$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f070c4e0-bff7-38f3-aa0d-4fbd731c5497.roa File: f070c4e0-bff7-38f3-aa0d-4fbd731c5497.roa (raw, json) Hash identifier: yil5ilnBy2WZcI/UeQL/RDMiaRcAIGeXqmPq69Cyw3w= Subject key identifier: 3F:CE:87:07:CC:6C:84:54:C6:67:8A:1D:0D:92:25:BC:BF:71:E1:19 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F497303FC5B1FA7DE5DF71900 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f070c4e0-bff7-38f3-aa0d-4fbd731c5497.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 54253 IP address blocks: 136.248.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:03:fc:5b:1f:a7:de:5d:f7:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c65f56e9-758b-423f-8bec-21d6c7efe462 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:8f:49:a8:8f:eb:5f:92:7e:eb:32:e8:02:ca: e6:e8:bc:e4:35:89:ab:d5:12:d6:24:2b:77:4b:e6: 4b:64:3e:73:18:52:6e:de:04:4d:25:dd:71:3a:c8: 41:b0:9c:29:cd:aa:5f:91:44:df:65:ce:ea:24:27: 99:3f:68:6e:68:52:45:94:3c:0e:45:3d:ed:9c:9f: 36:c4:2c:87:27:de:ac:12:83:a1:b7:d6:9e:eb:0a: de:08:c7:0b:54:3b:1c:51:5b:84:00:96:48:f4:f0: 78:be:32:17:64:b4:5a:86:23:c3:55:24:11:50:4a: 27:5a:b6:1d:d9:dc:4e:81:4c:a6:69:c8:65:e6:b4: 4d:9e:68:f2:f2:51:20:23:9f:aa:75:68:73:55:44: 4b:d8:f5:d8:5f:43:b5:c2:8c:fb:0e:04:0b:bc:66: d6:78:be:e9:27:88:9f:a9:76:45:fb:64:5d:c4:90: 82:9d:b6:ca:ee:ea:0e:f3:92:32:fe:40:06:16:1f: 13:57:6c:94:e6:59:61:47:7b:8b:58:a9:b9:2f:f1: 84:7b:c6:ea:58:25:f4:11:a1:24:58:59:4f:bc:f5: 02:34:39:e3:4b:b4:ad:21:aa:a8:60:5f:9c:b0:42: c3:35:5c:db:94:9d:66:bc:99:86:3d:d3:1f:02:72: 14:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:CE:87:07:CC:6C:84:54:C6:67:8A:1D:0D:92:25:BC:BF:71:E1:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f070c4e0-bff7-38f3-aa0d-4fbd731c5497.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 136.248.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:30:1d:7d:83:04:17:65:f2:a0:3f:d7:7f:ef:c6:37:11:18: 88:4a:6d:a4:0d:79:68:56:8b:14:51:d2:fd:a8:dc:92:ce:54: 59:24:f4:64:80:1a:b2:2a:5b:a0:f4:f8:1a:0e:d4:04:ee:7e: 52:73:32:6a:d8:ff:fd:f9:7f:14:17:36:d8:96:14:0e:83:46: d5:f2:9f:81:c7:5f:77:46:a0:29:a1:af:47:cc:45:6b:1a:4f: 37:f0:cd:e6:fa:78:73:d1:5b:b4:eb:4d:04:f0:a5:a2:26:59: ac:7c:75:39:7d:45:8b:2f:1b:6a:f4:9d:31:5a:8a:47:58:e3: 0b:cb:49:02:a0:60:44:10:53:07:12:96:40:b4:06:09:8c:ef: 62:42:50:71:96:6d:16:fd:c1:72:c0:db:ad:84:2e:d8:bb:ce: cd:96:ba:73:81:23:c8:bf:95:29:83:9b:93:4b:c3:7e:4e:e4: 36:e6:9d:2a:e2:a8:a5:4b:7a:1c:32:76:16:9d:ac:66:32:fe: b7:86:0b:bc:d0:a4:27:33:e3:95:21:a2:8a:68:a4:6a:a6:b8: 3b:42:c5:9b:1d:ed:61:25:31:fe:44:d5:8c:e5:71:a9:e2:48: d0:f2:c9:c8:d1:81:96:09:3b:16:bc:25:9f:fe:d8:b9:0c:77: 81:17:ba:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcwP8Wx+n3l33GQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YzY1ZjU2ZTktNzU4Yi00MjNmLThiZWMtMjFkNmM3ZWZlNDYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi49JqI/rX5J+6zLoAsrm6LzkNYmr1RLWJCt3 S+ZLZD5zGFJu3gRNJd1xOshBsJwpzapfkUTfZc7qJCeZP2huaFJFlDwORT3tnJ82 xCyHJ96sEoOht9ae6wreCMcLVDscUVuEAJZI9PB4vjIXZLRahiPDVSQRUEonWrYd 2dxOgUymachl5rRNnmjy8lEgI5+qdWhzVURL2PXYX0O1woz7DgQLvGbWeL7pJ4if qXZF+2RdxJCCnbbK7uoO85Iy/kAGFh8TV2yU5llhR3uLWKm5L/GEe8bqWCX0EaEk WFlPvPUCNDnjS7StIaqoYF+csELDNVzblJ1mvJmGPdMfAnIUYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD/OhwfMbIRUxmeKHQ2SJby/ceEZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZjA3MGM0ZTAtYmZmNy0z OGYzLWFhMGQtNGZiZDczMWM1NDk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiPj4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ4wHX2DBBdl8qA/13/vxjcRGIhKbaQNeWhWixRR0v2o3JLOVFkk9GSA GrIqW6D0+BoO1ATuflJzMmrY//35fxQXNtiWFA6DRtXyn4HHX3dGoCmhr0fMRWsa Tzfwzeb6eHPRW7TrTQTwpaImWax8dTl9RYsvG2r0nTFaikdY4wvLSQKgYEQQUwcS lkC0BgmM72JCUHGWbRb9wXLA262ELti7zs2WunOBI8i/lSmDm5NLw35O5DbmnSri qKVLehwydhadrGYy/reGC7zQpCcz45UhoopopGqmuDtCxZsd7WElMf5E1Yzlcani SNDyycjRgZYJOxa8JZ/+2LkMd4EXukU= -----END CERTIFICATE-----Generated at Mon Oct 12 14:07:36 2026 by rpki-client