$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4ef7f997-54f7-343d-8405-0a1c2d65bada.roa File: 4ef7f997-54f7-343d-8405-0a1c2d65bada.roa (raw, json) Hash identifier: pmoo1ON8BLPDNjjfJw0UfYzQgB7SKs6EdrnLqVuj4f0= Subject key identifier: CA:68:7C:08:14:DA:8A:38:A4:E9:8E:B0:9A:BF:CC:31:55:E6:B4:7B Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F093CCDBB51D3DAD17166D900 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4ef7f997-54f7-343d-8405-0a1c2d65bada.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 2763 IP address blocks: 156.151.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:cd:bb:51:d3:da:d1:71:66:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=8be3f071-6dbd-4584-b626-e758c3e83556 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:22:c6:84:e8:99:a4:f6:4e:43:31:23:ec:00: 95:70:0a:73:3e:b6:e8:d6:63:2f:1b:0a:f4:73:ba: 07:1b:7f:a2:ea:fd:be:91:96:87:b4:f9:cf:e2:d9: 02:09:02:41:77:c0:93:26:4f:42:ad:24:7f:87:f9: 05:3b:2f:44:71:4f:ab:ca:1e:d0:f7:98:07:d8:bb: d1:5f:f6:52:eb:d7:cb:b5:dd:b7:16:1d:a9:bc:a1: c3:fc:9e:57:bd:0a:7b:e6:13:fa:45:a7:6e:05:c9: 51:5a:62:4d:76:e3:83:28:d4:98:f0:84:d4:fa:c0: ba:1b:2b:d6:6f:54:6c:bb:49:f7:46:e7:0d:93:4c: 42:c0:f3:46:0e:04:e5:94:21:f0:f1:ff:34:89:a2: f3:9d:66:66:ab:aa:d8:ab:fa:f0:b4:4b:62:eb:38: 29:c3:50:59:49:60:9a:7c:32:f6:ac:5f:0c:53:ef: 29:cb:fa:d8:02:a1:c2:6d:f6:d6:31:e2:69:6c:3c: 73:98:49:94:6a:d6:c4:6f:3b:6e:6e:b6:6f:f4:ce: b4:19:be:06:cb:fc:4a:c8:ae:50:12:2a:96:9b:ef: 85:06:6d:cd:81:bd:c0:39:c8:53:39:9e:fb:bf:c1: 5f:b4:f1:4d:aa:a0:3b:78:84:c9:90:c3:56:b2:ee: 06:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:68:7C:08:14:DA:8A:38:A4:E9:8E:B0:9A:BF:CC:31:55:E6:B4:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4ef7f997-54f7-343d-8405-0a1c2d65bada.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 156.151.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:85:92:3e:85:72:47:88:30:97:93:8a:63:b9:79:f8:09:50: 19:c4:7a:fd:e7:e3:06:76:f9:7d:36:e9:87:cc:6d:ae:0d:c5: f7:91:4d:96:13:7f:09:e8:51:fc:76:82:d5:db:c4:f9:05:63: 58:7e:ca:ed:9b:9e:1e:b9:3a:78:44:2b:f6:ec:c5:55:67:d0: cd:a3:46:3b:66:21:6a:77:2a:0c:c1:eb:3b:85:7d:13:e4:61: 79:eb:60:a0:d1:67:30:9a:c7:02:09:85:38:28:28:ed:e6:76: 51:89:13:f8:0e:71:5f:09:e5:2e:65:9a:dd:15:70:22:98:d4: 22:30:08:d8:fd:18:4f:a7:ea:24:60:f1:8e:d1:bf:c9:53:20: 81:60:c4:c9:07:ac:63:24:9e:f7:8c:cd:5a:24:c8:91:7d:ee: 0d:8e:e6:96:a0:ee:a6:54:8d:be:26:50:93:51:b9:d1:ed:c9: c6:77:e8:59:c6:f6:33:2c:85:82:15:f0:81:54:98:cb:fd:3a: a4:7a:38:fd:6d:e4:1b:da:1d:3d:11:60:b2:7d:ae:16:cd:54: 2d:68:03:30:72:16:36:f3:b4:54:13:e6:f5:f3:6d:ad:00:56: ee:9e:2a:da:ae:00:67:2b:0e:c0:00:f0:da:12:7c:2d:73:77: 12:9d:3d:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPM27UdPa0XFm2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk OGJlM2YwNzEtNmRiZC00NTg0LWI2MjYtZTc1OGMzZTgzNTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSLGhOiZpPZOQzEj7ACVcApzPrbo1mMvGwr0 c7oHG3+i6v2+kZaHtPnP4tkCCQJBd8CTJk9CrSR/h/kFOy9EcU+ryh7Q95gH2LvR X/ZS69fLtd23Fh2pvKHD/J5XvQp75hP6RaduBclRWmJNduODKNSY8ITU+sC6GyvW b1Rsu0n3RucNk0xCwPNGDgTllCHw8f80iaLznWZmq6rYq/rwtEti6zgpw1BZSWCa fDL2rF8MU+8py/rYAqHCbfbWMeJpbDxzmEmUatbEbztubrZv9M60Gb4Gy/xKyK5Q EiqWm++FBm3Ngb3AOchTOZ77v8FftPFNqqA7eITJkMNWsu4GnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMpofAgU2oo4pOmOsJq/zDFV5rR7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNGVmN2Y5OTctNTRmNy0z NDNkLTg0MDUtMGExYzJkNjViYWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJfFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAaFkj6FckeIMJeTimO5efgJUBnEev3n4wZ2+X026YfMba4NxfeRTZYT fwnoUfx2gtXbxPkFY1h+yu2bnh65OnhEK/bsxVVn0M2jRjtmIWp3KgzB6zuFfRPk YXnrYKDRZzCaxwIJhTgoKO3mdlGJE/gOcV8J5S5lmt0VcCKY1CIwCNj9GE+n6iRg 8Y7Rv8lTIIFgxMkHrGMknveMzVokyJF97g2O5pag7qZUjb4mUJNRudHtycZ36FnG 9jMshYIV8IFUmMv9OqR6OP1t5BvaHT0RYLJ9rhbNVC1oAzByFjbztFQT5vXzba0A Vu6eKtquAGcrDsAA8NoSfC1zdxKdPdI= -----END CERTIFICATE-----Generated at Sat Sep 5 14:22:47 2026 by rpki-client