$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ccdbb705-513a-3759-aa06-9a3ae703e089.roa File: ccdbb705-513a-3759-aa06-9a3ae703e089.roa (raw, json) Hash identifier: PQQrcSSn7EhXKR6v8dau8yWTPY80PIpyqTdhHYRrz58= Subject key identifier: 71:50:6B:09:1E:50:97:B7:BE:9C:97:86:12:6B:73:78:6B:89:E5:39 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584EEA9F695CB99F08F2EA6AFDC0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ccdbb705-513a-3759-aa06-9a3ae703e089.roa Signing time: Sat 22 Aug 2026 01:48:52 +0000 ROA not before: Sat 22 Aug 2026 01:48:52 +0000 ROA not after: Fri 20 Nov 2026 02:48:52 +0000 asID: 31898 IP address blocks: 147.5.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:9f:69:5c:b9:9f:08:f2:ea:6a:fd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 22 01:48:52 2026 GMT Not After : Nov 20 02:48:52 2026 GMT Subject: CN=80ed6752-d27c-491d-b1bb-f8cfb540a097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:82:89:83:62:31:59:2a:ea:94:c9:ef:60:66: 83:1e:c1:ec:60:c8:b2:3b:68:e0:9d:b8:de:19:ab: d9:0e:70:29:07:83:2c:d0:66:5c:04:d1:39:82:a0: 94:df:ca:35:55:b1:3e:75:bb:bf:18:6b:6f:7b:ec: c7:29:f7:af:6a:6c:cb:0b:6e:63:19:bd:20:69:55: e4:db:8c:42:d8:65:69:db:a8:95:2f:e8:ba:d4:a5: b2:ad:88:b1:84:d0:7a:28:bc:04:f6:b6:77:da:2a: 3e:6c:c6:e5:b1:0b:55:d3:5c:df:63:bd:bd:fe:f0: 6a:e6:86:77:2a:62:8b:1d:e4:76:ec:61:d5:d3:ba: c2:12:9d:77:93:0a:9b:74:dc:5a:a4:e7:d2:1b:a2: aa:70:69:ce:82:9d:27:b3:7f:bc:77:1d:01:df:cc: a5:46:b5:88:94:c1:c1:7d:74:eb:b4:49:5f:45:6d: c9:b9:6f:bb:09:86:ec:2a:76:56:a3:0d:8b:86:e4: a8:22:5a:16:b0:e2:0d:d3:12:1a:64:9e:16:fc:84: e0:09:07:d0:f9:a9:8f:8f:e3:76:0c:c9:b9:e3:d3: 76:46:e1:86:5f:00:76:dd:68:b4:36:c0:7f:d7:d5: 02:1d:50:65:f7:ac:be:36:d3:1f:b1:a2:d5:2c:40: d0:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:50:6B:09:1E:50:97:B7:BE:9C:97:86:12:6B:73:78:6B:89:E5:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ccdbb705-513a-3759-aa06-9a3ae703e089.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 147.5.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:ce:54:54:9a:de:92:da:c8:e1:3d:78:a2:57:2d:38:2c:2c: c9:68:9d:4c:03:83:98:d1:32:f8:1a:9e:50:b0:60:1d:71:90: 23:2a:f4:cb:b0:4c:39:8c:cd:85:7a:f8:b9:6b:bc:5a:93:4a: e6:72:92:34:e1:ee:0c:2c:b0:e3:f0:0d:0d:0a:a5:9c:9a:07: ab:9f:72:5c:f6:0b:98:34:0e:02:7f:02:a1:3e:f4:16:55:63: 29:71:c9:ea:7a:42:ef:31:54:6f:0e:26:7f:73:6e:00:84:d9: b7:2c:40:9c:b4:d6:61:f0:46:db:e6:34:3d:63:92:12:33:de: bf:35:b7:7f:61:66:22:6a:11:b4:f4:82:0b:9c:d9:b7:b2:70: 02:31:33:63:25:25:c0:a7:61:e7:66:bf:c1:a5:00:55:98:df: 14:1f:7a:9b:38:8f:af:15:d0:c2:ce:35:66:9d:91:0f:ea:28: e1:ad:ac:45:13:3f:59:7c:1b:b5:22:20:0d:ae:80:34:f9:b6: 89:db:1a:86:c4:cf:63:de:d8:e8:fe:b1:a4:33:d4:84:68:d9: 01:95:5e:b1:4d:39:50:9c:b1:8a:35:52:a1:a6:12:32:47:ae: 25:be:29:6d:85:50:dd:6b:9a:4d:6e:6a:5d:12:24:0c:fd:d9: 1b:bd:09:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qn2lcuZ8I8upq/cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDgyMjAxNDg1MloXDTI2MTEyMDAyNDg1MlowLzEtMCsGA1UEAxMk ODBlZDY3NTItZDI3Yy00OTFkLWIxYmItZjhjZmI1NDBhMDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoKJg2IxWSrqlMnvYGaDHsHsYMiyO2jgnbje GavZDnApB4Ms0GZcBNE5gqCU38o1VbE+dbu/GGtve+zHKfevamzLC25jGb0gaVXk 24xC2GVp26iVL+i61KWyrYixhNB6KLwE9rZ32io+bMblsQtV01zfY729/vBq5oZ3 KmKLHeR27GHV07rCEp13kwqbdNxapOfSG6KqcGnOgp0ns3+8dx0B38ylRrWIlMHB fXTrtElfRW3JuW+7CYbsKnZWow2LhuSoIloWsOIN0xIaZJ4W/ITgCQfQ+amPj+N2 DMm549N2RuGGXwB23Wi0NsB/19UCHVBl96y+NtMfsaLVLEDQLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHFQawkeUJe3vpyXhhJrc3hrieU5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvY2NkYmI3MDUtNTEzYS0z NzU5LWFhMDYtOWEzYWU3MDNlMDg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwU0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLOVFSa3pLayOE9eKJXLTgsLMlonUwDg5jRMvganlCwYB1xkCMq9Muw TDmMzYV6+LlrvFqTSuZykjTh7gwssOPwDQ0KpZyaB6ufclz2C5g0DgJ/AqE+9BZV Yylxyep6Qu8xVG8OJn9zbgCE2bcsQJy01mHwRtvmND1jkhIz3r81t39hZiJqEbT0 gguc2beycAIxM2MlJcCnYedmv8GlAFWY3xQfeps4j68V0MLONWadkQ/qKOGtrEUT P1l8G7UiIA2ugDT5tonbGobEz2Pe2Oj+saQz1IRo2QGVXrFNOVCcsYo1UqGmEjJH riW+KW2FUN1rmk1ual0SJAz92Ru9CeM= -----END CERTIFICATE-----Generated at Thu Aug 27 06:16:39 2026 by rpki-client