$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/2943bfc4-a849-3123-84f6-99d6ceb79d8b.roa File: 2943bfc4-a849-3123-84f6-99d6ceb79d8b.roa (raw, json) Hash identifier: 5atS86foAeqh+FOAiTl+QRkXM6H18qhpVIdOxAtNl0E= Subject key identifier: 93:B8:6A:9B:62:97:AA:26:02:16:38:D4:F0:9C:7B:B5:C6:70:BD:E0 Certificate issuer: /CN=db2617c0-03f4-4ad7-9d11-36b2c6496b7d Certificate serial: 010D0C9F4328584EED521A7EA62526E319CD0680 Authority key identifier: 6F:8C:BC:63:FE:23:D7:C4:A8:06:09:3A:B5:B6:A1:6A:A3:94:58:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/2943bfc4-a849-3123-84f6-99d6ceb79d8b.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 53991 IP address blocks: 164.152.124.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:52:1a:7e:a6:25:26:e3:19:cd:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db2617c0-03f4-4ad7-9d11-36b2c6496b7d Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=ef856733-b587-4a28-8ce9-ec52d9bd98b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:af:51:05:61:91:f0:ac:5a:f1:1f:75:33:07: c0:75:47:ed:bf:f6:c1:68:a1:ae:ae:4f:58:36:a4: 91:74:5a:2f:cc:f5:6d:35:54:75:2d:70:22:b2:95: 9b:5b:2a:ef:81:73:99:7e:04:25:28:72:9f:67:1e: 39:0f:4a:cc:68:1b:23:88:33:4d:33:ed:bb:e2:c5: 5c:07:95:cf:b3:a9:96:22:35:8d:10:a7:44:da:f1: ab:25:a0:7a:f4:88:5c:a6:57:66:1b:7e:92:fc:df: 96:4c:00:b5:46:28:a8:e6:af:86:0f:fd:4c:76:04: 62:2b:90:c1:23:b3:97:33:fd:6b:e9:54:2c:72:f0: 67:99:7f:0c:12:13:db:cf:ad:08:f6:d4:6e:34:8a: 9c:5a:99:45:32:7a:cb:3f:e7:84:7c:72:2c:64:93: 09:57:9c:a5:8b:dd:89:83:71:46:18:6f:0e:96:5a: 21:a7:51:e1:f3:1e:1e:0b:d8:50:64:6c:3b:a8:11: f3:f1:61:d6:ae:b0:09:ee:c1:1e:e9:d0:a5:9a:50: 40:7a:01:cd:bb:2b:d4:c1:d8:12:99:0b:75:c0:38: 0b:3e:3f:64:f3:7e:1e:70:55:ea:a7:57:ff:dd:4d: 1b:75:8b:40:54:b9:ae:72:13:56:e8:f9:77:6e:f2: 3d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:B8:6A:9B:62:97:AA:26:02:16:38:D4:F0:9C:7B:B5:C6:70:BD:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/2943bfc4-a849-3123-84f6-99d6ceb79d8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.crl X509v3 Authority Key Identifier: keyid:6F:8C:BC:63:FE:23:D7:C4:A8:06:09:3A:B5:B6:A1:6A:A3:94:58:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.cer sbgp-ipAddrBlock: critical IPv4: 164.152.124.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:c4:f7:5b:fe:7e:e8:47:be:d3:3c:cb:47:19:be:f3:81:b2: 60:25:d9:7a:90:32:fb:c7:3b:e7:47:1d:ab:eb:60:22:bb:a7: e2:1b:6c:22:2c:08:25:a8:96:da:a0:ad:ee:7c:8d:c6:cb:f5: bd:5f:39:d1:31:f2:28:91:08:0f:a4:7b:6b:86:b6:b0:19:e7: bf:df:61:5b:8a:4a:c5:41:bc:40:fb:73:40:d9:63:a5:98:cb: e2:ce:55:1b:04:7c:db:34:bc:da:a7:c7:cd:fb:1a:f1:26:ef: c4:54:43:57:19:58:79:fd:d6:e1:31:3d:a0:b8:f5:78:d9:2a: 2a:7b:0c:11:8d:c0:e8:3e:b0:74:ed:9b:3a:f5:89:ff:d2:f8: 30:9c:9e:2a:45:a2:85:fb:fd:e4:b2:8f:0e:56:34:1a:a5:f6: 40:25:0d:fd:d2:ae:a5:c5:24:0e:15:9e:57:28:0f:00:2e:a3: 64:b2:bb:13:1e:64:fb:1c:0e:e5:37:d6:5f:86:a4:d6:89:2a: 27:82:6d:f0:c8:7e:e4:5e:7b:3a:62:b0:98:b3:f4:64:79:8f: 2f:6f:0d:c2:94:a3:fa:e6:4d:50:76:4a:64:a2:7a:07:3c:1e: 26:2a:e1:c0:c8:f8:90:d2:e0:25:6d:df:0f:ea:eb:58:80:64: b8:e2:91:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUhp+piUm4xnNBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGIyNjE3YzAtMDNmNC00YWQ3LTlkMTEtMzZiMmM2NDk2 YjdkMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk ZWY4NTY3MzMtYjU4Ny00YTI4LThjZTktZWM1MmQ5YmQ5OGI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAla9RBWGR8Kxa8R91MwfAdUftv/bBaKGurk9Y NqSRdFovzPVtNVR1LXAispWbWyrvgXOZfgQlKHKfZx45D0rMaBsjiDNNM+274sVc B5XPs6mWIjWNEKdE2vGrJaB69IhcpldmG36S/N+WTAC1Riio5q+GD/1MdgRiK5DB I7OXM/1r6VQscvBnmX8MEhPbz60I9tRuNIqcWplFMnrLP+eEfHIsZJMJV5yli92J g3FGGG8Ollohp1Hh8x4eC9hQZGw7qBHz8WHWrrAJ7sEe6dClmlBAegHNuyvUwdgS mQt1wDgLPj9k834ecFXqp1f/3U0bdYtAVLmuchNW6Pl3bvI9vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJO4aptil6omAhY41PCce7XGcL3gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kYjI2 MTdjMC0wM2Y0LTRhZDctOWQxMS0zNmIyYzY0OTZiN2QvMjk0M2JmYzQtYTg0OS0z MTIzLTg0ZjYtOTlkNmNlYjc5ZDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGIyNjE3YzAtMDNmNC00YWQ3LTlk MTEtMzZiMmM2NDk2YjdkL2RiMjYxN2MwLTAzZjQtNGFkNy05ZDExLTM2YjJjNjQ5 NmI3ZC5jcmwwHwYDVR0jBBgwFoAUb4y8Y/4j18SoBgk6tbahaqOUWLswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kYjI2MTdjMC0wM2Y0LTRhZDctOWQxMS0zNmIy YzY0OTZiN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpJh8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAjE91v+fuhHvtM8y0cZvvOBsmAl2XqQMvvHO+dHHavrYCK7p+IbbCIs CCWoltqgre58jcbL9b1fOdEx8iiRCA+ke2uGtrAZ57/fYVuKSsVBvED7c0DZY6WY y+LOVRsEfNs0vNqnx837GvEm78RUQ1cZWHn91uExPaC49XjZKip7DBGNwOg+sHTt mzr1if/S+DCcnipFooX7/eSyjw5WNBql9kAlDf3SrqXFJA4VnlcoDwAuo2SyuxMe ZPscDuU31l+GpNaJKieCbfDIfuReezpisJiz9GR5jy9vDcKUo/rmTVB2SmSiegc8 HiYq4cDI+JDS4CVt3w/q61iAZLjikXs= -----END CERTIFICATE-----Generated at Sun Sep 20 20:14:18 2026 by rpki-client