$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8b581b10-b721-3a34-b4e4-1974dd3a0d98.roa File: 8b581b10-b721-3a34-b4e4-1974dd3a0d98.roa (raw, json) Hash identifier: ARJz241c+Zi/PP/nm7UL9F5h+SACUjviqe5xpVgJuGQ= Subject key identifier: C1:48:B1:44:F8:D2:FD:BF:92:0A:0C:92:76:03:18:A8:9E:EA:33:AA Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584EA78F64B05C849516133C1B40 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8b581b10-b721-3a34-b4e4-1974dd3a0d98.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 54253 IP address blocks: 168.107.136.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8f:64:b0:5c:84:95:16:13:3c:1b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=b3cfd613-6b6b-4ee7-bf7a-db7f15f9ccf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:a5:c4:5a:8d:2d:0e:2b:cf:84:29:58:2f:ea: 5c:03:44:ff:d0:ca:19:3b:54:22:c5:c6:f4:71:4c: 53:0a:8c:17:40:ae:64:38:bd:9b:6f:58:de:fd:18: 12:f0:1f:95:87:d2:b8:8b:04:9f:a3:b0:d7:83:11: cc:12:03:72:bc:93:66:66:65:5e:f2:45:3e:1a:a4: 1c:f1:4a:4c:05:3b:e6:14:a0:50:4c:f5:be:3f:97: f3:bf:0c:b4:a0:39:06:e3:81:44:f9:b9:90:28:7a: d5:a8:9d:6e:31:65:a2:97:b2:47:87:69:2d:53:dd: d4:39:af:eb:f8:f4:ca:6c:6e:5d:2f:89:0b:2d:09: 39:25:d5:87:e8:93:f9:2e:0e:94:b0:df:dd:6e:32: 23:a7:06:08:f2:66:0e:32:ca:e0:eb:36:ef:3f:ed: 03:6c:96:c6:e8:5f:ff:42:04:58:73:47:28:8b:15: 04:7c:df:2a:aa:0b:ad:26:2a:69:51:7a:1f:a0:e9: 16:7d:48:03:9b:81:d4:c2:95:b5:81:07:64:84:4e: 99:6c:1f:ae:43:99:9b:a1:8c:cc:9d:52:e7:09:2f: de:e7:ab:84:6b:79:86:46:e5:ab:2b:40:1a:62:fa: 70:c2:e1:f1:26:aa:fb:3d:3c:78:c8:1d:41:1d:c4: 75:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:48:B1:44:F8:D2:FD:BF:92:0A:0C:92:76:03:18:A8:9E:EA:33:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8b581b10-b721-3a34-b4e4-1974dd3a0d98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.107.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:de:56:b0:21:bb:ed:ff:63:ac:66:e2:a6:87:19:3b:b8:68: af:db:88:50:a6:71:7f:8f:41:bb:9f:f5:fe:93:1e:b9:62:77: 16:92:5e:3d:3d:da:9a:74:ed:8d:5b:67:79:c4:a0:34:ec:78: e4:90:7c:45:bf:09:95:6e:4f:5e:93:ca:15:e7:ca:a1:2a:fc: 69:33:f1:8f:82:3b:e7:c9:04:ab:34:cf:de:5c:99:f3:a0:29: 39:8b:05:b6:b5:90:a4:ae:19:84:46:42:ec:2f:4e:bc:b8:4f: d7:d2:ad:71:66:af:60:89:2a:0f:59:b6:fa:d6:5b:67:cf:44: 2f:a6:5c:10:f2:6e:4c:27:72:11:c8:58:0b:9a:d2:7a:fb:dc: 82:73:ec:8a:8c:58:f3:32:c1:ff:52:6b:ce:53:3b:28:ce:bb: 38:19:47:44:4e:84:5d:52:32:50:04:91:d5:82:fb:6b:4b:11: be:0c:33:7c:b0:67:f4:da:27:d0:cc:b9:51:27:61:02:62:b7: 04:c9:cb:86:77:a9:aa:4d:ff:ef:88:56:eb:24:de:dc:74:d3: 8f:8c:2c:96:45:bc:82:f4:2f:0a:47:bf:b2:26:33:03:70:93: a4:3e:4e:c7:b0:cb:e6:7e:3c:8b:d3:88:99:79:37:7c:f1:65: 64:e7:9c:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nj2SwXISVFhM8G0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YjNjZmQ2MTMtNmI2Yi00ZWU3LWJmN2EtZGI3ZjE1ZjljY2Y3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6aXEWo0tDivPhClYL+pcA0T/0MoZO1Qixcb0 cUxTCowXQK5kOL2bb1je/RgS8B+Vh9K4iwSfo7DXgxHMEgNyvJNmZmVe8kU+GqQc 8UpMBTvmFKBQTPW+P5fzvwy0oDkG44FE+bmQKHrVqJ1uMWWil7JHh2ktU93UOa/r +PTKbG5dL4kLLQk5JdWH6JP5Lg6UsN/dbjIjpwYI8mYOMsrg6zbvP+0DbJbG6F// QgRYc0coixUEfN8qqgutJippUXofoOkWfUgDm4HUwpW1gQdkhE6ZbB+uQ5mboYzM nVLnCS/e56uEa3mGRuWrK0AaYvpwwuHxJqr7PTx4yB1BHcR1UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMFIsUT40v2/kgoMknYDGKie6jOqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOGI1ODFiMTAtYjcyMS0z YTM0LWI0ZTQtMTk3NGRkM2EwZDk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqGuIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAPeVrAhu+3/Y6xm4qaHGTu4aK/biFCmcX+PQbuf9f6THrlidxaSXj09 2pp07Y1bZ3nEoDTseOSQfEW/CZVuT16TyhXnyqEq/Gkz8Y+CO+fJBKs0z95cmfOg KTmLBba1kKSuGYRGQuwvTry4T9fSrXFmr2CJKg9ZtvrWW2fPRC+mXBDybkwnchHI WAua0nr73IJz7IqMWPMywf9Sa85TOyjOuzgZR0ROhF1SMlAEkdWC+2tLEb4MM3yw Z/TaJ9DMuVEnYQJitwTJy4Z3qapN/++IVusk3tx004+MLJZFvIL0LwpHv7ImMwNw k6Q+Tsewy+Z+PIvTiJl5N3zxZWTnnFk= -----END CERTIFICATE-----Generated at Thu Aug 27 16:56:46 2026 by rpki-client