$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/578352b5-a674-355a-a281-9a48259373e4.roa File: 578352b5-a674-355a-a281-9a48259373e4.roa (raw, json) Hash identifier: qQ4Qipa/JP88T6SD63b12NgvYLFTGBClkdfAQ7WlBhQ= Subject key identifier: 2F:D8:FE:ED:1F:AB:65:34:AC:0D:54:C9:53:D7:FA:34:A2:DF:E9:27 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584EA786F344BBF930A1BDCBCC80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/578352b5-a674-355a-a281-9a48259373e4.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 54253 IP address blocks: 165.1.86.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:86:f3:44:bb:f9:30:a1:bd:cb:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=1c303e12-00e4-4f8f-aefd-965ff03e2e84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d3:70:d7:0b:3d:1b:ce:d1:c4:58:a3:4e:70: b1:60:9e:a1:a3:e9:8b:c8:09:d6:ea:78:d7:0a:d6: 5f:61:bc:73:f6:b8:a1:6d:ef:64:2c:67:77:4e:3f: 01:17:33:1e:17:04:f0:84:8b:44:48:78:fc:21:da: c8:d2:56:11:cc:e2:41:b0:57:b8:23:9e:2b:aa:ba: cf:9d:af:91:b0:0c:48:63:56:fd:ae:f9:c3:10:51: ee:16:31:fe:e5:2a:a9:ec:54:70:a0:6e:ce:c4:88: c1:1a:e1:e6:bb:28:3e:ef:c9:b3:55:fc:be:ff:46: 45:23:0e:98:9c:92:4e:f3:ae:dd:10:eb:ae:70:5f: 17:fc:0b:9a:00:36:a3:0f:46:01:da:c5:17:49:30: d3:5f:b8:26:91:ff:b4:a3:3f:3f:42:68:ec:83:f3: 74:28:f0:aa:96:d5:90:46:72:b0:8b:b8:74:f7:ef: 8d:e2:cb:d0:08:88:4d:b3:e1:77:44:6a:87:9c:6a: 25:ed:97:47:c7:d2:f1:9b:d5:78:cb:ed:82:8e:79: c1:93:20:ef:35:f7:01:10:4f:59:d5:96:e9:31:e6: 8a:96:96:b9:c2:97:7d:88:34:4d:9f:0e:5f:aa:ce: 29:9c:0c:54:d8:36:df:e8:d7:23:9b:2e:ce:c0:3d: 35:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:D8:FE:ED:1F:AB:65:34:AC:0D:54:C9:53:D7:FA:34:A2:DF:E9:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/578352b5-a674-355a-a281-9a48259373e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 165.1.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:42:f8:88:63:4c:3a:ed:35:fa:99:3f:6f:5f:c2:1f:44:31: 16:52:34:cf:42:91:00:5f:e2:5e:47:81:c3:52:4a:14:16:b9: 8a:b0:00:99:68:ca:c9:0b:5e:5a:67:26:01:34:01:b2:c0:9b: 7c:d4:48:1a:98:b0:48:90:a6:10:cf:a7:38:42:97:44:6c:f3: 37:a1:b1:42:2f:20:26:fc:eb:50:47:f0:20:4e:b1:05:0a:01: a8:64:f4:af:81:6f:48:13:a9:f1:ec:bb:28:7e:62:67:f1:ea: 8d:e4:61:56:35:a6:c2:a8:7b:cc:1c:cb:2c:38:ed:70:39:06: 08:b2:6a:40:ec:45:65:bb:14:72:db:ff:c0:17:a2:50:9f:6b: ad:d4:12:75:a2:fb:7e:87:96:b6:e9:0e:37:27:2b:18:8e:61: 18:d1:59:52:ae:30:f2:78:7d:c8:be:5c:f7:af:9d:d2:8c:30: c6:97:e5:a2:01:c8:a9:24:30:9f:e6:a3:21:c2:5e:19:01:6e: 9b:31:0e:cd:2c:69:cd:4c:21:4b:b2:d2:91:fb:b7:54:4c:11: 6d:93:0b:4a:72:d7:96:e0:9d:58:2c:42:a2:78:26:60:b5:e1: 6f:b6:34:b1:58:15:4f:37:e3:60:6c:94:bf:99:a9:9b:ba:14: 68:4c:27:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nhvNEu/kwob3LzIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MWMzMDNlMTItMDBlNC00ZjhmLWFlZmQtOTY1ZmYwM2UyZTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9Nw1ws9G87RxFijTnCxYJ6ho+mLyAnW6njX CtZfYbxz9rihbe9kLGd3Tj8BFzMeFwTwhItESHj8IdrI0lYRzOJBsFe4I54rqrrP na+RsAxIY1b9rvnDEFHuFjH+5Sqp7FRwoG7OxIjBGuHmuyg+78mzVfy+/0ZFIw6Y nJJO867dEOuucF8X/AuaADajD0YB2sUXSTDTX7gmkf+0oz8/Qmjsg/N0KPCqltWQ RnKwi7h09++N4svQCIhNs+F3RGqHnGol7ZdHx9Lxm9V4y+2CjnnBkyDvNfcBEE9Z 1ZbpMeaKlpa5wpd9iDRNnw5fqs4pnAxU2Dbf6Ncjmy7OwD011QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC/Y/u0fq2U0rA1UyVPX+jSi3+knMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNTc4MzUyYjUtYTY3NC0z NTVhLWEyODEtOWE0ODI1OTM3M2U0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpQFWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABFC+IhjTDrtNfqZP29fwh9EMRZSNM9CkQBf4l5HgcNSShQWuYqwAJlo yskLXlpnJgE0AbLAm3zUSBqYsEiQphDPpzhCl0Rs8zehsUIvICb861BH8CBOsQUK Aahk9K+Bb0gTqfHsuyh+Ymfx6o3kYVY1psKoe8wcyyw47XA5BgiyakDsRWW7FHLb /8AXolCfa63UEnWi+36HlrbpDjcnKxiOYRjRWVKuMPJ4fci+XPevndKMMMaX5aIB yKkkMJ/moyHCXhkBbpsxDs0sac1MIUuy0pH7t1RMEW2TC0py15bgnVgsQqJ4JmC1 4W+2NLFYFU8342BslL+ZqZu6FGhMJ1c= -----END CERTIFICATE-----Generated at Thu Aug 27 13:20:32 2026 by rpki-client