$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/658a0ed3-fb77-3710-b9de-363e15a1293b.roa File: 658a0ed3-fb77-3710-b9de-363e15a1293b.roa (raw, json) Hash identifier: DbdoXFNgbzDpBFxwmvBQ6+HfO6AMaTDAp24FkTfTWp8= Subject key identifier: 13:29:BF:0D:91:93:1A:25:5C:EE:2D:0D:08:65:06:78:E8:38:1C:2C Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F103799C6DE9A1F6A4C097640 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/658a0ed3-fb77-3710-b9de-363e15a1293b.roa Signing time: Fri 04 Sep 2026 13:00:12 +0000 ROA not before: Fri 04 Sep 2026 13:00:12 +0000 ROA not after: Thu 03 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 159.112.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:10:37:99:c6:de:9a:1f:6a:4c:09:76:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 4 13:00:12 2026 GMT Not After : Dec 3 14:00:12 2026 GMT Subject: CN=20a6ebdd-4cf7-4956-919e-461a976eb88d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:df:8f:26:17:43:16:7e:8c:23:df:5a:3e:0b: 62:84:8e:51:b6:66:c5:08:95:2e:30:1d:75:91:49: 88:7b:1d:58:0f:31:ff:d2:90:66:c9:61:b4:18:9c: 7e:05:dc:87:a5:6e:58:13:a6:2a:c1:44:54:75:ec: f5:04:f5:ea:b5:93:a9:04:a1:32:0f:f5:b3:1e:c1: 51:96:48:2a:d7:19:65:09:8f:d3:5b:08:42:a2:5e: 89:ae:dc:8f:e1:8f:17:03:cf:87:ee:bf:f2:89:8e: 20:91:19:d2:f6:ce:32:4a:04:8a:49:8e:40:e2:06: a5:f1:d1:1b:19:97:ef:38:53:4f:ca:fb:2f:a1:49: a3:d6:50:e1:17:e3:8b:2c:ac:a1:6c:2b:98:9f:8c: 86:ba:b0:ed:04:59:2b:81:8e:9c:c4:af:74:14:05: 25:fb:fb:79:70:c5:26:20:83:73:81:4b:c9:f6:b3: fb:42:88:1e:3b:42:df:91:17:b6:09:97:ab:01:c4: 23:15:70:4c:ec:1f:9e:5f:41:3f:f1:9d:1c:ef:f8: 73:49:2e:03:a4:49:8e:19:99:00:88:93:68:d4:b9: a6:86:36:3c:f6:34:59:5c:79:dd:4e:51:ef:65:73: e2:39:05:68:74:76:82:f2:aa:de:d1:12:61:ed:d4: 41:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:29:BF:0D:91:93:1A:25:5C:EE:2D:0D:08:65:06:78:E8:38:1C:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/658a0ed3-fb77-3710-b9de-363e15a1293b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 159.112.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:86:08:00:f4:78:e1:b6:33:08:f5:f5:38:f7:6e:c1:f1:aa: 18:22:de:89:d2:66:5a:76:0a:1e:0e:99:7d:ed:f4:2b:ac:b5: a8:b4:3b:90:d3:0e:13:fe:5e:de:01:8f:9a:8a:48:e2:e9:52: 9c:22:a5:c6:05:d0:58:5c:05:60:60:0c:53:98:84:cf:72:34: 94:c0:47:6f:34:cc:0d:f3:d0:5b:9e:5c:6d:43:46:07:af:d8: f2:2a:7f:82:fc:27:ce:f3:f0:08:5b:46:82:8c:f7:45:42:e8: fa:67:ba:b8:ec:0a:2f:f0:f5:1c:41:93:ac:65:5e:43:f0:86: 63:4d:5a:89:28:da:4f:49:07:41:96:e3:15:e9:9b:cd:48:1d: f1:0f:db:c1:c9:3a:95:49:06:05:13:65:89:47:12:b3:4b:d0: 79:79:f7:fb:91:21:b5:1a:c0:02:f0:40:57:7b:de:fd:8d:fb: 5b:f2:c6:1f:71:61:85:be:70:b9:97:7e:2e:6e:ed:a1:a2:c8: df:9c:ae:e2:ed:91:6a:73:1f:d6:b1:fc:53:03:d6:c8:1e:86: a6:00:25:6a:9c:3f:da:53:07:f6:77:31:eb:a9:7b:df:49:0f: ec:4b:59:28:86:65:97:2b:31:2c:c3:fa:d4:49:c2:9c:1f:ea: 33:96:97:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8QN5nG3pofakwJdkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNDEzMDAxMloXDTI2MTIwMzE0MDAxMlowLzEtMCsGA1UEAxMk MjBhNmViZGQtNGNmNy00OTU2LTkxOWUtNDYxYTk3NmViODhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnN+PJhdDFn6MI99aPgtihI5RtmbFCJUuMB11 kUmIex1YDzH/0pBmyWG0GJx+BdyHpW5YE6YqwURUdez1BPXqtZOpBKEyD/WzHsFR lkgq1xllCY/TWwhCol6JrtyP4Y8XA8+H7r/yiY4gkRnS9s4ySgSKSY5A4gal8dEb GZfvOFNPyvsvoUmj1lDhF+OLLKyhbCuYn4yGurDtBFkrgY6cxK90FAUl+/t5cMUm IINzgUvJ9rP7QogeO0LfkRe2CZerAcQjFXBM7B+eX0E/8Z0c7/hzSS4DpEmOGZkA iJNo1LmmhjY89jRZXHndTlHvZXPiOQVodHaC8qre0RJh7dRBlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBMpvw2RkxolXO4tDQhlBnjoOBwsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNjU4YTBlZDMtZmI3Ny0z NzEwLWI5ZGUtMzYzZTE1YTEyOTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCn3CsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIqGCAD0eOG2Mwj19Tj3bsHxqhgi3onSZlp2Ch4OmX3t9Custai0O5DT DhP+Xt4Bj5qKSOLpUpwipcYF0FhcBWBgDFOYhM9yNJTAR280zA3z0FueXG1DRgev 2PIqf4L8J87z8AhbRoKM90VC6PpnurjsCi/w9RxBk6xlXkPwhmNNWoko2k9JB0GW 4xXpm81IHfEP28HJOpVJBgUTZYlHErNL0Hl59/uRIbUawALwQFd73v2N+1vyxh9x YYW+cLmXfi5u7aGiyN+cruLtkWpzH9ax/FMD1sgehqYAJWqcP9pTB/Z3Meupe99J D+xLWSiGZZcrMSzD+tRJwpwf6jOWlxY= -----END CERTIFICATE-----Generated at Sun Sep 27 02:59:25 2026 by rpki-client