$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ec4896da-d268-331e-8be2-e90396fbe7b7.roa File: ec4896da-d268-331e-8be2-e90396fbe7b7.roa (raw, json) Hash identifier: xg9gxorXtsccyhzV68HZZ+xg4EBS3dTj521Q8mLAFo8= Subject key identifier: 23:35:F6:48:12:B9:12:51:AD:3C:A0:B5:F9:D9:20:2E:BB:0B:5C:71 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F20F7D2A180D6CAFA300D18E0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ec4896da-d268-331e-8be2-e90396fbe7b7.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 157.151.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:d2:a1:80:d6:ca:fa:30:0d:18:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=abe6c24b-4c69-412a-a418-0de9fbcdbedb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:49:b6:d4:a9:7f:9d:45:76:da:0f:3d:c9:c0: 89:31:e4:20:e8:6e:8e:2c:15:a2:24:2b:ff:26:d6: 9c:58:0c:83:47:e3:70:c6:8f:cf:80:08:54:2c:74: cf:6b:30:26:64:7a:9f:e6:e3:88:12:2c:16:83:41: f6:50:f6:3c:0f:a6:19:a0:81:dd:03:b0:61:6e:29: 79:ca:20:c1:bc:de:8a:0b:95:2a:30:d0:af:86:44: 57:76:90:92:e5:89:76:49:83:0e:72:d5:f0:2e:aa: 39:21:a7:f4:b4:bb:1f:41:f4:4b:2d:e7:4b:5c:10: 87:2d:cb:bc:5b:bc:ea:d6:41:44:51:83:2c:ad:6a: a9:01:c6:82:24:3c:a3:3a:c4:61:9a:1e:75:fe:7a: 05:59:b9:b2:5e:70:d5:3a:b7:b0:ea:c2:5f:ac:37: 10:9a:51:9c:d1:c7:05:d2:df:01:49:47:0a:7a:b4: c9:76:25:b5:c6:0e:4c:ad:25:ac:a2:ba:bf:fe:d1: 1f:09:6a:af:66:cc:d9:85:8c:53:46:25:e5:49:f7: b6:c0:03:46:57:ae:ec:c7:d2:11:4a:42:9e:11:20: bd:f4:49:10:7b:07:97:46:42:ab:35:bf:6e:2e:b2: f8:44:45:b3:c8:bf:65:b7:b4:95:21:e1:5c:5f:e9: 99:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:35:F6:48:12:B9:12:51:AD:3C:A0:B5:F9:D9:20:2E:BB:0B:5C:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ec4896da-d268-331e-8be2-e90396fbe7b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 157.151.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:ac:55:eb:eb:ef:c8:de:9c:ef:05:ed:41:4d:9c:f2:0a:dd: 92:08:81:16:1b:7f:0f:0c:21:e2:28:48:d8:e4:f6:f6:99:b7: be:d5:16:3c:ad:fb:df:8c:83:bd:1f:9f:43:c1:76:2f:e1:dd: 9a:50:58:3b:a0:50:c5:38:8b:fa:cb:72:3c:b8:ff:2b:0d:16: dd:9a:ee:ed:9c:80:c8:2e:ff:f4:59:c9:81:10:c0:17:93:e6: 49:a0:fb:d5:32:b5:bc:88:86:b6:e6:9a:65:40:4c:25:64:37: 7f:59:b2:64:a4:0a:4a:5f:b0:ad:b3:f2:1d:56:4f:2b:dc:4c: 8e:35:c8:b7:7c:3a:92:11:01:f1:03:40:f0:5b:98:27:d7:5e: 43:53:9d:5d:96:e0:fa:8d:d2:8e:d8:bb:73:1a:b1:dd:04:c9: bf:14:21:ef:03:5f:9f:8c:e1:6d:83:31:1b:d7:da:12:ac:23: 33:83:2a:01:ec:42:c6:52:74:68:ab:6d:8f:e2:78:bf:78:ba: 28:56:ba:62:2d:7d:8f:52:a9:ef:30:c5:34:96:90:2c:19:d7: 74:18:66:f0:11:48:9e:22:ca:6c:7c:a6:7d:82:07:e4:51:4b: 23:0f:0e:e9:a1:7a:e2:23:9d:8f:11:d8:a7:3b:ac:2e:fc:c3: 49:48:1d:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g99KhgNbK+jANGOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk YWJlNmMyNGItNGM2OS00MTJhLWE0MTgtMGRlOWZiY2RiZWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0m21Kl/nUV22g89ycCJMeQg6G6OLBWiJCv/ JtacWAyDR+Nwxo/PgAhULHTPazAmZHqf5uOIEiwWg0H2UPY8D6YZoIHdA7Bhbil5 yiDBvN6KC5UqMNCvhkRXdpCS5Yl2SYMOctXwLqo5Iaf0tLsfQfRLLedLXBCHLcu8 W7zq1kFEUYMsrWqpAcaCJDyjOsRhmh51/noFWbmyXnDVOrew6sJfrDcQmlGc0ccF 0t8BSUcKerTJdiW1xg5MrSWsorq//tEfCWqvZszZhYxTRiXlSfe2wANGV67sx9IR SkKeESC99EkQeweXRkKrNb9uLrL4REWzyL9lt7SVIeFcX+mZlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCM19kgSuRJRrTygtfnZIC67C1xxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZWM0ODk2ZGEtZDI2OC0z MzFlLThiZTItZTkwMzk2ZmJlN2I3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnZc6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEysVevr78jenO8F7UFNnPIK3ZIIgRYbfw8MIeIoSNjk9vaZt77VFjyt +9+Mg70fn0PBdi/h3ZpQWDugUMU4i/rLcjy4/ysNFt2a7u2cgMgu//RZyYEQwBeT 5kmg+9UytbyIhrbmmmVATCVkN39ZsmSkCkpfsK2z8h1WTyvcTI41yLd8OpIRAfED QPBbmCfXXkNTnV2W4PqN0o7Yu3Masd0Eyb8UIe8DX5+M4W2DMRvX2hKsIzODKgHs QsZSdGirbY/ieL94uihWumItfY9Sqe8wxTSWkCwZ13QYZvARSJ4iymx8pn2CB+RR SyMPDumheuIjnY8R2Kc7rC78w0lIHUs= -----END CERTIFICATE-----Generated at Tue Sep 22 16:04:27 2026 by rpki-client