$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/effd7bc5-11e9-3891-a632-10a2d9bd0398.roa File: effd7bc5-11e9-3891-a632-10a2d9bd0398.roa (raw, json) Hash identifier: CdGBmOhaLAoO+HSAbjo6XfrSvRGR02VS6dhNyF0jDJ8= Subject key identifier: 7F:79:D4:4B:9B:D5:4F:39:31:41:08:EA:42:6C:0F:BA:74:44:CC:25 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F0D6CF7EB1EB0F08CC5243C40 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/effd7bc5-11e9-3891-a632-10a2d9bd0398.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 168.110.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:f7:eb:1e:b0:f0:8c:c5:24:3c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=7e48140a-a9d8-4a74-9a48-90a24231c11f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:02:ff:09:bc:52:9f:38:f6:71:34:d0:6d:8f: ff:d6:f7:66:08:70:62:50:87:c9:de:e2:ec:01:e4: 5c:69:cf:96:a4:b4:5b:89:13:d5:b3:77:85:21:84: c4:aa:58:86:c6:ba:13:da:2b:bd:3b:3f:33:ea:6a: 29:9c:27:00:6e:06:68:d8:ad:b4:d0:d7:5c:4a:79: 32:9f:99:82:61:ec:6c:bc:0e:eb:2e:b7:c9:80:11: 98:1a:8b:da:cd:15:04:89:34:7d:c5:08:fc:f2:42: a5:29:88:8e:ba:ad:7f:5b:82:2d:18:5d:05:2a:ad: 87:ee:e7:b9:db:9e:83:c9:c5:d6:fd:76:c4:e3:35: 18:3c:46:d2:20:a7:44:20:1f:7a:90:db:43:3c:7c: 0a:dd:54:10:d1:81:83:60:f1:dd:28:ae:b4:5e:5d: 4f:e1:cd:f3:90:75:30:bb:2b:6b:86:b0:f4:83:b4: ea:de:4a:d7:24:9b:9a:df:e3:e3:f4:bc:55:e2:58: e9:05:6b:bd:6b:80:8c:6a:25:54:4a:9c:96:c9:23: de:11:dd:bb:c5:2a:2f:26:21:7f:a2:f3:5a:b2:a8: a1:bf:87:58:48:f2:9b:78:8d:b3:90:18:1c:98:e0: a6:a6:ac:5a:bb:f4:fe:c5:0a:40:c1:e6:a8:23:ba: 73:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:79:D4:4B:9B:D5:4F:39:31:41:08:EA:42:6C:0F:BA:74:44:CC:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/effd7bc5-11e9-3891-a632-10a2d9bd0398.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.110.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:cf:9b:d3:59:03:7c:fc:0d:17:0a:44:67:88:c2:6b:a1:ab: ca:3c:a4:3e:3d:de:2a:a8:91:65:12:3d:10:0e:90:8b:82:fe: 5e:00:41:25:88:ea:5e:0f:49:f4:18:cb:5b:db:80:ed:0c:53: 0f:a6:03:30:8b:c0:6c:ab:25:76:19:de:0c:58:36:66:8d:78: 61:2e:b0:1f:73:21:b3:63:9a:ed:7d:b8:a9:fe:53:ae:91:20: ab:a3:9c:ea:74:05:5a:8a:1c:51:47:69:ff:74:e4:b5:09:f6: a6:14:e7:e0:92:cb:91:b1:71:29:36:ca:d0:e0:7e:2c:33:06: e3:80:51:45:e4:bc:25:07:a5:da:71:42:8e:0e:d1:b5:d4:e4: 57:1a:a2:30:1e:de:79:20:c1:1c:5f:ef:44:38:39:bb:3f:17: b2:7c:cd:5f:e3:b4:2e:2f:e7:81:00:6e:a5:e7:aa:7b:96:a5: b6:3e:c5:d7:fa:0f:12:54:c8:f6:cb:0c:82:5a:38:99:f6:c9: 76:b2:19:54:a7:cf:4c:42:7f:41:92:d5:ad:71:01:59:1f:44: 05:34:45:4a:da:3a:0f:0c:c2:91:90:d2:06:5b:6f:a7:1a:e8: 6c:d2:76:9c:05:dc:b7:f5:1a:d2:5c:3a:87:89:ab:ef:e6:fd: ed:25:75:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbPfrHrDwjMUkPEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk N2U0ODE0MGEtYTlkOC00YTc0LTlhNDgtOTBhMjQyMzFjMTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAL/CbxSnzj2cTTQbY//1vdmCHBiUIfJ3uLs AeRcac+WpLRbiRPVs3eFIYTEqliGxroT2iu9Oz8z6mopnCcAbgZo2K200NdcSnky n5mCYexsvA7rLrfJgBGYGovazRUEiTR9xQj88kKlKYiOuq1/W4ItGF0FKq2H7ue5 256DycXW/XbE4zUYPEbSIKdEIB96kNtDPHwK3VQQ0YGDYPHdKK60Xl1P4c3zkHUw uytrhrD0g7Tq3krXJJua3+Pj9LxV4ljpBWu9a4CMaiVUSpyWySPeEd27xSovJiF/ ovNasqihv4dYSPKbeI2zkBgcmOCmpqxau/T+xQpAweaoI7pznQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH951Eub1U85MUEI6kJsD7p0RMwlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZWZmZDdiYzUtMTFlOS0z ODkxLWE2MzItMTBhMmQ5YmQwMzk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFqG5AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADfPm9NZA3z8DRcKRGeIwmuhq8o8pD493iqokWUSPRAOkIuC/l4AQSWI 6l4PSfQYy1vbgO0MUw+mAzCLwGyrJXYZ3gxYNmaNeGEusB9zIbNjmu19uKn+U66R IKujnOp0BVqKHFFHaf905LUJ9qYU5+CSy5GxcSk2ytDgfiwzBuOAUUXkvCUHpdpx Qo4O0bXU5FcaojAe3nkgwRxf70Q4Obs/F7J8zV/jtC4v54EAbqXnqnuWpbY+xdf6 DxJUyPbLDIJaOJn2yXayGVSnz0xCf0GS1a1xAVkfRAU0RUraOg8MwpGQ0gZbb6ca 6GzSdpwF3Lf1GtJcOoeJq+/m/e0ldaM= -----END CERTIFICATE-----Generated at Thu Sep 24 20:24:07 2026 by rpki-client