$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9f402ac2-805b-33f9-8973-e24027b97258.roa File: 9f402ac2-805b-33f9-8973-e24027b97258.roa (raw, json) Hash identifier: TJThAXH8HxuVwhNjIsCAFXdUcXf+pEIKiCbDxBPCk7E= Subject key identifier: 57:98:42:3F:7D:0B:77:F1:B5:91:43:3A:F4:F1:17:74:32:6D:BE:BE Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F20F7D60BE92CB104CA8C8E60 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9f402ac2-805b-33f9-8973-e24027b97258.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 168.107.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:d6:0b:e9:2c:b1:04:ca:8c:8e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=4421ec98-11e5-420e-b9af-ba80116748db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c8:54:1e:44:9f:e1:fc:8f:d1:07:c4:f6:37: 9f:12:22:78:d1:6e:6e:66:fd:f0:83:66:39:26:1a: e0:6d:63:16:e8:44:7c:8c:4b:08:13:d3:1a:03:c2: 30:a6:b9:4f:58:c3:33:e6:d3:04:cb:e3:0b:56:dc: 4f:73:99:38:4b:f1:f5:19:86:93:46:74:4b:8c:62: dc:44:55:63:52:87:6e:8a:63:fc:44:c3:73:05:4a: b3:e1:ac:83:70:83:f1:58:9e:1a:77:35:51:98:78: 19:3e:dd:b0:79:6b:a3:4a:e0:98:30:97:5d:a0:43: dd:b1:f8:a7:28:7f:42:bd:d5:cf:93:1b:9a:1d:20: a2:b6:51:d6:8e:f8:c0:4a:c1:b5:1c:2e:b5:e4:94: 28:ad:85:4b:e1:d9:b6:e9:68:ad:36:ed:ff:d9:c5: 40:6b:e6:5d:71:93:fa:8d:20:1b:29:7f:d5:6c:14: 15:9d:1e:3b:1f:a0:c8:9f:ce:97:00:e1:f2:ef:7e: 4d:19:cd:9f:81:0a:65:3e:10:49:68:0b:b8:6d:ab: 6e:d5:0b:ba:aa:4c:52:26:74:ae:45:30:77:0c:fd: 40:d7:d9:8d:fd:b1:62:4f:7f:28:cb:a3:e6:b5:34: a8:bd:aa:47:83:68:03:b3:13:cc:ae:47:80:30:93: fb:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:98:42:3F:7D:0B:77:F1:B5:91:43:3A:F4:F1:17:74:32:6D:BE:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9f402ac2-805b-33f9-8973-e24027b97258.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.107.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:e3:be:53:c8:4e:92:89:04:bd:6c:88:0c:0b:9d:bc:93:ca: d5:5e:93:2c:1c:e4:a8:f7:f1:0d:dd:ef:61:41:33:e9:c0:97: 18:10:48:b8:50:cc:dd:e2:6f:48:3d:95:89:5a:2f:5d:23:dc: 2d:2c:dc:a0:d6:84:0e:c1:25:de:65:81:34:5f:94:36:dd:ba: 1f:8e:12:ab:b8:dd:b9:4a:98:9f:b3:37:e8:0b:ea:45:08:59: c6:39:a6:5b:ee:96:6f:39:c4:a4:a1:bf:a1:44:74:cc:ea:35: b9:03:8e:3f:bd:5c:2d:21:31:5f:9f:76:03:e7:8a:7e:be:57: c4:fc:a3:c5:77:17:fb:40:f7:6d:d6:8a:06:7e:cc:77:8a:02: 88:7f:f5:69:47:40:6e:62:eb:b7:8f:f3:f4:20:cc:ae:30:6a: 3a:fc:66:88:e4:0e:e1:29:89:76:08:ad:ad:6e:ec:fc:c2:8c: a2:f4:8c:4f:1e:8e:e8:c9:45:44:b3:64:48:ab:18:ea:c1:66: 3c:32:c1:30:ff:e5:ee:f0:8a:be:f9:eb:98:39:6a:72:6a:3c: 1f:05:51:0e:02:ab:8d:f4:b0:c4:21:5a:fc:66:28:fd:63:36: ea:5d:a3:09:eb:bd:08:f4:b1:b8:58:52:e7:24:c0:48:da:39: 72:35:ad:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g99YL6SyxBMqMjmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk NDQyMWVjOTgtMTFlNS00MjBlLWI5YWYtYmE4MDExNjc0OGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkchUHkSf4fyP0QfE9jefEiJ40W5uZv3wg2Y5 JhrgbWMW6ER8jEsIE9MaA8IwprlPWMMz5tMEy+MLVtxPc5k4S/H1GYaTRnRLjGLc RFVjUoduimP8RMNzBUqz4ayDcIPxWJ4adzVRmHgZPt2weWujSuCYMJddoEPdsfin KH9CvdXPkxuaHSCitlHWjvjASsG1HC615JQorYVL4dm26WitNu3/2cVAa+ZdcZP6 jSAbKX/VbBQVnR47H6DIn86XAOHy735NGc2fgQplPhBJaAu4batu1Qu6qkxSJnSu RTB3DP1A19mN/bFiT38oy6PmtTSovapHg2gDsxPMrkeAMJP7AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFeYQj99C3fxtZFDOvTxF3Qybb6+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOWY0MDJhYzItODA1Yi0z M2Y5LTg5NzMtZTI0MDI3Yjk3MjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqGvkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7jvlPITpKJBL1siAwLnbyTytVekywc5Kj38Q3d72FBM+nAlxgQSLhQ zN3ib0g9lYlaL10j3C0s3KDWhA7BJd5lgTRflDbduh+OEqu43blKmJ+zN+gL6kUI WcY5plvulm85xKShv6FEdMzqNbkDjj+9XC0hMV+fdgPnin6+V8T8o8V3F/tA923W igZ+zHeKAoh/9WlHQG5i67eP8/QgzK4wajr8ZojkDuEpiXYIra1u7PzCjKL0jE8e jujJRUSzZEirGOrBZjwywTD/5e7wir7565g5anJqPB8FUQ4Cq430sMQhWvxmKP1j NupdownrvQj0sbhYUuckwEjaOXI1rW0= -----END CERTIFICATE-----Generated at Thu Sep 24 14:55:14 2026 by rpki-client