$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e9b8c2b2-24dc-3f31-99d5-662fa1b7246c.roa File: e9b8c2b2-24dc-3f31-99d5-662fa1b7246c.roa (raw, json) Hash identifier: 6NJ0dWdohpcAiCso2aGGrCJymLSajDMIhTMXLV5amO8= Subject key identifier: DF:A8:44:5D:BC:D3:C1:EF:1E:E0:E0:A1:F0:D1:84:78:5E:A5:98:AB Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F20F7B6EEDCAA7ED4B1EAE280 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e9b8c2b2-24dc-3f31-99d5-662fa1b7246c.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 157.137.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:b6:ee:dc:aa:7e:d4:b1:ea:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=7c1ad4e7-1169-41b1-9a89-87d1857473ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:dc:07:03:2f:cc:7a:5a:29:78:78:fb:38:d8: 1e:9a:47:f1:90:eb:58:9c:e9:25:61:85:f1:a2:b3: fc:f5:ee:c4:51:14:91:92:b8:7a:26:7a:a0:9a:32: 6e:e1:72:9a:ee:6c:1f:0a:33:88:44:37:9f:cb:94: 55:4c:b8:93:50:59:3d:7c:3d:2e:3a:fb:60:e2:6a: c8:64:38:4c:cd:71:8d:c5:b8:98:a2:f4:5a:9f:fd: 10:1c:2f:8c:5b:2c:1e:3e:6e:ae:b6:bd:1f:22:4a: da:e7:6f:9d:2c:87:95:cf:93:8b:ad:6d:96:c1:6b: 79:3e:40:0b:83:80:a2:c0:df:66:76:b0:a7:1c:e3: 3f:db:67:07:b1:fd:b5:31:0e:4d:18:63:1f:93:b5: 1f:78:66:aa:9e:95:55:7a:31:24:98:d1:d7:e9:d9: 70:9e:ff:27:c8:8f:9c:e9:f1:a7:b0:97:9f:50:7d: 89:f0:1a:1a:7e:89:56:c8:f8:7b:cd:73:c4:e0:a8: c6:18:23:a8:ef:2a:d9:81:3d:d9:2a:24:4b:d4:23: 2e:6a:df:4a:9e:3d:2e:6a:0f:b9:51:c1:05:be:98: 41:28:8c:03:0c:21:96:de:4c:70:f1:e7:e7:48:b0: d5:2b:d8:e7:45:3d:11:c8:db:89:33:69:24:ac:3b: 77:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:A8:44:5D:BC:D3:C1:EF:1E:E0:E0:A1:F0:D1:84:78:5E:A5:98:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e9b8c2b2-24dc-3f31-99d5-662fa1b7246c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 157.137.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:b4:ca:e5:04:12:cf:fa:8c:f5:f8:96:0f:c7:75:6f:6a:20: e8:f5:6d:d4:f3:92:f6:8e:25:5e:39:8b:42:98:15:38:9d:c7: 25:69:59:03:14:48:47:bf:9b:2e:15:67:1e:4e:f3:51:d1:c2: a2:66:38:3a:d1:3e:9b:10:e3:e6:6b:ae:99:58:3f:87:f4:71: b2:d0:b9:1a:e0:fa:91:6d:7a:e1:96:e3:fd:b0:23:4c:84:c8: a2:e4:b7:43:17:e8:36:26:46:a9:9b:ab:4f:13:d8:47:5c:98: 26:c7:3c:a6:90:20:62:a7:79:0f:67:73:81:13:09:85:9e:04: dd:38:ff:2a:a8:56:77:31:ff:91:59:81:71:f5:17:5c:84:02: 9e:d2:b2:da:b7:74:81:7f:c4:f8:e5:fd:66:ab:1e:f3:b1:a2: 3e:ce:d8:da:21:4c:70:03:0a:15:04:61:4e:99:df:70:cd:04: fa:d1:dd:76:22:2d:b8:a4:87:8e:bb:66:23:09:e0:04:5f:b9: ec:7d:5c:f6:0e:dc:55:22:8d:14:95:92:97:cd:a7:d2:64:5a: 58:13:69:b3:9b:98:c4:aa:61:6a:06:26:1b:22:87:d9:76:73: e5:27:dc:4a:b9:81:30:f9:53:56:09:fe:fb:ad:74:eb:ce:63: a5:94:ef:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g97bu3Kp+1LHq4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk N2MxYWQ0ZTctMTE2OS00MWIxLTlhODktODdkMTg1NzQ3M2VjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9wHAy/MelopeHj7ONgemkfxkOtYnOklYYXx orP89e7EURSRkrh6JnqgmjJu4XKa7mwfCjOIRDefy5RVTLiTUFk9fD0uOvtg4mrI ZDhMzXGNxbiYovRan/0QHC+MWywePm6utr0fIkra52+dLIeVz5OLrW2WwWt5PkAL g4CiwN9mdrCnHOM/22cHsf21MQ5NGGMfk7UfeGaqnpVVejEkmNHX6dlwnv8nyI+c 6fGnsJefUH2J8BoafolWyPh7zXPE4KjGGCOo7yrZgT3ZKiRL1CMuat9Knj0uag+5 UcEFvphBKIwDDCGW3kxw8efnSLDVK9jnRT0RyNuJM2kkrDt39QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN+oRF2808HvHuDgofDRhHhepZirMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZTliOGMyYjItMjRkYy0z ZjMxLTk5ZDUtNjYyZmExYjcyNDZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnYn6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFC0yuUEEs/6jPX4lg/HdW9qIOj1bdTzkvaOJV45i0KYFTidxyVpWQMU SEe/my4VZx5O81HRwqJmODrRPpsQ4+ZrrplYP4f0cbLQuRrg+pFteuGW4/2wI0yE yKLkt0MX6DYmRqmbq08T2EdcmCbHPKaQIGKneQ9nc4ETCYWeBN04/yqoVncx/5FZ gXH1F1yEAp7Sstq3dIF/xPjl/WarHvOxoj7O2NohTHADChUEYU6Z33DNBPrR3XYi Lbikh467ZiMJ4ARfuex9XPYO3FUijRSVkpfNp9JkWlgTabObmMSqYWoGJhsih9l2 c+Un3Eq5gTD5U1YJ/vutdOvOY6WU76A= -----END CERTIFICATE-----Generated at Wed Sep 23 13:31:45 2026 by rpki-client