$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/75f4a3ec-91da-3251-a5b3-13b673ef7c78.roa File: 75f4a3ec-91da-3251-a5b3-13b673ef7c78.roa (raw, json) Hash identifier: Rgi+RsszY/ggqwZRj8H6IQuuhs2LYn2N200PlWKuHZo= Subject key identifier: 5D:6E:85:18:E8:BA:5C:0A:4C:B0:DC:4C:AE:E2:57:FC:76:97:A1:A1 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F1CC79839C608F01E23ADCE80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/75f4a3ec-91da-3251-a5b3-13b673ef7c78.roa Signing time: Wed 09 Sep 2026 01:00:11 +0000 ROA not before: Wed 09 Sep 2026 01:00:11 +0000 ROA not after: Tue 08 Dec 2026 02:00:11 +0000 asID: 31898 IP address blocks: 194.164.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1c:c7:98:39:c6:08:f0:1e:23:ad:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 9 01:00:11 2026 GMT Not After : Dec 8 02:00:11 2026 GMT Subject: CN=140bf377-115e-4c11-b074-ead8283b0bab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:89:5b:cd:a4:f6:ee:19:e9:da:34:d0:ed:84: b6:f5:8f:36:71:93:49:5e:b5:fb:6f:29:26:2c:f9: 08:7e:b9:0a:2e:71:19:77:bb:be:e2:b5:6f:18:96: 68:4a:e9:47:be:1d:26:43:93:3b:86:e5:73:ce:47: dc:be:b5:60:60:e7:98:1e:39:af:55:41:cd:2a:d3: e6:f6:85:57:c4:01:11:31:f5:9f:ac:f6:dd:81:2c: d7:84:bd:b7:08:7d:97:65:e4:8c:51:7d:3b:75:33: 1f:c9:fc:ce:be:ba:20:9c:e7:02:a6:98:96:ee:0c: c7:fc:a7:c6:c0:46:83:f5:8e:1c:28:7a:05:c2:50: 16:a2:30:e0:c0:cb:66:8e:7f:f0:63:9a:60:1a:15: 1a:2c:dd:f0:66:62:f0:1b:2f:a8:8a:92:f5:22:00: e7:05:32:c3:82:8a:26:d9:29:ee:a3:40:89:e6:dc: 1e:25:2f:77:c6:88:3b:dc:d0:b0:5e:ea:88:8c:a1: 70:49:f1:ca:17:75:2d:48:61:cf:d9:fc:bd:bb:c7: 0f:a1:7a:16:15:d3:f9:65:2b:ab:84:e2:47:6b:b4: d5:6d:8e:e8:27:79:9a:a4:88:22:88:1a:37:49:d6: 37:b7:1a:e4:a4:04:e0:70:2b:f2:8f:a5:96:d3:58: fe:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:6E:85:18:E8:BA:5C:0A:4C:B0:DC:4C:AE:E2:57:FC:76:97:A1:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/75f4a3ec-91da-3251-a5b3-13b673ef7c78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 194.164.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:f3:f2:45:7b:b9:20:be:b7:af:12:1d:da:b6:47:ee:dd:0e: cc:96:31:46:5f:1d:2b:4a:e6:22:0a:29:2d:4d:92:23:c9:24: 6a:ea:57:5e:bb:11:74:c5:25:81:40:dd:18:50:ce:80:98:51: 1a:16:3a:dc:76:cf:68:56:0e:3d:cf:c4:29:06:12:65:9f:db: 45:2e:05:b5:97:62:b9:37:fe:b0:ac:b1:ef:4a:9e:1f:26:47: 85:bc:e8:05:f8:18:30:92:0e:35:1b:5a:65:32:57:58:f7:47: 96:95:7a:62:f8:68:a2:5d:6f:4d:f8:02:7c:10:02:00:51:48: 2a:ee:7c:40:85:23:03:d9:03:e2:55:0b:f2:47:7a:7e:53:d6: 3b:be:ea:4b:be:59:cd:d7:cb:de:94:62:21:2c:9a:da:dd:c0: ec:44:97:e5:fa:e8:96:31:26:ae:b3:92:ea:a1:f0:66:de:95: 45:18:91:4d:32:30:2a:e4:dd:dc:16:bd:c9:fa:1d:62:0f:fa: 25:ce:94:9e:f4:7d:22:b7:a5:94:a2:c1:0f:9d:32:b6:be:ce: 39:6a:db:99:e3:19:51:d2:46:fa:e6:44:55:de:dc:84:af:85: c5:19:12:f3:be:ba:8a:b7:5d:19:45:a4:bf:fb:24:70:c0:1e: c6:25:bb:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8cx5g5xgjwHiOtzoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwOTAxMDAxMVoXDTI2MTIwODAyMDAxMVowLzEtMCsGA1UEAxMk MTQwYmYzNzctMTE1ZS00YzExLWIwNzQtZWFkODI4M2IwYmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIlbzaT27hnp2jTQ7YS29Y82cZNJXrX7bykm LPkIfrkKLnEZd7u+4rVvGJZoSulHvh0mQ5M7huVzzkfcvrVgYOeYHjmvVUHNKtPm 9oVXxAERMfWfrPbdgSzXhL23CH2XZeSMUX07dTMfyfzOvrognOcCppiW7gzH/KfG wEaD9Y4cKHoFwlAWojDgwMtmjn/wY5pgGhUaLN3wZmLwGy+oipL1IgDnBTLDgoom 2Snuo0CJ5tweJS93xog73NCwXuqIjKFwSfHKF3UtSGHP2fy9u8cPoXoWFdP5ZSur hOJHa7TVbY7oJ3mapIgiiBo3SdY3txrkpATgcCvyj6WW01j+7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF1uhRjoulwKTLDcTK7iV/x2l6GhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNzVmNGEzZWMtOTFkYS0z MjUxLWE1YjMtMTNiNjczZWY3Yzc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwqScMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAbz8kV7uSC+t68SHdq2R+7dDsyWMUZfHStK5iIKKS1NkiPJJGrqV167 EXTFJYFA3RhQzoCYURoWOtx2z2hWDj3PxCkGEmWf20UuBbWXYrk3/rCsse9Knh8m R4W86AX4GDCSDjUbWmUyV1j3R5aVemL4aKJdb034AnwQAgBRSCrufECFIwPZA+JV C/JHen5T1ju+6ku+Wc3Xy96UYiEsmtrdwOxEl+X66JYxJq6zkuqh8GbelUUYkU0y MCrk3dwWvcn6HWIP+iXOlJ70fSK3pZSiwQ+dMra+zjlq25njGVHSRvrmRFXe3ISv hcUZEvO+uoq3XRlFpL/7JHDAHsYlu9I= -----END CERTIFICATE-----Generated at Sat Sep 26 17:36:23 2026 by rpki-client