$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/60892352-551e-3195-a60c-0bc29a84120e.roa File: 60892352-551e-3195-a60c-0bc29a84120e.roa (raw, json) Hash identifier: i+k+SRr9RRUDcMlVy9GiCrT+0SysfvYbP/RVZLK39+0= Subject key identifier: F5:DA:BA:74:B8:A9:DD:75:4F:15:85:E6:D8:9D:18:D4:45:16:0F:93 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F119CFE5174206787B807DE00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/60892352-551e-3195-a60c-0bc29a84120e.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 159.112.162.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9c:fe:51:74:20:67:87:b8:07:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=18d388ab-31db-47c2-b1d0-0ca3c0c17a6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9a:f4:c6:86:91:03:44:76:dc:df:13:58:81: 8f:49:12:65:da:22:4c:dd:81:fb:b2:bf:5d:64:7e: d1:13:15:6f:76:a2:51:7e:a7:41:81:14:8c:25:cc: 82:ac:8e:5e:27:34:bc:d4:03:40:08:83:79:c4:7e: 2e:a9:33:33:c6:7e:2f:f0:b8:d3:81:3e:34:4f:e3: 65:db:26:03:09:d7:b6:8e:d7:1e:d2:27:6f:cb:63: db:27:c0:3f:f8:cf:6d:61:b8:e2:43:85:8c:78:84: 1c:79:a1:bb:83:6c:48:04:ce:d7:2a:8b:26:b7:5b: 34:34:8a:c5:72:20:4a:0c:08:1e:7f:92:45:a9:38: e2:d3:86:21:d4:fc:71:0c:d4:c7:5f:dd:46:61:09: 32:2e:a7:b0:2d:23:7a:f4:9a:23:26:04:a9:2f:a1: 1d:38:0f:e2:23:a7:5f:f1:1e:5a:b5:14:ca:e3:0b: 05:14:b9:70:00:5f:e2:49:30:4d:e6:8f:c6:e3:37: 5e:97:e7:3c:c8:26:94:f7:cb:04:2e:e9:e6:c7:95: 67:89:9e:dc:16:ee:a2:3d:c7:0f:f8:2e:02:da:94: 30:4e:1e:d5:68:a6:5a:01:ab:5c:a1:c7:21:6c:d1: 21:a6:79:03:a0:34:77:be:a0:94:03:34:66:1d:5b: ee:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:DA:BA:74:B8:A9:DD:75:4F:15:85:E6:D8:9D:18:D4:45:16:0F:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/60892352-551e-3195-a60c-0bc29a84120e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 159.112.162.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:cd:3f:4d:81:37:bc:b2:57:a8:43:e3:f8:64:08:d4:04:44: c4:76:16:de:57:a5:0a:c5:25:db:84:85:b4:82:3e:09:06:4f: b3:ed:58:50:db:79:51:59:e6:56:a1:84:39:98:c9:c4:bb:11: c1:2a:fd:b3:51:66:69:65:67:19:36:28:52:e2:8e:5f:03:0c: c0:c8:5e:49:e2:18:91:c2:61:7f:47:c6:25:38:e8:ad:3e:b6: 51:b3:3a:02:87:82:43:b3:41:54:c8:e4:14:8c:96:1a:59:1c: 9c:3f:92:e7:cc:f9:c4:3d:e8:04:c0:c0:13:64:bf:52:29:a5: de:76:c7:2f:22:95:6e:ec:a6:79:c8:24:38:07:fd:af:e9:5a: 15:3b:87:3c:0c:c8:9e:0f:ac:1f:06:c6:c3:6f:ae:08:c3:99: 30:be:df:37:e7:84:8a:76:ae:40:03:57:14:e3:17:a6:06:c1: db:ba:0b:16:02:ac:63:87:dd:90:07:b2:95:92:69:f9:0b:c5: e7:f3:9a:b1:e2:d5:d0:a0:e0:65:ca:d8:a7:7a:78:cc:d5:c6: 32:e1:2c:d1:fa:76:94:50:d8:97:d2:66:ef:fd:13:88:48:98: da:1f:bd:b4:2a:80:34:90:b2:15:ff:55:bd:0d:f9:68:fb:4d: 77:c5:b5:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnP5RdCBnh7gH3gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk MThkMzg4YWItMzFkYi00N2MyLWIxZDAtMGNhM2MwYzE3YTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJr0xoaRA0R23N8TWIGPSRJl2iJM3YH7sr9d ZH7RExVvdqJRfqdBgRSMJcyCrI5eJzS81ANACIN5xH4uqTMzxn4v8LjTgT40T+Nl 2yYDCde2jtce0idvy2PbJ8A/+M9tYbjiQ4WMeIQceaG7g2xIBM7XKosmt1s0NIrF ciBKDAgef5JFqTji04Yh1PxxDNTHX91GYQkyLqewLSN69JojJgSpL6EdOA/iI6df 8R5atRTK4wsFFLlwAF/iSTBN5o/G4zdel+c8yCaU98sELunmx5VniZ7cFu6iPccP +C4C2pQwTh7VaKZaAatcocchbNEhpnkDoDR3vqCUAzRmHVvu9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPXaunS4qd11TxWF5tidGNRFFg+TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNjA4OTIzNTItNTUxZS0z MTk1LWE2MGMtMGJjMjlhODQxMjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBn3CiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzNP02BN7yyV6hD4/hkCNQERMR2Ft5XpQrFJduEhbSCPgkGT7PtWFDb eVFZ5lahhDmYycS7EcEq/bNRZmllZxk2KFLijl8DDMDIXkniGJHCYX9HxiU46K0+ tlGzOgKHgkOzQVTI5BSMlhpZHJw/kufM+cQ96ATAwBNkv1Ippd52xy8ilW7spnnI JDgH/a/pWhU7hzwMyJ4PrB8GxsNvrgjDmTC+3zfnhIp2rkADVxTjF6YGwdu6CxYC rGOH3ZAHspWSafkLxefzmrHi1dCg4GXK2Kd6eMzVxjLhLNH6dpRQ2JfSZu/9E4hI mNofvbQqgDSQshX/Vb0N+Wj7TXfFtas= -----END CERTIFICATE-----Generated at Tue Sep 22 00:26:56 2026 by rpki-client