$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/87d7fdf1-6104-31af-b7e7-145ec462444b.roa File: 87d7fdf1-6104-31af-b7e7-145ec462444b.roa (raw, json) Hash identifier: gMvEQN2Sb+wdGiJOgCTzwN2CpJP/5pkmTmUvwub2j8Y= Subject key identifier: 37:B7:76:90:96:44:12:86:23:1D:00:FF:5F:E2:5E:E0:CC:5D:C6:95 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F0AA22CE0148D5E68CDBE9900 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/87d7fdf1-6104-31af-b7e7-145ec462444b.roa Signing time: Wed 02 Sep 2026 13:00:12 +0000 ROA not before: Wed 02 Sep 2026 13:00:12 +0000 ROA not after: Tue 01 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 158.247.108.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0a:a2:2c:e0:14:8d:5e:68:cd:be:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 2 13:00:12 2026 GMT Not After : Dec 1 14:00:12 2026 GMT Subject: CN=f5529321-fd41-422c-9239-cff18e756a6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a1:99:2b:67:fb:47:08:be:1d:a8:ba:42:bc: 05:46:0d:1c:ff:f9:f4:1e:90:0f:8d:90:a8:90:bb: c4:dc:07:e1:80:f1:d8:c2:0f:12:bf:c5:09:70:2e: c6:f0:e0:2a:76:ba:4d:19:08:69:98:8a:5f:c3:99: 05:8a:4e:c5:cb:e9:d2:08:28:1b:91:e5:9f:e2:61: 60:59:5c:ad:c7:53:44:cb:e4:dc:94:c8:1d:73:b4: a0:b4:48:b8:94:5e:5f:e9:9e:77:09:2c:26:e7:79: 23:a3:e5:56:73:48:37:8e:75:b5:53:db:64:1a:a0: a7:2a:26:98:02:8f:51:ab:54:7d:a0:76:90:7b:1e: 90:2a:d2:f3:75:41:4e:5b:42:30:0d:dd:92:94:18: 4a:cc:44:05:97:1d:82:b8:a9:64:c1:43:1e:a8:14: 6a:4f:78:1b:b0:6d:d8:e6:85:24:86:d9:30:76:4b: 8e:99:13:c2:23:bf:f8:7a:03:8e:1a:26:35:21:a8: 2c:80:d2:07:04:f4:bd:c5:f3:04:ef:b4:61:5a:5e: 78:e7:d0:e3:f9:3d:95:f3:25:f2:e3:01:56:c0:8f: 75:aa:23:85:5e:db:01:98:c0:48:ed:19:a2:09:30: 69:6c:5c:7c:14:79:f7:c9:83:06:e5:67:a8:66:02: a4:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:B7:76:90:96:44:12:86:23:1D:00:FF:5F:E2:5E:E0:CC:5D:C6:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/87d7fdf1-6104-31af-b7e7-145ec462444b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 158.247.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:b5:ca:98:d5:1e:70:5f:4c:83:66:3a:a4:1d:b6:03:f7:1c: b8:33:ab:c6:e3:bd:72:d4:89:8d:90:c7:50:da:6f:ef:55:f3: 47:c1:e5:98:bc:6b:f3:53:45:58:0c:47:09:74:00:21:d7:32: 73:1b:64:2e:d5:df:ae:42:18:61:6e:2b:36:5c:f2:95:cf:0f: fb:17:9f:5d:58:88:6b:2e:ad:24:6b:bd:3e:f8:b2:85:48:23: 55:6c:cc:88:4a:bf:1b:1c:f4:b2:27:19:d5:4e:b7:1f:16:99: 0e:3f:4e:30:59:e1:05:e9:3a:8d:e3:1e:f4:d0:55:f6:fa:3d: eb:44:fa:fa:65:c8:55:dc:85:30:29:d6:f2:0b:7e:cc:7c:eb: f2:6a:ee:94:96:3d:96:7d:ff:e7:22:2d:4f:4d:0a:b7:07:78: d0:f5:9b:fb:20:32:7f:79:7c:3c:41:b4:56:d9:48:8e:eb:a8: 7f:e5:69:0d:13:7a:ed:e2:f9:47:60:8c:5a:35:9f:13:c4:23: 83:55:f7:24:ed:65:d2:75:53:38:b4:45:19:f3:21:5b:b6:d5: 30:58:ed:6f:18:3d:4c:9a:b8:75:eb:16:6e:1c:7c:9b:6c:c3: a7:b2:30:34:d6:37:f7:5c:a1:5a:db:94:48:ac:94:d9:55:65: be:4b:cb:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8KoizgFI1eaM2+mQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwMjEzMDAxMloXDTI2MTIwMTE0MDAxMlowLzEtMCsGA1UEAxMk ZjU1MjkzMjEtZmQ0MS00MjJjLTkyMzktY2ZmMThlNzU2YTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqGZK2f7Rwi+Hai6QrwFRg0c//n0HpAPjZCo kLvE3AfhgPHYwg8Sv8UJcC7G8OAqdrpNGQhpmIpfw5kFik7Fy+nSCCgbkeWf4mFg WVytx1NEy+TclMgdc7SgtEi4lF5f6Z53CSwm53kjo+VWc0g3jnW1U9tkGqCnKiaY Ao9Rq1R9oHaQex6QKtLzdUFOW0IwDd2SlBhKzEQFlx2CuKlkwUMeqBRqT3gbsG3Y 5oUkhtkwdkuOmRPCI7/4egOOGiY1IagsgNIHBPS9xfME77RhWl5459Dj+T2V8yXy 4wFWwI91qiOFXtsBmMBI7RmiCTBpbFx8FHn3yYMG5WeoZgKkPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDe3dpCWRBKGIx0A/1/iXuDMXcaVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvODdkN2ZkZjEtNjEwNC0z MWFmLWI3ZTctMTQ1ZWM0NjI0NDRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnvdsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI21ypjVHnBfTINmOqQdtgP3HLgzq8bjvXLUiY2Qx1Dab+9V80fB5Zi8 a/NTRVgMRwl0ACHXMnMbZC7V365CGGFuKzZc8pXPD/sXn11YiGsurSRrvT74soVI I1VszIhKvxsc9LInGdVOtx8WmQ4/TjBZ4QXpOo3jHvTQVfb6PetE+vplyFXchTAp 1vILfsx86/Jq7pSWPZZ9/+ciLU9NCrcHeND1m/sgMn95fDxBtFbZSI7rqH/laQ0T eu3i+UdgjFo1nxPEI4NV9yTtZdJ1Uzi0RRnzIVu21TBY7W8YPUyauHXrFm4cfJts w6eyMDTWN/dcoVrblEislNlVZb5Ly1M= -----END CERTIFICATE-----Generated at Tue Sep 22 02:00:02 2026 by rpki-client