$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f2ff3cdc-a35d-321b-a159-b358b3d016fc.roa File: f2ff3cdc-a35d-321b-a159-b358b3d016fc.roa (raw, json) Hash identifier: n0FbUXE3OBp/8aAzUIb65On42s1+Ra5VtVvNN4a9crU= Subject key identifier: 35:B2:25:12:E8:1A:DE:CE:DD:1B:98:5D:4A:D3:26:4D:D2:95:08:9D Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584EA786F44A014A38CECA1CA880 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f2ff3cdc-a35d-321b-a159-b358b3d016fc.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 54253 IP address blocks: 151.145.16.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:86:f4:4a:01:4a:38:ce:ca:1c:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=c1066bfd-9d0b-4948-9ba9-765adc247c1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:fa:c9:1d:64:64:12:1e:e3:be:c8:c2:ab:81: 10:c2:6a:0a:b1:95:6b:16:b1:4c:fa:ea:56:60:bb: 76:11:10:c4:79:68:42:b5:ab:68:03:95:aa:90:41: a6:77:58:69:71:fa:37:87:15:d3:94:23:26:60:bd: 7a:54:53:ee:6b:69:13:85:c8:29:90:86:46:10:bd: af:80:b2:b8:6e:53:a7:e9:e4:b7:38:9e:8b:56:50: 19:eb:a5:a2:87:b9:d7:72:84:1f:a8:97:4c:8e:f8: 7c:4f:1d:d0:09:c4:13:f1:6c:e5:ac:b3:62:f8:47: 6d:ff:8b:97:81:f7:82:9d:c4:f8:cd:a1:e5:0b:be: db:d0:fd:11:3f:de:09:58:0a:e1:f4:1a:74:2f:46: 1c:a7:fe:bc:d0:fe:6a:2e:29:b5:24:f2:13:16:e6: d3:01:b9:35:17:b4:ae:0d:81:d6:5a:2f:be:3f:8c: b9:ab:1c:c4:b2:35:95:65:62:f8:41:43:11:28:fd: 56:40:d7:91:7c:6e:80:1d:27:db:99:79:f0:8f:01: 8b:b1:bc:b1:6a:cf:e3:bd:69:ef:c4:62:e3:e8:d3: 61:96:a0:61:01:a9:c6:69:1c:d5:75:9f:94:90:bc: d9:2a:a4:a3:30:3d:08:6c:39:56:fe:85:3d:02:77: f9:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:B2:25:12:E8:1A:DE:CE:DD:1B:98:5D:4A:D3:26:4D:D2:95:08:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f2ff3cdc-a35d-321b-a159-b358b3d016fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 151.145.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:2d:0c:bd:d3:93:38:4e:09:7a:09:cc:c6:ea:97:25:8f:c0: 3b:ae:0b:cb:7a:64:03:2a:35:db:38:1e:61:15:88:43:af:a9: aa:49:67:5c:13:d1:74:3c:96:01:fb:6f:c6:3d:fb:34:69:c1: 26:56:d8:4c:67:99:17:e9:b3:09:53:73:7b:11:5b:b7:1a:80: d8:97:f8:55:54:dd:6b:60:49:0d:ec:dd:1e:58:32:74:67:c8: cb:ef:d8:a2:39:49:85:74:cb:d1:3b:d4:1e:39:8f:7e:e3:59: c6:3c:e9:23:c5:9f:8a:f1:2e:a4:a2:e8:26:ff:a1:36:c6:ea: aa:41:e9:11:50:f9:46:08:e9:69:18:05:71:7e:20:09:e8:69: b3:6c:72:6e:ab:5a:f5:25:7e:61:a9:a7:e7:55:44:7a:89:98: cd:f0:d6:eb:13:71:b7:47:a7:2a:66:a6:e0:d6:ec:0f:3a:98: ef:77:8b:cb:86:94:42:11:66:6e:14:78:37:ee:3e:a8:7b:28: 0a:5d:87:1a:9e:4e:74:af:9e:05:68:d4:f3:ec:1e:20:fe:dc: 8e:b5:e0:bd:6a:bc:7d:83:9e:9e:f4:6d:df:db:8a:90:d9:ee: 56:44:e6:ea:46:43:39:50:01:e6:e9:48:46:89:e7:60:c2:22: 5f:3b:6d:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nhvRKAUo4zsocqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YzEwNjZiZmQtOWQwYi00OTQ4LTliYTktNzY1YWRjMjQ3YzFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/rJHWRkEh7jvsjCq4EQwmoKsZVrFrFM+upW YLt2ERDEeWhCtatoA5WqkEGmd1hpcfo3hxXTlCMmYL16VFPua2kThcgpkIZGEL2v gLK4blOn6eS3OJ6LVlAZ66Wih7nXcoQfqJdMjvh8Tx3QCcQT8WzlrLNi+Edt/4uX gfeCncT4zaHlC77b0P0RP94JWArh9Bp0L0Ycp/680P5qLim1JPITFubTAbk1F7Su DYHWWi++P4y5qxzEsjWVZWL4QUMRKP1WQNeRfG6AHSfbmXnwjwGLsbyxas/jvWnv xGLj6NNhlqBhAanGaRzVdZ+UkLzZKqSjMD0IbDlW/oU9Anf5NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDWyJRLoGt7O3RuYXUrTJk3SlQidMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZjJmZjNjZGMtYTM1ZC0z MjFiLWExNTktYjM1OGIzZDAxNmZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDl5EQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGctDL3TkzhOCXoJzMbqlyWPwDuuC8t6ZAMqNds4HmEViEOvqapJZ1wT 0XQ8lgH7b8Y9+zRpwSZW2ExnmRfpswlTc3sRW7cagNiX+FVU3WtgSQ3s3R5YMnRn yMvv2KI5SYV0y9E71B45j37jWcY86SPFn4rxLqSi6Cb/oTbG6qpB6RFQ+UYI6WkY BXF+IAnoabNscm6rWvUlfmGpp+dVRHqJmM3w1usTcbdHpypmpuDW7A86mO93i8uG lEIRZm4UeDfuPqh7KApdhxqeTnSvngVo1PPsHiD+3I614L1qvH2Dnp70bd/bipDZ 7lZE5upGQzlQAebpSEaJ52DCIl87be0= -----END CERTIFICATE-----Generated at Thu Aug 27 10:28:13 2026 by rpki-client