:12:bd:88:c1:b4:38:4a:b3:16:f4:af: 7c:c3:55:9a:f1:80:72:c7:50:48:fd:c8:63:bd:3b:7b:ea:f1: 98:08:e6:b6:84:1a:0c:c2:36:02:c3:67:8d:04:5b:2c:84:81: 0c:08:ef:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7xgi17Mhjt71grSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDgyNDEzMDAxMloXDTI2MTEyMjE0MDAxMlowLzEtMCsGA1UEAxMk MjVlM2U2NjItMTI0Ni00MDBjLTk1MGYtZmMwOTc1OGNjM2IzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2XZ7/n621Oz8aAYo/gnrJistE26EIkEnjzV 3jGFAkqadaD2ClkwI6iq67OrLqb8s/Q0TZZnhkX8FlSAQ4B4WWXWVoowM8ZCffy1 AvZlMEotHuhm5V3l7ZIGTwYJj9FXrS/WcfgOC0gCSwZxCn7eDWTt24Dhb+FhVtmz T4QuU2xc+ByVED4nJD/WlVWJ8vdOv+BEXmcXk3cvrhocX2UlsHooNqXtFVzRMZ8+ cN2P9M5OSl1tFSoPFRGA0m6esM+KYvuae2AQsWetGupTLCxHhXyXxSEj/97WX913 4NfyVz8DnhloibQKIJC8ADCtrP2mkMCRBO1ZiTDs/oKivyf4DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNwGqQGEcDqCMfa+nwS6ZQsNiyAqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvODY5YTM0NTEtZTBkOC0z ZDVjLTkxMmEtNDlmYzhhODY5MTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDhJHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELU0jJXsxFVCJB0BNzLSfa7/BDWf398j7xAqZrNGbHxcOp8+Ds8EIzw hZIW0H2SLaxPxQa/mCFxPTUMXlzOcz9GFaQdzUkDLXT64zzHkP98fyhulo8g9V6Z X083ibzO4pCip0XNC+0mjeiRNEMNMAQBNcrZargNfoM/A2ILlMRZtLFarQh2MZ+1 JqPxiCrlpPkELbz6zp+3urr9Yw4M7xiX7GylpPLvJcFwv8pUA9A7cQt+4KZC11Ev garGG7aBMcAWzSJmNz2f/HyucjcSvYjBtDhKsxb0r3zDVZrxgHLHUEj9yGO9O3vq 8ZgI5raEGgzCNgLDZ40EWyyEgQwI74o= -----END CERTIFICATE-----Generated at Thu Aug 27 06:18:17 2026 by rpki-client