$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/424acbaa-c902-3a4c-bd65-d3cb8493345c.roa File: 424acbaa-c902-3a4c-bd65-d3cb8493345c.roa (raw, json) Hash identifier: gjVSAIx8H3QR39Jpt7WPPy6TaRZLxZYdK+H79wCl6/c= Subject key identifier: AE:1E:4B:9D:04:1D:5F:2B:38:08:CC:A7:61:57:E3:B6:55:59:1D:E9 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E7FFA2E1AA1B99E616A04FB80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/424acbaa-c902-3a4c-bd65-d3cb8493345c.roa Signing time: Tue 14 Jul 2026 21:00:12 +0000 ROA not before: Tue 14 Jul 2026 21:00:12 +0000 ROA not after: Mon 12 Oct 2026 21:00:12 +0000 asID: 31898 IP address blocks: 108.59.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7f:fa:2e:1a:a1:b9:9e:61:6a:04:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 14 21:00:12 2026 GMT Not After : Oct 12 21:00:12 2026 GMT Subject: CN=cd090fe9-2de6-4378-b305-27ef2adce567 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0b:8a:3d:80:de:32:c1:4b:a4:ae:9e:01:5d: 7b:73:16:12:4f:0a:63:19:da:3a:cf:71:a9:cf:9f: 8f:50:f6:47:e1:2e:27:22:e3:a9:f0:2f:7d:67:ef: a3:ae:e2:9f:46:66:e7:95:16:7b:9d:80:1e:e5:ef: 7e:1c:88:e7:f6:df:67:d5:2f:34:b6:cd:04:49:89: 70:b7:b2:a3:5d:4a:71:bc:28:01:9f:1c:1e:1e:55: 92:90:68:6b:81:c1:a7:6d:2a:72:5a:57:d3:cf:aa: bd:6c:17:9b:86:19:cf:15:09:28:c4:fe:0d:dc:b6: 53:03:88:0b:46:a1:7e:fd:0b:d9:a4:f9:42:37:80: 7a:96:71:51:01:02:76:ad:d7:62:c6:59:6e:04:b4: d1:d9:7a:64:26:ef:3f:4d:bf:1e:a3:df:76:d0:82: a6:b0:b0:4c:a8:99:bf:41:95:cc:db:3f:80:55:2e: 88:d7:3a:56:a4:86:18:7e:5c:54:7a:83:26:87:1e: d8:b0:43:b0:f1:a9:ec:fd:11:17:39:39:d8:29:de: f0:78:11:ce:58:72:03:d3:83:ce:21:02:81:04:6b: f0:19:ce:b9:ed:2e:f6:a0:39:57:6c:0c:05:12:ad: 89:72:bf:36:f3:c0:32:68:59:2a:ca:91:20:f4:c7: 28:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:1E:4B:9D:04:1D:5F:2B:38:08:CC:A7:61:57:E3:B6:55:59:1D:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/424acbaa-c902-3a4c-bd65-d3cb8493345c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 108.59.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:08:79:c6:3c:ea:09:6c:98:65:a8:92:fa:07:c0:48:37:ab: c8:22:12:91:02:84:c7:28:dd:39:91:5c:0b:18:7e:f5:d6:69: 5a:ac:df:f7:fb:6e:d9:00:db:0a:2c:0b:a7:38:14:9e:45:61: c7:08:c1:29:d4:5d:8f:3f:eb:96:ff:e3:b8:73:a7:4f:42:d3: 24:01:f8:9a:74:5c:90:e9:98:53:16:b9:ce:32:8a:1d:c7:55: 6a:d7:75:a2:6e:6e:a0:1c:6d:59:e8:48:ca:90:aa:1d:6e:fb: b8:3c:16:77:c3:1e:c5:25:13:c8:39:28:a0:35:79:e3:50:2c: c5:59:e7:3b:fd:d5:17:b7:79:14:2d:e2:01:89:da:df:8c:3c: f0:64:8a:cc:d7:54:2b:cd:77:53:7f:e1:39:f1:55:85:8b:0c: c3:ea:ea:28:5b:b0:fb:b7:45:e1:a8:d8:48:4c:66:e7:00:35: 49:70:6f:c2:2b:10:b6:76:b0:39:37:a6:51:08:35:58:5f:38: 78:87:36:0a:ea:a1:1e:5d:ca:89:9b:5c:a4:93:c5:f8:20:91: 57:68:c3:47:bd:49:a0:be:52:b4:04:d8:6c:41:94:20:85:bf: a1:6a:01:1a:99:24:d8:9c:33:5e:27:61:a3:8f:84:c0:a8:f2: 38:7f:87:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5/+i4aobmeYWoE+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcxNDIxMDAxMloXDTI2MTAxMjIxMDAxMlowLzEtMCsGA1UEAxMk Y2QwOTBmZTktMmRlNi00Mzc4LWIzMDUtMjdlZjJhZGNlNTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqguKPYDeMsFLpK6eAV17cxYSTwpjGdo6z3Gp z5+PUPZH4S4nIuOp8C99Z++jruKfRmbnlRZ7nYAe5e9+HIjn9t9n1S80ts0ESYlw t7KjXUpxvCgBnxweHlWSkGhrgcGnbSpyWlfTz6q9bBebhhnPFQkoxP4N3LZTA4gL RqF+/QvZpPlCN4B6lnFRAQJ2rddixlluBLTR2XpkJu8/Tb8eo9920IKmsLBMqJm/ QZXM2z+AVS6I1zpWpIYYflxUeoMmhx7YsEOw8ans/REXOTnYKd7weBHOWHID04PO IQKBBGvwGc657S72oDlXbAwFEq2Jcr8288AyaFkqypEg9McoPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK4eS50EHV8rOAjMp2FX47ZVWR3pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNDI0YWNiYWEtYzkwMi0z YTRjLWJkNjUtZDNjYjg0OTMzNDVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbDujMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKwIecY86glsmGWokvoHwEg3q8giEpEChMco3TmRXAsYfvXWaVqs3/f7 btkA2wosC6c4FJ5FYccIwSnUXY8/65b/47hzp09C0yQB+Jp0XJDpmFMWuc4yih3H VWrXdaJubqAcbVnoSMqQqh1u+7g8FnfDHsUlE8g5KKA1eeNQLMVZ5zv91Re3eRQt 4gGJ2t+MPPBkiszXVCvNd1N/4TnxVYWLDMPq6ihbsPu3ReGo2EhMZucANUlwb8Ir ELZ2sDk3plEINVhfOHiHNgrqoR5dyombXKSTxfggkVdow0e9SaC+UrQE2GxBlCCF v6FqARqZJNicM14nYaOPhMCo8jh/h0o= -----END CERTIFICATE-----Generated at Fri Jul 24 00:34:15 2026 by rpki-client