$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cdbfc7a0-762e-3d68-b94c-776abf8ba824.roa File: cdbfc7a0-762e-3d68-b94c-776abf8ba824.roa (raw, json) Hash identifier: QDD767F/AG9pANuLoKAO/Te6rGbDQRiorWLUip5+fNY= Subject key identifier: 44:BB:17:66:15:51:CD:F4:16:C9:93:B1:30:C5:FA:FF:C2:AD:B5:7D Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F1B625638E0D2723F1DB55240 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cdbfc7a0-762e-3d68-b94c-776abf8ba824.roa Signing time: Tue 08 Sep 2026 13:00:12 +0000 ROA not before: Tue 08 Sep 2026 13:00:12 +0000 ROA not after: Mon 07 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 157.151.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:62:56:38:e0:d2:72:3f:1d:b5:52:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 8 13:00:12 2026 GMT Not After : Dec 7 14:00:12 2026 GMT Subject: CN=0f7e783f-557d-4e12-aae9-7b66e5e8772e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0d:63:41:12:31:63:c8:59:9d:bf:a1:ab:46: 9e:a8:cf:2f:77:3e:f9:00:c3:67:11:e8:81:75:ee: 69:b7:a9:06:f3:5f:d7:58:78:8b:5b:98:8d:32:8e: 06:8d:04:09:db:e4:e1:de:4c:7b:b7:78:1d:d2:d4: 39:f1:5a:87:0e:8a:e3:0c:c0:fe:12:5e:1c:37:a1: f8:1a:70:14:1e:8f:ec:49:e6:dd:1d:ca:fe:c0:ac: 4b:db:e6:4a:c4:f3:22:d6:4d:f8:81:5f:97:2b:6c: bb:bf:8e:88:a8:a4:4c:3e:ad:77:47:23:7e:9b:d1: d5:c9:46:46:9d:de:fc:f6:cb:92:e4:d4:d1:e0:60: 72:70:19:4b:ce:45:e1:5a:89:f1:c9:ce:08:1a:d9: 1c:68:61:e6:a4:74:1c:b0:97:59:ad:86:a7:0f:45: 16:32:43:99:f1:b8:de:b1:64:99:71:fc:dc:70:29: 39:e4:27:11:da:6b:de:04:26:57:86:9d:95:3d:0f: a9:46:6d:3b:9e:e3:20:21:ee:1b:58:c5:10:00:4d: 91:94:8a:35:66:6a:43:b1:ce:98:a0:ca:a2:42:b1: 81:3b:c6:3b:e0:08:f6:0c:4a:87:81:01:68:49:8f: 06:90:0f:05:56:8c:fa:53:ea:03:2f:ca:51:c0:80: fe:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:BB:17:66:15:51:CD:F4:16:C9:93:B1:30:C5:FA:FF:C2:AD:B5:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cdbfc7a0-762e-3d68-b94c-776abf8ba824.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 157.151.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:f6:2e:ed:73:98:16:d9:11:fa:b5:e7:ff:e9:81:cc:f5:1c: e0:7e:9b:9d:28:da:95:3b:0b:78:f4:9f:b9:30:83:8b:f0:32: 7f:d3:c3:40:13:89:24:4e:30:3d:31:79:3b:91:3f:05:c1:a1: 61:46:08:3a:57:30:fb:35:82:b9:51:52:38:81:20:ad:b7:02: 31:37:c2:11:0f:6e:06:f4:58:fb:c4:6f:b5:d3:4f:65:d6:5f: 0d:f2:c3:c6:b8:3b:b8:f3:0d:3a:79:77:d9:14:c6:84:03:7c: a3:b9:ad:65:51:a3:9a:92:ed:ca:9c:18:4d:57:9a:fa:71:18: 55:ec:87:56:3a:3f:35:7a:0c:27:b8:ab:34:8f:1b:61:73:21: a2:6a:65:ab:77:aa:60:3a:20:2e:61:90:e2:14:a6:bf:c9:b0: 54:71:5c:e6:82:57:16:11:54:7b:50:ca:ad:73:93:d2:82:00: c2:ea:1e:e8:fd:4f:94:ed:a2:1f:54:ea:95:f1:0b:3f:87:a5: 4a:27:0f:d5:e1:3e:4a:1a:95:1c:25:72:1b:3c:1a:6d:75:cc: 4b:08:45:6e:13:dd:fc:7e:8a:d0:30:5e:35:30:50:39:e4:95: 70:c2:90:29:51:f1:b5:4a:a6:0f:22:41:cd:b3:76:a6:62:d3: 97:84:f9:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8bYlY44NJyPx21UkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwODEzMDAxMloXDTI2MTIwNzE0MDAxMlowLzEtMCsGA1UEAxMk MGY3ZTc4M2YtNTU3ZC00ZTEyLWFhZTktN2I2NmU1ZTg3NzJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoA1jQRIxY8hZnb+hq0aeqM8vdz75AMNnEeiB de5pt6kG81/XWHiLW5iNMo4GjQQJ2+Th3kx7t3gd0tQ58VqHDorjDMD+El4cN6H4 GnAUHo/sSebdHcr+wKxL2+ZKxPMi1k34gV+XK2y7v46IqKRMPq13RyN+m9HVyUZG nd789suS5NTR4GBycBlLzkXhWonxyc4IGtkcaGHmpHQcsJdZrYanD0UWMkOZ8bje sWSZcfzccCk55CcR2mveBCZXhp2VPQ+pRm07nuMgIe4bWMUQAE2RlIo1ZmpDsc6Y oMqiQrGBO8Y74Aj2DEqHgQFoSY8GkA8FVoz6U+oDL8pRwID+JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFES7F2YVUc30FsmTsTDF+v/CrbV9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvY2RiZmM3YTAtNzYyZS0z ZDY4LWI5NGMtNzc2YWJmOGJhODI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHnZeAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACf2Lu1zmBbZEfq15//pgcz1HOB+m50o2pU7C3j0n7kwg4vwMn/Tw0AT iSROMD0xeTuRPwXBoWFGCDpXMPs1grlRUjiBIK23AjE3whEPbgb0WPvEb7XTT2XW Xw3yw8a4O7jzDTp5d9kUxoQDfKO5rWVRo5qS7cqcGE1XmvpxGFXsh1Y6PzV6DCe4 qzSPG2FzIaJqZat3qmA6IC5hkOIUpr/JsFRxXOaCVxYRVHtQyq1zk9KCAMLqHuj9 T5Ttoh9U6pXxCz+HpUonD9XhPkoalRwlchs8Gm11zEsIRW4T3fx+itAwXjUwUDnk lXDCkClR8bVKpg8iQc2zdqZi05eE+eA= -----END CERTIFICATE-----Generated at Wed Sep 23 22:39:17 2026 by rpki-client