$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1152e1be-bd7b-3258-a560-dbeb58df2c0c.roa File: 1152e1be-bd7b-3258-a560-dbeb58df2c0c.roa (raw, json) Hash identifier: q2pMh5Wfbe9eas/lOZ0ti2uxxSf3BGUk+8mTVEmkCWE= Subject key identifier: A6:EB:42:2C:FA:0E:07:42:6D:7D:B6:B9:ED:97:FF:B8:B6:CC:0D:9D Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F119D01B6FA9E86E90A3AE380 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1152e1be-bd7b-3258-a560-dbeb58df2c0c.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 147.154.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9d:01:b6:fa:9e:86:e9:0a:3a:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=2cf4010c-614b-4296-8fcd-76b7427958b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e6:a4:f0:2e:86:d6:ce:ff:43:cb:aa:95:fc: f8:b6:6c:d0:18:3f:37:ae:b5:08:59:84:f7:3b:7f: 77:59:70:28:57:17:d2:bc:d2:4f:85:84:9d:67:2f: ba:61:e7:32:d3:5c:6a:15:e4:d4:74:6e:68:72:bd: 77:e2:20:04:aa:7d:f1:ca:e2:17:6c:5e:14:db:1b: a4:b0:03:10:8a:2e:63:44:90:32:bd:d2:4e:91:99: 3a:8e:ee:13:24:1d:e2:e4:8f:78:4e:8f:1c:b6:43: 0d:2c:27:40:13:96:41:5b:3c:3b:b6:7d:4c:df:7f: d6:f5:ab:9f:87:a0:2b:28:6c:75:87:9a:66:6b:24: 0e:b9:bf:3a:62:f1:5f:bc:6e:25:f8:ea:75:d2:24: 7f:44:dd:3c:45:0a:45:15:ae:7e:05:c8:22:46:91: d9:d5:66:39:1a:8a:02:fb:22:61:f4:97:40:87:dc: cd:a5:33:a2:7b:89:87:31:13:3c:11:6f:58:5d:bd: 2a:18:6e:3c:d5:cc:55:37:bb:4a:29:20:f4:24:2b: 88:fe:9d:55:a6:65:40:b3:4f:cb:09:fc:30:be:3d: b0:89:a0:d6:08:85:97:e9:4b:9a:7d:ee:4d:d4:b0: f0:c0:4e:6a:79:fe:ef:4e:f4:82:b3:0d:51:f5:e5: 1c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:EB:42:2C:FA:0E:07:42:6D:7D:B6:B9:ED:97:FF:B8:B6:CC:0D:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1152e1be-bd7b-3258-a560-dbeb58df2c0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 147.154.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:15:91:84:ee:0c:09:00:23:6f:e7:4a:a4:68:ab:1b:cf:56: d2:3d:12:0d:bd:05:17:f3:52:07:c0:cd:49:86:d6:2e:53:93: 91:20:27:06:42:0d:c5:82:28:4f:93:e9:c8:ad:e6:38:b7:01: e1:c0:6c:43:d6:5d:e5:1b:2b:7f:06:a5:be:47:ba:37:05:dc: 7e:9b:47:2d:6c:a9:6d:eb:b9:81:be:9a:3d:3d:4c:ad:83:94: 12:73:77:8b:e0:81:c1:2d:50:66:5f:c1:9a:e8:f3:9b:34:89: 07:e8:3d:6a:80:1f:cc:57:66:25:41:46:e0:8e:5a:8e:c9:97: 33:01:09:d6:c5:4e:cc:35:16:41:d6:89:c8:6e:48:bd:22:d8: d6:ab:57:e1:c7:52:d6:96:5b:d6:b4:1b:03:0c:80:da:e4:2e: 15:52:2d:bf:96:2b:b6:9a:d5:f4:1f:b9:73:42:57:96:d3:7b: d7:7d:b5:e6:c1:66:3d:e5:48:d9:a5:d2:94:04:d8:98:b6:6b: 2b:16:89:2c:9f:3a:f1:65:35:ec:4d:8d:07:e9:82:ba:67:78: 4b:d5:15:a4:1d:84:0f:90:74:a1:f8:c9:94:9d:13:c9:03:e9: c5:9a:9c:68:95:06:78:03:7c:03:34:70:3b:68:a5:cc:01:53: 42:d0:fe:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnQG2+p6G6Qo644AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk MmNmNDAxMGMtNjE0Yi00Mjk2LThmY2QtNzZiNzQyNzk1OGIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+ak8C6G1s7/Q8uqlfz4tmzQGD83rrUIWYT3 O393WXAoVxfSvNJPhYSdZy+6Yecy01xqFeTUdG5ocr134iAEqn3xyuIXbF4U2xuk sAMQii5jRJAyvdJOkZk6ju4TJB3i5I94To8ctkMNLCdAE5ZBWzw7tn1M33/W9auf h6ArKGx1h5pmayQOub86YvFfvG4l+Op10iR/RN08RQpFFa5+BcgiRpHZ1WY5GooC +yJh9JdAh9zNpTOie4mHMRM8EW9YXb0qGG481cxVN7tKKSD0JCuI/p1VpmVAs0/L Cfwwvj2wiaDWCIWX6Uuafe5N1LDwwE5qef7vTvSCsw1R9eUchwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKbrQiz6DgdCbX22ue2X/7i2zA2dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMTE1MmUxYmUtYmQ3Yi0z MjU4LWE1NjAtZGJlYjU4ZGYyYzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEk5qAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIMVkYTuDAkAI2/nSqRoqxvPVtI9Eg29BRfzUgfAzUmG1i5Tk5EgJwZC DcWCKE+T6cit5ji3AeHAbEPWXeUbK38Gpb5HujcF3H6bRy1sqW3ruYG+mj09TK2D lBJzd4vggcEtUGZfwZro85s0iQfoPWqAH8xXZiVBRuCOWo7JlzMBCdbFTsw1FkHW ichuSL0i2NarV+HHUtaWW9a0GwMMgNrkLhVSLb+WK7aa1fQfuXNCV5bTe9d9tebB Zj3lSNml0pQE2Ji2aysWiSyfOvFlNexNjQfpgrpneEvVFaQdhA+QdKH4yZSdE8kD 6cWanGiVBngDfAM0cDtopcwBU0LQ/uU= -----END CERTIFICATE-----Generated at Wed Sep 23 05:20:13 2026 by rpki-client