$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4f0cf56c-094b-3ec5-8954-8e7090994967.roa File: 4f0cf56c-094b-3ec5-8954-8e7090994967.roa (raw, json) Hash identifier: CdG+0EW+53TRTjAVW4IF1NkD/9QE0dK7KMq/N29m4NQ= Subject key identifier: C2:A7:09:A1:8F:FB:20:C3:99:0E:5B:C1:75:F3:F5:3E:3A:98:52:17 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F0D6CF62C6DE7693C6CC22D00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4f0cf56c-094b-3ec5-8954-8e7090994967.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 152.67.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:f6:2c:6d:e7:69:3c:6c:c2:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=7ed53b33-e6f1-46c2-a27c-4f6e03a85d2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ee:ee:56:f5:10:67:ba:a3:d9:ef:16:8f:02: ba:63:c8:c5:b8:32:da:13:c9:4c:87:c5:0c:b0:20: 3e:d4:40:ce:b9:fb:75:eb:1d:93:a3:dd:9b:d6:4a: 41:c3:26:9d:af:53:d3:b7:ae:c1:f8:f5:d0:70:dc: 58:8c:52:cf:3a:56:6a:b6:ae:31:03:c1:f4:b0:45: 69:fb:8c:f3:18:32:8a:99:60:2c:9d:1c:54:90:2b: 01:30:13:65:05:61:9c:3b:b7:3a:58:28:76:bd:85: 67:a7:f1:14:b0:c1:07:12:c4:d9:93:83:a8:f3:9a: cc:d1:61:98:34:71:55:aa:53:5a:d4:19:69:c9:e5: 47:73:01:6a:b9:47:7d:c3:aa:9d:2b:7d:d3:42:6d: 7b:a7:47:32:21:37:c0:ea:85:9c:49:ac:27:4e:75: 1a:16:5d:a4:f3:51:dc:c8:06:b1:db:7f:a0:e0:22: 1a:10:ad:84:82:51:9f:64:09:88:7f:e0:6b:4e:f4: f4:8e:45:3c:2c:a1:46:6b:95:12:4c:78:f4:98:c0: c5:e1:03:f8:0a:08:e6:af:b5:d5:57:5d:9e:07:c8: 1d:85:70:cf:fe:34:94:98:86:94:37:fe:15:a1:bc: 46:c7:3c:2e:87:98:85:65:94:e3:f4:00:10:43:e9: a3:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:A7:09:A1:8F:FB:20:C3:99:0E:5B:C1:75:F3:F5:3E:3A:98:52:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4f0cf56c-094b-3ec5-8954-8e7090994967.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 152.67.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:cb:81:68:17:f8:45:66:8d:dd:86:57:3e:7b:1e:ec:1e:b3: 1f:dc:44:a4:14:34:c4:ad:eb:97:c2:9d:39:eb:20:01:a0:f8: 7d:82:0e:f6:52:08:1a:fa:21:29:7d:b8:47:02:c6:c9:4f:fd: 94:5a:21:e8:c5:d1:81:28:cf:9b:a0:cb:ac:24:2d:ce:af:ea: 50:89:d3:5f:fd:e9:68:98:ab:29:5d:cd:3b:78:18:2c:1f:f7: d2:08:c8:a8:9c:d9:9d:db:8b:68:ca:03:b7:77:c0:1b:66:0c: 3e:d8:01:89:c1:f8:0e:81:53:e6:5c:e9:c6:3f:3b:17:56:52: 98:6f:9c:ae:ef:bf:44:9d:13:8c:5a:30:d4:60:43:f3:06:de: d7:4a:ef:bb:00:c2:81:0f:7f:5b:ba:10:cf:6f:06:a8:4e:13: 23:a3:f1:15:27:a1:1c:e1:8e:78:80:c2:69:e0:e7:ea:fb:b1: fb:30:18:da:92:87:01:48:2d:12:89:42:cc:94:0e:17:b1:fd: 47:1a:6c:30:28:fb:4e:93:7e:89:2f:dd:9e:c0:89:cb:79:12: 2b:fb:60:a9:be:6c:e9:e4:f1:7c:88:96:fb:11:ea:cf:74:13: b0:ba:6b:c8:3c:cd:cc:f9:01:8a:da:a9:4e:1c:5d:2f:e9:9b: 99:0d:6c:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbPYsbedpPGzCLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk N2VkNTNiMzMtZTZmMS00NmMyLWEyN2MtNGY2ZTAzYTg1ZDJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlO7uVvUQZ7qj2e8WjwK6Y8jFuDLaE8lMh8UM sCA+1EDOuft16x2To92b1kpBwyadr1PTt67B+PXQcNxYjFLPOlZqtq4xA8H0sEVp +4zzGDKKmWAsnRxUkCsBMBNlBWGcO7c6WCh2vYVnp/EUsMEHEsTZk4Oo85rM0WGY NHFVqlNa1BlpyeVHcwFquUd9w6qdK33TQm17p0cyITfA6oWcSawnTnUaFl2k81Hc yAax23+g4CIaEK2EglGfZAmIf+BrTvT0jkU8LKFGa5USTHj0mMDF4QP4Cgjmr7XV V12eB8gdhXDP/jSUmIaUN/4VobxGxzwuh5iFZZTj9AAQQ+mjBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMKnCaGP+yDDmQ5bwXXz9T46mFIXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNGYwY2Y1NmMtMDk0Yi0z ZWM1LTg5NTQtOGU3MDkwOTk0OTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmENAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJzLgWgX+EVmjd2GVz57Huwesx/cRKQUNMSt65fCnTnrIAGg+H2CDvZS CBr6ISl9uEcCxslP/ZRaIejF0YEoz5ugy6wkLc6v6lCJ01/96WiYqyldzTt4GCwf 99IIyKic2Z3bi2jKA7d3wBtmDD7YAYnB+A6BU+Zc6cY/OxdWUphvnK7vv0SdE4xa MNRgQ/MG3tdK77sAwoEPf1u6EM9vBqhOEyOj8RUnoRzhjniAwmng5+r7sfswGNqS hwFILRKJQsyUDhex/UcabDAo+06Tfokv3Z7Aict5Eiv7YKm+bOnk8XyIlvsR6s90 E7C6a8g8zcz5AYraqU4cXS/pm5kNbFo= -----END CERTIFICATE-----Generated at Sat Sep 26 07:32:23 2026 by rpki-client