$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9c8dd355-776a-3426-ad14-0a8caa998ec0.roa File: 9c8dd355-776a-3426-ad14-0a8caa998ec0.roa (raw, json) Hash identifier: w5Q0iVOwc/jAEktv9gRKw3Jr0iN5xvYe7Pr0V3V4iQw= Subject key identifier: 6A:71:14:52:A9:B8:2D:05:95:58:09:62:BA:D8:5D:64:64:29:20:01 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F1CC7A0708DC139641FCE1820 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9c8dd355-776a-3426-ad14-0a8caa998ec0.roa Signing time: Wed 09 Sep 2026 01:00:11 +0000 ROA not before: Wed 09 Sep 2026 01:00:11 +0000 ROA not after: Tue 08 Dec 2026 02:00:11 +0000 asID: 31898 IP address blocks: 164.152.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1c:c7:a0:70:8d:c1:39:64:1f:ce:18:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 9 01:00:11 2026 GMT Not After : Dec 8 02:00:11 2026 GMT Subject: CN=5978a62f-b265-4a28-a849-3ce24ecbdcc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c0:7e:93:f7:83:fe:32:fc:67:d5:ed:45:fc: b4:74:e0:ce:d0:89:0f:2f:bf:06:25:c8:c1:10:fe: 7f:7a:36:dc:9e:50:8f:6a:79:7c:b6:bc:bf:29:9d: 3a:04:39:fd:0f:d6:56:ff:ba:6b:6d:e7:6f:38:49: 48:2f:2e:9f:2f:09:17:35:7b:0d:02:19:7f:29:b3: bb:01:32:f1:ac:35:dc:03:e2:32:e4:9d:35:1f:00: cb:f7:68:f8:a5:49:c5:e2:45:0b:91:0e:c4:26:a5: a9:39:97:e2:0d:9f:89:51:11:69:e3:81:a5:85:65: 7d:11:8e:0d:7e:e8:43:11:90:4a:c5:21:3c:6e:e7: 72:ec:d0:73:1f:76:b6:1a:31:6a:e7:65:6d:cd:d0: 28:b2:c4:c2:25:16:d0:39:65:2d:a6:f4:01:57:b3: 94:a0:13:28:f2:9b:ce:41:8b:53:1c:af:66:80:dd: ea:e1:7b:4b:6d:6c:d8:8b:35:4f:3b:b1:be:c4:20: 28:ce:e8:8e:68:26:ca:b0:bc:2b:90:a2:85:fc:de: 0c:df:ba:1b:d6:59:7a:a5:82:b0:dc:8e:7f:e5:5b: 0f:2a:29:be:e0:13:b6:66:fc:9f:6f:bd:d7:41:14: dc:a6:1c:46:7f:ca:44:e8:ec:28:50:36:9d:a2:31: a9:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:71:14:52:A9:B8:2D:05:95:58:09:62:BA:D8:5D:64:64:29:20:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9c8dd355-776a-3426-ad14-0a8caa998ec0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 164.152.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:b3:1d:9a:4a:a6:b3:52:ae:63:c8:87:61:74:a8:0f:a7:43: 36:1d:b4:d8:d9:84:f6:1a:38:65:22:38:64:5f:86:05:1b:fa: 52:b8:fa:8f:83:7b:e9:f1:7e:e2:0d:83:fb:0c:5f:d5:b7:ff: 5f:71:8c:d2:09:4d:9b:86:7b:5f:cc:7d:1f:69:cf:f4:71:7a: f7:ea:8d:20:9d:45:39:ea:4b:b4:30:92:8d:a2:c6:34:83:24: 13:a2:37:c3:76:e9:03:1b:8c:40:d3:11:51:b3:33:06:a0:7e: ec:7b:9c:6a:e2:f8:02:73:8f:07:a4:b8:65:5a:cc:67:e4:d2: 3e:51:e2:49:df:88:04:c5:77:8b:3f:72:ab:bc:35:85:cf:43: e9:dc:7d:6d:8e:7c:93:05:d3:9c:7a:0c:a0:a2:39:85:2b:7e: a0:71:40:14:ff:e3:39:f0:89:c7:31:88:44:d0:c5:f4:fd:d2: b5:35:e4:a3:4a:be:05:e0:b1:79:5d:49:2a:2f:d1:c8:3e:3e: 09:d6:5b:7a:47:b9:1c:16:1d:b7:7d:ec:fe:95:9a:0c:16:fe: 15:ee:5e:7c:2a:f4:e2:e8:c8:4f:94:86:9a:c7:4c:f0:38:98: 8e:c9:2e:de:26:dd:76:bc:12:4b:9c:39:99:ba:2e:77:65:16: 57:55:0d:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8cx6BwjcE5ZB/OGCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwOTAxMDAxMVoXDTI2MTIwODAyMDAxMVowLzEtMCsGA1UEAxMk NTk3OGE2MmYtYjI2NS00YTI4LWE4NDktM2NlMjRlY2JkY2M3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycB+k/eD/jL8Z9XtRfy0dODO0IkPL78GJcjB EP5/ejbcnlCPanl8try/KZ06BDn9D9ZW/7prbedvOElILy6fLwkXNXsNAhl/KbO7 ATLxrDXcA+Iy5J01HwDL92j4pUnF4kULkQ7EJqWpOZfiDZ+JURFp44GlhWV9EY4N fuhDEZBKxSE8budy7NBzH3a2GjFq52VtzdAossTCJRbQOWUtpvQBV7OUoBMo8pvO QYtTHK9mgN3q4XtLbWzYizVPO7G+xCAozuiOaCbKsLwrkKKF/N4M37ob1ll6pYKw 3I5/5VsPKim+4BO2Zvyfb73XQRTcphxGf8pE6OwoUDadojGpYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGpxFFKpuC0FlVgJYrrYXWRkKSABMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOWM4ZGQzNTUtNzc2YS0z NDI2LWFkMTQtMGE4Y2FhOTk4ZWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEpJgQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG2zHZpKprNSrmPIh2F0qA+nQzYdtNjZhPYaOGUiOGRfhgUb+lK4+o+D e+nxfuINg/sMX9W3/19xjNIJTZuGe1/MfR9pz/RxevfqjSCdRTnqS7Qwko2ixjSD JBOiN8N26QMbjEDTEVGzMwagfux7nGri+AJzjwekuGVazGfk0j5R4knfiATFd4s/ cqu8NYXPQ+ncfW2OfJMF05x6DKCiOYUrfqBxQBT/4znwiccxiETQxfT90rU15KNK vgXgsXldSSov0cg+PgnWW3pHuRwWHbd97P6VmgwW/hXuXnwq9OLoyE+UhprHTPA4 mI7JLt4m3Xa8EkucOZm6LndlFldVDRE= -----END CERTIFICATE-----Generated at Tue Sep 22 06:19:47 2026 by rpki-client