$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/dd425c68-4caa-3ac0-b460-0a6913ceb086.roa File: dd425c68-4caa-3ac0-b460-0a6913ceb086.roa (raw, json) Hash identifier: JryZ3gr1H6p92tNW5KRrri7E7o93FTKt9moMxd7ASmI= Subject key identifier: 55:11:E9:00:77:80:85:B0:3D:91:C3:6D:B2:BC:34:93:82:D3:BC:07 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584EA78712B201B91DDC065F8578 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/dd425c68-4caa-3ac0-b460-0a6913ceb086.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 54253 IP address blocks: 151.104.98.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:12:b2:01:b9:1d:dc:06:5f:85:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=aa3f7159-ada6-46dd-8df2-b4fa34b2b12a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:82:27:6c:10:9a:f9:5e:84:9f:79:8b:bb:a7: ad:6c:f0:20:45:bb:fe:f4:e9:9c:1d:f9:9c:1e:30: e4:55:73:73:44:77:e9:eb:55:00:a0:d8:ee:0f:d8: b3:ef:94:0c:22:c2:95:0c:7a:ae:65:dc:d6:88:28: 46:16:64:57:be:8a:ae:58:c7:dc:de:ac:b1:5b:09: b6:cd:93:8f:85:a1:27:c1:7c:98:72:e5:4f:76:db: 65:aa:e1:f3:6a:a7:45:c7:f5:d8:e6:81:21:24:35: ed:d2:06:3d:7e:bd:eb:f1:90:02:b6:44:2c:dd:1b: 50:22:e8:67:9b:95:c1:1b:aa:d8:b0:67:5a:c1:73: 55:f8:7d:7e:4d:20:c0:40:66:b5:74:39:bf:57:f0: de:d4:43:f4:c3:cd:f8:bf:8c:e9:51:93:ed:2b:79: 5f:7f:2e:78:d0:82:73:d7:6f:1d:70:6c:73:5b:de: 7b:8f:0f:c4:25:a1:6e:78:12:87:c0:76:0d:f6:02: 21:98:a5:b7:2a:a3:18:64:2a:b5:b8:1c:e2:44:07: 29:3f:ab:6c:92:e4:53:65:fa:5c:c9:12:8e:4b:50: 13:16:1c:46:45:f0:3f:a6:47:2e:dd:64:02:50:55: 3d:54:bb:eb:e5:4b:e6:e2:02:5a:9d:26:7e:47:4e: 04:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:11:E9:00:77:80:85:B0:3D:91:C3:6D:B2:BC:34:93:82:D3:BC:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/dd425c68-4caa-3ac0-b460-0a6913ceb086.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 151.104.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:3c:60:26:27:52:cf:ac:28:9c:60:5b:de:d7:9d:5c:3e:9d: 84:f8:84:25:45:ac:59:b4:fe:9f:d1:6b:56:09:bb:87:5f:c2: 1c:5f:81:9c:b4:e0:8e:74:96:57:13:fa:59:65:ae:e9:11:f1: e2:69:00:01:23:41:c8:38:7f:a5:7a:b1:54:8c:3f:1e:79:61: 7a:a0:d4:4b:f3:13:ed:73:ac:0e:40:31:33:de:69:bb:47:e3: c0:54:c5:d4:fb:a0:f9:1e:19:5f:a2:59:b2:f5:f6:8a:95:eb: 47:c7:45:5d:fe:f6:1c:40:00:39:c9:9d:fd:37:f6:65:4a:d4: 21:f5:45:32:aa:f1:f4:fe:e2:bb:7d:07:54:44:6c:92:bf:4e: 81:91:d6:06:1a:99:14:b7:fd:26:5a:7d:8d:0f:9c:15:96:a4: 8a:9e:de:e6:39:cd:d4:54:02:8e:06:5a:b4:92:91:e8:05:f8: 31:f9:69:e3:42:03:f8:c5:6a:57:a6:95:eb:5f:af:15:38:ae: 1f:db:db:98:9a:f5:b7:8d:7f:83:66:4e:e1:2a:40:4c:e2:c6: 17:37:07:42:95:d2:89:f9:9a:1e:7d:e3:bf:6e:36:b5:16:a7: df:19:72:69:be:21:cf:b0:ef:eb:b5:c6:e2:ff:9a:46:33:ea: 05:69:78:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nhxKyAbkd3AZfhXgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YWEzZjcxNTktYWRhNi00NmRkLThkZjItYjRmYTM0YjJiMTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2oInbBCa+V6En3mLu6etbPAgRbv+9OmcHfmc HjDkVXNzRHfp61UAoNjuD9iz75QMIsKVDHquZdzWiChGFmRXvoquWMfc3qyxWwm2 zZOPhaEnwXyYcuVPdttlquHzaqdFx/XY5oEhJDXt0gY9fr3r8ZACtkQs3RtQIuhn m5XBG6rYsGdawXNV+H1+TSDAQGa1dDm/V/De1EP0w834v4zpUZPtK3lffy540IJz 128dcGxzW957jw/EJaFueBKHwHYN9gIhmKW3KqMYZCq1uBziRAcpP6tskuRTZfpc yRKOS1ATFhxGRfA/pkcu3WQCUFU9VLvr5Uvm4gJanSZ+R04E2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFUR6QB3gIWwPZHDbbK8NJOC07wHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZGQ0MjVjNjgtNGNhYS0z YWMwLWI0NjAtMGE2OTEzY2ViMDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBl2hiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEI8YCYnUs+sKJxgW97XnVw+nYT4hCVFrFm0/p/Ra1YJu4dfwhxfgZy0 4I50llcT+lllrukR8eJpAAEjQcg4f6V6sVSMPx55YXqg1EvzE+1zrA5AMTPeabtH 48BUxdT7oPkeGV+iWbL19oqV60fHRV3+9hxAADnJnf039mVK1CH1RTKq8fT+4rt9 B1REbJK/ToGR1gYamRS3/SZafY0PnBWWpIqe3uY5zdRUAo4GWrSSkegF+DH5aeNC A/jFalemletfrxU4rh/b25ia9beNf4NmTuEqQEzixhc3B0KV0on5mh59479uNrUW p98Zcmm+Ic+w7+u1xuL/mkYz6gVpeL8= -----END CERTIFICATE-----Generated at Thu Aug 27 16:13:54 2026 by rpki-client