$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/96205b1d-b1c3-30a6-be77-fd63b68ca4f3.roa File: 96205b1d-b1c3-30a6-be77-fd63b68ca4f3.roa (raw, json) Hash identifier: wmtuIKXZz1VR/YMb647t3Ks5DShiJT/glOygnHliomQ= Subject key identifier: B9:1F:EE:02:73:C5:A8:25:06:F5:8F:7B:DC:C9:86:CD:02:67:2D:BF Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F4974AB7386B8C7C8A623EAD8 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/96205b1d-b1c3-30a6-be77-fd63b68ca4f3.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 54253 IP address blocks: 170.52.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:ab:73:86:b8:c7:c8:a6:23:ea:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=6826135e-476f-4fe2-bd7c-d5612e97b47e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0d:11:41:16:88:80:ab:be:81:34:d9:36:bb: 0d:02:de:2e:ca:70:d8:32:ce:07:d6:0d:31:d9:c7: 30:da:c6:f8:a7:53:96:fe:ab:1a:d2:f8:ac:cc:97: a8:01:94:39:36:94:92:6e:01:9a:5a:11:04:af:ea: de:a3:3f:01:d8:46:79:90:9b:ce:c3:b3:43:1e:62: 38:3e:99:77:aa:7f:b4:6e:41:7a:f7:ae:2e:b7:4d: de:3f:49:df:b7:11:03:0d:f8:f2:04:d5:27:5f:66: e0:61:bb:91:5e:a9:2a:9b:92:64:dc:ac:b7:00:4d: a6:96:31:c5:4e:99:ee:d3:37:dc:dc:9c:21:c5:94: 6f:75:1d:e0:c7:9c:57:85:b6:fa:54:a6:ea:5e:4c: 1e:4f:d9:ee:4d:87:56:08:6a:34:21:84:6a:77:6a: b5:4e:ca:67:ed:de:ac:b6:27:cc:69:18:7c:50:79: 58:6f:a0:59:2c:33:67:df:d7:c2:2b:23:af:c2:84: 45:37:db:dc:1d:3c:fc:f7:3a:04:f3:10:db:6b:5d: 8c:1e:14:ee:77:ee:e1:28:09:ac:83:fb:b9:f0:e9: 42:6a:62:a2:38:73:41:0d:49:e0:56:32:aa:84:85: f8:d4:09:49:5f:eb:89:fd:3d:77:9d:11:57:c6:5e: c1:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:1F:EE:02:73:C5:A8:25:06:F5:8F:7B:DC:C9:86:CD:02:67:2D:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/96205b1d-b1c3-30a6-be77-fd63b68ca4f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 170.52.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:5c:fd:6f:9f:f0:47:13:e4:6b:5b:88:7c:73:e9:f8:88:4b: 64:97:bf:1b:c5:a4:7d:b0:c6:0f:a2:04:a3:0e:52:db:b1:5f: 72:3c:4a:cf:1c:6f:0b:37:15:44:2b:03:ac:bc:54:bc:6a:35: 0d:6a:07:2a:d3:94:df:c7:61:2f:f5:be:45:66:84:f9:b3:7e: 5c:76:22:84:a2:98:ea:7c:7c:d2:d9:9a:fd:d9:0e:b7:75:46: 55:dd:e2:4d:b3:2c:66:f9:7e:76:db:9e:2d:29:07:bb:44:04: 53:28:0d:ad:e0:61:f4:99:bd:35:4f:53:86:3e:69:be:a8:c2: 43:e6:20:fc:0d:ea:18:5b:1a:62:06:98:65:30:39:6e:af:cb: c1:ab:7a:7d:d1:f9:11:0d:c9:88:5f:cd:c4:a5:f0:18:6c:35: d2:43:7a:bb:16:df:85:04:0c:ed:7b:ab:a6:e7:9d:86:ab:22: 35:e5:4f:ec:3f:fc:c7:fd:2f:63:56:2d:59:21:ec:d8:27:4f: a4:28:61:0d:09:3d:e4:2f:58:25:39:19:07:12:24:56:53:9a: 4b:3d:01:de:b3:2b:86:46:25:42:d3:11:4c:4b:25:92:90:34: 60:04:35:e0:8c:94:8e:97:dc:78:15:93:65:bc:aa:ba:c1:29: 5d:72:d5:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdKtzhrjHyKYj6tgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjgyNjEzNWUtNDc2Zi00ZmUyLWJkN2MtZDU2MTJlOTdiNDdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxw0RQRaIgKu+gTTZNrsNAt4uynDYMs4H1g0x 2ccw2sb4p1OW/qsa0viszJeoAZQ5NpSSbgGaWhEEr+reoz8B2EZ5kJvOw7NDHmI4 Ppl3qn+0bkF6964ut03eP0nftxEDDfjyBNUnX2bgYbuRXqkqm5Jk3Ky3AE2mljHF Tpnu0zfc3JwhxZRvdR3gx5xXhbb6VKbqXkweT9nuTYdWCGo0IYRqd2q1Tspn7d6s tifMaRh8UHlYb6BZLDNn39fCKyOvwoRFN9vcHTz89zoE8xDba12MHhTud+7hKAms g/u58OlCamKiOHNBDUngVjKqhIX41AlJX+uJ/T13nRFXxl7B2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLkf7gJzxaglBvWPe9zJhs0CZy2/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOTYyMDViMWQtYjFjMy0z MGE2LWJlNzctZmQ2M2I2OGNhNGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqjQEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGFc/W+f8EcT5GtbiHxz6fiIS2SXvxvFpH2wxg+iBKMOUtuxX3I8Ss8c bws3FUQrA6y8VLxqNQ1qByrTlN/HYS/1vkVmhPmzflx2IoSimOp8fNLZmv3ZDrd1 RlXd4k2zLGb5fnbbni0pB7tEBFMoDa3gYfSZvTVPU4Y+ab6owkPmIPwN6hhbGmIG mGUwOW6vy8Gren3R+RENyYhfzcSl8BhsNdJDersW34UEDO17q6bnnYarIjXlT+w/ /Mf9L2NWLVkh7NgnT6QoYQ0JPeQvWCU5GQcSJFZTmks9Ad6zK4ZGJULTEUxLJZKQ NGAENeCMlI6X3HgVk2W8qrrBKV1y1f8= -----END CERTIFICATE-----Generated at Tue Oct 13 12:50:14 2026 by rpki-client