$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c3393e36-840c-3423-b7f0-72bb2ab9e1e2.roa File: c3393e36-840c-3423-b7f0-72bb2ab9e1e2.roa (raw, json) Hash identifier: qzOpmJrh3iVYZYvIICdEDwzIbuTWlo/fKKijvuUpewY= Subject key identifier: 78:48:38:38:F2:72:64:86:FA:B8:F9:84:84:11:C0:20:62:51:D5:7F Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584EA786E4EF37947B22BBB25A40 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c3393e36-840c-3423-b7f0-72bb2ab9e1e2.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 54253 IP address blocks: 131.186.104.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:86:e4:ef:37:94:7b:22:bb:b2:5a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=5128b2d7-d692-4e61-93dc-d126ffe1328a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:5d:0c:73:55:46:57:34:a0:c0:16:cb:d8:f1: b7:ea:9d:66:84:1d:a5:62:18:2b:b4:ff:f0:59:bb: 55:be:46:08:68:0e:67:7d:52:55:80:89:a7:02:0f: 24:8d:b2:62:b7:37:00:e3:ec:6f:f8:32:1b:7c:db: 03:4e:82:fe:37:2b:31:87:b5:75:30:40:b7:97:40: 04:74:58:a4:9d:ad:18:78:f1:a5:3b:39:c1:04:c4: f2:76:51:a8:a4:bb:11:af:c6:42:d3:20:c7:fd:59: d2:ba:c4:97:b2:4a:0c:49:fc:e5:6d:b7:97:f2:3f: c6:3d:61:57:f3:d1:3a:d8:34:16:a7:e7:90:dd:ec: f0:e1:2b:a4:83:f7:77:7d:f4:87:c1:aa:d9:17:f4: 90:4f:c6:21:5e:d8:82:5e:fa:08:1e:72:5f:77:02: 17:12:81:96:7c:22:b5:10:8c:71:42:fc:64:3e:87: 35:5e:50:90:e8:e6:96:97:43:16:b0:d3:41:9e:a1: 4f:dd:7a:47:1c:a5:ae:3c:9d:2b:63:9a:d3:8b:93: 49:4c:a6:32:3c:fe:f2:eb:20:fb:96:32:69:67:bf: 94:d6:35:60:0a:9f:2e:6d:79:23:0d:a7:c1:54:d0: b4:a6:de:ba:f6:66:9c:27:79:e6:71:f9:c6:1a:1c: 3d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:48:38:38:F2:72:64:86:FA:B8:F9:84:84:11:C0:20:62:51:D5:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c3393e36-840c-3423-b7f0-72bb2ab9e1e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 131.186.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:4e:91:93:58:84:f6:60:31:66:b8:0e:9d:21:fd:74:34:b4: c7:e8:a1:2e:73:8b:63:8f:a9:8e:c1:51:fe:13:73:05:99:10: c6:89:b6:51:ce:13:21:44:86:bd:68:40:b8:24:f0:5e:73:cf: ca:56:e7:43:6e:f6:3f:55:84:b9:78:bc:78:06:08:9d:11:b4: 66:da:1e:4a:7f:38:21:70:a3:66:dd:59:8f:f8:dc:d5:f1:9c: bd:9e:56:ef:28:4a:fb:e3:ee:1b:f2:2b:78:b4:50:64:72:02: 11:91:dd:f6:27:9e:fa:6b:a0:29:d4:06:23:70:d1:cd:c6:8f: 9e:07:75:82:49:f0:50:5e:c9:3b:51:01:69:65:e9:70:67:8a: fa:f9:a9:f3:55:2a:50:32:54:2d:45:e7:9b:37:50:4b:03:4e: bb:ac:1c:b9:1f:b2:72:1b:0b:27:10:8a:db:f2:af:c7:b2:38: 2f:f2:0b:1d:b6:a7:65:da:94:e3:aa:91:99:31:9e:4d:29:1b: bc:dc:d5:a7:bc:c5:0d:b6:ae:3d:8d:60:86:2a:c1:e1:3e:35: 6e:29:78:4c:f3:1d:55:34:a7:55:af:fc:9d:33:49:28:92:2a: 79:88:7c:bb:f7:76:50:53:22:13:b4:19:55:9e:66:7b:ac:c6: c8:30:04:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nhuTvN5R7IruyWkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NTEyOGIyZDctZDY5Mi00ZTYxLTkzZGMtZDEyNmZmZTEzMjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi10Mc1VGVzSgwBbL2PG36p1mhB2lYhgrtP/w WbtVvkYIaA5nfVJVgImnAg8kjbJitzcA4+xv+DIbfNsDToL+Nysxh7V1MEC3l0AE dFikna0YePGlOznBBMTydlGopLsRr8ZC0yDH/VnSusSXskoMSfzlbbeX8j/GPWFX 89E62DQWp+eQ3ezw4Sukg/d3ffSHwarZF/SQT8YhXtiCXvoIHnJfdwIXEoGWfCK1 EIxxQvxkPoc1XlCQ6OaWl0MWsNNBnqFP3XpHHKWuPJ0rY5rTi5NJTKYyPP7y6yD7 ljJpZ7+U1jVgCp8ubXkjDafBVNC0pt669macJ3nmcfnGGhw9dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHhIODjycmSG+rj5hIQRwCBiUdV/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYzMzOTNlMzYtODQwYy0z NDIzLWI3ZjAtNzJiYjJhYjllMWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg7poMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD1OkZNYhPZgMWa4Dp0h/XQ0tMfooS5zi2OPqY7BUf4TcwWZEMaJtlHO EyFEhr1oQLgk8F5zz8pW50Nu9j9VhLl4vHgGCJ0RtGbaHkp/OCFwo2bdWY/43NXx nL2eVu8oSvvj7hvyK3i0UGRyAhGR3fYnnvproCnUBiNw0c3Gj54HdYJJ8FBeyTtR AWll6XBnivr5qfNVKlAyVC1F55s3UEsDTrusHLkfsnIbCycQitvyr8eyOC/yCx22 p2XalOOqkZkxnk0pG7zc1ae8xQ22rj2NYIYqweE+NW4peEzzHVU0p1Wv/J0zSSiS KnmIfLv3dlBTIhO0GVWeZnusxsgwBNo= -----END CERTIFICATE-----Generated at Thu Aug 27 16:06:39 2026 by rpki-client