$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f070c4e0-bff7-38f3-aa0d-4fbd731c5497.roa File: f070c4e0-bff7-38f3-aa0d-4fbd731c5497.roa (raw, json) Hash identifier: CknIXfVzktp/enSG6cFUPcHJw8cE0fBNhFYwLiRFKhY= Subject key identifier: 11:6A:C1:27:09:97:E5:E5:F1:28:CF:B3:9C:57:46:FB:BB:D2:E0:F9 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584EA786DF4407EF81C30C784400 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f070c4e0-bff7-38f3-aa0d-4fbd731c5497.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 54253 IP address blocks: 136.248.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:86:df:44:07:ef:81:c3:0c:78:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=b121d6d6-c3a9-4c7a-b2b4-69a129ef991c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:be:a4:5b:e1:c6:1d:0a:b7:40:ba:82:a0:d6: 22:26:ed:37:c7:4f:6b:dc:bc:a1:46:24:e9:b0:12: f0:11:de:2b:b3:3a:0b:6c:16:61:67:8a:bf:3b:ab: c1:17:c2:20:2c:6b:73:4f:9a:26:d8:c5:bb:03:76: 6d:df:91:6a:62:4c:73:5f:90:8f:1c:7f:63:0d:49: aa:bb:dc:89:ae:95:81:b8:55:db:c6:33:5b:63:0d: c2:2c:c8:56:c7:70:3d:04:85:3f:db:ec:b6:ae:a2: 35:2c:d3:bb:6d:6e:b5:84:4f:64:59:fc:24:e3:b8: 7b:81:6f:37:1b:b3:36:1d:95:d4:b8:e8:30:19:87: 33:cd:0a:a2:15:52:c8:32:9b:92:e2:0d:26:0a:11: bf:64:13:ec:4c:5f:6c:21:4c:4d:00:41:3a:02:a1: 2f:a0:7d:e1:3d:5a:c7:d3:bc:6c:02:9d:99:7c:2e: cc:bd:d7:88:ff:39:56:79:a9:05:5c:5e:07:e0:a0: bd:11:5d:c4:83:59:1f:15:f1:1d:98:f6:8a:73:62: 02:6e:fa:71:19:b2:49:e9:cb:1c:ee:b4:b0:c4:91: dd:1a:b2:61:bb:db:52:0e:ce:79:f5:64:97:84:a4: b1:e9:04:1c:1d:91:c1:41:11:39:ff:85:39:46:4b: 63:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:6A:C1:27:09:97:E5:E5:F1:28:CF:B3:9C:57:46:FB:BB:D2:E0:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f070c4e0-bff7-38f3-aa0d-4fbd731c5497.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 136.248.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:5f:25:87:12:3f:73:31:b4:b1:ee:a3:f0:80:fc:25:c6:1e: 63:9d:23:e4:98:8e:47:27:8b:d4:34:72:c1:ea:2d:4d:b5:48: b6:16:13:81:07:b2:bc:7b:53:ab:22:32:1d:d2:c7:c2:6f:97: 17:48:d7:cc:89:db:e7:f1:64:6b:43:59:22:ee:33:77:6f:ff: 23:e7:a3:a6:53:87:3c:60:c1:9d:68:fa:2b:9e:88:4f:72:d9: a2:04:5e:ab:5e:93:bb:75:a7:e5:7d:29:bf:ce:fb:46:dd:0b: 89:e5:c2:c3:90:16:6b:f7:c3:ee:f1:c2:fa:63:b8:3b:6d:0c: cd:2c:51:d8:d3:54:2a:f8:ae:00:2f:a4:f1:db:37:13:80:bd: dc:d3:7c:d5:3c:7f:93:4d:cd:3b:9c:4e:fd:c5:31:d0:8a:df: 21:c1:9b:23:98:b6:3b:83:ea:a1:cb:16:d0:e7:15:2c:9b:d1: 90:50:e1:ca:80:b3:12:59:6b:58:d4:6b:fb:7e:75:d1:18:9a: 05:90:c5:f0:0d:89:53:05:3e:dd:40:c9:9c:e8:34:e2:2f:d0: da:e0:80:52:09:e9:7d:8a:30:e4:fa:7e:1b:00:9c:0e:07:e6: 77:50:c6:7d:d2:ba:d9:03:a1:e9:cb:7a:1e:5f:ad:aa:c1:53: f4:d4:6b:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nht9EB++Bwwx4RAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YjEyMWQ2ZDYtYzNhOS00YzdhLWIyYjQtNjlhMTI5ZWY5OTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlr6kW+HGHQq3QLqCoNYiJu03x09r3LyhRiTp sBLwEd4rszoLbBZhZ4q/O6vBF8IgLGtzT5om2MW7A3Zt35FqYkxzX5CPHH9jDUmq u9yJrpWBuFXbxjNbYw3CLMhWx3A9BIU/2+y2rqI1LNO7bW61hE9kWfwk47h7gW83 G7M2HZXUuOgwGYczzQqiFVLIMpuS4g0mChG/ZBPsTF9sIUxNAEE6AqEvoH3hPVrH 07xsAp2ZfC7MvdeI/zlWeakFXF4H4KC9EV3Eg1kfFfEdmPaKc2ICbvpxGbJJ6csc 7rSwxJHdGrJhu9tSDs559WSXhKSx6QQcHZHBQRE5/4U5Rktj6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBFqwScJl+Xl8SjPs5xXRvu70uD5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZjA3MGM0ZTAtYmZmNy0z OGYzLWFhMGQtNGZiZDczMWM1NDk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiPj4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAApfJYcSP3MxtLHuo/CA/CXGHmOdI+SYjkcni9Q0csHqLU21SLYWE4EH srx7U6siMh3Sx8JvlxdI18yJ2+fxZGtDWSLuM3dv/yPno6ZThzxgwZ1o+iueiE9y 2aIEXqtek7t1p+V9Kb/O+0bdC4nlwsOQFmv3w+7xwvpjuDttDM0sUdjTVCr4rgAv pPHbNxOAvdzTfNU8f5NNzTucTv3FMdCK3yHBmyOYtjuD6qHLFtDnFSyb0ZBQ4cqA sxJZa1jUa/t+ddEYmgWQxfANiVMFPt1AyZzoNOIv0NrggFIJ6X2KMOT6fhsAnA4H 5ndQxn3SutkDoenLeh5frarBU/TUaxo= -----END CERTIFICATE-----Generated at Thu Aug 27 15:13:26 2026 by rpki-client