$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/259c1395-f730-359f-9a50-84fbd04aba98.roa File: 259c1395-f730-359f-9a50-84fbd04aba98.roa (raw, json) Hash identifier: um4FKRV9CTfa4X6m4+jdo7QVTaPHIAQ29bG6nA4NxeE= Subject key identifier: C6:A3:72:F9:85:CF:F0:C8:29:66:49:D3:53:87:1D:38:04:56:51:49 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F498BCD85313F630F55F49BC0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/259c1395-f730-359f-9a50-84fbd04aba98.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 54253 IP address blocks: 136.248.160.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:cd:85:31:3f:63:0f:55:f4:9b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a6a594b0-f4c0-4949-a1ac-e91aded34488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b8:2b:c5:a2:8a:d7:8e:b7:ee:b2:3c:99:f7: a1:17:7d:fd:e3:4e:f2:09:bd:bd:94:dc:ea:d9:6e: b6:46:35:e2:ce:28:4a:fb:e8:7f:0e:8f:e0:ed:9b: 95:4f:cb:a8:13:6f:ae:28:29:ca:9f:25:22:61:b9: 05:9d:79:95:9f:75:e1:d1:1f:e3:2e:72:d1:55:0d: 6d:b6:2e:06:31:12:5d:98:e3:bc:fb:f4:fe:b4:2a: 23:d9:f4:cc:92:23:53:3c:3a:fc:03:22:6a:60:eb: fc:7f:e3:5e:31:89:81:6b:77:49:d9:90:c7:b3:62: 2f:9c:d1:f2:50:bf:1a:bd:61:ad:7b:3a:28:55:c3: 9a:6b:ca:14:bc:6f:91:3c:28:d5:c9:79:e3:b3:24: 85:cb:c7:4f:13:8b:b8:12:9b:69:c3:99:67:d9:a8: 51:ea:60:c6:91:7c:63:de:37:4e:0c:71:6a:cb:d1: f2:75:40:61:a5:32:7c:b2:b0:8c:73:da:20:15:1b: fa:43:61:30:0e:8a:e5:e6:b1:69:42:d4:65:08:c0: 36:ec:1f:59:d9:d0:e9:51:1e:a3:87:01:b6:e3:a9: a8:80:8a:21:53:31:9c:31:ca:84:bf:3d:e2:c1:43: 31:75:31:d4:bc:73:c2:7b:4c:97:ab:71:4b:7a:7e: 2c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:A3:72:F9:85:CF:F0:C8:29:66:49:D3:53:87:1D:38:04:56:51:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/259c1395-f730-359f-9a50-84fbd04aba98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 136.248.160.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:c7:ed:20:60:cb:97:5f:9a:46:16:44:b2:cb:d9:2d:c2:35: 28:fc:83:d7:25:85:ad:81:9f:72:a3:26:9e:47:91:29:31:c0: 7b:dd:a5:6e:dc:ef:bd:d8:d8:ed:93:10:9e:b4:38:df:88:4a: 1a:ac:06:a2:38:93:00:78:5d:1e:12:df:00:6e:b9:73:51:a8: 22:a4:b0:e8:5c:63:a5:b5:0e:1c:7b:d5:13:b0:e7:39:20:dd: 77:5f:4b:09:e3:ca:dc:24:b0:f0:ea:de:c0:6b:9b:fd:ed:89: d7:5a:ba:70:8f:f1:4c:5b:cb:76:8b:86:08:d0:44:bf:0c:94: e7:dd:5a:ef:d3:1f:22:2f:49:e6:e7:6f:c4:74:eb:fb:8d:ef: 39:5d:f4:3e:2c:b0:8e:79:18:ec:77:9c:00:85:89:a2:56:b9: 18:99:9f:5f:36:55:4f:f1:1b:5d:5a:1e:c6:b4:d4:c7:13:43: 26:f8:63:03:09:18:a5:4f:2e:e1:f4:a1:78:e1:72:45:9f:ba: b3:1e:6b:ff:ae:45:e3:58:bd:b0:73:cd:4a:d4:4f:d4:c6:89: a4:50:4c:b7:de:6a:c8:78:2f:13:43:d4:c9:89:40:12:6d:ac: 1c:75:00:66:14:ce:15:a0:51:70:eb:ff:3c:17:9d:a0:92:ea: 5a:06:54:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Ji82FMT9jD1X0m8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTZhNTk0YjAtZjRjMC00OTQ5LWExYWMtZTkxYWRlZDM0NDg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrgrxaKK14637rI8mfehF339407yCb29lNzq 2W62RjXizihK++h/Do/g7ZuVT8uoE2+uKCnKnyUiYbkFnXmVn3Xh0R/jLnLRVQ1t ti4GMRJdmOO8+/T+tCoj2fTMkiNTPDr8AyJqYOv8f+NeMYmBa3dJ2ZDHs2IvnNHy UL8avWGtezooVcOaa8oUvG+RPCjVyXnjsySFy8dPE4u4Eptpw5ln2ahR6mDGkXxj 3jdODHFqy9HydUBhpTJ8srCMc9ogFRv6Q2EwDorl5rFpQtRlCMA27B9Z2dDpUR6j hwG246mogIohUzGcMcqEvz3iwUMxdTHUvHPCe0yXq3FLen4skQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMajcvmFz/DIKWZJ01OHHTgEVlFJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMjU5YzEzOTUtZjczMC0z NTlmLTlhNTAtODRmYmQwNGFiYTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiPigMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFfH7SBgy5dfmkYWRLLL2S3CNSj8g9clha2Bn3KjJp5HkSkxwHvdpW7c 773Y2O2TEJ60ON+IShqsBqI4kwB4XR4S3wBuuXNRqCKksOhcY6W1Dhx71ROw5zkg 3XdfSwnjytwksPDq3sBrm/3tiddaunCP8Uxby3aLhgjQRL8MlOfdWu/THyIvSebn b8R06/uN7zld9D4ssI55GOx3nACFiaJWuRiZn182VU/xG11aHsa01McTQyb4YwMJ GKVPLuH0oXjhckWfurMea/+uReNYvbBzzUrUT9TGiaRQTLfeash4LxND1MmJQBJt rBx1AGYUzhWgUXDr/zwXnaCS6loGVGw= -----END CERTIFICATE-----Generated at Sat Oct 10 22:36:42 2026 by rpki-client