$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/924c0f53-3657-3125-882c-52af8ebfd139.roa File: 924c0f53-3657-3125-882c-52af8ebfd139.roa (raw, json) Hash identifier: Lo+wyzMU6KXH7cRLKk7xJsgMK0j0s/d+/a3QflD4JZs= Subject key identifier: 8B:F0:58:94:A2:B1:8F:41:23:3F:CF:82:E3:AF:01:9A:C1:B8:86:AE Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F11A14F10AB89CD3DF2948A80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/924c0f53-3657-3125-882c-52af8ebfd139.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 161.153.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:a1:4f:10:ab:89:cd:3d:f2:94:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=6323309e-0dcc-463a-88a2-389439d655f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:fb:7b:bd:c7:2f:4d:f2:b7:a7:1d:4b:41:cc: 65:25:42:76:d6:78:bf:98:0d:7f:4b:72:0b:79:f1: d9:18:f7:1f:f8:39:dd:b8:34:76:f8:ce:9b:d9:b7: 1b:3e:7e:cd:85:30:74:37:ff:bf:47:f2:cf:7e:98: b1:fa:d0:2e:d4:bb:a0:aa:3c:ad:04:65:c7:fd:4e: 77:64:55:77:3b:52:97:72:4e:b3:78:69:c4:d4:c4: a8:bf:41:bf:66:e6:bc:f4:73:24:1b:47:77:ab:75: 27:51:4a:ca:70:eb:d8:d9:0c:ab:40:2f:f8:6e:54: ce:5e:2d:89:6a:cd:cb:c7:0e:d6:38:c1:7d:4c:4a: 6d:3a:18:cc:58:af:c7:e3:7d:98:8a:4c:c6:61:aa: 07:ba:ee:d6:d6:04:bf:df:85:6e:61:95:4b:19:2b: 02:ad:75:7d:12:a8:66:ff:3f:6e:03:88:19:54:d8: 82:88:68:a9:23:89:88:c0:d3:6f:b2:d8:ed:1e:00: b8:52:03:2b:5c:83:b3:92:ac:e4:d7:dd:b8:7a:e5: 76:c5:98:00:0f:0e:53:3c:8e:32:d5:01:6c:44:b7: ae:c8:79:8f:73:15:63:af:65:44:0a:29:4d:4f:f4: 7a:11:b1:75:06:75:39:8e:b2:95:d7:4d:1f:a6:d9: d3:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:F0:58:94:A2:B1:8F:41:23:3F:CF:82:E3:AF:01:9A:C1:B8:86:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/924c0f53-3657-3125-882c-52af8ebfd139.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 161.153.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:01:c0:9a:c3:12:a6:d5:53:93:65:6f:52:34:de:85:09:39: ea:4a:ce:f4:99:3a:61:c0:a5:18:f6:9c:e4:ed:aa:56:65:34: 4b:4c:2b:a1:d0:7e:e8:84:5b:05:90:fc:f4:8d:a5:46:a0:19: 96:0b:fc:eb:83:0d:59:e5:40:19:b4:50:37:fa:96:97:3a:66: 69:58:2e:36:44:b0:db:ab:34:09:45:bb:60:69:2f:40:a3:10: 3c:ab:44:b6:05:29:c5:5e:74:c5:a7:4c:38:17:b9:e2:ff:6c: 0c:08:6c:65:3e:35:33:57:ff:84:85:19:bf:0a:e8:56:28:bc: a7:11:0a:0d:00:77:c4:75:dd:c9:e0:bb:2f:cc:c4:f3:d6:5e: 56:83:ac:83:57:92:0f:6f:b0:b9:4d:c9:bf:8b:06:ac:84:37: ae:42:89:8e:fc:c5:d8:fb:2c:99:99:b5:99:ad:9a:b4:91:1d: 7f:f6:e4:a1:97:be:d9:db:48:ba:3e:a8:78:6c:fa:dc:ae:aa: f2:e3:14:99:7d:bf:3f:23:fd:d7:f3:83:52:34:08:49:8e:6c: 83:22:df:84:89:64:eb:cf:2e:d0:e0:39:01:61:ce:01:44:78: 3d:ae:fa:d3:56:80:ef:17:46:42:41:cb:78:90:e3:14:3b:ac: 4b:ee:5f:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RoU8Qq4nNPfKUioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk NjMyMzMwOWUtMGRjYy00NjNhLTg4YTItMzg5NDM5ZDY1NWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/t7vccvTfK3px1LQcxlJUJ21ni/mA1/S3IL efHZGPcf+DnduDR2+M6b2bcbPn7NhTB0N/+/R/LPfpix+tAu1LugqjytBGXH/U53 ZFV3O1KXck6zeGnE1MSov0G/Zua89HMkG0d3q3UnUUrKcOvY2QyrQC/4blTOXi2J as3Lxw7WOMF9TEptOhjMWK/H432YikzGYaoHuu7W1gS/34VuYZVLGSsCrXV9Eqhm /z9uA4gZVNiCiGipI4mIwNNvstjtHgC4UgMrXIOzkqzk1924euV2xZgADw5TPI4y 1QFsRLeuyHmPcxVjr2VECilNT/R6EbF1BnU5jrKV100fptnTlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIvwWJSisY9BIz/PguOvAZrBuIauMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOTI0YzBmNTMtMzY1Ny0z MTI1LTg4MmMtNTJhZjhlYmZkMTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEoZnAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADEBwJrDEqbVU5Nlb1I03oUJOepKzvSZOmHApRj2nOTtqlZlNEtMK6HQ fuiEWwWQ/PSNpUagGZYL/OuDDVnlQBm0UDf6lpc6ZmlYLjZEsNurNAlFu2BpL0Cj EDyrRLYFKcVedMWnTDgXueL/bAwIbGU+NTNX/4SFGb8K6FYovKcRCg0Ad8R13cng uy/MxPPWXlaDrINXkg9vsLlNyb+LBqyEN65CiY78xdj7LJmZtZmtmrSRHX/25KGX vtnbSLo+qHhs+tyuqvLjFJl9vz8j/dfzg1I0CEmObIMi34SJZOvPLtDgOQFhzgFE eD2u+tNWgO8XRkJBy3iQ4xQ7rEvuX7I= -----END CERTIFICATE-----Generated at Sat Oct 3 11:07:07 2026 by rpki-client