$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4ffb6ce6-425b-3140-9cfc-39eb6d257905.roa File: 4ffb6ce6-425b-3140-9cfc-39eb6d257905.roa (raw, json) Hash identifier: 5+puidmfbaTqKhbv893sRwV8qDc7ITctw2aR1blmPeM= Subject key identifier: 02:59:26:AC:56:A3:AB:B7:65:19:94:85:EC:DD:FF:E6:A6:E4:6D:B6 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F20F7CBC7CC4661DED255402C Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4ffb6ce6-425b-3140-9cfc-39eb6d257905.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 168.107.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:cb:c7:cc:46:61:de:d2:55:40:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=125c859f-44b3-4957-854d-a432d429e308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:44:9a:98:9d:96:13:12:1a:12:12:05:3f:27: 8f:eb:f0:8b:f0:09:53:7a:5e:bb:0b:91:86:1a:72: 82:5d:bc:d8:a4:0a:a7:d7:8c:ce:a1:37:31:ab:ce: 4e:06:53:17:be:b2:07:90:6c:92:61:01:dd:4d:b5: 2f:03:f6:89:c2:11:8e:1a:af:5a:44:b5:bc:a8:76: ca:a3:6c:d7:09:48:4f:30:b2:68:15:28:a6:60:23: 62:b8:e2:e9:68:39:5d:93:66:92:04:4d:6d:88:e5: 6d:75:a4:24:ce:21:58:0d:97:72:d2:71:9a:46:46: b1:5c:73:f1:34:b9:fb:95:b4:fb:11:ad:1e:a7:8a: c2:4f:26:56:41:f6:a3:13:38:74:61:f0:96:7e:a6: fb:bd:5d:a4:7a:a7:16:8d:4f:04:44:8d:b5:fe:6b: cb:f1:b6:da:cf:e1:09:2f:4a:46:d1:4a:0a:7d:2e: 7a:49:9b:62:99:22:aa:c3:fa:fa:f5:b4:c0:57:83: 8c:50:17:21:e5:0c:45:c9:cc:3b:90:27:38:42:00: 18:de:15:8e:21:0f:9b:0d:ca:41:0e:73:60:01:04: 05:1c:ba:73:a6:12:e9:36:3f:fd:4b:ed:2b:90:b3: fa:0d:9e:2f:66:b4:59:94:73:61:76:1a:e6:9d:70: f5:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:59:26:AC:56:A3:AB:B7:65:19:94:85:EC:DD:FF:E6:A6:E4:6D:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4ffb6ce6-425b-3140-9cfc-39eb6d257905.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.107.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:0b:92:49:19:17:79:2f:20:b0:c2:f4:5d:5d:bd:b8:90:54: 3e:a5:7b:9f:3e:ff:3a:fa:41:68:52:00:91:96:8b:8d:aa:c2: 7f:3c:8b:ea:e5:4c:97:c2:80:72:90:ea:27:6b:1d:49:2a:56: b6:72:f7:92:ad:12:d4:d3:fd:a7:97:b9:32:24:c7:09:5e:71: 70:b7:9b:66:76:c5:90:03:3d:66:c3:7c:d8:3c:6e:2f:7c:6c: 02:5d:96:22:a1:a1:0d:a5:8e:62:61:74:1c:a9:35:21:c4:f4: a9:90:cb:7f:bb:ca:2d:48:cb:7b:e0:4b:54:68:c5:72:b7:af: e6:62:fc:58:c0:ff:1d:22:18:fe:a5:b3:99:18:d7:8b:a8:c8: fa:2f:da:01:60:5f:0d:11:96:05:65:e6:e5:38:6b:00:a6:4d: 9a:48:cc:54:b2:6d:8f:d7:52:fd:65:3f:ef:07:17:c7:8d:9a: d3:7c:60:dd:f7:c6:c2:6a:90:83:82:18:9f:12:c7:37:85:c3: fd:b3:db:51:a8:21:56:ed:d1:ec:da:5a:eb:f1:2a:ea:78:6c: 9e:cd:ef:66:25:bd:66:85:e7:ca:b1:f4:2b:a9:19:2f:38:54: ee:51:20:4e:37:7f:a8:82:8b:19:3c:80:39:da:4b:c5:e4:a7: 8a:d7:e4:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g98vHzEZh3tJVQCwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk MTI1Yzg1OWYtNDRiMy00OTU3LTg1NGQtYTQzMmQ0MjllMzA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkSamJ2WExIaEhIFPyeP6/CL8AlTel67C5GG GnKCXbzYpAqn14zOoTcxq85OBlMXvrIHkGySYQHdTbUvA/aJwhGOGq9aRLW8qHbK o2zXCUhPMLJoFSimYCNiuOLpaDldk2aSBE1tiOVtdaQkziFYDZdy0nGaRkaxXHPx NLn7lbT7Ea0ep4rCTyZWQfajEzh0YfCWfqb7vV2keqcWjU8ERI21/mvL8bbaz+EJ L0pG0UoKfS56SZtimSKqw/r69bTAV4OMUBch5QxFycw7kCc4QgAY3hWOIQ+bDcpB DnNgAQQFHLpzphLpNj/9S+0rkLP6DZ4vZrRZlHNhdhrmnXD1+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAJZJqxWo6u3ZRmUhezd/+am5G22MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNGZmYjZjZTYtNDI1Yi0z MTQwLTljZmMtMzllYjZkMjU3OTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqGvhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADULkkkZF3kvILDC9F1dvbiQVD6le58+/zr6QWhSAJGWi42qwn88i+rl TJfCgHKQ6idrHUkqVrZy95KtEtTT/aeXuTIkxwlecXC3m2Z2xZADPWbDfNg8bi98 bAJdliKhoQ2ljmJhdBypNSHE9KmQy3+7yi1Iy3vgS1RoxXK3r+Zi/FjA/x0iGP6l s5kY14uoyPov2gFgXw0RlgVl5uU4awCmTZpIzFSybY/XUv1lP+8HF8eNmtN8YN33 xsJqkIOCGJ8SxzeFw/2z21GoIVbt0ezaWuvxKup4bJ7N72YlvWaF58qx9CupGS84 VO5RIE43f6iCixk8gDnaS8Xkp4rX5EM= -----END CERTIFICATE-----Generated at Tue Sep 22 14:05:30 2026 by rpki-client