$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1d57239-6176-4c8d-9a7e-f9fea380a1a2/d1a199d5-6e44-3fa9-9c20-f9fd43178512.roa File: d1a199d5-6e44-3fa9-9c20-f9fd43178512.roa (raw, json) Hash identifier: Ipkbmv3tjgP0GUCVwg8+LPKKSyxW3YYbFLoFjtiT4MU= Subject key identifier: 4F:23:13:B6:4F:D0:70:29:2C:64:FF:67:CD:31:DD:5B:54:28:FD:D7 Certificate issuer: /CN=d1d57239-6176-4c8d-9a7e-f9fea380a1a2 Certificate serial: 010D0C9F4328584EB722D7699AEA566C5B2943C0 Authority key identifier: 6D:0E:19:88:64:18:83:E1:80:8D:48:79:CD:51:23:88:2E:59:37:A1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1d57239-6176-4c8d-9a7e-f9fea380a1a2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1d57239-6176-4c8d-9a7e-f9fea380a1a2/d1a199d5-6e44-3fa9-9c20-f9fd43178512.roa Signing time: Mon 03 Aug 2026 15:11:38 +0000 ROA not before: Mon 03 Aug 2026 15:11:38 +0000 ROA not after: Sun 01 Nov 2026 16:11:38 +0000 asID: 12167 IP address blocks: 107.161.144.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1d57239-6176-4c8d-9a7e-f9fea380a1a2/d1d57239-6176-4c8d-9a7e-f9fea380a1a2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1d57239-6176-4c8d-9a7e-f9fea380a1a2/d1d57239-6176-4c8d-9a7e-f9fea380a1a2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1d57239-6176-4c8d-9a7e-f9fea380a1a2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b7:22:d7:69:9a:ea:56:6c:5b:29:43:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1d57239-6176-4c8d-9a7e-f9fea380a1a2 Validity Not Before: Aug 3 15:11:38 2026 GMT Not After : Nov 1 16:11:38 2026 GMT Subject: CN=47e0a08c-a119-4450-bacb-c726321aef95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:21:fc:66:9e:4a:83:a3:cd:3d:bf:15:b0:b5: bf:bf:e8:23:ff:27:09:eb:98:c8:4e:00:a1:2d:e3: 0d:5d:d1:ad:93:53:88:a1:ca:57:7e:54:ae:e2:2e: 97:dd:78:fa:75:d0:c6:9f:1f:e6:56:01:4f:12:0f: 8b:26:b6:b9:11:8c:d9:e7:fe:00:29:df:08:43:b5: 3c:f2:86:58:2e:b7:82:eb:61:2d:fa:8d:a9:a4:f6: 9f:f5:78:6e:39:e9:9d:10:b4:b2:0d:86:f3:03:1a: 49:93:35:c4:84:86:47:c8:19:e6:13:a6:80:48:2a: 4c:4a:cc:06:e8:1d:a1:73:ee:5a:2a:10:e3:68:aa: 4d:c3:77:07:d8:0e:cb:b3:af:cb:8f:94:39:be:df: b2:97:1e:f2:44:da:a0:2d:84:e2:e8:0d:6e:ca:95: 56:4e:f5:82:2b:fd:7e:e5:3b:6c:92:97:d7:c8:5f: 75:80:a5:3e:ea:94:2a:29:fe:33:cd:43:d3:de:7c: c8:01:8b:2c:15:6f:95:57:cc:39:06:0e:28:87:c0: cd:96:65:ef:61:c3:f7:59:ba:71:2f:f8:00:2e:cb: a8:6b:a3:37:2b:38:20:76:30:a5:44:cf:17:23:51: e0:86:b4:0a:e3:78:c8:bc:c3:8b:38:53:c2:21:d5: 9d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:23:13:B6:4F:D0:70:29:2C:64:FF:67:CD:31:DD:5B:54:28:FD:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1d57239-6176-4c8d-9a7e-f9fea380a1a2/d1a199d5-6e44-3fa9-9c20-f9fd43178512.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1d57239-6176-4c8d-9a7e-f9fea380a1a2/d1d57239-6176-4c8d-9a7e-f9fea380a1a2.crl X509v3 Authority Key Identifier: keyid:6D:0E:19:88:64:18:83:E1:80:8D:48:79:CD:51:23:88:2E:59:37:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1d57239-6176-4c8d-9a7e-f9fea380a1a2.cer sbgp-ipAddrBlock: critical IPv4: 107.161.144.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:0f:ab:bb:5a:1b:ea:6b:dc:1e:18:6e:9b:0b:ee:ee:1e:86: d6:1d:59:43:8d:13:63:b5:0a:80:01:cb:35:a6:fa:1f:00:ed: f0:aa:70:53:0f:af:d0:33:14:f7:98:5c:87:cd:38:b2:89:16: d2:f9:95:86:8e:2e:4f:47:15:0c:25:c1:e1:89:a7:71:24:08: c0:7b:ef:46:09:17:07:f8:8b:c7:7d:53:1f:97:c1:55:b3:40: d4:1d:51:5d:f9:03:3e:f0:b6:9b:d5:37:75:77:8e:7b:15:81: 4e:7a:91:ed:0a:ab:b0:d3:2e:d3:58:37:23:26:03:c7:37:a3: 52:68:65:85:84:c0:69:64:d9:95:da:b4:c1:fb:a3:6a:a7:2f: 04:89:61:f4:c1:f2:77:26:5b:bb:51:89:61:f0:4d:48:e3:a8: 20:cb:dd:67:6c:4a:74:39:5c:47:89:d9:56:c7:81:e3:b7:91: c1:81:99:6a:ab:89:36:6a:0e:9f:df:9d:e7:17:da:2e:16:7f: ea:1a:ca:a2:d5:0a:9b:54:79:a3:76:29:49:30:e0:6f:6b:af: 05:79:e3:c3:79:e1:31:6a:2a:8e:bc:d7:b3:6d:7e:d0:79:d1: f2:1f:e8:a5:b2:f5:01:c8:ab:1b:e8:fb:fa:31:6a:dd:51:a9: c8:cf:d5:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE63ItdpmupWbFspQ8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFkNTcyMzktNjE3Ni00YzhkLTlhN2UtZjlmZWEzODBh MWEyMB4XDTI2MDgwMzE1MTEzOFoXDTI2MTEwMTE2MTEzOFowLzEtMCsGA1UEAxMk NDdlMGEwOGMtYTExOS00NDUwLWJhY2ItYzcyNjMyMWFlZjk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniH8Zp5Kg6PNPb8VsLW/v+gj/ycJ65jITgCh LeMNXdGtk1OIocpXflSu4i6X3Xj6ddDGnx/mVgFPEg+LJra5EYzZ5/4AKd8IQ7U8 8oZYLreC62Et+o2ppPaf9XhuOemdELSyDYbzAxpJkzXEhIZHyBnmE6aASCpMSswG 6B2hc+5aKhDjaKpNw3cH2A7Ls6/Lj5Q5vt+ylx7yRNqgLYTi6A1uypVWTvWCK/1+ 5TtskpfXyF91gKU+6pQqKf4zzUPT3nzIAYssFW+VV8w5Bg4oh8DNlmXvYcP3Wbpx L/gALsuoa6M3KzggdjClRM8XI1HghrQK43jIvMOLOFPCIdWdQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE8jE7ZP0HApLGT/Z80x3VtUKP3XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kMWQ1 NzIzOS02MTc2LTRjOGQtOWE3ZS1mOWZlYTM4MGExYTIvZDFhMTk5ZDUtNmU0NC0z ZmE5LTljMjAtZjlmZDQzMTc4NTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZDFkNTcyMzktNjE3Ni00YzhkLTlh N2UtZjlmZWEzODBhMWEyL2QxZDU3MjM5LTYxNzYtNGM4ZC05YTdlLWY5ZmVhMzgw YTFhMi5jcmwwHwYDVR0jBBgwFoAUbQ4ZiGQYg+GAjUh5zVEjiC5ZN6EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9kMWQ1NzIzOS02MTc2LTRjOGQtOWE3ZS1mOWZl YTM4MGExYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa6GQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHoPq7taG+pr3B4YbpsL7u4ehtYdWUONE2O1CoAByzWm+h8A7fCqcFMP r9AzFPeYXIfNOLKJFtL5lYaOLk9HFQwlweGJp3EkCMB770YJFwf4i8d9Ux+XwVWz QNQdUV35Az7wtpvVN3V3jnsVgU56ke0Kq7DTLtNYNyMmA8c3o1JoZYWEwGlk2ZXa tMH7o2qnLwSJYfTB8ncmW7tRiWHwTUjjqCDL3WdsSnQ5XEeJ2VbHgeO3kcGBmWqr iTZqDp/fnecX2i4Wf+oayqLVCptUeaN2KUkw4G9rrwV548N54TFqKo6817NtftB5 0fIf6KWy9QHIqxvo+/oxat1RqcjP1f0= -----END CERTIFICATE-----Generated at Fri Aug 21 02:00:39 2026 by rpki-client