$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/90dd1653-37f3-3d8e-9000-5e61f1f10d2c.roa File: 90dd1653-37f3-3d8e-9000-5e61f1f10d2c.roa (raw, json) Hash identifier: mSlt/mbGWQ/EjFFgWPZYrA6cJaN7fDptmAxAf0vIS+I= Subject key identifier: A8:AA:FB:73:1E:60:38:46:F3:44:49:83:25:68:2A:49:D0:65:86:9F Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F2527A0BC173703E70BDAEA00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/90dd1653-37f3-3d8e-9000-5e61f1f10d2c.roa Signing time: Sat 12 Sep 2026 01:00:12 +0000 ROA not before: Sat 12 Sep 2026 01:00:12 +0000 ROA not after: Fri 11 Dec 2026 02:00:12 +0000 asID: 2763 IP address blocks: 156.151.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:25:27:a0:bc:17:37:03:e7:0b:da:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 12 01:00:12 2026 GMT Not After : Dec 11 02:00:12 2026 GMT Subject: CN=2443e5d8-345c-4886-943c-9cc4854a7a48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:3e:28:0d:12:83:1a:52:5d:ee:14:27:a6:51: f5:fe:57:4d:bf:9c:00:07:02:a8:fb:cf:f1:64:7b: 5e:65:60:c2:ed:d3:17:5c:dd:16:88:6e:9a:20:74: 96:82:a8:d2:94:d4:74:71:14:cb:01:8f:70:d4:41: 74:39:0d:d6:35:bf:e0:1a:1f:7b:98:a4:32:62:6d: 4e:77:39:d3:73:a3:6e:ad:55:d2:fc:be:ee:3e:13: ca:fb:8f:1c:1f:07:d2:59:57:ec:69:a6:1f:79:83: e4:86:58:36:5a:8b:3d:ae:a6:ce:3d:71:0d:2e:9d: ec:39:24:fb:53:ed:2e:36:ae:03:c2:4d:c5:3d:2b: 7d:a0:72:94:3c:44:57:8d:6c:84:04:db:dd:1f:a5: a4:4e:33:0f:d6:61:3f:13:8a:84:ef:ac:bc:f8:26: a8:a4:db:c4:7f:67:ea:66:f5:a9:11:e2:36:18:38: 9b:eb:01:e5:df:ee:22:2b:2c:3f:be:65:f8:84:25: 5a:bf:27:ed:6a:02:6c:0d:46:bb:bd:f7:18:76:a4: 8d:3a:58:8c:b0:ac:7f:e0:51:c4:bc:52:86:2b:c3: 6d:d1:75:43:e7:fe:1c:b6:fb:c3:e4:7f:1b:8d:91: d9:c0:4d:2f:bf:07:9e:fd:14:5d:4d:50:d8:2b:45: 13:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:AA:FB:73:1E:60:38:46:F3:44:49:83:25:68:2A:49:D0:65:86:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/90dd1653-37f3-3d8e-9000-5e61f1f10d2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 156.151.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:ea:22:69:8c:7b:66:15:81:b3:a9:27:8a:7a:0e:7d:d9:8b: e3:10:ba:cf:97:c2:69:88:65:1a:09:69:64:25:fe:96:29:30: 4f:dd:1f:a2:3e:16:60:d4:71:59:79:98:54:ea:81:3d:3a:1f: c0:71:82:e1:5d:f1:53:58:6e:be:ff:3e:85:f4:aa:cb:c8:19: 7c:75:5e:c8:f7:df:16:df:17:6e:d4:dc:0d:fa:ec:32:d0:87: c3:23:50:81:5c:6f:f8:0a:95:47:af:5e:c0:80:7e:24:8c:00: e3:b2:e6:f5:e3:4c:9a:9d:55:bf:2f:bc:06:d2:35:92:90:08: 9e:d8:b9:96:00:ea:fe:06:2a:c7:b0:e2:28:7c:26:ef:1d:e5: 46:7e:e5:cb:11:91:7e:e9:0e:62:b7:4a:50:ff:75:91:69:1f: 26:eb:4c:a6:4c:94:be:7b:ca:85:db:73:d0:ee:41:5d:a6:c4: d9:c6:d7:aa:3d:6d:a6:94:47:c0:e7:e5:ac:94:4f:80:c9:f0: 2a:71:35:82:0c:a2:cf:27:0d:cb:b6:af:f2:87:ed:cb:26:d2: cb:bc:17:ff:43:d3:ed:2e:1c:36:cb:f9:c0:8d:81:e8:75:be: f6:5b:b3:25:60:c7:e3:be:01:99:fd:73:a3:2b:90:2d:8a:6d: 56:3e:91:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8lJ6C8FzcD5wva6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkxMjAxMDAxMloXDTI2MTIxMTAyMDAxMlowLzEtMCsGA1UEAxMk MjQ0M2U1ZDgtMzQ1Yy00ODg2LTk0M2MtOWNjNDg1NGE3YTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAij4oDRKDGlJd7hQnplH1/ldNv5wABwKo+8/x ZHteZWDC7dMXXN0WiG6aIHSWgqjSlNR0cRTLAY9w1EF0OQ3WNb/gGh97mKQyYm1O dznTc6NurVXS/L7uPhPK+48cHwfSWVfsaaYfeYPkhlg2Wos9rqbOPXENLp3sOST7 U+0uNq4Dwk3FPSt9oHKUPERXjWyEBNvdH6WkTjMP1mE/E4qE76y8+CaopNvEf2fq ZvWpEeI2GDib6wHl3+4iKyw/vmX4hCVavyftagJsDUa7vfcYdqSNOliMsKx/4FHE vFKGK8Nt0XVD5/4ctvvD5H8bjZHZwE0vvwee/RRdTVDYK0UTswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKiq+3MeYDhG80RJgyVoKknQZYafMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOTBkZDE2NTMtMzdmMy0z ZDhlLTkwMDAtNWU2MWYxZjEwZDJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJfTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIjqImmMe2YVgbOpJ4p6Dn3Zi+MQus+XwmmIZRoJaWQl/pYpME/dH6I+ FmDUcVl5mFTqgT06H8BxguFd8VNYbr7/PoX0qsvIGXx1Xsj33xbfF27U3A367DLQ h8MjUIFcb/gKlUevXsCAfiSMAOOy5vXjTJqdVb8vvAbSNZKQCJ7YuZYA6v4GKsew 4ih8Ju8d5UZ+5csRkX7pDmK3SlD/dZFpHybrTKZMlL57yoXbc9DuQV2mxNnG16o9 baaUR8Dn5ayUT4DJ8CpxNYIMos8nDcu2r/KH7csm0su8F/9D0+0uHDbL+cCNgeh1 vvZbsyVgx+O+AZn9c6MrkC2KbVY+kR8= -----END CERTIFICATE-----Generated at Thu Sep 24 22:33:18 2026 by rpki-client