$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3651f220-6b03-3e15-a101-139beaa52674.roa File: 3651f220-6b03-3e15-a101-139beaa52674.roa (raw, json) Hash identifier: hkAk43mTrNB6kCSH+QRNRT8RzTc8mJpQxOE/hVNuit8= Subject key identifier: 64:95:B9:19:51:F4:85:FE:E3:FD:8E:A9:05:A2:64:C9:56:78:42:BA Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F20F7B16BB95657B5E611FBAC Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3651f220-6b03-3e15-a101-139beaa52674.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 157.151.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:b1:6b:b9:56:57:b5:e6:11:fb:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=9a62ffe0-ef77-41bf-b3d4-a9c58e8d80df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:18:dc:7b:ee:ef:15:08:bf:12:ee:aa:a0:fe: b5:ff:9b:17:3c:f6:b2:f5:af:20:53:d0:33:10:c6: c9:58:f4:c5:ac:cc:c7:bd:34:84:c9:66:25:35:48: d2:35:52:51:5f:20:b9:cc:6b:1a:93:32:34:30:8c: 30:2d:58:69:43:27:5e:bc:46:9e:84:5a:18:1b:30: 2e:f4:6b:81:ef:0e:e9:a3:f0:c9:13:4f:04:dc:7a: 38:64:c0:34:7b:e6:82:88:1e:24:d4:32:7e:f3:11: 77:8f:f1:e1:c4:3a:86:5a:15:93:a9:b1:dc:29:59: 43:a8:82:1a:a4:bd:21:03:52:31:10:bc:8a:1b:a4: 7e:49:32:50:b4:45:85:16:bc:81:3f:53:25:c3:e3: 66:ae:96:b5:4c:f8:cd:dd:be:88:43:ab:ce:6f:13: 68:7b:28:d6:5d:ed:b2:f4:e6:fe:39:10:61:4e:e4: cb:dd:f9:25:75:f7:62:87:1c:e5:11:c2:10:8a:e0: c0:4c:de:3d:4f:82:36:98:be:31:66:0b:de:63:2b: 30:0e:e7:3b:66:46:5b:7b:71:4b:73:80:c4:cd:b2: a8:66:87:c8:48:66:05:6b:82:df:bf:a3:73:5f:4b: 24:ca:0f:0e:04:d6:b0:bf:42:32:cf:e0:da:da:64: 69:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:95:B9:19:51:F4:85:FE:E3:FD:8E:A9:05:A2:64:C9:56:78:42:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3651f220-6b03-3e15-a101-139beaa52674.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 157.151.54.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:26:10:43:fe:b1:70:96:d4:c7:5c:6a:ac:11:1d:3c:71:1a: 8f:e0:3a:f5:7c:33:46:7d:4e:3b:14:56:8b:cf:c9:c3:c8:72: 53:9b:8b:3b:9f:8f:cf:a9:ca:fe:0b:c0:65:c2:8e:01:3b:bc: 13:9a:b6:6f:9d:4b:57:51:47:c9:1a:16:e8:82:d3:49:43:00: 23:f1:0d:45:74:a1:9b:1e:ef:bf:be:4f:b6:28:58:6b:7b:c6: a0:ef:a8:79:57:38:a7:b1:78:d0:d7:64:3c:43:6b:c4:36:be: 46:55:f4:08:72:f9:b7:66:60:4f:6a:3d:f0:2c:4f:25:d6:2c: ff:87:1c:4c:d7:b6:58:ef:7c:1a:7d:fb:8c:f7:32:af:58:dd: 00:bd:4f:38:2d:3f:ff:4d:94:21:f1:f6:e7:70:3d:f3:62:34: 47:ec:0e:7f:4b:75:58:71:8b:f8:26:47:e3:15:e6:96:94:2b: 3a:35:26:95:08:6e:f3:06:43:e4:9b:6d:45:f6:12:56:71:f0: 11:50:11:ac:3c:49:2a:58:04:50:3d:c4:20:cd:4d:a6:79:81: f7:8e:27:00:5f:17:10:3a:9f:71:c7:ab:4f:a6:bf:0e:4b:e6: c8:b9:73:b0:fb:6f:47:08:ab:0e:9c:d7:40:1d:33:af:b1:9f: e3:17:62:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g97FruVZXteYR+6wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk OWE2MmZmZTAtZWY3Ny00MWJmLWIzZDQtYTljNThlOGQ4MGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBjce+7vFQi/Eu6qoP61/5sXPPay9a8gU9Az EMbJWPTFrMzHvTSEyWYlNUjSNVJRXyC5zGsakzI0MIwwLVhpQydevEaehFoYGzAu 9GuB7w7po/DJE08E3Ho4ZMA0e+aCiB4k1DJ+8xF3j/HhxDqGWhWTqbHcKVlDqIIa pL0hA1IxELyKG6R+STJQtEWFFryBP1Mlw+Nmrpa1TPjN3b6IQ6vObxNoeyjWXe2y 9Ob+ORBhTuTL3fkldfdihxzlEcIQiuDATN49T4I2mL4xZgveYyswDuc7ZkZbe3FL c4DEzbKoZofISGYFa4Lfv6NzX0skyg8OBNawv0Iyz+Da2mRpPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGSVuRlR9IX+4/2OqQWiZMlWeEK6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMzY1MWYyMjAtNmIwMy0z ZTE1LWExMDEtMTM5YmVhYTUyNjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnZc2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF4mEEP+sXCW1MdcaqwRHTxxGo/gOvV8M0Z9TjsUVovPycPIclObizuf j8+pyv4LwGXCjgE7vBOatm+dS1dRR8kaFuiC00lDACPxDUV0oZse77++T7YoWGt7 xqDvqHlXOKexeNDXZDxDa8Q2vkZV9Ahy+bdmYE9qPfAsTyXWLP+HHEzXtljvfBp9 +4z3Mq9Y3QC9TzgtP/9NlCHx9udwPfNiNEfsDn9LdVhxi/gmR+MV5paUKzo1JpUI bvMGQ+SbbUX2ElZx8BFQEaw8SSpYBFA9xCDNTaZ5gfeOJwBfFxA6n3HHq0+mvw5L 5si5c7D7b0cIqw6c10AdM6+xn+MXYj8= -----END CERTIFICATE-----Generated at Mon Sep 28 06:14:16 2026 by rpki-client