$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/19b2af79-511d-336b-80a4-ee7b2bcced13.roa File: 19b2af79-511d-336b-80a4-ee7b2bcced13.roa (raw, json) Hash identifier: iYVI2il236jwq4L5kkTstZRj27D45tyQaKHmolLwQ90= Subject key identifier: 26:43:13:7A:56:A6:8E:0B:E8:D3:93:70:7D:0D:3C:E8:0C:AA:4E:87 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F4987464E115C0F85041D6D80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/19b2af79-511d-336b-80a4-ee7b2bcced13.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 54253 IP address blocks: 168.107.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:46:4e:11:5c:0f:85:04:1d:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c8ebb5ac-c5c7-4444-b8ba-3e3e35cb2068 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:be:3e:d5:86:6b:74:7d:e9:d2:20:a7:dc:d0: 2b:24:bd:d6:25:d9:d6:a2:2e:50:0b:0d:b0:4d:59: c6:3b:19:87:f5:cb:e2:dc:00:28:f6:44:6e:4f:a0: 7a:db:a0:ca:4a:59:f5:1e:c7:f5:38:03:25:ae:7a: 69:dd:8a:a6:2d:38:01:e6:20:3e:13:41:22:58:09: a2:ec:2a:91:cc:62:e7:af:93:2c:06:50:a1:84:5b: c2:c2:96:2b:3e:09:95:2e:23:87:6d:f6:3a:29:19: 84:bf:b0:a3:f3:cf:f1:82:d1:2e:9c:6f:e5:20:24: d3:da:8a:8a:4b:e2:7b:d4:4c:88:05:9e:0a:10:3d: ca:35:db:c8:06:a9:7a:32:94:0b:21:53:91:17:7a: 5f:c6:c8:46:44:b1:ef:2a:31:74:ee:f9:cc:7c:fe: 08:91:54:69:37:4f:71:e5:59:df:37:39:99:69:ec: 90:c1:92:ee:71:30:95:f7:1d:a2:57:3b:4c:af:0f: 01:76:7a:7e:de:48:91:3b:a9:a7:60:29:32:c0:c0: f4:79:a2:21:89:da:52:dd:6c:c5:2b:37:c8:77:e2: 73:cf:20:ca:21:7f:b8:05:71:90:40:60:51:f4:87: 49:87:5d:af:a5:2a:6b:29:6b:89:07:fa:ca:b6:40: 01:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:43:13:7A:56:A6:8E:0B:E8:D3:93:70:7D:0D:3C:E8:0C:AA:4E:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/19b2af79-511d-336b-80a4-ee7b2bcced13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.107.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:4e:8a:bb:fe:df:7d:3f:5b:86:e6:e3:d8:a5:81:1e:0b:82: 97:d6:bd:5a:38:2f:43:71:d8:a9:0c:9d:88:28:65:b7:ce:84: 56:67:30:b3:e3:d0:76:4d:ea:9c:3c:1f:e6:89:3a:db:18:8b: ad:d1:2b:fc:1b:a7:b1:9b:1c:cf:b6:7a:78:b2:7d:30:31:f2: df:49:e3:d5:32:46:a3:8e:b6:07:c1:0c:0f:82:93:a7:cd:8b: 3a:89:77:ce:2e:65:e1:a9:bf:8a:6a:5d:2b:92:9e:e4:dc:bc: 62:fa:5b:18:fd:c3:b7:3f:6a:c1:46:7a:fc:1d:4c:b9:c5:58: 71:26:39:c1:60:a0:74:fe:60:7a:2c:93:81:7c:a9:50:de:ed: ff:e2:80:75:3c:47:a1:7f:45:b2:11:65:3e:15:9a:ee:ee:f4: d2:b0:83:74:70:ca:ce:75:10:3a:30:cf:ef:32:01:86:f2:ba: ab:b8:8e:58:0b:54:0c:4d:ef:76:a5:5c:f9:aa:b4:e0:6b:36: ec:f1:fa:0c:7b:dc:a7:d3:5a:c4:19:99:78:75:4e:de:3b:7f: e4:52:87:75:f3:07:35:0a:bb:ac:2e:a7:b7:7e:6a:63:f7:74: 5f:7e:e3:b9:d8:89:65:da:f7:64:47:41:2b:ef:25:55:bb:cd: 41:f5:48:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jh0ZOEVwPhQQdbYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YzhlYmI1YWMtYzVjNy00NDQ0LWI4YmEtM2UzZTM1Y2IyMDY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlL4+1YZrdH3p0iCn3NArJL3WJdnWoi5QCw2w TVnGOxmH9cvi3AAo9kRuT6B626DKSln1Hsf1OAMlrnpp3YqmLTgB5iA+E0EiWAmi 7CqRzGLnr5MsBlChhFvCwpYrPgmVLiOHbfY6KRmEv7Cj88/xgtEunG/lICTT2oqK S+J71EyIBZ4KED3KNdvIBql6MpQLIVORF3pfxshGRLHvKjF07vnMfP4IkVRpN09x 5VnfNzmZaeyQwZLucTCV9x2iVztMrw8Bdnp+3kiRO6mnYCkywMD0eaIhidpS3WzF KzfId+JzzyDKIX+4BXGQQGBR9IdJh12vpSprKWuJB/rKtkABaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCZDE3pWpo4L6NOTcH0NPOgMqk6HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMTliMmFmNzktNTExZC0z MzZiLTgwYTQtZWU3YjJiY2NlZDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqGtwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGtOirv+330/W4bm49ilgR4LgpfWvVo4L0Nx2KkMnYgoZbfOhFZnMLPj 0HZN6pw8H+aJOtsYi63RK/wbp7GbHM+2eniyfTAx8t9J49UyRqOOtgfBDA+Ck6fN izqJd84uZeGpv4pqXSuSnuTcvGL6Wxj9w7c/asFGevwdTLnFWHEmOcFgoHT+YHos k4F8qVDe7f/igHU8R6F/RbIRZT4Vmu7u9NKwg3Rwys51EDowz+8yAYbyuqu4jlgL VAxN73alXPmqtOBrNuzx+gx73KfTWsQZmXh1Tt47f+RSh3XzBzUKu6wup7d+amP3 dF9+47nYiWXa92RHQSvvJVW7zUH1SD8= -----END CERTIFICATE-----Generated at Sat Sep 26 12:15:13 2026 by rpki-client