$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/15a4f54d-f4bc-3779-afab-c700fc05fe12.roa File: 15a4f54d-f4bc-3779-afab-c700fc05fe12.roa (raw, json) Hash identifier: rocvuyGhZxatRUNrNjD6CyQVz58A9ifZs8Zb1w/wF8A= Subject key identifier: F2:3F:18:45:A7:B1:59:9C:3F:CE:CD:98:81:39:6E:45:25:E6:30:F6 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E6C6F62DDF2B4589D4A2A0480 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/15a4f54d-f4bc-3779-afab-c700fc05fe12.roa Signing time: Tue 07 Jul 2026 21:00:13 +0000 ROA not before: Tue 07 Jul 2026 21:00:13 +0000 ROA not after: Mon 05 Oct 2026 21:00:13 +0000 asID: 31898 IP address blocks: 157.137.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6c:6f:62:dd:f2:b4:58:9d:4a:2a:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 7 21:00:13 2026 GMT Not After : Oct 5 21:00:13 2026 GMT Subject: CN=c1bfbe25-3f8b-446f-9024-dfb29dbb725b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:35:85:36:21:21:42:5f:37:b4:79:54:e7:f6: 85:34:d1:dd:06:9b:4c:9b:57:91:3c:12:8f:21:dd: 1c:30:a0:3b:94:3b:a6:a2:09:4f:b0:d3:32:8b:f6: 77:07:ac:7a:e4:77:be:ff:69:82:29:aa:c7:8c:80: 49:3a:b9:12:db:1d:49:01:e1:1e:f0:02:29:11:4f: 77:20:9f:51:2e:82:12:24:66:80:b5:c7:c9:54:b2: d1:e0:e2:4e:9b:ab:d0:4c:27:f1:91:24:aa:4d:33: d3:53:08:96:93:d2:e6:97:ad:01:b4:ad:02:c7:3b: 26:c9:e5:24:a2:28:00:48:42:85:10:9d:f7:65:53: f7:5a:b1:ed:4f:48:b8:39:69:0c:4c:f2:85:c8:c6: 8f:68:99:bd:c1:85:ac:68:c3:38:ea:1b:bc:32:c1: 60:aa:a1:cb:78:27:5f:9b:c1:20:6a:8b:2d:7f:f4: e5:09:12:ec:ba:db:35:13:0e:2e:9d:79:10:a5:98: ea:d7:92:7c:b8:8e:71:05:bc:3b:f0:10:55:f3:7b: 75:06:88:de:8d:da:6d:8c:4f:de:36:76:4d:c7:fc: b4:23:58:29:ab:0f:4e:2f:f5:e1:20:18:ad:9b:14: b0:16:11:c6:24:29:62:39:5e:4c:20:a6:97:c0:bd: 65:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:3F:18:45:A7:B1:59:9C:3F:CE:CD:98:81:39:6E:45:25:E6:30:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/15a4f54d-f4bc-3779-afab-c700fc05fe12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 157.137.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:de:d9:97:1d:46:58:d0:6b:5f:42:55:f7:9a:66:95:6d:15: 8e:b9:7a:37:34:4e:39:bf:d1:65:89:cf:c2:f2:af:f9:3c:44: 41:8e:24:ea:32:f2:e5:8f:f0:2f:c5:b9:61:8e:f7:79:dd:19: 49:c7:ab:c8:34:73:20:2f:16:8b:b1:b6:3b:6b:f6:a2:3a:59: 28:f6:c3:b1:9d:88:92:31:6b:c1:fe:cf:51:27:1e:ed:d8:e5: 79:c8:91:3c:65:3a:cd:b6:83:dd:f3:df:b3:9d:d9:ca:a5:51: 4a:68:bf:08:e6:b5:02:a9:71:93:39:c4:95:ef:13:33:2c:3e: a6:2e:d7:68:06:aa:73:d5:ef:4c:6a:2e:c6:c1:de:2f:f6:81: 73:2d:a9:ce:de:20:56:b1:6d:b9:8e:7f:d0:69:17:d4:4c:b6: 2e:7e:5c:28:0e:70:f4:63:90:7e:dc:76:6e:dd:8d:0f:4e:6e: cb:30:34:91:4e:7f:b8:7c:3b:ac:38:50:6a:fd:00:9e:14:39: 75:e0:d9:00:64:cc:c4:92:c1:73:14:27:ad:87:6f:8f:65:5e: 3f:42:b4:b0:c9:c1:d6:6e:5a:be:83:7a:d6:34:3b:db:0b:65: 07:e4:c5:c4:18:79:1d:4a:a8:a4:93:98:06:4b:df:33:8e:75: ce:13:5b:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5sb2Ld8rRYnUoqBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcwNzIxMDAxM1oXDTI2MTAwNTIxMDAxM1owLzEtMCsGA1UEAxMk YzFiZmJlMjUtM2Y4Yi00NDZmLTkwMjQtZGZiMjlkYmI3MjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjWFNiEhQl83tHlU5/aFNNHdBptMm1eRPBKP Id0cMKA7lDumoglPsNMyi/Z3B6x65He+/2mCKarHjIBJOrkS2x1JAeEe8AIpEU93 IJ9RLoISJGaAtcfJVLLR4OJOm6vQTCfxkSSqTTPTUwiWk9Lml60BtK0CxzsmyeUk oigASEKFEJ33ZVP3WrHtT0i4OWkMTPKFyMaPaJm9wYWsaMM46hu8MsFgqqHLeCdf m8Egaostf/TlCRLsuts1Ew4unXkQpZjq15J8uI5xBbw78BBV83t1BojejdptjE/e NnZNx/y0I1gpqw9OL/XhIBitmxSwFhHGJCliOV5MIKaXwL1l2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPI/GEWnsVmcP87NmIE5bkUl5jD2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMTVhNGY1NGQtZjRiYy0z Nzc5LWFmYWItYzcwMGZjMDVmZTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnYn9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHe2ZcdRljQa19CVfeaZpVtFY65ejc0Tjm/0WWJz8Lyr/k8REGOJOoy 8uWP8C/FuWGO93ndGUnHq8g0cyAvFouxtjtr9qI6WSj2w7GdiJIxa8H+z1EnHu3Y 5XnIkTxlOs22g93z37Od2cqlUUpovwjmtQKpcZM5xJXvEzMsPqYu12gGqnPV70xq LsbB3i/2gXMtqc7eIFaxbbmOf9BpF9RMti5+XCgOcPRjkH7cdm7djQ9ObsswNJFO f7h8O6w4UGr9AJ4UOXXg2QBkzMSSwXMUJ62Hb49lXj9CtLDJwdZuWr6DetY0O9sL ZQfkxcQYeR1KqKSTmAZL3zOOdc4TW/s= -----END CERTIFICATE-----Generated at Mon Jul 13 02:51:28 2026 by rpki-client