$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b9f5a37a-e848-3f03-9df0-961bca4da222.roa File: b9f5a37a-e848-3f03-9df0-961bca4da222.roa (raw, json) Hash identifier: /enaKceeATXqprV0rGJxSu/Jl12wS0dUx0GAWq4TpJU= Subject key identifier: 72:D0:1E:D4:1C:E8:F5:62:B9:A1:37:7D:E7:26:AA:AC:FD:8B:22:BE Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F497367AE7CCFF6626B2D7880 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b9f5a37a-e848-3f03-9df0-961bca4da222.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 54253 IP address blocks: 137.131.68.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:67:ae:7c:cf:f6:62:6b:2d:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=34126c20-cf83-4a73-be5a-c4aa3ecf428b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ad:89:3d:4d:9b:66:12:56:86:71:99:c5:7a: 57:9f:ec:09:5d:49:85:de:f5:60:9f:a1:e8:8c:c3: 56:71:68:80:ab:6c:90:d3:92:ba:a2:2d:18:6d:a9: c8:d2:91:b6:5e:0b:2a:2f:2d:a3:47:c0:79:31:13: 04:f7:9c:78:e6:bf:ba:32:08:ec:7e:d9:01:d3:52: d1:e9:7c:82:b7:9d:da:36:ca:d3:68:9b:69:4a:6a: c2:a0:28:f5:2d:ac:1c:42:e2:b3:b3:49:4b:c7:8b: c5:d6:31:a8:02:65:72:bc:9b:e6:63:b8:2e:3d:c7: 08:14:26:f0:e2:d3:fc:b6:98:3d:ac:61:f4:11:b2: 17:74:92:70:dd:64:dd:cd:4c:84:64:08:c9:b9:96: b5:de:53:7a:00:39:63:ed:db:3d:1a:5a:38:30:62: e8:95:5d:86:2e:31:1b:e6:e2:78:84:34:a9:04:65: 34:3e:a2:b6:76:34:a3:43:06:0a:c1:22:bc:4a:43: a1:1c:d6:ef:51:1c:e1:29:ed:1b:3e:a8:27:08:60: cd:2f:1d:f6:58:4b:76:65:c2:1d:5e:13:63:95:1b: 64:3b:6b:7e:82:09:59:01:b7:86:93:6d:d9:55:bc: c7:2d:b7:8d:0b:4b:dd:b7:56:fa:10:a7:53:af:43: 73:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:D0:1E:D4:1C:E8:F5:62:B9:A1:37:7D:E7:26:AA:AC:FD:8B:22:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b9f5a37a-e848-3f03-9df0-961bca4da222.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 137.131.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:1f:13:ad:1d:b7:aa:bc:1e:c5:19:57:1a:1a:7c:97:25:03: 8e:00:0a:2d:ea:1f:e8:82:e9:cc:26:76:a9:dd:50:a8:58:68: 2d:18:71:59:25:ee:6a:84:7c:7d:be:9f:df:3e:b9:b1:69:86: fa:e7:6d:0d:c1:ac:57:2e:58:2e:83:f7:17:97:f1:a1:9f:ae: cb:18:bf:a4:e3:4a:e6:25:2b:dd:e5:77:4c:f3:12:17:aa:3c: 11:b4:2a:7e:21:a6:98:f0:df:5b:5e:56:e8:f4:7e:13:ce:a6: dc:ea:0c:e3:bc:6d:4d:5c:a3:33:aa:b8:70:80:a0:be:4d:80: 48:42:c3:95:8e:8b:da:04:0f:47:a4:8f:da:2f:25:12:9e:a2: a1:a3:e7:a6:c0:9f:5a:5c:2d:7f:8c:88:33:72:30:7a:59:de: c8:94:86:51:98:db:52:e0:df:d4:b7:84:54:72:16:a9:bf:2a: 2c:6e:fe:fb:bb:8b:4a:76:2a:4b:a5:54:d1:d4:71:2a:99:8f: ae:a6:24:ea:6c:86:04:03:7a:34:22:ef:be:b4:af:d8:4f:18: b7:1f:78:16:0d:6a:a5:f9:7c:92:6c:70:20:f1:38:96:ca:74: 39:07:9d:6c:9a:a2:fe:ee:8c:b4:8c:a0:44:3d:09:f3:aa:ac: df:eb:c5:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc2eufM/2YmsteIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzQxMjZjMjAtY2Y4My00YTczLWJlNWEtYzRhYTNlY2Y0MjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgq2JPU2bZhJWhnGZxXpXn+wJXUmF3vVgn6Ho jMNWcWiAq2yQ05K6oi0YbanI0pG2XgsqLy2jR8B5MRME95x45r+6MgjsftkB01LR 6XyCt53aNsrTaJtpSmrCoCj1LawcQuKzs0lLx4vF1jGoAmVyvJvmY7guPccIFCbw 4tP8tpg9rGH0EbIXdJJw3WTdzUyEZAjJuZa13lN6ADlj7ds9Glo4MGLolV2GLjEb 5uJ4hDSpBGU0PqK2djSjQwYKwSK8SkOhHNbvURzhKe0bPqgnCGDNLx32WEt2ZcId XhNjlRtkO2t+gglZAbeGk23ZVbzHLbeNC0vdt1b6EKdTr0NzSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHLQHtQc6PViuaE3fecmqqz9iyK+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYjlmNWEzN2EtZTg0OC0z ZjAzLTlkZjAtOTYxYmNhNGRhMjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiYNEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGMfE60dt6q8HsUZVxoafJclA44ACi3qH+iC6cwmdqndUKhYaC0YcVkl 7mqEfH2+n98+ubFphvrnbQ3BrFcuWC6D9xeX8aGfrssYv6TjSuYlK93ld0zzEheq PBG0Kn4hppjw31teVuj0fhPOptzqDOO8bU1cozOquHCAoL5NgEhCw5WOi9oED0ek j9ovJRKeoqGj56bAn1pcLX+MiDNyMHpZ3siUhlGY21Lg39S3hFRyFqm/Kixu/vu7 i0p2KkulVNHUcSqZj66mJOpshgQDejQi7760r9hPGLcfeBYNaqX5fJJscCDxOJbK dDkHnWyaov7ujLSMoEQ9CfOqrN/rxdQ= -----END CERTIFICATE-----Generated at Tue Oct 13 17:53:15 2026 by rpki-client