$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/227f0931-c6d9-393d-91ed-6842edac8111.roa File: 227f0931-c6d9-393d-91ed-6842edac8111.roa (raw, json) Hash identifier: xgMy+xL9/cl+okTxufyXpAjiFccmIeKvjN4Q7KWF60Q= Subject key identifier: AE:71:9E:CF:EE:A0:81:C0:99:9E:F7:7B:0F:D5:8B:70:DC:AF:A8:F1 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F497304FBB2F31909DECFDB80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/227f0931-c6d9-393d-91ed-6842edac8111.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 54253 IP address blocks: 159.13.10.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:04:fb:b2:f3:19:09:de:cf:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=bcd14dc5-a9b9-4f44-8f6c-7c268b00d7be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:20:5d:cc:29:c7:b3:d9:35:26:87:85:9d:e2: b4:80:da:ce:a1:f2:d1:b9:bd:c1:65:f6:5e:a9:3d: 09:5b:8c:4c:d3:ce:0d:f9:e2:62:89:50:62:f0:5a: 89:ed:c0:c7:ce:06:7e:07:45:d7:37:03:15:cb:e4: df:29:e4:bc:58:f0:59:c5:5c:05:cb:73:3d:0b:d7: 87:4c:e7:67:30:19:08:3b:47:e0:d1:79:46:f7:92: 5d:c4:be:a7:59:83:4e:12:d6:ad:2a:07:78:82:e0: 77:ca:40:52:9b:35:a6:2b:61:43:fd:1a:6d:e1:ae: 41:bd:3b:f2:b3:0a:ce:cf:b4:fd:41:da:cd:91:e0: 4a:e3:ba:70:57:6b:e8:b7:f3:a1:29:97:ee:f3:c3: 8b:b4:cf:e8:54:d3:51:b6:9f:21:ec:6d:e3:85:89: bd:ef:2f:c4:36:ab:29:7d:13:e7:7a:7c:44:1a:6c: 8c:dc:fc:f8:a3:21:bc:89:63:20:1f:ec:84:c6:2d: 9a:50:87:40:b6:7e:2b:76:5c:0c:2d:52:03:1d:23: 68:a7:be:9d:29:ed:c1:8f:c8:e8:f0:f1:70:00:e1: b1:18:bc:64:f5:f8:30:c9:b5:63:be:cf:b4:d6:f1: e4:aa:57:f2:7c:ef:a6:eb:ad:72:6d:57:10:51:51: cc:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:71:9E:CF:EE:A0:81:C0:99:9E:F7:7B:0F:D5:8B:70:DC:AF:A8:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/227f0931-c6d9-393d-91ed-6842edac8111.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 159.13.10.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:3b:df:f8:2b:d3:1d:7b:53:3a:59:e0:65:89:6d:33:1b:28: e1:e7:07:ec:5d:e0:33:38:3a:d2:9c:f5:b6:e3:c5:60:7d:35: cc:c9:62:7e:1f:30:38:7b:ea:9b:c5:a3:8b:52:5f:8c:ec:81: 6f:96:eb:30:17:43:21:f8:d9:16:25:85:93:46:91:ae:b5:1a: f5:18:6c:8a:50:58:02:44:22:96:32:27:88:22:18:e4:4f:c3: dd:37:e7:14:a2:42:14:c3:16:b5:0e:15:ff:90:8e:c1:75:f7: 2d:de:8a:9c:2f:2d:53:2a:9a:98:6d:42:e1:b5:06:3b:23:12: ef:35:c9:bf:0c:54:47:35:b1:f2:45:7b:8a:66:d4:7c:f3:44: 57:19:9c:ac:a6:bf:e7:13:a1:57:1b:d5:5b:6c:00:f3:66:76: 26:db:dd:ab:f9:06:0b:19:35:ef:53:e8:5b:9e:96:99:b1:20: 2c:38:88:f6:a7:5f:32:e2:be:39:11:9d:47:fc:3b:2b:f7:0d: 03:7a:9e:91:e4:74:df:93:84:3e:c6:23:de:33:c2:20:e3:2f: 5f:c0:d9:9e:2d:32:73:a3:3b:c0:93:3e:c0:b6:f7:0e:7e:3a: 22:37:81:d9:0d:17:41:10:42:cc:1e:19:fb:c2:39:25:15:c8: fd:5e:52:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcwT7svMZCd7P24AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YmNkMTRkYzUtYTliOS00ZjQ0LThmNmMtN2MyNjhiMDBkN2JlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yBdzCnHs9k1JoeFneK0gNrOofLRub3BZfZe qT0JW4xM084N+eJiiVBi8FqJ7cDHzgZ+B0XXNwMVy+TfKeS8WPBZxVwFy3M9C9eH TOdnMBkIO0fg0XlG95JdxL6nWYNOEtatKgd4guB3ykBSmzWmK2FD/Rpt4a5BvTvy swrOz7T9QdrNkeBK47pwV2vot/OhKZfu88OLtM/oVNNRtp8h7G3jhYm97y/ENqsp fRPnenxEGmyM3Pz4oyG8iWMgH+yExi2aUIdAtn4rdlwMLVIDHSNop76dKe3Bj8jo 8PFwAOGxGLxk9fgwybVjvs+01vHkqlfyfO+m661ybVcQUVHMOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK5xns/uoIHAmZ73ew/Vi3Dcr6jxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMjI3ZjA5MzEtYzZkOS0z OTNkLTkxZWQtNjg0MmVkYWM4MTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnw0KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACw73/gr0x17UzpZ4GWJbTMbKOHnB+xd4DM4OtKc9bbjxWB9NczJYn4f MDh76pvFo4tSX4zsgW+W6zAXQyH42RYlhZNGka61GvUYbIpQWAJEIpYyJ4giGORP w9035xSiQhTDFrUOFf+QjsF19y3eipwvLVMqmphtQuG1BjsjEu81yb8MVEc1sfJF e4pm1HzzRFcZnKymv+cToVcb1VtsAPNmdibb3av5BgsZNe9T6FuelpmxICw4iPan XzLivjkRnUf8Oyv3DQN6npHkdN+ThD7GI94zwiDjL1/A2Z4tMnOjO8CTPsC29w5+ OiI3gdkNF0EQQsweGfvCOSUVyP1eUgU= -----END CERTIFICATE-----Generated at Sun Sep 27 12:35:42 2026 by rpki-client