$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2ba884af-b7da-309e-9ba1-0ee5047e8ef7.roa File: 2ba884af-b7da-309e-9ba1-0ee5047e8ef7.roa (raw, json) Hash identifier: 0LCvzfL2xbdb4KHXwftot37UG8JXGIMIjazXPOyaMsc= Subject key identifier: EE:DE:F7:DD:C9:CA:FB:92:99:BF:03:DE:D5:AB:9C:FE:67:83:B6:D1 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584EA786E70BB0CF1E2D4F073C80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2ba884af-b7da-309e-9ba1-0ee5047e8ef7.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 54253 IP address blocks: 151.104.164.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:86:e7:0b:b0:cf:1e:2d:4f:07:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=c8f1fbf9-412b-49f0-ac9c-fa6048619c45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:9d:2c:96:0f:04:32:98:86:51:54:18:06:24: 54:94:3b:89:80:70:da:55:f9:62:d2:e3:eb:c3:31: 05:2a:dc:1f:b5:d5:74:32:a7:0c:d1:98:66:ce:64: 4d:d2:6c:4f:8b:21:71:90:7c:54:b5:d6:16:17:87: 66:3f:8e:b1:c3:6c:26:20:ab:64:d4:c1:b4:38:ce: 81:97:ca:3b:96:3e:19:c9:e4:b8:09:e4:9e:9d:b6: a0:8a:93:be:53:ba:95:1a:03:5d:64:35:92:2a:44: bd:0b:4d:ae:0d:1e:07:8d:86:d0:13:e1:80:b8:30: 78:26:34:c8:03:d1:e1:b0:e5:eb:61:b1:91:ac:4f: e9:87:13:01:53:5d:ee:3c:5b:cc:31:b0:82:d4:ac: 09:05:c8:f9:c3:94:2d:a4:c9:4a:8a:ad:b3:a2:d1: 34:76:77:b4:5b:f2:d0:9d:44:80:b3:38:31:8d:8e: d4:5e:24:d4:ef:17:6b:ce:4f:2e:a8:ee:6a:b9:7b: 48:5c:fd:00:11:25:34:14:0f:f2:4b:22:85:da:e5: 6e:90:04:9a:26:6d:9f:e4:2b:eb:4f:5a:93:07:5d: af:ef:83:b8:fe:b9:55:81:2b:5c:ef:32:ce:e6:f1: 1a:86:e9:91:5e:2d:82:02:de:c5:db:4c:33:32:a7: 4c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:DE:F7:DD:C9:CA:FB:92:99:BF:03:DE:D5:AB:9C:FE:67:83:B6:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2ba884af-b7da-309e-9ba1-0ee5047e8ef7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 151.104.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:68:4a:3b:cf:d8:ed:43:30:e0:8c:78:88:3f:e5:8d:86:aa: 7b:15:b5:58:97:58:e7:43:35:17:2a:38:16:48:1f:0e:71:d0: 35:50:5b:d9:06:3b:ce:59:2f:0d:5a:38:e4:97:77:c1:f2:b2: 68:2d:b5:66:ce:52:35:6f:80:8d:52:48:d3:0d:aa:d4:84:f6: b0:80:35:01:ed:a1:b3:6e:f0:74:7c:24:12:b2:73:46:5a:3e: d7:3d:3e:6c:e0:bb:5a:9e:c4:43:7d:a0:68:67:4a:3d:e6:23: 2e:66:f2:e8:1b:82:54:3c:e9:33:38:78:b3:d2:9d:0a:79:12: 94:05:c2:9b:3f:5a:56:17:97:c5:00:c2:78:01:1c:90:a3:a0: 58:5c:93:3a:25:26:f9:84:cd:29:b0:1e:25:7e:61:b9:6a:d9: 57:10:9c:0b:1b:e8:bf:e0:ba:94:36:71:b4:64:ee:c9:7d:ac: 28:03:7c:19:78:53:90:2d:16:b8:d2:f5:73:c9:52:3f:45:41: 09:21:20:d9:ae:38:35:9b:cf:b3:f6:68:f9:5e:52:cc:a7:bc: 83:2f:bd:bc:42:3d:0a:2c:ac:1c:86:10:7d:44:c0:6d:b5:a3: c0:c9:6a:7f:5a:a6:78:13:93:93:4a:8e:0b:6e:97:d5:6e:44: cd:0b:28:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nhucLsM8eLU8HPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YzhmMWZiZjktNDEyYi00OWYwLWFjOWMtZmE2MDQ4NjE5YzQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAip0slg8EMpiGUVQYBiRUlDuJgHDaVfli0uPr wzEFKtwftdV0MqcM0ZhmzmRN0mxPiyFxkHxUtdYWF4dmP46xw2wmIKtk1MG0OM6B l8o7lj4ZyeS4CeSenbagipO+U7qVGgNdZDWSKkS9C02uDR4HjYbQE+GAuDB4JjTI A9HhsOXrYbGRrE/phxMBU13uPFvMMbCC1KwJBcj5w5QtpMlKiq2zotE0dne0W/LQ nUSAszgxjY7UXiTU7xdrzk8uqO5quXtIXP0AESU0FA/ySyKF2uVukASaJm2f5Cvr T1qTB12v74O4/rlVgStc7zLO5vEahumRXi2CAt7F20wzMqdMAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO7e993JyvuSmb8D3tWrnP5ng7bRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMmJhODg0YWYtYjdkYS0z MDllLTliYTEtMGVlNTA0N2U4ZWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCl2ikMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEloSjvP2O1DMOCMeIg/5Y2GqnsVtViXWOdDNRcqOBZIHw5x0DVQW9kG O85ZLw1aOOSXd8HysmgttWbOUjVvgI1SSNMNqtSE9rCANQHtobNu8HR8JBKyc0Za Ptc9Pmzgu1qexEN9oGhnSj3mIy5m8ugbglQ86TM4eLPSnQp5EpQFwps/WlYXl8UA wngBHJCjoFhckzolJvmEzSmwHiV+Yblq2VcQnAsb6L/gupQ2cbRk7sl9rCgDfBl4 U5AtFrjS9XPJUj9FQQkhINmuODWbz7P2aPleUsynvIMvvbxCPQosrByGEH1EwG21 o8DJan9apngTk5NKjgtul9VuRM0LKK4= -----END CERTIFICATE-----Generated at Thu Aug 27 16:05:28 2026 by rpki-client