$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/eb28e405-1d03-3705-8b7c-db9aa75025c1.roa File: eb28e405-1d03-3705-8b7c-db9aa75025c1.roa (raw, json) Hash identifier: B8pmKRLiKgBCS2FZqS1QiZF60C76SZUrwoJqys5vBL8= Subject key identifier: 07:57:C5:21:09:FD:3D:03:E2:D7:0F:63:82:7C:2E:42:87:14:CD:2C Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F49749B67823643BBB9A6E040 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/eb28e405-1d03-3705-8b7c-db9aa75025c1.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 157.137.106.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:9b:67:82:36:43:bb:b9:a6:e0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3367c8b3-33be-45cd-ab98-d05ff78f0389 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:0f:bb:75:5e:56:2a:88:25:36:c9:72:7e:9a: 7a:fc:1a:85:c1:87:be:62:b0:3d:61:26:0d:77:bd: 8c:38:0f:a7:ec:d4:c6:03:2f:37:6a:88:a2:ef:17: 01:12:62:9e:13:e3:a4:32:07:e7:17:36:95:14:2c: 01:2d:3f:0b:9b:72:e7:ed:2b:cb:a8:dc:d0:b8:d6: 69:fb:8a:c6:af:c9:bf:75:49:e2:23:c0:33:f0:80: 7c:fd:e8:3a:28:e6:3e:1e:bf:66:91:ec:c0:18:62: ed:38:89:04:76:e5:ea:c0:5a:b2:6c:00:64:5e:dd: 49:60:42:5b:04:92:06:01:c5:9e:04:a5:f0:90:1d: 46:08:2b:28:66:18:c2:7b:89:05:34:91:42:00:f3: 41:8e:0d:50:aa:10:2e:4c:17:1a:5f:aa:60:f5:60: 39:8a:28:c4:f8:8d:c8:89:fb:23:68:14:1e:3c:04: cb:53:72:96:32:de:2a:1c:0b:5e:64:67:79:6e:43: 24:dc:68:20:7b:ff:c8:99:1d:3e:d2:f2:7d:ec:0e: c8:be:6c:16:5b:3d:e2:f3:64:61:74:65:a9:f9:d8: 59:7f:7a:e4:d6:36:10:18:16:9a:67:2d:63:19:db: b7:ce:40:f0:48:aa:ec:d9:a6:a0:50:0c:8f:54:0d: 2c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:57:C5:21:09:FD:3D:03:E2:D7:0F:63:82:7C:2E:42:87:14:CD:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/eb28e405-1d03-3705-8b7c-db9aa75025c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 157.137.106.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:4c:1a:9d:bb:b1:88:94:9a:c2:e3:b0:4f:a4:cd:de:94:b2: 9e:57:8f:40:64:07:59:b0:61:1d:26:58:28:61:cc:aa:7a:c2: 84:87:7e:37:f3:b3:a2:36:1c:2f:85:a1:c1:b9:75:37:97:b1: 29:5f:ba:d6:87:25:94:31:3f:e4:ba:23:6d:fb:d6:c8:92:94: 3f:4f:fb:11:70:43:17:2a:47:1d:a8:44:89:35:c3:e7:dc:28: a1:3b:7a:7e:34:a7:47:ef:e4:ad:d5:ad:1b:ce:af:26:07:5e: 0d:15:11:aa:d2:e1:86:4b:80:8a:bc:5f:9c:88:29:00:44:c7: cc:fa:89:aa:c2:1c:59:f5:56:a9:fc:51:77:9d:e7:86:9a:e2: a2:15:b7:62:c8:df:31:7f:92:d8:88:79:23:87:4f:5f:20:2d: 98:7f:2e:17:84:b5:fa:33:4c:db:44:ab:6d:fd:c8:00:57:9a: 99:b9:ca:72:39:66:99:75:0c:70:1a:a4:2f:4d:35:41:00:ab: 98:d9:22:eb:43:4d:db:a1:8d:b1:9b:78:65:97:51:20:52:f3: 30:96:69:be:a9:de:db:72:0f:6f:7c:c6:b8:57:b1:3e:c8:ff: b8:17:45:11:20:7b:2f:10:26:49:e6:c1:55:19:ea:f3:1f:8a: fa:1b:7e:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdJtngjZDu7mm4EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzM2N2M4YjMtMzNiZS00NWNkLWFiOTgtZDA1ZmY3OGYwMzg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQ+7dV5WKoglNslyfpp6/BqFwYe+YrA9YSYN d72MOA+n7NTGAy83aoii7xcBEmKeE+OkMgfnFzaVFCwBLT8Lm3Ln7SvLqNzQuNZp +4rGr8m/dUniI8Az8IB8/eg6KOY+Hr9mkezAGGLtOIkEduXqwFqybABkXt1JYEJb BJIGAcWeBKXwkB1GCCsoZhjCe4kFNJFCAPNBjg1QqhAuTBcaX6pg9WA5iijE+I3I ifsjaBQePATLU3KWMt4qHAteZGd5bkMk3Ggge//ImR0+0vJ97A7IvmwWWz3i82Rh dGWp+dhZf3rk1jYQGBaaZy1jGdu3zkDwSKrs2aagUAyPVA0sEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAdXxSEJ/T0D4tcPY4J8LkKHFM0sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZWIyOGU0MDUtMWQwMy0z NzA1LThiN2MtZGI5YWE3NTAyNWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnYlqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACBMGp27sYiUmsLjsE+kzd6Usp5Xj0BkB1mwYR0mWChhzKp6woSHfjfz s6I2HC+FocG5dTeXsSlfutaHJZQxP+S6I2371siSlD9P+xFwQxcqRx2oRIk1w+fc KKE7en40p0fv5K3VrRvOryYHXg0VEarS4YZLgIq8X5yIKQBEx8z6iarCHFn1Vqn8 UXed54aa4qIVt2LI3zF/ktiIeSOHT18gLZh/LheEtfozTNtEq239yABXmpm5ynI5 Zpl1DHAapC9NNUEAq5jZIutDTduhjbGbeGWXUSBS8zCWab6p3ttyD298xrhXsT7I /7gXRREgey8QJknmwVUZ6vMfivobfnM= -----END CERTIFICATE-----Generated at Sun Sep 27 14:33:50 2026 by rpki-client