$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9128b4b4-3ed2-309e-b4d7-fdb3b0517608.roa File: 9128b4b4-3ed2-309e-b4d7-fdb3b0517608.roa (raw, json) Hash identifier: QWB7Es7Wo8M4mB0IvXiZwbb+DSGxqvMpqMMavYPBKcM= Subject key identifier: FD:BF:67:F2:63:DF:DE:BB:C5:84:A6:4C:F1:91:4B:2F:E6:50:A3:FF Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AFD4367DA01F36AF7F6614880 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9128b4b4-3ed2-309e-b4d7-fdb3b0517608.roa Signing time: Tue 26 Aug 2025 22:56:05 +0000 ROA not before: Tue 26 Aug 2025 22:56:05 +0000 ROA not after: Mon 24 Nov 2025 23:56:05 +0000 asID: 31898 IP address blocks: 168.107.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fd:43:67:da:01:f3:6a:f7:f6:61:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 26 22:56:05 2025 GMT Not After : Nov 24 23:56:05 2025 GMT Subject: CN=ebe002a2-6379-4b56-afc1-47849cbcca66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:13:4b:3d:e2:5a:75:c4:08:a0:11:24:a9:c3: e8:6f:a8:d4:6c:1d:c1:b0:c0:19:75:2c:3a:a0:5d: 89:7e:0d:50:29:4a:c6:f1:2e:db:94:7f:01:20:fc: 88:f3:59:d0:12:3e:cf:24:eb:62:c2:08:cd:93:71: ea:45:93:83:9c:14:14:4c:1f:d3:f6:2d:55:77:11: b9:f1:d2:22:37:89:a4:c3:3e:b4:48:a4:e4:2e:0a: 87:56:cd:15:bc:3d:ac:41:a4:fd:3e:f6:2b:f3:91: ba:c7:1d:4f:f3:31:71:41:1c:54:c8:33:3f:d5:55: 55:16:89:f1:a0:79:1d:5e:cc:1a:d1:a3:4e:1a:36: 91:a5:c0:3b:b9:8d:dd:32:a5:1c:6e:49:94:db:5d: 9e:d5:8a:c2:6c:86:62:24:eb:2a:b3:6c:a8:24:25: 74:aa:17:0d:3b:84:9c:f2:0f:10:f6:d9:8b:77:32: 64:15:b3:5d:a0:d0:84:b4:3a:fa:2f:73:ec:bf:3d: b9:59:84:67:a3:6c:f9:6c:5d:3b:f7:1e:16:70:02: 71:a5:42:be:95:e2:56:ad:2d:8e:8d:2e:a9:24:74: 12:f9:a7:6e:24:83:2b:fe:16:93:98:0f:14:cb:6e: d7:94:e7:c5:81:e4:9d:ed:59:58:4e:ac:67:41:ba: 24:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:BF:67:F2:63:DF:DE:BB:C5:84:A6:4C:F1:91:4B:2F:E6:50:A3:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9128b4b4-3ed2-309e-b4d7-fdb3b0517608.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.107.226.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:27:2b:e6:5f:0c:1a:e0:85:76:32:7a:86:8b:00:4b:8c:24: d6:55:a3:e7:37:a1:e9:20:f3:29:33:9e:30:17:ac:63:c2:38: 6d:72:64:9a:61:0f:fd:c9:bd:96:e4:af:2d:ce:85:8a:4c:ee: 11:1f:93:b0:68:e7:ac:6d:16:a4:72:ca:98:61:40:52:ee:34: 48:0c:70:5b:46:1e:ca:3f:a7:0c:1c:99:d5:5b:30:3a:24:7d: b3:3f:50:a4:ad:2f:e1:f4:26:b8:6e:b6:54:11:fd:34:c1:3f: d5:e9:a2:9f:0e:81:c1:e9:d2:98:62:30:0f:73:1a:64:8a:2b: 2d:29:0a:ff:81:e0:32:86:48:87:ef:3f:da:79:82:ec:08:f6: 80:94:df:31:1d:d3:f2:5f:6d:ca:1f:d4:06:c0:c5:c6:23:1e: 4e:8f:68:d0:e5:75:4e:d4:cf:d0:81:16:28:d4:7d:38:ab:e1: 7a:6f:94:03:7d:7e:dd:c9:01:30:3e:de:04:b8:41:ea:73:33: 0e:ea:e9:8e:e6:2a:ff:fe:ed:7d:77:86:8b:3a:37:8f:41:7c: 62:f5:2d:42:b9:57:e8:36:ed:54:80:9f:c6:ed:2b:40:5f:1e: cb:8e:a0:59:f4:de:de:c4:cb:a4:3f:e4:54:88:5c:ad:ec:e0: b7:46:1c:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr9Q2faAfNq9/ZhSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNjIyNTYwNVoXDTI1MTEyNDIzNTYwNVowLzEtMCsGA1UEAxMk ZWJlMDAyYTItNjM3OS00YjU2LWFmYzEtNDc4NDljYmNjYTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhNLPeJadcQIoBEkqcPob6jUbB3BsMAZdSw6 oF2Jfg1QKUrG8S7blH8BIPyI81nQEj7PJOtiwgjNk3HqRZODnBQUTB/T9i1VdxG5 8dIiN4mkwz60SKTkLgqHVs0VvD2sQaT9PvYr85G6xx1P8zFxQRxUyDM/1VVVFonx oHkdXswa0aNOGjaRpcA7uY3dMqUcbkmU212e1YrCbIZiJOsqs2yoJCV0qhcNO4Sc 8g8Q9tmLdzJkFbNdoNCEtDr6L3Psvz25WYRno2z5bF079x4WcAJxpUK+leJWrS2O jS6pJHQS+aduJIMr/haTmA8Uy27XlOfFgeSd7VlYTqxnQbokhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP2/Z/Jj3967xYSmTPGRSy/mUKP/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOTEyOGI0YjQtM2VkMi0z MDllLWI0ZDctZmRiM2IwNTE3NjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqGviMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHknK+ZfDBrghXYyeoaLAEuMJNZVo+c3oekg8ykznjAXrGPCOG1yZJph D/3JvZbkry3OhYpM7hEfk7Bo56xtFqRyyphhQFLuNEgMcFtGHso/pwwcmdVbMDok fbM/UKStL+H0JrhutlQR/TTBP9Xpop8OgcHp0phiMA9zGmSKKy0pCv+B4DKGSIfv P9p5guwI9oCU3zEd0/Jfbcof1AbAxcYjHk6PaNDldU7Uz9CBFijUfTir4XpvlAN9 ft3JATA+3gS4QepzMw7q6Y7mKv/+7X13hos6N49BfGL1LUK5V+g27VSAn8btK0Bf HsuOoFn03t7Ey6Q/5FSIXK3s4LdGHMA= -----END CERTIFICATE-----Generated at Thu Oct 9 00:52:13 2025 by rpki-client