$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/f657671d-604a-35c7-adf5-b6d3fcfb51c4.roa File: f657671d-604a-35c7-adf5-b6d3fcfb51c4.roa (raw, json) Hash identifier: couTQw22wgQhNVwNsAHzeDRU9fNfm7EP1+Vnk/SpVH0= Subject key identifier: 87:30:E5:91:EF:D1:92:9A:8E:C4:C1:1B:8F:CB:06:09:E6:C5:80:B1 Certificate issuer: /CN=18a928eb-48a5-4560-a217-36cb1ea32648 Certificate serial: 010D0C9F4328584F2EED1084C5792E47AE2F3E00 Authority key identifier: F4:7E:B1:DC:2E:8F:E5:FD:14:8F:7A:A2:C4:C6:46:75:B4:30:AB:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/f657671d-604a-35c7-adf5-b6d3fcfb51c4.roa Signing time: Tue 15 Sep 2026 13:00:12 +0000 ROA not before: Tue 15 Sep 2026 13:00:12 +0000 ROA not after: Mon 14 Dec 2026 14:00:12 +0000 asID: 63150 IP address blocks: 168.151.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2e:ed:10:84:c5:79:2e:47:ae:2f:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18a928eb-48a5-4560-a217-36cb1ea32648 Validity Not Before: Sep 15 13:00:12 2026 GMT Not After : Dec 14 14:00:12 2026 GMT Subject: CN=f311008d-ee29-4622-b761-bda4113e456a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:29:85:8d:09:13:69:1e:2a:5d:58:4a:75:20: d9:f2:55:98:6d:96:a2:b8:34:83:90:1b:b5:22:09: a0:5e:c4:0f:dc:63:97:e3:c7:66:1a:3f:60:3d:95: bd:26:ef:83:c1:4b:b5:13:5e:ec:be:a5:02:b2:69: f1:70:78:3a:93:e8:27:d0:8c:6b:e7:94:f7:40:de: b1:16:59:ec:d5:9b:e2:1f:b7:8e:9f:89:ef:36:8b: 15:00:81:26:81:99:7a:ec:1e:9b:66:e9:f3:ad:bf: f1:d5:ff:6d:8e:15:d5:3a:ec:31:d2:0f:c7:d0:be: c8:a6:2b:7d:b3:76:22:a3:03:f7:68:69:80:1a:14: df:c7:70:7b:8b:20:9d:c3:d1:cb:08:e4:1e:70:9d: 35:0a:a4:6b:86:c4:6d:9e:60:a2:19:a9:38:27:30: 30:3a:43:04:53:e4:a4:59:50:23:1a:65:2c:be:14: 77:31:72:04:a0:63:bb:9a:f4:fb:96:6b:34:0f:d8: 5c:3e:4d:b0:80:6c:85:53:6c:ad:54:18:97:8b:c8: 94:29:8b:a7:a5:18:93:b5:51:55:06:9c:75:59:4e: 53:f5:91:5b:da:50:68:6b:64:82:bf:92:03:f3:c1: c1:f0:6c:94:37:87:42:c9:dc:85:fd:99:9e:18:2e: 3d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:30:E5:91:EF:D1:92:9A:8E:C4:C1:1B:8F:CB:06:09:E6:C5:80:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/f657671d-604a-35c7-adf5-b6d3fcfb51c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.crl X509v3 Authority Key Identifier: keyid:F4:7E:B1:DC:2E:8F:E5:FD:14:8F:7A:A2:C4:C6:46:75:B4:30:AB:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer sbgp-ipAddrBlock: critical IPv4: 168.151.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:9c:ab:bd:35:68:89:79:f4:85:14:77:8c:64:4e:de:50:8f: 04:1f:db:6f:fa:ad:d2:5c:71:8f:47:a3:b1:e2:12:11:0b:b8: 31:43:22:6b:52:74:f5:97:ec:54:6e:30:02:68:7c:1e:ce:5c: f4:63:fc:e4:53:e8:3c:6b:b0:e0:f1:49:d3:f4:57:92:b4:de: 49:2f:00:79:e7:92:9e:2e:a1:e5:6e:9b:cd:93:7f:28:a5:eb: bb:3f:cb:e7:d7:85:7c:0d:64:8f:d8:c2:1b:4c:36:67:20:8a: 39:91:21:ce:47:d9:d1:13:2a:af:ce:e7:66:e4:09:c7:e6:a9: 46:aa:0e:87:10:00:cb:d8:08:a1:f0:9e:1c:b6:f6:4e:2a:80: 93:8c:20:a7:fb:72:c2:01:28:f2:15:a2:83:7a:25:1f:07:ec: a7:94:37:a9:74:f3:4b:51:ca:2a:67:02:c5:ba:8b:a1:cc:22: 5b:14:db:fc:d7:9e:e8:a2:d4:9b:c1:57:5b:29:01:57:9d:3d: 21:e8:6a:6c:2c:33:50:99:d7:44:69:89:d0:75:cb:53:ef:b2: 44:6d:16:6d:8f:8e:cb:26:da:d9:9b:f2:c7:04:ba:c4:37:f5: 31:73:1a:9d:11:35:13:fc:c4:f9:91:47:61:a4:91:39:4d:66: 60:6a:98:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8u7RCExXkuR64vPgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMThhOTI4ZWItNDhhNS00NTYwLWEyMTctMzZjYjFlYTMy NjQ4MB4XDTI2MDkxNTEzMDAxMloXDTI2MTIxNDE0MDAxMlowLzEtMCsGA1UEAxMk ZjMxMTAwOGQtZWUyOS00NjIyLWI3NjEtYmRhNDExM2U0NTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSmFjQkTaR4qXVhKdSDZ8lWYbZaiuDSDkBu1 IgmgXsQP3GOX48dmGj9gPZW9Ju+DwUu1E17svqUCsmnxcHg6k+gn0Ixr55T3QN6x Flns1ZviH7eOn4nvNosVAIEmgZl67B6bZunzrb/x1f9tjhXVOuwx0g/H0L7Ipit9 s3YiowP3aGmAGhTfx3B7iyCdw9HLCOQecJ01CqRrhsRtnmCiGak4JzAwOkMEU+Sk WVAjGmUsvhR3MXIEoGO7mvT7lms0D9hcPk2wgGyFU2ytVBiXi8iUKYunpRiTtVFV Bpx1WU5T9ZFb2lBoa2SCv5ID88HB8GyUN4dCydyF/ZmeGC49DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIcw5ZHv0ZKajsTBG4/LBgnmxYCxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xOGE5 MjhlYi00OGE1LTQ1NjAtYTIxNy0zNmNiMWVhMzI2NDgvZjY1NzY3MWQtNjA0YS0z NWM3LWFkZjUtYjZkM2ZjZmI1MWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMThhOTI4ZWItNDhhNS00NTYwLWEy MTctMzZjYjFlYTMyNjQ4LzE4YTkyOGViLTQ4YTUtNDU2MC1hMjE3LTM2Y2IxZWEz MjY0OC5jcmwwHwYDVR0jBBgwFoAU9H6x3C6P5f0Uj3qixMZGdbQwqzgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xOGE5MjhlYi00OGE1LTQ1NjAtYTIxNy0zNmNi MWVhMzI2NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqJcUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGScq701aIl59IUUd4xkTt5QjwQf22/6rdJccY9Ho7HiEhELuDFDImtS dPWX7FRuMAJofB7OXPRj/ORT6DxrsODxSdP0V5K03kkvAHnnkp4uoeVum82Tfyil 67s/y+fXhXwNZI/YwhtMNmcgijmRIc5H2dETKq/O52bkCcfmqUaqDocQAMvYCKHw nhy29k4qgJOMIKf7csIBKPIVooN6JR8H7KeUN6l080tRyipnAsW6i6HMIlsU2/zX nuii1JvBV1spAVedPSHoamwsM1CZ10RpidB1y1PvskRtFm2Pjssm2tmb8scEusQ3 9TFzGp0RNRP8xPmRR2GkkTlNZmBqmIY= -----END CERTIFICATE-----Generated at Tue Sep 22 16:38:04 2026 by rpki-client