$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8ec2a157-3584-32e5-81a6-826583bef3c9.roa File: 8ec2a157-3584-32e5-81a6-826583bef3c9.roa (raw, json) Hash identifier: wOxX13vzvxAFqVzf75lS8S+wvuvm80qzcO9/6z/4zEA= Subject key identifier: 16:3D:9A:40:64:DE:F5:1D:76:C3:6A:FD:81:C8:03:52:32:87:24:3E Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F0242152CB402C93B0724D580 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8ec2a157-3584-32e5-81a6-826583bef3c9.roa Signing time: Sun 30 Aug 2026 13:00:11 +0000 ROA not before: Sun 30 Aug 2026 13:00:11 +0000 ROA not after: Sat 28 Nov 2026 14:00:11 +0000 asID: 31898 IP address blocks: 168.107.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:02:42:15:2c:b4:02:c9:3b:07:24:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 30 13:00:11 2026 GMT Not After : Nov 28 14:00:11 2026 GMT Subject: CN=51d22e9f-6f65-49e7-902d-b61ddc7671a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:78:6f:b1:65:d2:91:3a:92:9b:f2:17:da:fe: a9:ce:78:0e:3f:be:6e:61:c7:60:cb:c7:82:c8:75: 98:f4:95:23:1d:57:68:cf:a5:36:1d:59:90:a8:3b: d6:e1:48:b1:51:36:34:0a:4d:7c:a8:91:16:65:43: fe:a4:ca:b3:09:69:db:b2:1c:e2:10:c6:d6:e7:20: 83:11:26:b9:69:3d:6e:2f:86:63:67:75:2b:c0:f3: c6:0d:f7:8b:23:66:ef:c0:a2:85:84:12:4f:13:c8: ab:6c:29:bc:b6:17:6c:8e:25:c1:54:ee:40:a6:69: d4:45:f3:77:22:32:75:9b:c7:e0:6a:5d:6a:26:04: af:8f:ed:35:32:2b:5e:ce:db:72:e6:b4:df:74:67: b5:26:32:36:df:8f:07:98:87:a8:c6:6c:ca:d0:9b: 63:79:d7:5c:bf:46:79:83:e1:d5:49:64:00:51:cb: d5:f3:69:12:cc:9e:b8:88:e8:9a:85:29:51:a2:6c: a0:82:ff:da:d0:aa:cc:8b:c3:6d:ec:5b:f8:d5:92: 8a:17:0f:45:01:3b:76:15:54:89:bf:07:c6:3c:c3: a1:a2:2f:a6:91:27:1a:df:cd:ff:3c:60:b7:02:3a: 9f:13:e6:3d:bd:3e:b7:ca:26:3d:bb:5f:2e:0c:65: 0a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:3D:9A:40:64:DE:F5:1D:76:C3:6A:FD:81:C8:03:52:32:87:24:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8ec2a157-3584-32e5-81a6-826583bef3c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.107.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:09:28:21:1c:f5:bd:97:d8:75:34:b0:3b:01:b8:f4:5b:f9: 70:c0:3c:15:42:c7:2c:49:e8:4e:eb:aa:90:2b:28:9e:25:4a: 69:30:0a:13:39:2a:dc:19:5e:d9:2b:e5:3e:60:e3:dc:db:fd: 64:fd:f6:1f:c6:e1:34:85:9b:53:8d:35:d2:e0:fb:23:e6:f6: a3:d2:e7:fd:2d:cb:58:64:cd:d4:54:f1:54:12:0f:8a:31:9e: d4:ec:31:c3:e6:1a:89:3f:e6:12:18:9e:be:88:95:19:04:75: fb:7d:fe:32:81:22:dc:01:05:eb:1c:88:16:b5:4d:ee:70:e7: 07:5f:6e:c5:2d:27:96:0a:d5:3f:c8:fa:1a:b8:5b:7c:3d:21: cf:49:b3:0b:a4:1a:f5:1a:46:04:d2:33:38:ea:6e:ba:a2:fb: fd:e0:b0:7d:36:50:e8:14:60:10:62:14:d6:29:75:1c:b2:2f: 3f:93:c8:7d:3f:b5:51:f0:7e:ef:f3:f8:6e:78:31:99:f9:bc: b9:54:05:a3:e3:7f:d9:20:13:a3:ea:cb:61:fc:91:6c:78:36: 24:e0:b4:33:c1:ab:87:3a:84:22:da:c2:75:a2:59:50:24:6b: be:26:6c:20:02:15:ba:c1:6d:ce:99:d3:e6:09:3f:85:80:07: 68:03:6f:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8CQhUstALJOwck1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk NTFkMjJlOWYtNmY2NS00OWU3LTkwMmQtYjYxZGRjNzY3MWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3hvsWXSkTqSm/IX2v6pzngOP75uYcdgy8eC yHWY9JUjHVdoz6U2HVmQqDvW4UixUTY0Ck18qJEWZUP+pMqzCWnbshziEMbW5yCD ESa5aT1uL4ZjZ3UrwPPGDfeLI2bvwKKFhBJPE8irbCm8thdsjiXBVO5ApmnURfN3 IjJ1m8fgal1qJgSvj+01Miteztty5rTfdGe1JjI2348HmIeoxmzK0Jtjeddcv0Z5 g+HVSWQAUcvV82kSzJ64iOiahSlRomyggv/a0KrMi8Nt7Fv41ZKKFw9FATt2FVSJ vwfGPMOhoi+mkSca383/PGC3AjqfE+Y9vT63yiY9u18uDGUKHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBY9mkBk3vUddsNq/YHIA1IyhyQ+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOGVjMmExNTctMzU4NC0z MmU1LTgxYTYtODI2NTgzYmVmM2M5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGqGsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ4JKCEc9b2X2HU0sDsBuPRb+XDAPBVCxyxJ6E7rqpArKJ4lSmkwChM5 KtwZXtkr5T5g49zb/WT99h/G4TSFm1ONNdLg+yPm9qPS5/0ty1hkzdRU8VQSD4ox ntTsMcPmGok/5hIYnr6IlRkEdft9/jKBItwBBesciBa1Te5w5wdfbsUtJ5YK1T/I +hq4W3w9Ic9JswukGvUaRgTSMzjqbrqi+/3gsH02UOgUYBBiFNYpdRyyLz+TyH0/ tVHwfu/z+G54MZn5vLlUBaPjf9kgE6Pqy2H8kWx4NiTgtDPBq4c6hCLawnWiWVAk a74mbCACFbrBbc6Z0+YJP4WAB2gDb0Q= -----END CERTIFICATE-----Generated at Tue Sep 22 16:52:15 2026 by rpki-client