$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c651c1e1-8176-3a47-b499-88304898d36d.roa File: c651c1e1-8176-3a47-b499-88304898d36d.roa (raw, json) Hash identifier: 50FOgXhq5AT+lMbWruxJwWoq0DSROC16unjTRI5Gl18= Subject key identifier: 0B:D6:7F:38:61:48:51:89:EC:80:F6:E3:59:AD:07:15:D6:17:1C:B2 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F225D0557E2D94771370DA200 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c651c1e1-8176-3a47-b499-88304898d36d.roa Signing time: Fri 11 Sep 2026 01:00:12 +0000 ROA not before: Fri 11 Sep 2026 01:00:12 +0000 ROA not after: Thu 10 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 108.59.168.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:22:5d:05:57:e2:d9:47:71:37:0d:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 11 01:00:12 2026 GMT Not After : Dec 10 02:00:12 2026 GMT Subject: CN=4c30c50b-d777-429c-879e-8fe12ce16bb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:07:50:63:b0:7b:e9:1e:38:a8:a0:fc:ab:f6: ca:01:d0:b6:fb:79:36:b2:36:cb:03:90:81:85:c8: ab:2e:96:f7:71:8b:b3:a9:e4:2d:19:89:43:14:2b: e0:0d:1b:6a:33:e6:0f:e7:3e:c7:da:f9:f1:e3:43: 13:fa:26:91:a4:39:85:42:a3:43:27:3b:12:7a:fb: 50:a5:fa:b1:d6:25:93:c1:07:d5:7d:21:19:aa:69: a8:85:f4:60:42:b8:79:9f:2e:47:bf:68:c4:47:99: 63:90:9a:73:07:8b:ca:e2:12:bf:a7:5a:4a:40:0c: fb:b9:c5:c1:14:cd:b7:b8:c8:d0:fe:bb:12:47:0d: 22:6e:02:4c:c6:59:72:d2:33:82:e2:73:45:d6:81: db:ee:18:c1:ad:31:87:4f:cb:1e:6a:df:a5:02:b6: 77:f1:04:49:a7:76:f5:53:81:bc:94:40:17:ea:99: 87:b8:03:b6:8a:fb:f4:73:e5:c2:10:11:d9:b2:c6: af:7b:34:1b:33:ae:ab:84:d5:02:5b:c1:c8:09:91: ab:2d:15:aa:0b:05:9c:c2:bb:01:c5:bb:72:e5:0a: 96:f8:16:a6:15:64:e0:13:d1:7e:c1:17:ee:73:cf: 22:b3:21:36:99:e7:42:37:4d:c9:ea:7e:c4:3c:22: b7:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:D6:7F:38:61:48:51:89:EC:80:F6:E3:59:AD:07:15:D6:17:1C:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c651c1e1-8176-3a47-b499-88304898d36d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 108.59.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:30:48:c1:d9:62:65:a6:c4:95:29:2f:d5:8a:73:fe:10:b5: 27:5f:b7:67:02:b9:07:60:ce:08:3a:c5:ee:12:ac:f1:08:88: ee:57:d2:8f:bd:3a:91:9a:6d:90:79:65:69:4a:bf:f7:75:38: 97:79:87:24:1f:e2:68:ca:d1:8d:42:9c:5b:4b:0f:66:7d:db: 27:78:02:e4:6f:5d:50:0e:32:cc:72:df:08:2f:b6:37:8f:8b: b9:19:33:60:ee:81:be:3e:f2:23:6f:3d:42:87:1a:6d:f6:1d: fb:fb:ac:0d:da:98:73:79:a7:61:61:e0:b3:1f:c2:91:f6:62: 70:98:ab:01:8c:47:72:d4:62:67:fa:f8:b8:d5:76:84:23:55: 45:ef:30:6b:c8:11:cc:84:9a:8d:d0:5a:0c:15:6b:b2:82:5e: de:60:95:88:a5:30:dd:b5:90:c1:c6:d8:1a:2b:e8:03:b8:ce: 0b:e4:6d:c3:28:6e:8e:91:81:ce:8a:53:04:20:f6:01:68:34: 75:e4:6b:d3:16:da:01:1f:fb:a2:67:33:50:78:1d:21:f3:f2: 3f:b4:15:26:00:e9:66:3f:d6:c7:b1:a4:f0:9c:1a:c4:c3:cb: 10:cb:f3:a2:41:18:9f:ee:9f:82:7d:db:07:48:31:b3:df:02: 73:50:98:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8iXQVX4tlHcTcNogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkxMTAxMDAxMloXDTI2MTIxMDAyMDAxMlowLzEtMCsGA1UEAxMk NGMzMGM1MGItZDc3Ny00MjljLTg3OWUtOGZlMTJjZTE2YmI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQdQY7B76R44qKD8q/bKAdC2+3k2sjbLA5CB hcirLpb3cYuzqeQtGYlDFCvgDRtqM+YP5z7H2vnx40MT+iaRpDmFQqNDJzsSevtQ pfqx1iWTwQfVfSEZqmmohfRgQrh5ny5Hv2jER5ljkJpzB4vK4hK/p1pKQAz7ucXB FM23uMjQ/rsSRw0ibgJMxlly0jOC4nNF1oHb7hjBrTGHT8seat+lArZ38QRJp3b1 U4G8lEAX6pmHuAO2ivv0c+XCEBHZssavezQbM66rhNUCW8HICZGrLRWqCwWcwrsB xbty5QqW+BamFWTgE9F+wRfuc88isyE2medCN03J6n7EPCK3VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAvWfzhhSFGJ7ID241mtBxXWFxyyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYzY1MWMxZTEtODE3Ni0z YTQ3LWI0OTktODgzMDQ4OThkMzZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbDuoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADQwSMHZYmWmxJUpL9WKc/4QtSdft2cCuQdgzgg6xe4SrPEIiO5X0o+9 OpGabZB5ZWlKv/d1OJd5hyQf4mjK0Y1CnFtLD2Z92yd4AuRvXVAOMsxy3wgvtjeP i7kZM2Dugb4+8iNvPUKHGm32Hfv7rA3amHN5p2Fh4LMfwpH2YnCYqwGMR3LUYmf6 +LjVdoQjVUXvMGvIEcyEmo3QWgwVa7KCXt5glYilMN21kMHG2Bor6AO4zgvkbcMo bo6Rgc6KUwQg9gFoNHXka9MW2gEf+6JnM1B4HSHz8j+0FSYA6WY/1sexpPCcGsTD yxDL86JBGJ/un4J92wdIMbPfAnNQmME= -----END CERTIFICATE-----Generated at Sat Sep 26 13:40:58 2026 by rpki-client