$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f3dc0817-4620-3ba5-be9a-c100e0524b13.roa File: f3dc0817-4620-3ba5-be9a-c100e0524b13.roa (raw, json) Hash identifier: ZrlQ0nqGQdwtalwqUIKi6alXqPQgtFgUm6fUypxj1PE= Subject key identifier: 30:43:18:0F:D8:17:FC:85:CF:F4:B7:76:58:7B:EC:F8:D1:0B:48:2A Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F225D21D5D8530352FCDB6D80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f3dc0817-4620-3ba5-be9a-c100e0524b13.roa Signing time: Fri 11 Sep 2026 01:00:12 +0000 ROA not before: Fri 11 Sep 2026 01:00:12 +0000 ROA not after: Thu 10 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 108.59.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:22:5d:21:d5:d8:53:03:52:fc:db:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 11 01:00:12 2026 GMT Not After : Dec 10 02:00:12 2026 GMT Subject: CN=73f5416e-1cb6-45a1-9d20-ab7dbabd0a0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7c:7b:0e:f7:9d:38:4f:c3:fd:22:73:e3:6b: 5b:ae:2b:7a:46:6a:41:d4:5d:52:fc:7f:ad:6e:49: c6:04:67:7c:f1:cf:63:b1:13:26:c4:93:50:36:91: fb:24:d3:3a:77:e2:42:a8:0e:eb:84:54:f4:97:c5: ca:ff:3e:35:5a:9f:4f:c7:63:96:a1:6d:2b:22:6e: 50:90:d0:69:c1:45:a1:ee:96:b8:35:73:97:9d:f9: c7:4d:47:4b:6e:63:01:50:de:db:eb:16:47:24:ed: 8f:2a:c9:a9:c1:bc:28:df:76:21:e1:4f:a5:c8:41: a9:70:73:c5:f5:f5:28:87:a3:6e:27:e6:52:4e:a3: 72:45:6f:66:38:af:72:12:73:45:78:20:c5:15:4e: de:cf:71:2a:d6:5e:0f:2c:fc:6d:64:28:75:b1:85: cf:18:84:b6:1d:ba:43:42:aa:b8:4d:54:3d:cd:f1: 2e:c8:69:04:41:4e:32:81:8c:c0:fd:b1:92:16:e5: b1:69:eb:46:43:09:c6:83:0e:a8:be:f9:15:72:a0: 5d:7b:4b:a9:0a:9c:b6:91:fb:32:54:ea:a0:5b:14: 6c:35:f9:f1:55:20:cf:0e:e6:73:e7:c7:74:29:fd: 44:a3:70:cd:25:95:91:f7:32:54:e2:03:d2:77:65: 27:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:43:18:0F:D8:17:FC:85:CF:F4:B7:76:58:7B:EC:F8:D1:0B:48:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f3dc0817-4620-3ba5-be9a-c100e0524b13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 108.59.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:7e:65:d3:16:4e:83:a5:93:1b:2d:bf:a6:7b:15:17:06:2b: a7:48:d8:a9:c2:3f:f1:bd:6d:c9:bb:c9:aa:7c:53:65:43:14: 44:07:3d:9a:1a:cb:45:a4:83:1e:93:95:ec:46:9f:6e:42:3e: f6:55:bb:72:5e:e3:90:25:46:ed:16:74:28:61:96:3a:4f:51: 88:cf:c2:d5:8a:a1:84:e7:68:dc:b0:a9:94:50:f5:59:7b:5f: e0:d8:a3:f6:ae:93:a8:d2:7b:84:16:46:ca:eb:84:5f:fc:6b: 09:d3:c9:1c:c9:0a:b2:0d:05:ff:36:ab:7a:f0:c6:04:d9:f6: 53:66:51:06:5a:06:e0:b7:60:b3:98:0f:cf:83:68:25:f1:1a: ad:68:0b:81:1b:aa:bc:4b:8c:29:03:44:52:22:30:f1:43:c5: 80:7c:fd:ce:0f:0a:d9:5b:c9:d3:4c:a2:c2:99:a6:37:0a:72: e6:26:05:af:c8:3e:86:5f:f4:33:4b:6f:52:e1:c0:5e:50:a4: ea:87:ea:2c:f2:92:6f:fa:a4:1a:ef:5f:15:3c:74:9c:62:53: 93:d9:2a:5a:a8:a9:ac:cc:ba:1a:96:fb:1b:a4:d7:67:d1:0f: 3f:c8:a5:dd:88:0a:0f:22:bc:32:26:68:ab:01:08:19:58:1b: 0d:0d:a7:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8iXSHV2FMDUvzbbYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkxMTAxMDAxMloXDTI2MTIxMDAyMDAxMlowLzEtMCsGA1UEAxMk NzNmNTQxNmUtMWNiNi00NWExLTlkMjAtYWI3ZGJhYmQwYTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXx7DvedOE/D/SJz42tbrit6RmpB1F1S/H+t bknGBGd88c9jsRMmxJNQNpH7JNM6d+JCqA7rhFT0l8XK/z41Wp9Px2OWoW0rIm5Q kNBpwUWh7pa4NXOXnfnHTUdLbmMBUN7b6xZHJO2PKsmpwbwo33Yh4U+lyEGpcHPF 9fUoh6NuJ+ZSTqNyRW9mOK9yEnNFeCDFFU7ez3Eq1l4PLPxtZCh1sYXPGIS2HbpD Qqq4TVQ9zfEuyGkEQU4ygYzA/bGSFuWxaetGQwnGgw6ovvkVcqBde0upCpy2kfsy VOqgWxRsNfnxVSDPDuZz58d0Kf1Eo3DNJZWR9zJU4gPSd2UnUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDBDGA/YF/yFz/S3dlh77PjRC0gqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZjNkYzA4MTctNDYyMC0z YmE1LWJlOWEtYzEwMGUwNTI0YjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbDulMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAF+ZdMWToOlkxstv6Z7FRcGK6dI2KnCP/G9bcm7yap8U2VDFEQHPZoa y0Wkgx6TlexGn25CPvZVu3Je45AlRu0WdChhljpPUYjPwtWKoYTnaNywqZRQ9Vl7 X+DYo/auk6jSe4QWRsrrhF/8awnTyRzJCrINBf82q3rwxgTZ9lNmUQZaBuC3YLOY D8+DaCXxGq1oC4EbqrxLjCkDRFIiMPFDxYB8/c4PCtlbydNMosKZpjcKcuYmBa/I PoZf9DNLb1LhwF5QpOqH6izykm/6pBrvXxU8dJxiU5PZKlqoqazMuhqW+xuk12fR Dz/Ipd2ICg8ivDImaKsBCBlYGw0Np2A= -----END CERTIFICATE-----Generated at Mon Sep 21 21:42:12 2026 by rpki-client