$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7230b9df-df50-359c-bef2-321ecabda9e0.roa File: 7230b9df-df50-359c-bef2-321ecabda9e0.roa (raw, json) Hash identifier: 6Cmd6EAY7MeNAbAPX2cvyxk6BMVqff/YlefitI9t3M4= Subject key identifier: FF:56:2D:4D:AA:5C:B5:DE:9E:F9:9C:BD:C8:C9:C3:20:63:20:E4:29 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F20F7D184EEA263FA0314A900 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7230b9df-df50-359c-bef2-321ecabda9e0.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 168.107.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:d1:84:ee:a2:63:fa:03:14:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=7e167d69-a81c-48b5-acc4-264f47aa7352 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:f9:33:60:6a:a6:95:5e:fa:71:88:9e:2f:27: ee:4b:ea:aa:73:0a:b9:77:21:1e:e7:15:61:77:07: 3d:c9:f9:b4:42:cc:45:45:ab:f9:90:c6:e0:31:a0: 05:3a:b6:43:5a:e9:7a:bf:12:6d:22:db:23:76:a3: cb:7a:80:b6:bd:19:c8:9a:c8:45:ba:22:4b:d9:5a: 4c:d8:0c:25:60:dc:c3:7c:52:81:24:73:13:26:e1: 1e:29:ae:f9:c4:9a:db:63:28:76:39:b7:1d:69:dc: 19:06:4b:b0:74:67:ec:90:50:cd:42:8b:01:95:ab: b4:c1:28:47:08:de:0c:c9:b3:8a:7b:00:d4:af:fa: a2:9b:a0:0e:5c:91:89:75:b3:d0:9a:82:63:a2:b4: 67:94:8b:6b:f5:bd:a1:4d:17:f3:22:52:e2:5a:3b: 91:05:12:d5:e1:96:f3:bb:ee:7a:ea:43:59:b7:05: ae:25:5e:7a:51:54:2a:a4:40:ba:fe:0d:3b:99:72: 03:4c:9f:f3:55:fe:0b:c4:b5:65:4a:3d:a1:d1:d3: 75:95:01:88:a1:bf:ab:7f:42:ca:b1:a0:b8:10:64: 1e:6e:41:6d:54:cb:fd:01:0f:75:67:15:16:d3:de: 37:a6:b9:57:0e:0c:45:cd:15:39:4e:e3:f7:4b:dd: 57:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:56:2D:4D:AA:5C:B5:DE:9E:F9:9C:BD:C8:C9:C3:20:63:20:E4:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7230b9df-df50-359c-bef2-321ecabda9e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.107.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:ea:9c:91:0e:4e:e9:ad:e2:7d:56:f1:52:3f:35:15:68:47: 1e:c2:44:00:a5:62:8d:ab:b9:26:0d:17:d4:cc:88:43:91:4d: b0:41:67:81:fb:fc:64:fc:bf:a0:cf:08:88:b9:c5:d0:14:32: a4:31:26:4c:32:86:a3:8a:e6:d5:0a:58:c3:da:31:f8:64:26: f6:70:7d:95:55:28:d9:e9:e2:9f:fc:34:1d:7e:c9:f7:92:b0: 3c:69:e7:5d:a1:6d:e6:b3:2f:7e:63:2b:3e:98:a3:7e:fd:46: 1f:e5:6b:ac:ec:29:89:c6:4e:8e:dc:8f:24:96:7c:4b:d8:de: 60:69:69:79:6c:08:28:22:56:5f:b4:32:81:d5:df:7e:87:13: e5:b2:0b:3a:62:18:36:28:e3:f2:25:44:d8:3e:c7:58:ba:e2: 7e:52:3a:71:55:ed:1b:82:ec:c2:10:bb:c2:38:4e:6c:25:59: 87:11:9f:3f:a5:9f:c3:b4:0d:a1:00:7a:87:dc:e2:82:63:b6: e4:85:f6:97:c8:f2:a0:bc:70:d7:86:dd:dd:6e:40:f6:e2:4d: 9a:81:f3:d3:12:b3:5f:c1:09:5e:0a:f2:9e:5b:80:33:e2:a6: 34:64:04:fc:13:2f:43:14:56:1f:64:94:14:12:07:95:ce:a0: b5:35:31:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g99GE7qJj+gMUqQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk N2UxNjdkNjktYTgxYy00OGI1LWFjYzQtMjY0ZjQ3YWE3MzUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPkzYGqmlV76cYieLyfuS+qqcwq5dyEe5xVh dwc9yfm0QsxFRav5kMbgMaAFOrZDWul6vxJtItsjdqPLeoC2vRnImshFuiJL2VpM 2AwlYNzDfFKBJHMTJuEeKa75xJrbYyh2ObcdadwZBkuwdGfskFDNQosBlau0wShH CN4MybOKewDUr/qim6AOXJGJdbPQmoJjorRnlItr9b2hTRfzIlLiWjuRBRLV4Zbz u+566kNZtwWuJV56UVQqpEC6/g07mXIDTJ/zVf4LxLVlSj2h0dN1lQGIob+rf0LK saC4EGQebkFtVMv9AQ91ZxUW0943prlXDgxFzRU5TuP3S91X9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP9WLU2qXLXenvmcvcjJwyBjIOQpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNzIzMGI5ZGYtZGY1MC0z NTljLWJlZjItMzIxZWNhYmRhOWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqGvlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFDqnJEOTumt4n1W8VI/NRVoRx7CRAClYo2ruSYNF9TMiEORTbBBZ4H7 /GT8v6DPCIi5xdAUMqQxJkwyhqOK5tUKWMPaMfhkJvZwfZVVKNnp4p/8NB1+yfeS sDxp512hbeazL35jKz6Yo379Rh/la6zsKYnGTo7cjySWfEvY3mBpaXlsCCgiVl+0 MoHV336HE+WyCzpiGDYo4/IlRNg+x1i64n5SOnFV7RuC7MIQu8I4TmwlWYcRnz+l n8O0DaEAeofc4oJjtuSF9pfI8qC8cNeG3d1uQPbiTZqB89MSs1/BCV4K8p5bgDPi pjRkBPwTL0MUVh9klBQSB5XOoLU1MVs= -----END CERTIFICATE-----Generated at Fri Sep 25 09:03:25 2026 by rpki-client