$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6c6956da-5a56-346a-a9db-6eeb4c439a78.roa File: 6c6956da-5a56-346a-a9db-6eeb4c439a78.roa (raw, json) Hash identifier: FEPqnVl8/bjkehpN/LCk/TQPkkIdW6p2y1O/tFKWnJc= Subject key identifier: F5:6B:5C:06:FC:EB:EB:41:BD:E4:B6:2F:F8:D9:50:80:E5:21:F0:19 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F0AA234836370C0D4563157DE Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6c6956da-5a56-346a-a9db-6eeb4c439a78.roa Signing time: Wed 02 Sep 2026 13:00:12 +0000 ROA not before: Wed 02 Sep 2026 13:00:12 +0000 ROA not after: Tue 01 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 158.247.114.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0a:a2:34:83:63:70:c0:d4:56:31:57:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 2 13:00:12 2026 GMT Not After : Dec 1 14:00:12 2026 GMT Subject: CN=64d00aad-4994-44f1-9853-c6c5202faefb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:aa:c4:2d:9a:42:d8:cf:bf:72:ba:cf:15:64: 61:82:33:2b:b3:97:67:81:d2:88:9f:5f:9f:76:9c: 70:2e:a0:26:b5:e8:80:93:d7:38:48:3c:43:35:c0: 7c:8c:a7:54:f1:9f:95:d8:f1:16:02:9e:d0:72:b5: 17:e9:d4:1d:92:e7:30:63:5a:f0:72:83:e5:8d:f0: a2:74:d5:7c:f4:43:8a:3f:4c:e0:5a:a6:8d:9c:a5: a8:27:95:c5:fc:3e:89:ef:ee:1e:25:c4:a0:dd:4c: 3d:2e:95:05:a0:79:cd:73:d4:e7:66:0a:7d:33:2d: 5c:36:38:8d:da:6c:6c:93:af:1c:83:05:d2:39:a8: f5:d1:8d:34:1b:24:c7:89:09:49:c4:3a:41:7f:bc: 51:ac:0c:61:4d:17:be:0a:16:24:b8:41:2e:8e:3c: 50:70:d8:ef:8d:1d:ce:51:13:85:95:e4:1c:c1:b8: 7e:b2:f2:80:dd:31:9b:f2:f9:74:3f:2f:45:3f:d8: fe:f5:c9:a2:d9:2b:d0:6a:13:2e:06:dd:a0:6d:b0: bd:3b:41:0d:71:8c:64:78:5a:43:ce:0e:5c:fd:3d: 07:df:f0:20:15:9a:20:0c:88:bc:5e:aa:94:ef:a1: a5:5d:97:6e:18:db:e8:ee:c2:10:a6:a1:76:a5:12: c0:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:6B:5C:06:FC:EB:EB:41:BD:E4:B6:2F:F8:D9:50:80:E5:21:F0:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6c6956da-5a56-346a-a9db-6eeb4c439a78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 158.247.114.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:0e:9a:32:e9:76:8e:e0:84:3a:e5:63:05:1d:43:b3:cb:b4: 2e:c7:6b:87:82:30:52:5a:22:49:d9:23:fb:78:ba:e1:6a:73: 51:39:42:11:89:11:bd:d6:3d:fd:95:ae:8b:74:2b:79:d6:0d: 75:53:06:2d:fa:7f:98:2a:8b:e5:af:74:c9:7c:8d:40:54:2c: 2a:d8:70:54:9d:9c:c9:e9:4a:fc:3b:54:63:ff:6e:14:4f:f7: ab:9c:89:2e:4d:a5:79:94:85:15:7f:b8:ed:c7:91:4a:ed:9e: 71:e3:fd:20:5c:77:6b:f6:00:f3:38:f4:91:a3:58:05:a5:c2: 63:c2:e3:37:40:d7:dd:7d:e7:f7:69:89:03:9f:de:63:f0:cc: b2:f6:ea:ca:20:b3:21:b8:bd:d0:ac:9d:de:f6:02:4a:28:69: bb:0e:d4:e9:ef:54:95:a3:f8:ee:13:f1:5a:14:ae:29:a1:fc: 06:9a:c3:e5:d2:0d:9a:15:84:71:39:c3:e5:c5:f2:21:30:0a: 93:af:9d:ed:39:79:d7:ed:93:00:85:43:a2:bf:ee:6b:26:f0: d2:3c:8e:8c:bf:00:2d:b0:86:e1:59:65:bf:cb:2c:09:fa:b8: 43:a3:a2:d0:c4:1e:8a:74:35:0a:0e:af:eb:f2:40:20:a3:10: 00:37:34:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8KojSDY3DA1FYxV94wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwMjEzMDAxMloXDTI2MTIwMTE0MDAxMlowLzEtMCsGA1UEAxMk NjRkMDBhYWQtNDk5NC00NGYxLTk4NTMtYzZjNTIwMmZhZWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqrELZpC2M+/crrPFWRhgjMrs5dngdKIn1+f dpxwLqAmteiAk9c4SDxDNcB8jKdU8Z+V2PEWAp7QcrUX6dQdkucwY1rwcoPljfCi dNV89EOKP0zgWqaNnKWoJ5XF/D6J7+4eJcSg3Uw9LpUFoHnNc9TnZgp9My1cNjiN 2mxsk68cgwXSOaj10Y00GyTHiQlJxDpBf7xRrAxhTRe+ChYkuEEujjxQcNjvjR3O UROFleQcwbh+svKA3TGb8vl0Py9FP9j+9cmi2SvQahMuBt2gbbC9O0ENcYxkeFpD zg5c/T0H3/AgFZogDIi8XqqU76GlXZduGNvo7sIQpqF2pRLA7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPVrXAb86+tBveS2L/jZUIDlIfAZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNmM2OTU2ZGEtNWE1Ni0z NDZhLWE5ZGItNmVlYjRjNDM5YTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnvdyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADsOmjLpdo7ghDrlYwUdQ7PLtC7Ha4eCMFJaIknZI/t4uuFqc1E5QhGJ Eb3WPf2Vrot0K3nWDXVTBi36f5gqi+WvdMl8jUBULCrYcFSdnMnpSvw7VGP/bhRP 96uciS5NpXmUhRV/uO3HkUrtnnHj/SBcd2v2APM49JGjWAWlwmPC4zdA19195/dp iQOf3mPwzLL26sogsyG4vdCsnd72AkooabsO1OnvVJWj+O4T8VoUrimh/Aaaw+XS DZoVhHE5w+XF8iEwCpOvne05edftkwCFQ6K/7msm8NI8joy/AC2whuFZZb/LLAn6 uEOjotDEHop0NQoOr+vyQCCjEAA3NN4= -----END CERTIFICATE-----Generated at Mon Sep 21 20:34:07 2026 by rpki-client