$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d0d5b0e1-affb-3e60-a653-98f935a107c4.roa File: d0d5b0e1-affb-3e60-a653-98f935a107c4.roa (raw, json) Hash identifier: veh3fSXLYKq2Srr8zsHkYNOBrk3hTsyPiOZmMepwyxs= Subject key identifier: 2E:C9:76:C1:43:C8:E0:35:A7:C0:99:65:25:A1:55:F9:C9:EE:23:33 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E7E94E1CE0D8C5C56AA36FAA0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d0d5b0e1-affb-3e60-a653-98f935a107c4.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 31898 IP address blocks: 168.107.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:e1:ce:0d:8c:5c:56:aa:36:fa:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=e7255e45-a806-4402-99d7-e4944fbf8449 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e9:e6:05:8e:47:f9:61:21:43:26:08:66:a1: d7:a3:ba:ae:9d:5c:20:8b:e8:9c:41:67:cc:bb:a9: 40:3c:35:c1:f4:0b:46:3f:a5:ca:36:f6:9f:74:f5: 73:be:4b:e8:f5:ae:6e:84:ce:66:9f:13:f1:92:bd: 54:9d:37:76:91:7d:6b:fe:b4:e7:fc:3a:0c:11:90: 55:c1:45:be:a5:14:84:35:6a:85:dc:51:3c:38:cc: 4c:72:5e:f2:5c:4c:a0:49:e5:5f:cf:b2:8c:f3:73: 95:da:7a:44:78:af:07:90:85:37:2e:f7:97:33:08: a0:ca:9a:e5:55:3d:81:79:b1:cf:fa:71:0e:40:10: cf:48:7f:fe:9b:3a:0b:6f:72:12:01:3a:0c:a0:02: 85:ae:48:eb:7f:52:af:c6:54:12:2c:ab:1a:52:58: db:6f:20:e7:1e:e2:98:44:59:f6:36:4b:d0:33:7b: 94:fa:e4:19:02:71:ec:01:a7:47:52:d3:fe:63:00: 4f:d5:cb:ce:61:80:c0:e1:ae:9d:6a:69:f4:02:42: 04:0e:7a:a0:0e:f8:50:c7:c1:59:99:8d:be:b9:b0: 15:50:2e:99:8f:95:e1:2e:86:ec:d7:8b:8b:87:b7: 95:2a:ae:26:bd:62:34:1d:ae:8b:25:7f:58:d5:d0: f3:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:C9:76:C1:43:C8:E0:35:A7:C0:99:65:25:A1:55:F9:C9:EE:23:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d0d5b0e1-affb-3e60-a653-98f935a107c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.107.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:53:c9:91:5a:38:23:98:c2:f0:f1:a3:96:9c:c2:ea:fc:18: 0c:ef:75:6e:68:0c:94:62:d7:c0:f9:5e:d2:55:ab:19:59:6c: 6d:17:71:8b:af:d0:a7:10:53:77:77:04:dd:b1:04:95:5c:65: 5f:11:f7:a0:d5:cc:a0:4a:d9:3f:9b:f6:c0:04:67:86:24:bd: 2a:d2:b1:66:66:29:6e:eb:04:2d:34:00:82:d0:25:4a:98:21: e5:07:dc:93:43:24:cd:4b:1b:b3:07:7d:1e:42:0c:b1:26:e7: 64:5f:f2:a3:0d:98:d7:c1:e0:d2:95:24:57:9d:bb:5e:f5:ee: af:fd:9f:9a:b4:50:d1:db:3c:fb:cf:26:58:f9:bd:b1:5b:a4: ce:10:b8:7c:7c:a8:25:d1:c8:3e:bd:87:19:fd:f9:36:e0:a4: c2:5b:1a:34:5b:d0:6a:04:09:e3:54:22:cd:ec:07:bc:7d:44: 0d:7a:2f:eb:0a:98:f7:36:e6:fb:47:42:38:3a:ec:79:a9:d7: a4:d9:f5:df:4f:7c:7c:4b:90:fb:91:65:c5:cc:25:21:b3:84: e4:28:58:7d:61:86:89:4e:20:a8:ca:3f:e1:7f:6f:fd:1f:c7: 37:73:74:5a:32:9c:51:71:04:21:db:7e:06:1e:2d:0b:15:75: a1:21:44:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lOHODYxcVqo2+qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk ZTcyNTVlNDUtYTgwNi00NDAyLTk5ZDctZTQ5NDRmYmY4NDQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOnmBY5H+WEhQyYIZqHXo7qunVwgi+icQWfM u6lAPDXB9AtGP6XKNvafdPVzvkvo9a5uhM5mnxPxkr1UnTd2kX1r/rTn/DoMEZBV wUW+pRSENWqF3FE8OMxMcl7yXEygSeVfz7KM83OV2npEeK8HkIU3LveXMwigyprl VT2BebHP+nEOQBDPSH/+mzoLb3ISAToMoAKFrkjrf1KvxlQSLKsaUljbbyDnHuKY RFn2NkvQM3uU+uQZAnHsAadHUtP+YwBP1cvOYYDA4a6damn0AkIEDnqgDvhQx8FZ mY2+ubAVUC6Zj5XhLobs14uLh7eVKq4mvWI0Ha6LJX9Y1dDzmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC7JdsFDyOA1p8CZZSWhVfnJ7iMzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZDBkNWIwZTEtYWZmYi0z ZTYwLWE2NTMtOThmOTM1YTEwN2M0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqGvvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJhTyZFaOCOYwvDxo5acwur8GAzvdW5oDJRi18D5XtJVqxlZbG0XcYuv 0KcQU3d3BN2xBJVcZV8R96DVzKBK2T+b9sAEZ4YkvSrSsWZmKW7rBC00AILQJUqY IeUH3JNDJM1LG7MHfR5CDLEm52Rf8qMNmNfB4NKVJFedu1717q/9n5q0UNHbPPvP Jlj5vbFbpM4QuHx8qCXRyD69hxn9+TbgpMJbGjRb0GoECeNUIs3sB7x9RA16L+sK mPc25vtHQjg67Hmp16TZ9d9PfHxLkPuRZcXMJSGzhOQoWH1hholOIKjKP+F/b/0f xzdzdFoynFFxBCHbfgYeLQsVdaEhREs= -----END CERTIFICATE-----Generated at Fri Jul 24 00:36:00 2026 by rpki-client