$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/24d9ffe5-0777-317f-bc34-e3b75372997d.roa File: 24d9ffe5-0777-317f-bc34-e3b75372997d.roa (raw, json) Hash identifier: WQXBvKASgy7Zdk1uhHKAkGSiSa4t5Idh4GyXpQf18LM= Subject key identifier: A2:ED:CF:40:67:DA:5F:CD:0A:0F:39:C8:A5:0D:7C:1B:BE:65:EE:E4 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F497336DAB0817C2636F7A1C0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/24d9ffe5-0777-317f-bc34-e3b75372997d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 54253 IP address blocks: 168.107.96.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:36:da:b0:81:7c:26:36:f7:a1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f34f0616-4cdd-4696-84c9-831ae1b3fdea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:f9:07:be:3f:84:62:b4:2b:4d:0c:9a:12:a7: 8b:52:ff:3a:b8:90:08:8e:86:a7:5b:f8:ea:0f:d8: 40:7f:19:68:69:30:b3:82:a0:fa:6c:4f:5a:5b:e3: 8e:d2:f5:68:89:26:36:9f:63:39:b5:63:68:8c:33: 6a:11:a1:7b:ca:ab:96:8f:6e:b1:a2:aa:09:9f:84: 65:20:34:91:c1:25:f2:88:87:6a:68:cb:06:0d:6b: 08:b0:25:b4:8b:c4:96:0e:dc:e0:2c:2f:c9:7c:c5: 57:12:57:e9:3d:fc:ac:71:05:c3:d9:84:25:2a:32: 14:63:c3:a4:58:67:2c:aa:3f:27:db:83:fa:4c:67: f1:56:18:02:46:a3:03:52:f2:0f:fa:ba:bc:69:11: 56:16:bb:91:59:c4:ef:a6:54:6b:15:e9:9a:a6:e2: 10:cb:d6:3a:5e:65:06:54:ee:fd:48:d7:aa:9c:85: 03:1c:8a:2b:63:11:d5:a1:fd:4b:d5:35:35:ef:a6: 54:2a:6e:21:a5:fa:ae:a0:87:96:01:b5:ce:54:52: 39:e6:d5:b2:bd:e8:0d:02:44:1f:73:aa:47:54:59: c4:d1:b0:08:89:11:4b:8c:a9:a6:43:63:b9:79:f9: 7f:d0:a3:34:16:3d:58:ac:c0:b2:4d:98:9b:19:e9: d0:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:ED:CF:40:67:DA:5F:CD:0A:0F:39:C8:A5:0D:7C:1B:BE:65:EE:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/24d9ffe5-0777-317f-bc34-e3b75372997d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.107.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:b2:51:a3:3d:e1:f5:c4:ee:60:e0:24:d5:45:70:3a:47:1c: 28:aa:e9:0d:3f:0d:56:ea:b2:d7:22:ef:17:87:b6:dd:f1:a7: 77:68:66:db:81:45:d5:41:df:a1:5f:b1:af:57:c0:7b:73:ba: b6:77:67:1e:7a:db:23:1d:b1:ea:12:2d:90:0b:80:6a:7c:f2: c1:00:1c:22:8c:e1:d8:2d:7b:61:cf:e8:2c:64:30:18:51:65: 69:f4:1a:59:48:cb:7c:6e:10:42:75:e3:98:42:ef:53:b1:a7: c4:8d:cd:b3:ce:2d:c9:09:2b:ea:83:72:0f:8d:5c:35:96:56: 8d:a2:7b:45:ab:a2:ba:93:22:86:f2:53:15:05:88:87:49:46: f3:b9:63:b9:56:5c:03:e8:8c:52:83:3e:95:6d:81:09:75:fc: 66:f4:5d:02:b5:43:f4:53:14:b6:97:8e:3e:15:42:ae:76:4f: 1b:91:72:b0:08:8a:fe:8a:41:fb:a1:d0:dc:5c:e1:2b:96:b8: 4c:0b:a4:b1:b2:67:37:91:8e:37:7c:14:69:08:b9:24:a2:1c: 7e:87:9d:93:47:a9:4d:6f:bc:b7:79:35:19:45:ff:0f:1e:fe: 2e:8e:92:b1:66:a8:93:a3:57:33:10:91:b5:56:fd:ec:87:04: 27:a9:d9:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JczbasIF8Jjb3ocAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjM0ZjA2MTYtNGNkZC00Njk2LTg0YzktODMxYWUxYjNmZGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPkHvj+EYrQrTQyaEqeLUv86uJAIjoanW/jq D9hAfxloaTCzgqD6bE9aW+OO0vVoiSY2n2M5tWNojDNqEaF7yquWj26xoqoJn4Rl IDSRwSXyiIdqaMsGDWsIsCW0i8SWDtzgLC/JfMVXElfpPfyscQXD2YQlKjIUY8Ok WGcsqj8n24P6TGfxVhgCRqMDUvIP+rq8aRFWFruRWcTvplRrFemapuIQy9Y6XmUG VO79SNeqnIUDHIorYxHVof1L1TU176ZUKm4hpfquoIeWAbXOVFI55tWyvegNAkQf c6pHVFnE0bAIiRFLjKmmQ2O5efl/0KM0Fj1YrMCyTZibGenQDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKLtz0Bn2l/NCg85yKUNfBu+Ze7kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMjRkOWZmZTUtMDc3Ny0z MTdmLWJjMzQtZTNiNzUzNzI5OTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqGtgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKyyUaM94fXE7mDgJNVFcDpHHCiq6Q0/DVbqstci7xeHtt3xp3doZtuB RdVB36Ffsa9XwHtzurZ3Zx562yMdseoSLZALgGp88sEAHCKM4dgte2HP6CxkMBhR ZWn0GllIy3xuEEJ145hC71Oxp8SNzbPOLckJK+qDcg+NXDWWVo2ie0WrorqTIoby UxUFiIdJRvO5Y7lWXAPojFKDPpVtgQl1/Gb0XQK1Q/RTFLaXjj4VQq52TxuRcrAI iv6KQfuh0Nxc4SuWuEwLpLGyZzeRjjd8FGkIuSSiHH6HnZNHqU1vvLd5NRlF/w8e /i6OkrFmqJOjVzMQkbVW/eyHBCep2Yk= -----END CERTIFICATE-----Generated at Fri Sep 25 15:26:25 2026 by rpki-client