$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fde4a4e5-df22-35a2-8f89-3598e07ad613.roa File: fde4a4e5-df22-35a2-8f89-3598e07ad613.roa (raw, json) Hash identifier: IfmWJin/Yqfd6y7z5LMVNMvMXlG37WA74B+aHXfBNt0= Subject key identifier: F7:0F:6F:CA:E9:75:3C:95:84:F5:E4:1A:0A:A0:79:0A:A5:93:38:90 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F13023FF50E69E02BCA8CD520 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fde4a4e5-df22-35a2-8f89-3598e07ad613.roa Signing time: Sat 05 Sep 2026 13:00:12 +0000 ROA not before: Sat 05 Sep 2026 13:00:12 +0000 ROA not after: Fri 04 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 157.137.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:13:02:3f:f5:0e:69:e0:2b:ca:8c:d5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 5 13:00:12 2026 GMT Not After : Dec 4 14:00:12 2026 GMT Subject: CN=77a7ba96-6336-4b6e-b17f-3447206d9abf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:2c:fe:03:c6:d0:08:5d:d2:64:22:82:5e:0e: 5d:de:cc:86:44:f1:af:03:a1:64:c6:58:a5:eb:92: 8f:eb:fd:40:ad:56:99:85:60:ae:3a:a0:57:64:2c: be:9a:67:08:76:4f:70:5f:ae:78:46:e2:20:be:a5: b8:2b:64:74:3c:72:8f:03:dd:a7:78:73:51:07:f5: c9:9e:fc:66:58:ff:6e:77:d9:09:41:bf:0c:83:a0: 6f:fe:97:0b:d3:18:6d:26:01:b3:5b:6d:34:3c:73: 51:0c:81:62:c0:79:c7:ec:17:39:f7:38:5a:34:ba: 14:e5:39:f8:31:1a:db:a9:28:19:50:f3:19:9c:d1: eb:7c:08:3c:f6:32:7a:37:1e:af:ed:dc:f2:bd:de: e1:94:ef:dd:06:05:9d:29:c9:c2:d3:b3:10:76:43: 75:54:df:ef:1f:78:f0:32:d9:cf:a1:a9:77:d1:b4: c0:dc:f5:fc:84:6b:da:73:20:1f:ce:a4:ba:c9:53: 3f:d3:54:56:71:22:13:dc:9b:e3:7d:30:a7:80:cc: a7:2a:fd:8d:12:1d:dc:35:2e:73:47:c7:37:dc:c2: 91:0f:b0:45:bf:01:f3:fb:99:d7:a0:30:29:46:28: ee:20:ab:30:4c:de:a2:a5:8d:a9:a4:58:a3:e8:0b: c4:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:0F:6F:CA:E9:75:3C:95:84:F5:E4:1A:0A:A0:79:0A:A5:93:38:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fde4a4e5-df22-35a2-8f89-3598e07ad613.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 157.137.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:a3:6c:ae:ae:f9:c2:f1:68:33:ab:ac:31:e8:f4:c8:19:a7: 8e:64:00:2a:a0:e0:5f:89:01:7e:f6:70:42:42:63:ee:16:37: cb:20:63:d1:2d:2a:b1:95:d4:c8:79:2a:98:e0:aa:d9:2a:76: 98:b0:1c:20:9e:1e:6e:41:e7:68:90:27:4a:7f:6e:d3:d1:ab: 77:d2:d5:63:3e:5f:38:b6:c7:49:fc:f2:fe:ce:07:75:67:d6: 93:50:80:98:41:c6:7e:bb:8a:1c:bc:e8:50:21:30:97:0b:14: b0:d8:a3:f6:1b:72:37:1a:f5:44:f3:85:15:c0:b8:6f:d8:b2: 49:60:6b:e4:2b:9a:d5:c6:b4:5e:2e:86:f3:3a:69:5a:ff:53: bc:c5:2d:c9:7a:57:ba:39:f3:50:f1:cf:9d:ff:4e:64:3a:c7: cd:94:90:94:9e:7c:b8:14:ca:f9:87:5f:fb:b7:1a:ca:02:dc: ad:9b:e0:e3:ab:ff:8e:a7:8e:a0:7c:8d:9d:c8:03:38:02:ed: b5:ca:e0:4e:31:5c:a4:65:be:af:06:88:1e:89:a9:24:a1:6b: 68:1c:73:bd:da:07:58:f1:dc:14:fe:f0:38:58:c6:19:5e:6d: ff:c2:fe:e6:3e:08:16:6c:a4:de:56:0c:ea:d8:ab:3e:d6:93: 14:ce:3b:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8TAj/1DmngK8qM1SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNTEzMDAxMloXDTI2MTIwNDE0MDAxMlowLzEtMCsGA1UEAxMk NzdhN2JhOTYtNjMzNi00YjZlLWIxN2YtMzQ0NzIwNmQ5YWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyz+A8bQCF3SZCKCXg5d3syGRPGvA6Fkxlil 65KP6/1ArVaZhWCuOqBXZCy+mmcIdk9wX654RuIgvqW4K2R0PHKPA92neHNRB/XJ nvxmWP9ud9kJQb8Mg6Bv/pcL0xhtJgGzW200PHNRDIFiwHnH7Bc59zhaNLoU5Tn4 MRrbqSgZUPMZnNHrfAg89jJ6Nx6v7dzyvd7hlO/dBgWdKcnC07MQdkN1VN/vH3jw MtnPoal30bTA3PX8hGvacyAfzqS6yVM/01RWcSIT3JvjfTCngMynKv2NEh3cNS5z R8c33MKRD7BFvwHz+5nXoDApRijuIKswTN6ipY2ppFij6AvETQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPcPb8rpdTyVhPXkGgqgeQqlkziQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZmRlNGE0ZTUtZGYyMi0z NWEyLThmODktMzU5OGUwN2FkNjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEnYmQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAECjbK6u+cLxaDOrrDHo9MgZp45kACqg4F+JAX72cEJCY+4WN8sgY9Et KrGV1Mh5KpjgqtkqdpiwHCCeHm5B52iQJ0p/btPRq3fS1WM+Xzi2x0n88v7OB3Vn 1pNQgJhBxn67ihy86FAhMJcLFLDYo/Ybcjca9UTzhRXAuG/Ysklga+QrmtXGtF4u hvM6aVr/U7zFLcl6V7o581Dxz53/TmQ6x82UkJSefLgUyvmHX/u3GsoC3K2b4OOr /46njqB8jZ3IAzgC7bXK4E4xXKRlvq8GiB6JqSSha2gcc73aB1jx3BT+8DhYxhle bf/C/uY+CBZspN5WDOrYqz7WkxTOOxY= -----END CERTIFICATE-----Generated at Mon Sep 21 07:59:27 2026 by rpki-client