$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a09ffbca-6cf8-390d-b04b-f294f2de6714.roa File: a09ffbca-6cf8-390d-b04b-f294f2de6714.roa (raw, json) Hash identifier: mb/ZP2iFMROmOyCBIBoAXwSERDzp8a7grq+1JuT8unU= Subject key identifier: 70:9C:1E:9D:8F:C1:29:03:01:71:AB:DE:37:26:18:16:05:B2:14:1C Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F225D231E5E4EBEA6F2BE0F00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a09ffbca-6cf8-390d-b04b-f294f2de6714.roa Signing time: Fri 11 Sep 2026 01:00:12 +0000 ROA not before: Fri 11 Sep 2026 01:00:12 +0000 ROA not after: Thu 10 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 162.88.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:22:5d:23:1e:5e:4e:be:a6:f2:be:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 11 01:00:12 2026 GMT Not After : Dec 10 02:00:12 2026 GMT Subject: CN=07eb0edd-5ab0-4b14-9bea-84036866a2c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:e8:ee:cc:3b:88:40:e0:c9:84:59:95:7a:e8: 4f:0a:57:20:7a:b9:c9:e8:4b:ff:7a:69:89:f6:5b: 45:a4:db:f7:e4:83:dd:9f:00:e9:dc:8d:40:1f:c0: d0:ed:97:d5:5d:91:d3:be:e7:eb:2d:9a:8b:23:72: 07:d6:e1:d1:7c:de:62:40:87:97:cc:c4:be:52:01: f6:b4:4f:be:13:ad:1e:a2:12:dd:88:f3:a6:fd:17: 62:c6:37:88:82:b5:f0:4f:66:9e:e5:d3:57:e5:af: b0:f6:c7:0a:88:2c:16:10:1d:4f:4e:8b:fa:df:c9: b3:e8:68:f8:b6:2a:33:e0:a4:45:ef:d4:7e:bb:ba: 54:f1:ff:d9:7c:4b:5d:ab:a7:69:03:e8:dd:1b:eb: 3e:59:39:c1:8c:7e:c2:65:8a:8b:9d:28:25:ab:27: 54:b6:2c:19:36:6b:fb:cb:e8:bb:15:37:e4:b0:9c: 7c:96:11:b8:0f:9d:f7:31:55:13:ea:07:86:c2:88: ea:b5:06:87:8e:8c:34:7b:13:c9:e8:f3:80:79:78: c6:75:2e:d9:e1:4f:26:36:00:72:1b:c5:b7:a3:cb: 7c:95:fa:aa:b3:8e:e0:d8:eb:d7:10:40:5a:ed:ae: bb:72:b8:57:ab:32:e9:5d:5f:f0:e3:8d:cb:35:34: ba:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:9C:1E:9D:8F:C1:29:03:01:71:AB:DE:37:26:18:16:05:B2:14:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a09ffbca-6cf8-390d-b04b-f294f2de6714.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 162.88.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:48:60:a7:9f:79:59:ff:94:b8:2b:af:7e:90:a0:94:a6:92: d2:68:22:dd:2a:ea:80:ab:a7:de:45:3d:39:9c:00:98:c0:1e: c0:72:22:6e:4b:9f:28:ba:3f:01:de:9b:64:65:13:2a:73:77: 95:a3:54:84:45:6d:13:a7:6c:d2:0f:01:6c:d0:6e:6f:65:51: f2:09:54:38:be:eb:13:16:92:91:cd:a1:18:c7:cf:81:b7:8d: 86:bf:9c:c6:eb:3a:98:4c:81:5a:06:4e:ff:a8:aa:76:30:53: 1f:50:29:eb:aa:c0:44:ce:18:63:c3:11:a6:7a:b6:76:53:df: 07:61:66:60:b5:8c:49:f3:f7:f0:aa:36:af:6b:ba:a2:64:de: 82:7b:4d:8a:2b:21:38:c2:03:f7:15:ae:2e:51:5a:70:6c:1a: e5:ef:01:d5:8f:83:85:09:cf:6f:f3:3d:1a:73:77:85:9d:86: 45:2a:e5:cc:2a:ba:a8:af:77:2a:65:8f:d2:99:d0:bf:7f:6c: 01:58:de:6a:b1:b9:1c:ea:11:35:13:10:74:fd:bd:87:0d:65: 19:a0:14:9c:43:f6:16:05:cc:4f:7c:28:a7:bf:7f:9d:f3:9b: 74:cd:0b:4e:a0:73:f7:7a:4e:0f:b8:0c:21:b9:8e:09:8e:e3: 47:b6:98:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8iXSMeXk6+pvK+DwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkxMTAxMDAxMloXDTI2MTIxMDAyMDAxMlowLzEtMCsGA1UEAxMk MDdlYjBlZGQtNWFiMC00YjE0LTliZWEtODQwMzY4NjZhMmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+juzDuIQODJhFmVeuhPClcgernJ6Ev/emmJ 9ltFpNv35IPdnwDp3I1AH8DQ7ZfVXZHTvufrLZqLI3IH1uHRfN5iQIeXzMS+UgH2 tE++E60eohLdiPOm/RdixjeIgrXwT2ae5dNX5a+w9scKiCwWEB1PTov638mz6Gj4 tioz4KRF79R+u7pU8f/ZfEtdq6dpA+jdG+s+WTnBjH7CZYqLnSglqydUtiwZNmv7 y+i7FTfksJx8lhG4D533MVUT6geGwojqtQaHjow0exPJ6POAeXjGdS7Z4U8mNgBy G8W3o8t8lfqqs47g2OvXEEBa7a67crhXqzLpXV/w443LNTS6FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHCcHp2PwSkDAXGr3jcmGBYFshQcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYTA5ZmZiY2EtNmNmOC0z OTBkLWIwNGItZjI5NGYyZGU2NzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAolgEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAVIYKefeVn/lLgrr36QoJSmktJoIt0q6oCrp95FPTmcAJjAHsByIm5L nyi6PwHem2RlEypzd5WjVIRFbROnbNIPAWzQbm9lUfIJVDi+6xMWkpHNoRjHz4G3 jYa/nMbrOphMgVoGTv+oqnYwUx9QKeuqwETOGGPDEaZ6tnZT3wdhZmC1jEnz9/Cq Nq9ruqJk3oJ7TYorITjCA/cVri5RWnBsGuXvAdWPg4UJz2/zPRpzd4WdhkUq5cwq uqivdyplj9KZ0L9/bAFY3mqxuRzqETUTEHT9vYcNZRmgFJxD9hYFzE98KKe/f53z m3TNC06gc/d6Tg+4DCG5jgmO40e2mIg= -----END CERTIFICATE-----Generated at Tue Sep 22 09:35:23 2026 by rpki-client