$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f03396df-4d11-3dad-964e-8a2d5f0d3d45.roa File: f03396df-4d11-3dad-964e-8a2d5f0d3d45.roa (raw, json) Hash identifier: wRGaAygR0Bi0L/jVSoprt04Xg28Lj+GQ4l94H/jy5BU= Subject key identifier: E3:43:D8:40:2C:71:3F:5D:C0:5E:D5:91:C2:3F:23:59:49:45:C2:D0 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F23C289F5A581BB022555D880 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f03396df-4d11-3dad-964e-8a2d5f0d3d45.roa Signing time: Fri 11 Sep 2026 13:00:12 +0000 ROA not before: Fri 11 Sep 2026 13:00:12 +0000 ROA not after: Thu 10 Dec 2026 14:00:12 +0000 asID: 2763 IP address blocks: 156.151.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:23:c2:89:f5:a5:81:bb:02:25:55:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 11 13:00:12 2026 GMT Not After : Dec 10 14:00:12 2026 GMT Subject: CN=1b8f1889-d5fb-498c-81a1-7b9e644038c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d3:b9:41:b7:cf:5c:2e:d7:1f:7e:68:b2:67: 61:b8:fb:2a:18:2b:16:cd:f2:ba:f0:05:c8:31:0d: 6d:62:a8:93:47:20:36:ea:db:5f:3e:f8:5e:98:ec: fb:79:42:32:27:f4:1e:df:6b:e5:47:cb:fe:b7:ca: 2e:95:26:ad:d2:2d:6a:fb:3b:b2:b6:57:19:d3:94: 27:85:f8:bb:2a:94:46:77:34:f6:fc:d3:33:22:a4: 1f:23:1d:86:e6:11:16:44:c1:99:e7:72:f4:25:96: 93:98:8c:78:af:ec:92:1c:a7:37:51:f8:00:6c:1a: 14:78:de:87:1a:cc:eb:e0:fa:1b:64:ad:24:e0:3e: f1:19:03:7d:29:ec:af:c8:c5:c9:29:a7:45:86:77: 3f:30:87:21:da:7c:90:3d:de:fe:a4:f6:37:bf:3c: d6:fb:ba:d7:e5:08:b1:d8:55:19:6e:47:13:6b:6b: 62:6d:77:c7:f8:49:a2:5c:07:2a:a6:9a:b8:1b:16: 6d:55:2c:7a:e7:94:87:39:23:23:db:ce:18:f4:04: 84:cd:77:c4:71:9f:29:89:58:ae:a0:6f:e6:5c:63: c7:89:f3:f8:5b:5b:6c:ee:5f:a7:22:32:9b:b0:3e: bd:0c:93:b5:36:f9:fd:e5:0d:34:4d:88:fd:6f:32: d2:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:43:D8:40:2C:71:3F:5D:C0:5E:D5:91:C2:3F:23:59:49:45:C2:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f03396df-4d11-3dad-964e-8a2d5f0d3d45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 156.151.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:1c:44:94:12:49:17:10:e6:09:56:e8:7c:35:b4:4e:e8:c5: 8d:5f:97:0c:9b:70:45:50:98:ca:fc:af:48:fb:95:35:a5:f3: ce:52:d3:d6:1e:b5:66:26:99:24:b4:f6:86:44:59:af:8e:66: 1c:f8:38:a0:c1:9d:d6:5e:59:97:26:76:33:22:ff:4e:a3:76: 4e:fe:01:cf:7e:fc:9d:58:d4:ac:e1:1b:ef:12:80:2f:5e:d4: ae:93:06:17:c9:f0:a9:bd:d7:2c:0c:c1:a3:67:d8:05:1c:a6: 3f:ca:23:a4:e9:9c:6e:5a:96:16:bc:05:42:71:26:d6:57:15: 5d:6a:42:d4:79:eb:42:a3:d4:cc:58:60:bc:e1:1f:c4:93:fa: 2d:1e:97:c0:3a:86:c1:2c:e1:7a:4b:6f:cb:4f:cb:ec:1a:76: c2:27:01:a9:ea:b2:c5:2d:79:49:a7:af:44:58:63:7b:80:39: d0:a7:03:82:43:be:45:06:e1:d3:fa:a0:24:7d:19:a9:e1:d3: a2:8c:b9:ca:e5:2b:ae:d6:08:b0:da:c6:f2:b4:f4:80:57:d6: c7:bf:2a:84:fe:b6:44:bb:63:a3:c1:b3:de:d6:db:ef:f6:35: 49:10:94:a7:0e:1f:02:f2:5d:bb:dc:e9:57:0c:c0:66:0f:8a: 08:f3:09:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8jwon1pYG7AiVV2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkxMTEzMDAxMloXDTI2MTIxMDE0MDAxMlowLzEtMCsGA1UEAxMk MWI4ZjE4ODktZDVmYi00OThjLTgxYTEtN2I5ZTY0NDAzOGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutO5QbfPXC7XH35osmdhuPsqGCsWzfK68AXI MQ1tYqiTRyA26ttfPvhemOz7eUIyJ/Qe32vlR8v+t8oulSat0i1q+zuytlcZ05Qn hfi7KpRGdzT2/NMzIqQfIx2G5hEWRMGZ53L0JZaTmIx4r+ySHKc3UfgAbBoUeN6H Gszr4PobZK0k4D7xGQN9KeyvyMXJKadFhnc/MIch2nyQPd7+pPY3vzzW+7rX5Qix 2FUZbkcTa2tibXfH+EmiXAcqppq4GxZtVSx655SHOSMj284Y9ASEzXfEcZ8piViu oG/mXGPHifP4W1ts7l+nIjKbsD69DJO1Nvn95Q00TYj9bzLSRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOND2EAscT9dwF7VkcI/I1lJRcLQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZjAzMzk2ZGYtNGQxMS0z ZGFkLTk2NGUtOGEyZDVmMGQzZDQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJfRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABMcRJQSSRcQ5glW6Hw1tE7oxY1flwybcEVQmMr8r0j7lTWl885S09Ye tWYmmSS09oZEWa+OZhz4OKDBndZeWZcmdjMi/06jdk7+Ac9+/J1Y1KzhG+8SgC9e 1K6TBhfJ8Km91ywMwaNn2AUcpj/KI6TpnG5alha8BUJxJtZXFV1qQtR560Kj1MxY YLzhH8ST+i0el8A6hsEs4XpLb8tPy+wadsInAanqssUteUmnr0RYY3uAOdCnA4JD vkUG4dP6oCR9Ganh06KMucrlK67WCLDaxvK09IBX1se/KoT+tkS7Y6PBs97W2+/2 NUkQlKcOHwLyXbvc6VcMwGYPigjzCRw= -----END CERTIFICATE-----Generated at Thu Sep 24 20:43:48 2026 by rpki-client