$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ab8ec3f5-4f9b-37d8-8b5e-6a27265d3f4c.roa File: ab8ec3f5-4f9b-37d8-8b5e-6a27265d3f4c.roa (raw, json) Hash identifier: bJ+Tzch0n1gbTvmiG4hUUpGi2NUD29bNFbvKOijqyUk= Subject key identifier: 15:FA:C7:AE:C2:CD:05:B9:68:AE:0F:27:F2:6B:B2:38:28:78:A4:83 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F4989E1B8F0E82C969EF1BE80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ab8ec3f5-4f9b-37d8-8b5e-6a27265d3f4c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 54253 IP address blocks: 151.104.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:e1:b8:f0:e8:2c:96:9e:f1:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=6fa6a7f8-1ea3-467c-a16e-195712ce90be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:4c:01:49:47:c4:bb:1a:84:02:71:e6:fe:ea: ba:0c:1e:23:90:e7:6c:26:02:42:0e:0e:11:74:14: d3:e9:f9:00:08:4b:ac:65:9c:65:17:43:80:7e:2b: dd:74:88:ab:ba:f3:7b:fe:75:15:49:98:32:52:93: 44:1f:c7:d3:23:4f:cb:f7:2b:7d:4b:2b:69:68:50: e5:0d:44:92:40:f0:ed:a8:8b:9a:ca:d1:61:f6:17: 80:53:57:e1:d9:89:88:ef:4f:f6:fb:c4:60:2b:69: ea:dd:69:d1:31:02:5d:24:a9:a6:da:be:c8:6a:e6: d0:1c:49:b4:38:83:1f:9a:e3:3c:0d:54:49:0b:c7: 7c:b6:77:33:e5:ad:95:41:bc:24:d5:68:41:66:9f: 95:e3:96:af:a6:86:4a:ee:df:7a:69:57:0d:02:e2: 48:80:46:cd:28:ae:71:c0:15:1c:2a:82:28:c3:05: 75:6e:db:e9:29:79:ca:e7:96:7c:a4:b0:bf:19:5c: 28:c3:67:93:56:3b:b4:46:6f:c6:ca:7c:73:59:bf: 4a:a8:04:13:82:b5:90:b7:58:ca:0d:f8:33:97:59: 4f:bf:38:66:a9:70:d0:24:6a:c4:45:bf:09:8c:4f: 19:82:91:4b:5e:db:24:fd:41:82:c8:d9:9f:5a:95: 0b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:FA:C7:AE:C2:CD:05:B9:68:AE:0F:27:F2:6B:B2:38:28:78:A4:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ab8ec3f5-4f9b-37d8-8b5e-6a27265d3f4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 151.104.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:50:70:c2:41:27:c7:f4:37:40:c9:34:3b:bd:ed:de:08:15: fa:69:e5:53:77:5e:2b:0c:a9:8b:c7:10:73:42:c6:9d:de:26: 10:4d:a8:69:57:fb:f1:9a:d0:15:f8:49:4b:de:62:2a:74:d4: 56:bc:be:a9:d3:2a:69:15:e3:00:77:61:54:da:57:48:2e:f2: 69:8c:3c:ce:d6:d9:5a:ae:1b:c5:2d:3a:77:de:29:5a:3a:90: a8:c5:2b:90:91:6d:73:eb:e9:7a:f7:55:b4:53:3a:1c:e3:20: 63:b1:ee:69:0d:fb:bd:c4:74:fa:6c:3c:e2:dd:78:99:ac:15: 22:0d:2c:fb:13:1f:bb:06:c8:61:65:44:d1:34:0e:eb:7e:d9: 57:4a:bd:14:62:84:bd:40:b8:9f:5e:29:39:c9:d8:2f:7c:26: e9:12:13:f2:8e:28:2b:75:f8:93:d8:bc:e4:0a:04:fb:43:25: f4:be:47:d9:36:aa:b6:c1:16:50:ad:b4:21:11:20:5d:b5:30: a5:ad:72:db:77:ae:77:41:b1:ab:d3:89:87:19:c6:75:cd:91: 3e:da:f6:84:c6:96:54:74:2b:aa:cd:d2:3f:c5:08:d3:c2:b1: 16:4e:98:39:a7:7a:ec:5b:13:34:9e:46:61:77:26:72:bf:45: 5a:ea:b9:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JieG48Ogslp7xvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NmZhNmE3ZjgtMWVhMy00NjdjLWExNmUtMTk1NzEyY2U5MGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20wBSUfEuxqEAnHm/uq6DB4jkOdsJgJCDg4R dBTT6fkACEusZZxlF0OAfivddIiruvN7/nUVSZgyUpNEH8fTI0/L9yt9SytpaFDl DUSSQPDtqIuaytFh9heAU1fh2YmI70/2+8RgK2nq3WnRMQJdJKmm2r7IaubQHEm0 OIMfmuM8DVRJC8d8tncz5a2VQbwk1WhBZp+V45avpoZK7t96aVcNAuJIgEbNKK5x wBUcKoIowwV1btvpKXnK55Z8pLC/GVwow2eTVju0Rm/GynxzWb9KqAQTgrWQt1jK Dfgzl1lPvzhmqXDQJGrERb8JjE8ZgpFLXtsk/UGCyNmfWpULWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBX6x67CzQW5aK4PJ/JrsjgoeKSDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYWI4ZWMzZjUtNGY5Yi0z N2Q4LThiNWUtNmEyNzI2NWQzZjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl2hlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADhQcMJBJ8f0N0DJNDu97d4IFfpp5VN3XisMqYvHEHNCxp3eJhBNqGlX +/Ga0BX4SUveYip01Fa8vqnTKmkV4wB3YVTaV0gu8mmMPM7W2VquG8UtOnfeKVo6 kKjFK5CRbXPr6Xr3VbRTOhzjIGOx7mkN+73EdPpsPOLdeJmsFSINLPsTH7sGyGFl RNE0Dut+2VdKvRRihL1AuJ9eKTnJ2C98JukSE/KOKCt1+JPYvOQKBPtDJfS+R9k2 qrbBFlCttCERIF21MKWtctt3rndBsavTiYcZxnXNkT7a9oTGllR0K6rN0j/FCNPC sRZOmDmneuxbEzSeRmF3JnK/RVrquck= -----END CERTIFICATE-----Generated at Sat Sep 26 13:30:11 2026 by rpki-client