$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/43155a20-048d-3241-964e-b96f7add1dd0.roa File: 43155a20-048d-3241-964e-b96f7add1dd0.roa (raw, json) Hash identifier: yGQeBUrAQK3+o2pFpOHSbdUB5FKRf7Q3C1bcN6JCWlI= Subject key identifier: 88:E0:8B:1F:E5:08:73:08:88:42:6E:B5:73:B7:69:5E:4D:09:F9:98 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584EF498DC07A616714D124E4500 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/43155a20-048d-3241-964e-b96f7add1dd0.roa Signing time: Tue 25 Aug 2026 15:33:45 +0000 ROA not before: Tue 25 Aug 2026 15:33:45 +0000 ROA not after: Mon 23 Nov 2026 16:33:45 +0000 asID: 31898 IP address blocks: 147.5.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:98:dc:07:a6:16:71:4d:12:4e:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 25 15:33:45 2026 GMT Not After : Nov 23 16:33:45 2026 GMT Subject: CN=17f1a2de-4cc9-41d0-b00d-6c2335a31193 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:07:df:56:a8:b8:fc:74:a6:6a:df:22:a1:7e: cf:9b:db:4d:ed:70:7b:7d:37:5c:43:9c:39:f3:ae: 77:0e:97:ad:8b:f4:a3:31:6c:dc:c0:87:63:9a:76: fb:05:77:75:9c:b6:6f:73:84:fe:85:90:9a:af:fb: 72:be:14:f9:80:81:44:45:2e:6e:c5:c9:13:07:7b: 6f:bf:22:fe:63:37:92:e3:f6:dc:1d:1a:0d:db:26: a6:33:f2:89:50:de:9d:dc:c5:ca:46:c9:33:4d:52: 62:54:15:51:74:74:61:98:ad:fe:3e:54:9d:72:c7: c4:73:55:11:0b:54:76:07:22:79:3b:c1:1e:62:e1: 0c:d6:e5:40:aa:63:fc:fd:a7:ea:70:d2:34:1f:03: 9c:10:07:f8:71:5a:7d:22:89:87:1f:40:43:ba:0e: bd:f4:0c:ef:39:66:11:da:82:0b:12:7a:17:58:af: 97:94:29:02:ad:21:94:df:4f:b2:56:2b:a2:87:e0: 22:61:8a:c0:7a:1c:f4:e0:2d:00:6f:49:df:2b:9b: b6:d5:e8:3a:84:0f:12:9a:16:ab:e7:7a:31:dd:5e: 14:a7:15:52:95:1f:9e:a7:97:5e:d3:73:94:28:cd: dd:30:8b:9d:79:8b:22:27:41:06:01:72:b5:9e:41: d3:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:E0:8B:1F:E5:08:73:08:88:42:6E:B5:73:B7:69:5E:4D:09:F9:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/43155a20-048d-3241-964e-b96f7add1dd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 147.5.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:03:75:af:ba:d8:df:09:65:ce:3c:c2:32:23:6c:3b:cf:1f: 39:45:03:8b:f8:3f:f8:2c:41:1c:c9:5f:6c:c6:d6:83:f8:5f: 6e:78:3a:0e:32:0e:95:17:14:35:b3:cd:40:cb:01:52:ca:c4: 81:6e:a8:94:40:e5:60:fd:4b:cd:df:b7:5f:cc:19:05:78:0f: 42:64:8a:32:aa:b3:37:9e:97:26:34:06:0f:8b:e3:44:bf:52: bb:c9:62:8b:ea:64:91:7f:b8:d6:d2:f3:2b:99:22:e3:c8:03: 86:a3:98:a4:3a:8f:b9:5c:89:35:c9:93:38:c9:ee:d2:b8:98: b8:6d:47:14:c8:06:63:4c:66:cf:37:d3:d0:1d:46:d2:54:b6: fc:c9:5f:2d:00:1b:d9:3a:f7:0d:3b:db:69:6f:5e:3c:25:13: 1f:da:ea:af:cf:69:b2:c0:97:88:f4:8e:9a:6c:a1:f8:e5:d3: 8a:27:3f:82:8c:2b:33:2d:1a:10:01:3e:9c:1d:69:8a:32:5d: 34:5c:28:76:97:e6:61:00:5a:50:2e:e2:a1:a4:5e:b1:32:4f: d1:a2:c5:f9:6a:7b:90:f0:e6:81:f7:cd:d7:a4:ba:df:79:87: 74:98:39:51:d6:3a:d3:3c:eb:15:8b:41:1a:b0:b2:2d:f4:af: 94:fb:7d:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE70mNwHphZxTRJORQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDgyNTE1MzM0NVoXDTI2MTEyMzE2MzM0NVowLzEtMCsGA1UEAxMk MTdmMWEyZGUtNGNjOS00MWQwLWIwMGQtNmMyMzM1YTMxMTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwffVqi4/HSmat8ioX7Pm9tN7XB7fTdcQ5w5 8653Dpeti/SjMWzcwIdjmnb7BXd1nLZvc4T+hZCar/tyvhT5gIFERS5uxckTB3tv vyL+YzeS4/bcHRoN2yamM/KJUN6d3MXKRskzTVJiVBVRdHRhmK3+PlSdcsfEc1UR C1R2ByJ5O8EeYuEM1uVAqmP8/afqcNI0HwOcEAf4cVp9IomHH0BDug699AzvOWYR 2oILEnoXWK+XlCkCrSGU30+yViuih+AiYYrAehz04C0Ab0nfK5u21eg6hA8Smhar 53ox3V4UpxVSlR+ep5de03OUKM3dMIudeYsiJ0EGAXK1nkHTKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIjgix/lCHMIiEJutXO3aV5NCfmYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNDMxNTVhMjAtMDQ4ZC0z MjQxLTk2NGUtYjk2ZjdhZGQxZGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwU5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEIDda+62N8JZc48wjIjbDvPHzlFA4v4P/gsQRzJX2zG1oP4X254Og4y DpUXFDWzzUDLAVLKxIFuqJRA5WD9S83ft1/MGQV4D0JkijKqszeelyY0Bg+L40S/ UrvJYovqZJF/uNbS8yuZIuPIA4ajmKQ6j7lciTXJkzjJ7tK4mLhtRxTIBmNMZs83 09AdRtJUtvzJXy0AG9k69w0722lvXjwlEx/a6q/PabLAl4j0jppsofjl04onP4KM KzMtGhABPpwdaYoyXTRcKHaX5mEAWlAu4qGkXrEyT9Gixflqe5Dw5oH3zdekut95 h3SYOVHWOtM86xWLQRqwsi30r5T7fdY= -----END CERTIFICATE-----Generated at Thu Aug 27 06:16:37 2026 by rpki-client