$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0bd89c4b-c0d9-35cc-8769-0d1e5cdb279c.roa File: 0bd89c4b-c0d9-35cc-8769-0d1e5cdb279c.roa (raw, json) Hash identifier: 0qPRo6eGXBDqIUJa10G6SPMqMr3HzDeXsznAwalX+7A= Subject key identifier: 25:42:2C:78:35:F0:D3:7F:61:86:4E:21:A6:3D:0C:52:F0:22:CA:DA Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F103797B0EF05FE25771E2880 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0bd89c4b-c0d9-35cc-8769-0d1e5cdb279c.roa Signing time: Fri 04 Sep 2026 13:00:12 +0000 ROA not before: Fri 04 Sep 2026 13:00:12 +0000 ROA not after: Thu 03 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 168.110.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:10:37:97:b0:ef:05:fe:25:77:1e:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 4 13:00:12 2026 GMT Not After : Dec 3 14:00:12 2026 GMT Subject: CN=e2d8ee16-0ce3-4470-b20b-9d87a17277d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:57:77:84:83:2e:f9:cb:d7:d2:21:f9:3f:b4: f0:31:8d:56:af:40:e2:d6:5e:f6:04:9d:8a:6d:13: eb:c5:aa:8e:45:c2:00:0c:18:3c:14:fd:05:bf:c0: 1c:19:64:42:46:ac:69:96:f6:6f:5f:0e:e2:68:a3: 89:a6:7f:94:33:90:2f:05:b5:85:54:40:fa:6e:b3: da:02:f8:db:8c:dc:f8:db:94:27:1c:a1:67:1d:80: 43:04:49:f1:b9:ae:9b:f3:52:aa:e7:c1:f8:31:2a: 3a:34:fa:b1:ef:d6:23:f7:b3:37:be:dd:b6:3d:dc: 69:51:59:a4:54:44:26:ec:76:24:b8:b5:ed:14:af: 3c:23:1f:94:4a:aa:dd:2c:13:4c:fe:d4:83:39:99: e5:77:28:1b:3a:d7:46:a0:2b:49:aa:65:8d:09:8e: 09:50:83:90:14:1e:80:d6:81:1f:c3:53:36:c9:ea: 17:42:58:16:4f:6d:24:fd:1b:df:62:80:30:4b:6f: 80:22:a0:51:27:db:1c:bf:54:74:f7:df:7c:c1:40: 06:6f:c4:19:5c:3d:79:d1:e2:86:c8:5e:31:99:e1: 25:1d:ae:1b:c0:0b:89:47:75:6e:72:b1:39:0a:9d: 25:4d:cd:ef:46:b5:27:07:45:09:b4:b1:b7:f7:84: 6a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:42:2C:78:35:F0:D3:7F:61:86:4E:21:A6:3D:0C:52:F0:22:CA:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0bd89c4b-c0d9-35cc-8769-0d1e5cdb279c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.110.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:4d:19:a9:a5:a7:45:a8:23:1d:86:44:d6:ef:81:ab:35:c8: b9:46:51:a9:ef:97:d0:95:35:8d:dd:81:50:3f:ed:39:94:e8: 85:6c:21:51:d8:12:1f:75:ab:ed:e3:f8:59:ee:0b:7a:41:db: c2:4a:3d:06:a5:1d:bd:07:3a:b8:72:17:52:1a:0d:38:35:49: dc:11:c2:c8:ab:7a:3a:4f:f5:18:f0:62:fe:b6:2d:3a:86:2f: 56:cf:52:90:e0:d3:26:c0:80:45:d2:7f:02:49:7c:d2:62:d6: f0:5e:8f:26:73:1c:61:5b:ed:c0:06:5c:70:7b:ce:fd:89:40: 3a:20:95:39:39:f3:fa:fa:b9:f7:50:2f:10:51:78:cd:40:2e: f2:95:46:c2:0a:75:83:b2:df:25:80:0a:98:34:d8:63:32:8a: 25:3f:37:dd:42:1f:c4:28:57:5f:27:5c:d9:ae:5e:0b:0b:f2: 3e:92:05:ba:18:a3:e1:08:a4:e0:75:17:26:7e:dc:20:2f:db: b6:21:55:17:87:a9:45:86:16:c4:ac:77:46:dc:4f:a7:52:de: 94:26:be:77:72:9f:cb:5e:a9:a0:74:26:fa:59:36:73:8e:c5: 54:07:a1:97:cf:b6:7e:38:3f:1b:76:91:24:8d:38:32:33:7c: f0:9a:ba:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8QN5ew7wX+JXceKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNDEzMDAxMloXDTI2MTIwMzE0MDAxMlowLzEtMCsGA1UEAxMk ZTJkOGVlMTYtMGNlMy00NDcwLWIyMGItOWQ4N2ExNzI3N2Q5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1d3hIMu+cvX0iH5P7TwMY1Wr0Di1l72BJ2K bRPrxaqORcIADBg8FP0Fv8AcGWRCRqxplvZvXw7iaKOJpn+UM5AvBbWFVED6brPa AvjbjNz425QnHKFnHYBDBEnxua6b81Kq58H4MSo6NPqx79Yj97M3vt22PdxpUVmk VEQm7HYkuLXtFK88Ix+USqrdLBNM/tSDOZnldygbOtdGoCtJqmWNCY4JUIOQFB6A 1oEfw1M2yeoXQlgWT20k/RvfYoAwS2+AIqBRJ9scv1R09998wUAGb8QZXD150eKG yF4xmeElHa4bwAuJR3VucrE5Cp0lTc3vRrUnB0UJtLG394RqjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCVCLHg18NN/YYZOIaY9DFLwIsraMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMGJkODljNGItYzBkOS0z NWNjLTg3NjktMGQxZTVjZGIyNzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqG70MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHBNGamlp0WoIx2GRNbvgas1yLlGUanvl9CVNY3dgVA/7TmU6IVsIVHY Eh91q+3j+FnuC3pB28JKPQalHb0HOrhyF1IaDTg1SdwRwsirejpP9RjwYv62LTqG L1bPUpDg0ybAgEXSfwJJfNJi1vBejyZzHGFb7cAGXHB7zv2JQDoglTk58/r6ufdQ LxBReM1ALvKVRsIKdYOy3yWACpg02GMyiiU/N91CH8QoV18nXNmuXgsL8j6SBboY o+EIpOB1FyZ+3CAv27YhVReHqUWGFsSsd0bcT6dS3pQmvndyn8teqaB0JvpZNnOO xVQHoZfPtn44Pxt2kSSNODIzfPCaupU= -----END CERTIFICATE-----Generated at Mon Sep 21 18:15:57 2026 by rpki-client