$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/85f66ffa-9abe-38ec-8520-6eefb8bb4c77.roa File: 85f66ffa-9abe-38ec-8520-6eefb8bb4c77.roa (raw, json) Hash identifier: mXLYTK3zRcaODUUbFy4N5vz5Wzl4HjEh2qZHDazZhw0= Subject key identifier: 90:A6:86:EC:7C:2A:95:4B:43:F0:44:84:C0:8F:2E:AC:17:06:6F:78 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F498C1BEEA99CECC76EEBC940 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/85f66ffa-9abe-38ec-8520-6eefb8bb4c77.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 54253 IP address blocks: 151.104.152.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8c:1b:ee:a9:9c:ec:c7:6e:eb:c9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4b86edf1-222d-43e8-80a6-208c566255af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:bb:59:c7:31:65:72:bb:c6:17:13:50:69:70: 4b:b4:7e:74:eb:d9:f2:cc:df:7e:7d:f6:2c:df:db: 42:32:ea:81:a7:3c:73:2b:7e:f4:cd:68:28:4e:78: 24:40:f7:d2:9b:30:82:3b:c6:db:2a:28:c8:13:46: 99:70:49:12:9b:c5:b1:38:43:ed:50:6a:36:66:b8: 4c:a1:39:ef:f6:81:a0:8e:07:f4:15:cd:04:1d:1f: 39:a6:2c:9b:9b:7f:55:4c:22:81:31:6e:79:01:f6: c0:0d:5d:4e:85:ec:4f:d7:3a:8d:e5:f9:49:5d:01: 5d:ed:48:25:82:8b:be:c2:8a:c2:73:6a:f1:3a:0e: 46:69:36:c2:dc:69:4c:3a:25:f9:31:67:43:5c:1c: 86:dc:88:c1:5a:b9:1b:1b:4c:c2:96:64:08:5d:01: 09:4d:cb:ea:eb:96:de:f4:9b:3c:74:fe:21:91:62: cb:a0:90:c1:6f:b0:f2:eb:9a:28:b8:46:81:26:a2: 3b:96:fb:5e:83:11:92:35:08:02:ec:4e:70:55:67: e0:27:a4:f5:3b:a3:5e:b5:32:9a:e3:21:82:91:1a: 19:cc:f7:17:5e:c4:b5:c5:97:61:6e:80:df:db:43: e2:3f:d9:42:19:b9:8f:d9:05:48:12:c0:1b:a2:9e: 7d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:A6:86:EC:7C:2A:95:4B:43:F0:44:84:C0:8F:2E:AC:17:06:6F:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/85f66ffa-9abe-38ec-8520-6eefb8bb4c77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 151.104.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:52:e0:99:48:80:58:ea:83:d0:61:a6:29:92:48:7d:17:c0: e8:6c:3d:6f:79:fc:4a:d0:d5:8f:88:08:39:ae:ef:e6:68:3b: 0b:a3:30:c6:8f:45:a2:7f:50:0c:39:f5:f0:eb:8f:41:cf:33: e0:96:a1:67:45:e3:d6:de:d8:49:81:6d:2c:b1:cc:70:35:72: f8:49:0d:c7:f5:c7:19:43:5f:f6:48:a3:77:41:ba:a1:93:e2: c9:e1:e5:92:cd:24:f0:a5:4d:e3:34:f6:1e:4c:da:4d:8a:0f: 9e:44:82:40:de:71:7c:69:ab:79:2f:72:88:6d:1b:3a:54:4f: f9:d6:3d:34:66:ba:db:d1:90:c1:5a:90:17:3e:50:84:51:39: 0a:0d:17:77:dd:f0:f4:25:4a:b0:db:12:3f:fc:cd:19:33:22: 8c:5b:03:78:bb:65:e3:fe:2e:a9:46:98:5a:8c:f2:12:54:84: 5f:d6:70:f7:0a:18:50:91:16:a1:fe:2d:9b:30:de:56:b1:c0: 50:c3:a1:0a:13:62:9a:ff:bc:20:35:6e:20:b6:fd:cf:52:46: 76:1e:63:fb:5a:2c:bc:c9:43:fd:b1:e3:99:5f:1d:38:fd:f0: ab:07:2e:5b:b8:21:04:2c:c7:61:8d:3f:40:ce:88:37:ca:88: 18:d0:b3:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JjBvuqZzsx27ryUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NGI4NmVkZjEtMjIyZC00M2U4LTgwYTYtMjA4YzU2NjI1NWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLtZxzFlcrvGFxNQaXBLtH5069nyzN9+ffYs 39tCMuqBpzxzK370zWgoTngkQPfSmzCCO8bbKijIE0aZcEkSm8WxOEPtUGo2ZrhM oTnv9oGgjgf0Fc0EHR85piybm39VTCKBMW55AfbADV1OhexP1zqN5flJXQFd7Ugl gou+worCc2rxOg5GaTbC3GlMOiX5MWdDXByG3IjBWrkbG0zClmQIXQEJTcvq65be 9Js8dP4hkWLLoJDBb7Dy65oouEaBJqI7lvtegxGSNQgC7E5wVWfgJ6T1O6NetTKa 4yGCkRoZzPcXXsS1xZdhboDf20PiP9lCGbmP2QVIEsAbop59vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJCmhux8KpVLQ/BEhMCPLqwXBm94MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvODVmNjZmZmEtOWFiZS0z OGVjLTg1MjAtNmVlZmI4YmI0Yzc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBl2iYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI9S4JlIgFjqg9BhpimSSH0XwOhsPW95/ErQ1Y+ICDmu7+ZoOwujMMaP RaJ/UAw59fDrj0HPM+CWoWdF49be2EmBbSyxzHA1cvhJDcf1xxlDX/ZIo3dBuqGT 4snh5ZLNJPClTeM09h5M2k2KD55EgkDecXxpq3kvcohtGzpUT/nWPTRmutvRkMFa kBc+UIRROQoNF3fd8PQlSrDbEj/8zRkzIoxbA3i7ZeP+LqlGmFqM8hJUhF/WcPcK GFCRFqH+LZsw3laxwFDDoQoTYpr/vCA1biC2/c9SRnYeY/taLLzJQ/2x45lfHTj9 8KsHLlu4IQQsx2GNP0DOiDfKiBjQs1E= -----END CERTIFICATE-----Generated at Sun Sep 27 05:24:57 2026 by rpki-client