$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/db008e14-8d19-3ca8-825e-4ae02e1cb000.roa File: db008e14-8d19-3ca8-825e-4ae02e1cb000.roa (raw, json) Hash identifier: nHG15shMGCezvkB9KaN1n59flIsTbZp8NqGRv+9ZhtM= Subject key identifier: 4F:AE:30:42:ED:EF:EC:B5:10:09:26:96:F1:2E:E9:C2:8C:E9:49:D8 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F0AA230861282630200132DF8 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/db008e14-8d19-3ca8-825e-4ae02e1cb000.roa Signing time: Wed 02 Sep 2026 13:00:12 +0000 ROA not before: Wed 02 Sep 2026 13:00:12 +0000 ROA not after: Tue 01 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 157.137.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0a:a2:30:86:12:82:63:02:00:13:2d:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 2 13:00:12 2026 GMT Not After : Dec 1 14:00:12 2026 GMT Subject: CN=fbfff518-b8be-497f-8d2b-2a99860cda46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:04:be:b5:7e:cf:fc:d7:ba:5f:a7:fe:e1:4f: e5:5b:3e:db:11:15:22:b0:ee:d4:21:7b:6b:34:39: e2:19:56:b0:b7:35:02:bb:8f:6a:70:e7:64:29:61: e2:50:45:0b:ae:b0:b8:1b:6f:7b:0f:d2:78:32:51: de:8a:aa:2c:a6:a0:03:04:c4:13:0d:17:cf:b0:14: 00:f5:6f:49:0a:18:98:df:5e:e5:be:e2:50:4a:2e: ad:e5:9d:05:3f:b5:d4:bd:fe:83:15:11:d7:12:14: 25:69:b1:29:8a:64:4a:1c:14:04:d7:ce:74:ff:e9: 32:7c:10:e7:d4:8d:25:26:11:38:64:61:31:d8:62: 79:e3:e3:14:b3:11:0d:0d:42:91:14:1a:39:85:5b: 28:72:1f:67:a4:a1:01:67:09:57:8d:e6:bc:11:60: 56:25:4e:25:93:a6:7e:a0:1f:d9:21:80:06:bd:09: c2:71:2e:c1:8e:d6:fc:6a:6b:88:63:28:4d:4a:78: 6a:d2:94:5a:b9:06:9d:30:21:a8:7c:3f:1b:c4:6e: 15:7b:3d:20:2f:98:aa:9a:03:4d:bc:8a:75:f8:4c: 27:df:cb:27:47:a5:69:16:77:d6:a1:62:21:b9:34: ba:0f:1e:1c:65:13:b2:81:03:57:06:3f:e8:52:62: 50:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:AE:30:42:ED:EF:EC:B5:10:09:26:96:F1:2E:E9:C2:8C:E9:49:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/db008e14-8d19-3ca8-825e-4ae02e1cb000.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 157.137.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:53:ee:ef:42:21:4e:79:43:26:a9:0a:08:12:fd:3d:92:c7: 95:62:34:f3:d4:e0:d8:4e:79:c7:9f:9d:fc:5b:62:74:bf:43: 52:09:8f:ff:71:cd:b9:9b:2b:68:1d:28:71:9d:8f:42:4d:9a: e7:97:c5:c8:06:3e:c6:0b:59:ac:85:6d:ea:36:ee:62:90:89: e8:41:aa:28:b2:7b:0c:d6:94:66:ad:ef:b2:86:5f:3a:0a:bb: 3a:ee:24:4a:0c:de:b6:5c:de:57:66:b5:42:81:3d:14:f8:fa: e5:14:71:19:b9:65:12:f8:35:dd:5d:a2:ad:0e:ce:f9:0e:1d: 99:22:fc:12:4a:8c:38:c2:1c:05:3f:d8:02:50:95:ef:da:1f: ec:85:fb:de:db:62:8f:cf:63:fe:41:c8:4a:78:9e:c8:fd:3d: 4e:a4:62:d5:5e:56:b7:7b:4e:3f:dc:db:29:63:40:e3:18:25: d1:44:01:aa:41:df:44:64:4d:2d:f0:6c:d2:ec:66:ec:3e:77: 84:3f:76:43:81:20:2c:5d:e0:24:69:3d:43:ca:55:d3:85:c8: c9:20:f3:9b:91:48:df:f7:c9:15:25:38:2d:ba:5b:7f:b0:c6: ec:dd:61:96:77:59:74:c1:ce:90:7c:90:fa:13:0b:28:da:7e: 44:25:68:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8KojCGEoJjAgATLfgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwMjEzMDAxMloXDTI2MTIwMTE0MDAxMlowLzEtMCsGA1UEAxMk ZmJmZmY1MTgtYjhiZS00OTdmLThkMmItMmE5OTg2MGNkYTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowS+tX7P/Ne6X6f+4U/lWz7bERUisO7UIXtr NDniGVawtzUCu49qcOdkKWHiUEULrrC4G297D9J4MlHeiqospqADBMQTDRfPsBQA 9W9JChiY317lvuJQSi6t5Z0FP7XUvf6DFRHXEhQlabEpimRKHBQE1850/+kyfBDn 1I0lJhE4ZGEx2GJ54+MUsxENDUKRFBo5hVsoch9npKEBZwlXjea8EWBWJU4lk6Z+ oB/ZIYAGvQnCcS7Bjtb8amuIYyhNSnhq0pRauQadMCGofD8bxG4Vez0gL5iqmgNN vIp1+Ewn38snR6VpFnfWoWIhuTS6Dx4cZROygQNXBj/oUmJQpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE+uMELt7+y1EAkmlvEu6cKM6UnYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZGIwMDhlMTQtOGQxOS0z Y2E4LTgyNWUtNGFlMDJlMWNiMDAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEnYngMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAANT7u9CIU55QyapCggS/T2Sx5ViNPPU4NhOecefnfxbYnS/Q1IJj/9x zbmbK2gdKHGdj0JNmueXxcgGPsYLWayFbeo27mKQiehBqiiyewzWlGat77KGXzoK uzruJEoM3rZc3ldmtUKBPRT4+uUUcRm5ZRL4Nd1doq0OzvkOHZki/BJKjDjCHAU/ 2AJQle/aH+yF+97bYo/PY/5ByEp4nsj9PU6kYtVeVrd7Tj/c2yljQOMYJdFEAapB 30RkTS3wbNLsZuw+d4Q/dkOBICxd4CRpPUPKVdOFyMkg85uRSN/3yRUlOC26W3+w xuzdYZZ3WXTBzpB8kPoTCyjafkQlaEw= -----END CERTIFICATE-----Generated at Thu Sep 24 13:13:10 2026 by rpki-client