$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/478c7be5-04a9-3f84-9c80-1d44c5d74046.roa File: 478c7be5-04a9-3f84-9c80-1d44c5d74046.roa (raw, json) Hash identifier: YblXWMz48h1W9W1e2adwCJMaPkaA5F/qiCK5zGalTrg= Subject key identifier: DD:C8:E1:F6:36:93:78:1F:7C:1C:98:F8:1B:57:22:0A:70:05:0C:A9 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F20F7D5F2F8588ACF2F20D238 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/478c7be5-04a9-3f84-9c80-1d44c5d74046.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 160.34.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:d5:f2:f8:58:8a:cf:2f:20:d2:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=df3a5138-a56e-4d0e-a461-df64095638f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:a7:7a:de:ec:71:02:7f:ff:bc:a0:7e:0b:f7: e0:35:fe:8a:9c:b2:8a:5b:58:30:4e:e1:8f:36:d4: 03:6d:03:85:13:df:c4:64:32:87:ee:cb:39:50:d9: 93:39:7f:0d:6d:c9:2e:23:d2:7b:c4:16:a6:46:ce: ae:e0:24:87:79:10:f1:3c:2f:b3:6f:51:56:3f:97: cc:72:f0:78:c8:96:c4:bc:38:58:5e:78:cd:58:94: 1e:82:43:6e:1f:2a:7c:4c:67:d8:5d:7b:12:3f:aa: b2:f5:2f:3f:da:0e:64:b5:79:90:a1:05:3a:1f:60: a0:9b:2c:90:a6:ce:c0:c2:7a:ba:fd:97:16:32:d7: 43:b5:d6:38:27:66:cb:a0:7f:38:67:ef:eb:0c:7b: 42:97:b3:90:aa:aa:1f:79:5e:e3:04:b0:40:bd:94: 49:33:25:28:89:c5:07:c6:92:05:47:7f:01:7c:86: d6:fb:e9:15:24:e0:ec:0f:fc:f0:6e:5e:dc:3d:19: 14:22:a3:a3:4b:aa:a2:6e:08:23:63:58:89:1c:86: 44:48:68:c7:17:74:84:10:f6:6b:a9:a7:a7:1d:8c: 05:c0:28:b4:ac:92:89:71:ff:f2:e3:e0:ed:98:98: 93:3d:16:39:49:38:a7:ee:70:cd:64:81:9c:92:0c: 47:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:C8:E1:F6:36:93:78:1F:7C:1C:98:F8:1B:57:22:0A:70:05:0C:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/478c7be5-04a9-3f84-9c80-1d44c5d74046.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 160.34.115.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:ec:4e:d1:bd:55:10:7f:f4:97:c2:f0:71:cf:d6:16:ac:bf: eb:71:75:a4:fc:cf:98:5d:d3:d4:03:91:60:b5:71:15:8f:20: 1b:76:85:3f:af:5c:95:e7:59:91:dd:2d:3c:94:32:5c:a3:21: 1b:a9:a6:ca:a7:38:67:f3:63:5e:8a:ce:76:ba:7c:b6:23:67: b3:8a:6c:54:7c:52:03:dd:2d:c7:e2:a2:02:92:6b:f1:1b:43: f7:8a:2f:a1:60:48:0c:22:c8:68:d2:90:7f:17:f9:e7:f0:82: 58:6d:84:fa:a3:a5:67:03:1e:11:c9:81:4b:8f:73:86:34:e1: b6:79:c1:80:cd:89:bb:c4:79:24:fd:17:ab:9f:3b:40:c5:78: b9:9c:73:52:72:9e:d5:d1:0b:a6:26:aa:8b:73:ed:e0:a9:cd: 0e:28:de:75:6b:47:b6:9a:bb:4b:73:8f:a7:12:50:1a:ae:92: 43:93:d2:76:af:7b:f7:01:e1:b5:94:16:60:09:d0:b4:ca:7e: fa:8d:44:9a:7d:4f:55:b0:a0:8a:38:36:97:6a:ee:ef:11:85: ab:00:65:e3:a5:cb:6e:f1:3e:5d:26:38:9d:b8:bf:8e:87:df: 14:81:4a:27:56:3b:b6:16:6a:b9:56:db:fd:f7:4a:77:a6:b8: 8c:40:ae:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g99Xy+FiKzy8g0jgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk ZGYzYTUxMzgtYTU2ZS00ZDBlLWE0NjEtZGY2NDA5NTYzOGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKd63uxxAn//vKB+C/fgNf6KnLKKW1gwTuGP NtQDbQOFE9/EZDKH7ss5UNmTOX8NbckuI9J7xBamRs6u4CSHeRDxPC+zb1FWP5fM cvB4yJbEvDhYXnjNWJQegkNuHyp8TGfYXXsSP6qy9S8/2g5ktXmQoQU6H2CgmyyQ ps7Awnq6/ZcWMtdDtdY4J2bLoH84Z+/rDHtCl7OQqqofeV7jBLBAvZRJMyUoicUH xpIFR38BfIbW++kVJODsD/zwbl7cPRkUIqOjS6qibggjY1iJHIZESGjHF3SEEPZr qaenHYwFwCi0rJKJcf/y4+DtmJiTPRY5STin7nDNZIGckgxHgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN3I4fY2k3gffByY+BtXIgpwBQypMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNDc4YzdiZTUtMDRhOS0z Zjg0LTljODAtMWQ0NGM1ZDc0MDQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoCJzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLsTtG9VRB/9JfC8HHP1hasv+txdaT8z5hd09QDkWC1cRWPIBt2hT+v XJXnWZHdLTyUMlyjIRuppsqnOGfzY16Kzna6fLYjZ7OKbFR8UgPdLcfiogKSa/Eb Q/eKL6FgSAwiyGjSkH8X+efwglhthPqjpWcDHhHJgUuPc4Y04bZ5wYDNibvEeST9 F6ufO0DFeLmcc1JyntXRC6Ymqotz7eCpzQ4o3nVrR7aau0tzj6cSUBqukkOT0nav e/cB4bWUFmAJ0LTKfvqNRJp9T1WwoIo4Npdq7u8RhasAZeOly27xPl0mOJ24v46H 3xSBSidWO7YWarlW2/33SnemuIxArtI= -----END CERTIFICATE-----Generated at Tue Sep 22 15:07:12 2026 by rpki-client