$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/431050c2-e92e-3e4b-8752-f7e1e7a8444d.roa File: 431050c2-e92e-3e4b-8752-f7e1e7a8444d.roa (raw, json) Hash identifier: 035wSDwu6oyhJrl/SMWFEwbyLW2SChyj1Gn3Nz6eHpU= Subject key identifier: 6A:A2:94:CD:48:11:A8:71:36:E4:05:6B:10:22:62:21:26:1A:E6:55 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F10378C65E7DE9E7D05D51700 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/431050c2-e92e-3e4b-8752-f7e1e7a8444d.roa Signing time: Fri 04 Sep 2026 13:00:12 +0000 ROA not before: Fri 04 Sep 2026 13:00:12 +0000 ROA not after: Thu 03 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 164.152.192.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:10:37:8c:65:e7:de:9e:7d:05:d5:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 4 13:00:12 2026 GMT Not After : Dec 3 14:00:12 2026 GMT Subject: CN=00b84ab3-5879-4df2-b011-6217abfead39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:94:a3:2d:e4:1a:50:f1:24:f0:93:d5:50:55: 66:19:49:17:d1:2d:a6:74:c1:50:ab:35:24:cd:c9: f8:27:df:10:c3:02:32:5d:c3:1e:fb:26:be:cf:a4: a4:15:23:a8:2f:93:62:bd:f2:b3:ac:a7:d3:42:29: 2b:c8:67:24:32:96:39:ce:8a:1a:c7:fa:84:5e:ac: c0:5d:5b:76:03:9f:9b:dc:f2:58:af:15:b7:b3:88: 67:a5:f6:1e:e0:9f:e7:79:ac:ab:9b:40:e0:6a:f9: 3a:2b:fc:74:b4:3e:33:56:64:9a:fb:4b:d9:94:fd: 46:c8:7c:79:c4:ad:7b:9f:05:52:98:1b:38:b4:cc: e2:8b:c0:a1:0a:07:b0:f0:0b:b4:aa:2d:98:48:70: 77:98:2e:82:e2:38:7f:11:1d:6c:ca:98:34:e0:79: e6:a0:78:0c:30:26:09:7c:0d:ff:92:f2:7c:d2:93: d3:a6:54:dc:b5:95:1b:35:8b:04:eb:be:b0:e1:e1: 0b:43:00:bb:f0:d4:1c:c0:0a:06:43:65:62:f3:53: c3:2f:7f:8f:e4:8c:03:6e:62:c0:11:e3:58:1b:cc: ab:48:da:48:92:71:89:5c:99:9d:7a:16:bd:0f:be: ef:0c:bd:7e:3c:10:9d:d1:bf:32:95:43:e4:45:68: e8:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:A2:94:CD:48:11:A8:71:36:E4:05:6B:10:22:62:21:26:1A:E6:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/431050c2-e92e-3e4b-8752-f7e1e7a8444d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 164.152.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:6a:73:af:71:0c:d5:7f:99:87:c4:aa:5a:18:37:79:fd:8c: 68:db:c6:04:be:9d:53:f7:be:fb:ea:f9:4a:4d:c6:c2:aa:3e: 98:a4:e5:27:25:f7:2b:16:e6:82:ba:fe:c7:7e:2a:36:66:9e: b6:01:88:44:6f:58:cc:65:40:52:f3:da:d6:0d:4b:48:d7:f6: 79:74:be:a8:09:4b:95:de:62:63:ef:17:19:65:0d:34:b4:ef: cc:8a:db:ee:9e:94:e9:7c:b0:6e:20:69:a6:21:95:68:55:89: 6a:fc:cf:5e:73:95:34:a3:7b:16:76:cc:14:c4:ab:fc:45:08: d5:d0:26:ee:b0:c9:d0:60:9b:3b:22:cf:e8:9a:09:bf:71:7d: b9:79:d9:8f:bc:70:7e:54:61:0d:3d:ac:59:01:05:0c:ac:08: 89:ff:aa:6f:d7:5e:14:fd:35:18:3f:91:06:08:7b:f9:1c:fd: 6c:39:63:68:78:75:40:c5:97:4b:ee:ba:5d:a5:19:56:a2:ae: 21:83:9c:33:1d:49:ac:d2:84:60:4e:6b:2a:74:98:1f:e9:24: fd:b4:7b:10:86:94:26:ee:4e:38:2f:e4:dd:0f:e5:17:3b:c5: 21:58:ba:29:b0:50:55:3d:f8:79:65:89:96:a3:4c:84:a7:df: 27:59:7b:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8QN4xl596efQXVFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNDEzMDAxMloXDTI2MTIwMzE0MDAxMlowLzEtMCsGA1UEAxMk MDBiODRhYjMtNTg3OS00ZGYyLWIwMTEtNjIxN2FiZmVhZDM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5SjLeQaUPEk8JPVUFVmGUkX0S2mdMFQqzUk zcn4J98QwwIyXcMe+ya+z6SkFSOoL5NivfKzrKfTQikryGckMpY5zooax/qEXqzA XVt2A5+b3PJYrxW3s4hnpfYe4J/neayrm0Dgavk6K/x0tD4zVmSa+0vZlP1GyHx5 xK17nwVSmBs4tMzii8ChCgew8Au0qi2YSHB3mC6C4jh/ER1sypg04HnmoHgMMCYJ fA3/kvJ80pPTplTctZUbNYsE676w4eELQwC78NQcwAoGQ2Vi81PDL3+P5IwDbmLA EeNYG8yrSNpIknGJXJmdeha9D77vDL1+PBCd0b8ylUPkRWjoXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGqilM1IEahxNuQFaxAiYiEmGuZVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNDMxMDUwYzItZTkyZS0z ZTRiLTg3NTItZjdlMWU3YTg0NDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDpJjAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEZqc69xDNV/mYfEqloYN3n9jGjbxgS+nVP3vvvq+UpNxsKqPpik5Scl 9ysW5oK6/sd+KjZmnrYBiERvWMxlQFLz2tYNS0jX9nl0vqgJS5XeYmPvFxllDTS0 78yK2+6elOl8sG4gaaYhlWhViWr8z15zlTSjexZ2zBTEq/xFCNXQJu6wydBgmzsi z+iaCb9xfbl52Y+8cH5UYQ09rFkBBQysCIn/qm/XXhT9NRg/kQYIe/kc/Ww5Y2h4 dUDFl0vuul2lGVairiGDnDMdSazShGBOayp0mB/pJP20exCGlCbuTjgv5N0P5Rc7 xSFYuimwUFU9+HlliZajTISn3ydZe64= -----END CERTIFICATE-----Generated at Tue Sep 22 11:08:52 2026 by rpki-client