$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8ec2a157-3584-32e5-81a6-826583bef3c9.roa File: 8ec2a157-3584-32e5-81a6-826583bef3c9.roa (raw, json) Hash identifier: 3LTlQkMiUVac8rsoFECPAFMtXIZBgljktYtrbV0Sej8= Subject key identifier: AD:4C:77:8E:D2:01:3B:4A:E7:F0:D7:C5:6B:09:60:E1:E4:99:01:C0 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E5FDF4BFB326093579F611630 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8ec2a157-3584-32e5-81a6-826583bef3c9.roa Signing time: Fri 03 Jul 2026 09:00:12 +0000 ROA not before: Fri 03 Jul 2026 09:00:12 +0000 ROA not after: Thu 01 Oct 2026 09:00:12 +0000 asID: 31898 IP address blocks: 168.107.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5f:df:4b:fb:32:60:93:57:9f:61:16:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 3 09:00:12 2026 GMT Not After : Oct 1 09:00:12 2026 GMT Subject: CN=494d81a9-22e9-456c-93b9-f3eeaad17322 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ed:23:73:82:35:26:18:ce:56:e6:31:5e:ea: 85:bc:24:ee:59:0d:e8:53:95:64:a4:a5:5d:3f:c1: 1b:16:0a:32:29:ec:ac:c7:c6:90:2b:41:d9:5e:be: 5f:f7:57:37:69:bb:44:dd:4a:6a:cf:61:79:cf:54: 1c:e9:b8:70:96:31:68:94:89:fd:6d:b7:e2:ff:12: ed:7e:c8:4f:2f:c4:50:cf:45:66:53:3c:e1:f6:35: 35:d8:f1:21:ca:02:8c:52:7c:66:15:89:06:11:1e: fd:87:00:ae:64:b5:aa:33:fb:41:31:7a:b1:b3:8d: 50:5d:b4:67:0a:dc:24:e7:63:c9:1a:de:0d:12:74: 7f:cc:ca:ea:eb:45:a5:84:f1:55:28:1b:83:a4:13: 18:cb:08:f3:20:72:47:2a:42:21:de:c4:e6:2f:f3: bf:64:66:ad:d9:dc:38:7f:f0:39:6b:9d:65:24:cc: d3:be:d4:6a:27:17:28:8b:db:9d:4b:cf:b5:79:21: 1a:b5:cf:ba:27:48:f5:63:45:a4:66:fc:ab:c9:e7: e6:39:36:f0:25:26:e1:3d:67:85:ee:68:ee:8b:1d: 0a:99:eb:db:62:8c:8f:74:12:7d:b2:96:f3:8c:95: b1:cc:ad:3c:16:ae:7e:51:53:9b:ee:5d:da:52:38: 75:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:4C:77:8E:D2:01:3B:4A:E7:F0:D7:C5:6B:09:60:E1:E4:99:01:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8ec2a157-3584-32e5-81a6-826583bef3c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.107.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:74:5b:4a:33:d5:c1:09:4b:f1:c7:e1:e8:36:f3:ea:4a:c0: e7:5c:e4:19:32:a5:ba:ad:a3:df:94:be:8e:ae:d5:f8:64:63: 52:71:6b:bd:87:e9:67:c8:d3:a4:8c:28:78:cd:10:01:b3:8f: bb:b6:ae:f9:04:60:ab:0d:2d:fa:5b:87:1e:f5:31:42:31:80: 04:e3:69:4f:0a:0d:25:b8:00:78:2c:37:10:26:da:a7:e0:fa: 99:8c:1b:2e:d2:30:50:3c:3b:df:ba:c0:79:e0:89:4f:5e:91: b2:e5:f9:f5:8e:50:90:b8:31:ad:07:58:35:26:a0:16:18:1a: db:99:5b:65:13:d3:24:b4:88:3c:2a:b9:88:66:f3:ea:73:d8: da:76:8a:12:dd:ff:d1:20:9f:5e:d0:02:1e:8a:1d:5a:0f:78: 1d:ab:cb:81:66:3d:f5:3e:59:39:73:8b:97:73:16:ff:fb:45: c3:01:29:c1:35:03:4b:9c:44:9e:db:44:42:b5:84:ca:be:be: 19:18:45:25:43:0e:0f:f3:8d:0b:81:2c:b7:75:f2:15:39:cf: 34:81:54:bd:87:40:cf:6d:6a:0d:48:62:87:f0:dc:40:82:7b: a6:a1:47:e1:2a:77:f3:5c:87:b4:36:da:d6:c2:2d:d1:92:ab: a2:55:3d:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5f30v7MmCTV59hFjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcwMzA5MDAxMloXDTI2MTAwMTA5MDAxMlowLzEtMCsGA1UEAxMk NDk0ZDgxYTktMjJlOS00NTZjLTkzYjktZjNlZWFhZDE3MzIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAme0jc4I1JhjOVuYxXuqFvCTuWQ3oU5VkpKVd P8EbFgoyKeysx8aQK0HZXr5f91c3abtE3Upqz2F5z1Qc6bhwljFolIn9bbfi/xLt fshPL8RQz0VmUzzh9jU12PEhygKMUnxmFYkGER79hwCuZLWqM/tBMXqxs41QXbRn Ctwk52PJGt4NEnR/zMrq60WlhPFVKBuDpBMYywjzIHJHKkIh3sTmL/O/ZGat2dw4 f/A5a51lJMzTvtRqJxcoi9udS8+1eSEatc+6J0j1Y0WkZvyryefmOTbwJSbhPWeF 7mjuix0KmevbYoyPdBJ9spbzjJWxzK08Fq5+UVOb7l3aUjh1fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK1Md47SATtK5/DXxWsJYOHkmQHAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOGVjMmExNTctMzU4NC0z MmU1LTgxYTYtODI2NTgzYmVmM2M5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGqGsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB10W0oz1cEJS/HH4eg28+pKwOdc5Bkypbqto9+Uvo6u1fhkY1Jxa72H 6WfI06SMKHjNEAGzj7u2rvkEYKsNLfpbhx71MUIxgATjaU8KDSW4AHgsNxAm2qfg +pmMGy7SMFA8O9+6wHngiU9ekbLl+fWOUJC4Ma0HWDUmoBYYGtuZW2UT0yS0iDwq uYhm8+pz2Np2ihLd/9Egn17QAh6KHVoPeB2ry4FmPfU+WTlzi5dzFv/7RcMBKcE1 A0ucRJ7bREK1hMq+vhkYRSVDDg/zjQuBLLd18hU5zzSBVL2HQM9tag1IYofw3ECC e6ahR+Eqd/Nch7Q22tbCLdGSq6JVPQw= -----END CERTIFICATE-----Generated at Mon Jul 13 02:49:24 2026 by rpki-client