$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/381868f0-2144-3fc3-8fad-211fb6f35fe0.roa File: 381868f0-2144-3fc3-8fad-211fb6f35fe0.roa (raw, json) Hash identifier: coKKzeLoVRa6nEQv19csvWtpdaY7Fx1RxljarCB3IeU= Subject key identifier: 29:B7:05:18:EC:4F:3F:EE:DF:07:B1:B2:27:5B:47:EC:3F:71:8F:AF Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F4972D65EEE812F0FBCFDA220 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/381868f0-2144-3fc3-8fad-211fb6f35fe0.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 152.67.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:d6:5e:ee:81:2f:0f:bc:fd:a2:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=7cd27030-e244-43c9-95e0-9810814b1da4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:14:74:e1:5d:9c:6b:db:be:dc:c2:d0:ee:d3: 28:1f:36:ba:fe:7f:58:5a:21:72:d7:c3:af:7b:88: ca:10:bb:c2:ad:e8:a5:af:f9:dd:a7:8b:78:e8:e6: 50:89:8d:80:9a:f8:06:8b:e3:32:74:3b:bb:5f:37: 1e:4b:22:51:e3:16:fa:15:b4:77:f9:5d:a0:9c:fc: 08:e9:ce:54:1d:08:44:1a:96:2b:e3:06:08:cd:cb: 14:54:24:7c:c9:59:93:f3:64:33:e7:9d:b4:42:d8: f5:3a:95:f3:6f:82:6f:1c:ed:7a:63:f1:94:a3:67: 2a:09:a5:c5:31:84:0d:32:ba:64:7c:d9:e7:e6:f1: 01:03:1f:05:51:27:05:dd:aa:fb:b1:d5:79:9b:6f: 8c:81:0a:9a:3f:9c:ef:06:24:7c:e9:05:9c:55:19: d6:f3:12:21:66:fa:d2:ad:92:6c:55:44:4a:49:2d: 0d:1b:fe:d1:d1:95:c7:59:3a:d0:1f:cb:7a:d1:6d: 06:ff:3a:87:f6:df:e7:5b:68:72:db:4f:3b:a6:38: df:51:e5:cf:a4:e4:27:51:b2:99:00:fb:93:5d:4c: fa:f1:41:8e:b7:f4:3b:5e:c8:2c:b7:fe:3a:fb:95: af:c0:de:14:c7:ad:57:e0:a8:3b:51:23:40:b1:bf: aa:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:B7:05:18:EC:4F:3F:EE:DF:07:B1:B2:27:5B:47:EC:3F:71:8F:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/381868f0-2144-3fc3-8fad-211fb6f35fe0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 152.67.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:f7:c9:f0:47:a9:bc:79:70:6d:e3:b2:82:f7:87:90:7e:52: 2d:d1:7b:22:30:87:10:fd:97:bd:5a:9f:d2:a8:53:03:2f:8b: dc:87:82:b5:cc:d0:c2:69:0f:cb:e3:56:ec:e6:d8:ca:f6:56: 97:87:63:0f:87:fd:69:a4:cc:d3:75:4d:a6:72:07:1d:b6:d3: e7:e5:05:33:9d:77:22:a1:75:38:29:ac:10:36:e4:d4:2d:b1: ea:5c:b7:19:70:20:13:c5:62:37:9f:43:8c:0f:92:10:70:04: 45:94:90:52:5e:2f:33:ab:17:0f:ba:20:77:cd:d4:1f:18:6e: 03:f9:87:eb:ed:34:3d:6c:77:25:0b:48:8d:30:76:d0:68:f9: cd:2a:40:65:7c:db:05:5a:ac:52:7a:d8:05:6a:e8:9d:c4:62: 18:3f:80:86:3f:81:be:a2:06:69:c8:1c:65:c0:3e:2b:0f:a5: 8c:23:9f:7a:1b:00:f1:4f:79:1c:1b:da:a4:63:19:97:e9:57: 4a:e1:50:28:a1:16:db:2a:76:31:b6:c6:12:01:1a:d8:8a:7a: d7:ed:dc:96:71:0b:71:b7:fe:5c:38:7c:50:05:e4:cc:c4:39: d7:ed:1c:a1:9b:37:84:7f:42:d6:21:d5:6d:b4:7a:b6:79:fe: 39:d4:79:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JctZe7oEvD7z9oiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk N2NkMjcwMzAtZTI0NC00M2M5LTk1ZTAtOTgxMDgxNGIxZGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxR04V2ca9u+3MLQ7tMoHza6/n9YWiFy18Ov e4jKELvCreilr/ndp4t46OZQiY2AmvgGi+MydDu7XzceSyJR4xb6FbR3+V2gnPwI 6c5UHQhEGpYr4wYIzcsUVCR8yVmT82Qz5520Qtj1OpXzb4JvHO16Y/GUo2cqCaXF MYQNMrpkfNnn5vEBAx8FUScF3ar7sdV5m2+MgQqaP5zvBiR86QWcVRnW8xIhZvrS rZJsVURKSS0NG/7R0ZXHWTrQH8t60W0G/zqH9t/nW2hy2087pjjfUeXPpOQnUbKZ APuTXUz68UGOt/Q7Xsgst/46+5WvwN4Ux61X4Kg7USNAsb+qvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCm3BRjsTz/u3wexsidbR+w/cY+vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMzgxODY4ZjAtMjE0NC0z ZmMzLThmYWQtMjExZmI2ZjM1ZmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmENgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJj3yfBHqbx5cG3jsoL3h5B+Ui3ReyIwhxD9l71an9KoUwMvi9yHgrXM 0MJpD8vjVuzm2Mr2VpeHYw+H/WmkzNN1TaZyBx220+flBTOddyKhdTgprBA25NQt sepctxlwIBPFYjefQ4wPkhBwBEWUkFJeLzOrFw+6IHfN1B8YbgP5h+vtND1sdyUL SI0wdtBo+c0qQGV82wVarFJ62AVq6J3EYhg/gIY/gb6iBmnIHGXAPisPpYwjn3ob APFPeRwb2qRjGZfpV0rhUCihFtsqdjG2xhIBGtiKetft3JZxC3G3/lw4fFAF5MzE OdftHKGbN4R/QtYh1W20erZ5/jnUeZI= -----END CERTIFICATE-----Generated at Sat Sep 26 18:19:37 2026 by rpki-client