$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8f614de2-83e7-3369-91b1-24ce386cf8e5.roa File: 8f614de2-83e7-3369-91b1-24ce386cf8e5.roa (raw, json) Hash identifier: apyo3P+rfzxNKFLgdQ3+n/GxczZYL+7uAtkv+NBN6qg= Subject key identifier: 64:A5:07:CC:D0:A9:68:56:70:4F:43:13:2A:4F:F3:39:BB:DB:DD:30 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F498A8FD0AF73FCEDF3552400 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8f614de2-83e7-3369-91b1-24ce386cf8e5.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 54253 IP address blocks: 168.107.144.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:8f:d0:af:73:fc:ed:f3:55:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ac65f0d0-d80d-4bf1-8095-b748cea3b3b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a7:73:07:b3:6a:9c:12:6c:0f:7c:8f:a1:f4: ef:fb:f7:18:ab:60:05:50:44:ac:fc:06:4b:28:68: ee:ef:04:1e:b6:22:18:da:98:1c:0c:c8:98:3c:b5: 04:5e:da:a8:16:f4:20:05:32:cb:84:db:bd:93:17: 8e:27:ee:92:91:3c:76:5c:51:67:d5:aa:ac:e3:d4: ec:f3:2e:a2:da:a1:7d:04:9f:de:51:c0:af:61:66: 77:92:03:70:46:38:88:34:11:8f:28:f1:0e:80:d8: b1:64:b9:48:d6:84:c5:a3:e1:f2:7e:48:2c:39:fa: 73:c0:1d:3f:9f:f9:8e:94:aa:01:7a:e6:5a:c9:8d: 9f:bb:bb:df:5f:72:21:9e:1a:b6:09:10:fb:2e:40: e7:b3:37:2d:12:15:2a:e5:a3:b2:51:19:9a:e9:21: 50:7a:5d:65:da:b3:97:87:1a:4a:b0:7c:97:7f:4d: ce:63:1d:4a:f2:11:04:7c:2d:7a:9e:23:2c:f4:d8: e1:91:4e:5a:3a:82:99:fe:25:15:48:a7:06:17:6c: 7f:90:35:49:3e:e8:3f:fa:ac:cc:a9:c2:d8:c6:f2: 44:d2:b0:ba:e8:62:1b:a1:5e:43:1c:50:6d:ce:b2: ba:c5:56:46:0b:3a:78:57:d8:fe:b2:0f:29:0a:5e: 14:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:A5:07:CC:D0:A9:68:56:70:4F:43:13:2A:4F:F3:39:BB:DB:DD:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8f614de2-83e7-3369-91b1-24ce386cf8e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.107.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:46:84:a0:c8:ec:98:17:e6:67:6b:de:26:08:e2:74:5c:4d: df:53:bd:97:d3:15:ec:36:cb:fe:2d:d5:ba:04:ae:47:b7:3a: 22:f5:be:45:c7:dd:e7:5b:88:9a:1a:a7:be:4a:65:fb:8b:75: 10:45:ff:8d:70:9f:ac:2d:25:7d:df:9f:55:d3:13:08:97:d2: 2c:48:e7:e5:b4:08:b6:71:7a:e7:72:48:85:2b:66:30:de:10: d1:99:0c:cc:9d:f1:23:d5:8f:bb:9a:1c:9c:d7:32:1a:36:ae: c2:6a:40:b9:1e:3e:9f:12:6e:e8:81:da:72:df:48:ec:10:02: a7:a7:39:f4:c7:9f:dc:2c:25:25:b7:91:a3:1a:fa:73:06:73: 6e:2a:83:06:81:bd:f5:f4:d8:8d:e1:55:86:f9:97:a4:84:ea: bf:a3:8b:3a:34:b5:cf:66:76:0c:08:47:4f:a6:35:0e:25:7d: 2e:91:af:29:80:e9:5d:f0:ff:0f:e4:b8:9d:0a:0b:f5:a8:3d: ca:1a:71:5b:6e:68:63:ac:15:1f:17:3a:2b:49:43:25:e3:0c: c6:13:3d:a0:55:9d:37:f8:97:6d:40:d1:a2:45:8c:f9:cc:52: f3:f9:d0:1b:ae:c0:97:de:15:61:0f:ed:42:25:52:d6:21:a4: 04:d0:01:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jio/Qr3P87fNVJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YWM2NWYwZDAtZDgwZC00YmYxLTgwOTUtYjc0OGNlYTNiM2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2KdzB7NqnBJsD3yPofTv+/cYq2AFUESs/AZL KGju7wQetiIY2pgcDMiYPLUEXtqoFvQgBTLLhNu9kxeOJ+6SkTx2XFFn1aqs49Ts 8y6i2qF9BJ/eUcCvYWZ3kgNwRjiINBGPKPEOgNixZLlI1oTFo+HyfkgsOfpzwB0/ n/mOlKoBeuZayY2fu7vfX3Ihnhq2CRD7LkDnszctEhUq5aOyURma6SFQel1l2rOX hxpKsHyXf03OYx1K8hEEfC16niMs9NjhkU5aOoKZ/iUVSKcGF2x/kDVJPug/+qzM qcLYxvJE0rC66GIboV5DHFBtzrK6xVZGCzp4V9j+sg8pCl4UEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGSlB8zQqWhWcE9DEypP8zm7290wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOGY2MTRkZTItODNlNy0z MzY5LTkxYjEtMjRjZTM4NmNmOGU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqGuQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACFGhKDI7JgX5mdr3iYI4nRcTd9TvZfTFew2y/4t1boErke3OiL1vkXH 3edbiJoap75KZfuLdRBF/41wn6wtJX3fn1XTEwiX0ixI5+W0CLZxeudySIUrZjDe ENGZDMyd8SPVj7uaHJzXMho2rsJqQLkePp8SbuiB2nLfSOwQAqenOfTHn9wsJSW3 kaMa+nMGc24qgwaBvfX02I3hVYb5l6SE6r+jizo0tc9mdgwIR0+mNQ4lfS6RrymA 6V3w/w/kuJ0KC/WoPcoacVtuaGOsFR8XOitJQyXjDMYTPaBVnTf4l21A0aJFjPnM UvP50BuuwJfeFWEP7UIlUtYhpATQAU8= -----END CERTIFICATE-----Generated at Fri Sep 25 22:33:38 2026 by rpki-client