$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2d051cc7-debd-315a-b4b8-a0152c440df8.roa File: 2d051cc7-debd-315a-b4b8-a0152c440df8.roa (raw, json) Hash identifier: ayUppbWU6h6ECMCi2MCHs7uASZfT33Kc4V8h3zolJzU= Subject key identifier: 98:18:FC:C4:7C:DE:4C:8A:A9:F2:A0:41:A8:E6:13:96:E7:7A:B5:7A Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F20F7B092572B19E2BCB7849C Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2d051cc7-debd-315a-b4b8-a0152c440df8.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 168.107.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:b0:92:57:2b:19:e2:bc:b7:84:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=7f67c3f4-8a47-4e3e-bc5c-632aa7ed4fee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ac:51:d6:33:8f:75:fe:37:02:e3:9e:2d:cf: 61:42:b0:5f:15:5c:fd:2e:23:9a:59:1f:c4:8e:7e: f0:37:9e:80:38:9f:4b:ba:cb:6b:4f:21:ee:4e:fc: ba:af:18:d6:89:de:02:44:0b:c3:53:56:aa:3c:a7: 31:be:a8:c0:b9:b4:c7:c8:67:1a:11:47:93:93:44: fa:a1:4c:22:37:53:54:53:4f:48:d6:f2:22:75:cd: 27:09:cb:65:36:dd:c1:43:ba:61:e1:2d:be:6b:50: 82:a3:05:66:55:53:ee:63:f4:19:6c:8f:54:44:d9: 22:f2:e4:c6:05:90:f0:04:9b:91:78:8d:7c:1b:9f: 29:e3:0f:4c:49:19:56:b4:aa:9d:8e:a2:f2:c0:ba: e9:5d:02:bc:18:69:68:1c:b1:16:9c:4e:32:01:24: 04:7a:10:62:ab:b5:d7:aa:32:30:19:38:92:02:cb: 13:84:f4:ae:ff:66:fc:14:55:41:87:ce:3a:d9:b1: 43:cf:76:e7:a7:35:ce:51:ec:86:d2:1c:e9:f8:46: 13:27:6c:21:45:92:27:13:26:55:bd:25:50:39:91: 5c:54:b5:23:ec:4b:a2:27:96:11:ab:d6:c1:b0:e4: f4:81:5d:33:6f:e2:07:e7:2b:e4:1c:79:60:51:83: b2:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:18:FC:C4:7C:DE:4C:8A:A9:F2:A0:41:A8:E6:13:96:E7:7A:B5:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2d051cc7-debd-315a-b4b8-a0152c440df8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.107.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:88:0d:de:d0:ec:6a:7f:7d:0c:22:e4:7f:f8:45:9b:dc:0e: 91:da:bb:0f:1e:73:5a:78:47:b4:ee:e2:99:2c:27:b1:24:90: 10:7d:bd:d6:cc:87:6c:9c:42:ee:0b:a1:1a:f8:37:30:94:3e: cb:69:5e:cf:72:b2:56:44:63:af:e8:07:cf:ad:35:f6:09:25: 9f:6c:d5:6a:88:d5:7a:ee:dc:68:5f:11:2a:60:14:f5:60:4a: cb:09:bd:18:5c:92:0d:6d:aa:da:f1:1a:75:3b:ff:05:ad:3e: b7:74:ef:15:3d:de:d2:66:da:4e:7f:ab:47:3a:01:4f:0e:4a: c8:ab:91:2c:d4:8b:6d:0e:14:1b:90:4e:00:2e:17:b5:ab:55: a7:22:07:4f:d7:8d:6e:52:4b:81:05:1c:02:c3:d6:7a:7f:62: 85:71:f9:f1:70:b7:bb:b3:ac:84:57:1e:d2:76:08:c9:0f:3a: 1e:24:bf:88:4f:e6:29:42:c4:6c:e7:68:72:45:ea:5b:50:ce: cb:05:9f:26:1d:88:19:91:b4:6c:f7:59:59:4e:4b:0c:54:c0: ea:3f:3b:05:83:de:13:c1:e2:0d:0a:27:04:ba:8f:21:0f:c9: f0:37:68:5e:86:b1:a4:c6:37:63:08:66:6c:d9:27:86:c1:71: b3:ca:6c:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g97CSVysZ4ry3hJwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk N2Y2N2MzZjQtOGE0Ny00ZTNlLWJjNWMtNjMyYWE3ZWQ0ZmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6xR1jOPdf43AuOeLc9hQrBfFVz9LiOaWR/E jn7wN56AOJ9LustrTyHuTvy6rxjWid4CRAvDU1aqPKcxvqjAubTHyGcaEUeTk0T6 oUwiN1NUU09I1vIidc0nCctlNt3BQ7ph4S2+a1CCowVmVVPuY/QZbI9URNki8uTG BZDwBJuReI18G58p4w9MSRlWtKqdjqLywLrpXQK8GGloHLEWnE4yASQEehBiq7XX qjIwGTiSAssThPSu/2b8FFVBh8462bFDz3bnpzXOUeyG0hzp+EYTJ2whRZInEyZV vSVQOZFcVLUj7EuiJ5YRq9bBsOT0gV0zb+IH5yvkHHlgUYOy+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJgY/MR83kyKqfKgQajmE5bnerV6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMmQwNTFjYzctZGViZC0z MTVhLWI0YjgtYTAxNTJjNDQwZGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqGvnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFqIDd7Q7Gp/fQwi5H/4RZvcDpHauw8ec1p4R7Tu4pksJ7EkkBB9vdbM h2ycQu4LoRr4NzCUPstpXs9yslZEY6/oB8+tNfYJJZ9s1WqI1Xru3GhfESpgFPVg SssJvRhckg1tqtrxGnU7/wWtPrd07xU93tJm2k5/q0c6AU8OSsirkSzUi20OFBuQ TgAuF7WrVaciB0/XjW5SS4EFHALD1np/YoVx+fFwt7uzrIRXHtJ2CMkPOh4kv4hP 5ilCxGznaHJF6ltQzssFnyYdiBmRtGz3WVlOSwxUwOo/OwWD3hPB4g0KJwS6jyEP yfA3aF6GsaTGN2MIZmzZJ4bBcbPKbLs= -----END CERTIFICATE-----Generated at Wed Sep 23 00:09:55 2026 by rpki-client