$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8ef1a1c2-3f6b-3344-94c4-536166e03a1e.roa File: 8ef1a1c2-3f6b-3344-94c4-536166e03a1e.roa (raw, json) Hash identifier: 5zKtjchtakFGX9VMAIpB5BS33nmiPeOUYVC8B2UNd0k= Subject key identifier: 4F:49:5D:2C:49:FD:85:26:1D:2E:57:A4:D8:86:E9:CD:0E:65:BE:EF Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584EA78FE341BADC17A053544C30 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8ef1a1c2-3f6b-3344-94c4-536166e03a1e.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 31898 IP address blocks: 157.137.108.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8f:e3:41:ba:dc:17:a0:53:54:4c:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=0ab6f31b-19cc-4d89-94a3-f5886aa60380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:9a:63:ce:b1:61:81:cd:7c:ba:1b:07:3e:b3: c2:8d:13:35:8a:e1:74:cf:ab:71:2e:0e:a6:90:c0: ec:2e:ad:70:51:e0:b4:4c:9d:2b:96:f3:5f:c6:53: 2d:91:36:aa:48:8c:a1:e1:28:f8:5d:85:99:77:04: da:df:27:10:2f:17:62:ae:60:31:ad:6b:b3:6f:9c: 7a:55:c9:02:8d:f7:47:00:96:f7:85:59:87:2e:e4: 1b:b3:b8:64:86:a8:e6:55:44:e9:1a:81:88:3c:c3: b5:02:9b:6d:73:21:04:b6:77:f5:c5:59:ee:68:61: db:14:dc:8b:84:1d:83:13:88:9b:1c:3f:91:f3:d5: 41:dc:33:19:7f:61:16:c8:15:71:55:e0:92:fc:50: ba:19:f3:4b:3d:83:13:66:a2:2c:b1:c7:32:97:13: 41:ad:d9:e6:38:12:0d:01:40:e1:36:89:cc:ab:95: 7f:ec:93:66:c4:8c:6c:72:65:5d:92:8e:b3:ef:11: 64:fd:5c:61:6e:ed:4a:cf:ec:d0:f0:f2:90:73:08: 47:da:ec:a3:3f:fb:1f:08:44:62:91:28:2d:a7:67: b0:46:de:38:7c:e2:6a:0f:bb:b6:d2:0e:82:2f:fa: 19:96:9c:aa:31:5d:fd:fc:d2:9a:59:55:70:e9:19: 2d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:49:5D:2C:49:FD:85:26:1D:2E:57:A4:D8:86:E9:CD:0E:65:BE:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8ef1a1c2-3f6b-3344-94c4-536166e03a1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 157.137.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:a2:19:20:bc:02:58:3b:e5:14:3e:db:6e:18:cf:9e:20:e2: 67:2f:77:b6:c9:68:2c:9b:5f:9a:64:0f:f6:3a:24:ff:1b:19: 4e:19:93:52:d7:70:35:9b:09:7e:71:e1:cb:ed:4e:fd:13:80: 76:b7:27:2c:ee:3a:d7:21:14:72:95:1a:d9:46:97:4c:a6:31: a2:82:8c:8d:c5:79:b8:3e:a9:7e:ba:73:b4:4f:6b:82:7f:a1: 7d:fd:1a:9b:9f:19:e1:28:db:da:2d:da:d9:20:92:28:f8:5d: fb:24:44:cf:78:37:66:37:12:59:ee:1a:d9:b3:c3:97:6b:0f: 3d:15:ec:b5:10:4d:b0:03:a1:bc:72:be:16:f4:eb:2c:9d:67: ab:85:86:8c:1c:04:40:a4:00:13:ba:d8:1e:11:ce:0b:39:2e: 36:d7:ee:56:f1:49:85:af:eb:aa:05:99:c5:89:b4:64:4e:f4: 63:59:7d:71:bd:f9:8e:16:a6:aa:12:0e:a4:55:8a:8a:b6:36: 7a:c3:a8:a8:a5:5a:7d:70:6e:9a:bd:85:b0:66:c8:79:46:e8: e2:d5:03:ce:7d:d5:fc:ee:95:aa:43:3b:8c:89:b9:25:6a:0d: 97:18:a8:ec:71:66:1c:fb:7a:63:4c:57:5b:33:87:2c:61:26: ea:f3:ae:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nj+NButwXoFNUTDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MGFiNmYzMWItMTljYy00ZDg5LTk0YTMtZjU4ODZhYTYwMzgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZpjzrFhgc18uhsHPrPCjRM1iuF0z6txLg6m kMDsLq1wUeC0TJ0rlvNfxlMtkTaqSIyh4Sj4XYWZdwTa3ycQLxdirmAxrWuzb5x6 VckCjfdHAJb3hVmHLuQbs7hkhqjmVUTpGoGIPMO1ApttcyEEtnf1xVnuaGHbFNyL hB2DE4ibHD+R89VB3DMZf2EWyBVxVeCS/FC6GfNLPYMTZqIssccylxNBrdnmOBIN AUDhNonMq5V/7JNmxIxscmVdko6z7xFk/Vxhbu1Kz+zQ8PKQcwhH2uyjP/sfCERi kSgtp2ewRt44fOJqD7u20g6CL/oZlpyqMV39/NKaWVVw6RktOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE9JXSxJ/YUmHS5XpNiG6c0OZb7vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOGVmMWExYzItM2Y2Yi0z MzQ0LTk0YzQtNTM2MTY2ZTAzYTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnYlsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE6iGSC8Alg75RQ+224Yz54g4mcvd7bJaCybX5pkD/Y6JP8bGU4Zk1LX cDWbCX5x4cvtTv0TgHa3JyzuOtchFHKVGtlGl0ymMaKCjI3Febg+qX66c7RPa4J/ oX39GpufGeEo29ot2tkgkij4XfskRM94N2Y3ElnuGtmzw5drDz0V7LUQTbADobxy vhb06yydZ6uFhowcBECkABO62B4Rzgs5LjbX7lbxSYWv66oFmcWJtGRO9GNZfXG9 +Y4WpqoSDqRVioq2NnrDqKilWn1wbpq9hbBmyHlG6OLVA8591fzulapDO4yJuSVq DZcYqOxxZhz7emNMV1szhyxhJurzrtQ= -----END CERTIFICATE-----Generated at Wed Jul 29 03:57:11 2026 by rpki-client