$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a10e4f18-5c74-332d-870d-98b131d94592.roa File: a10e4f18-5c74-332d-870d-98b131d94592.roa (raw, json) Hash identifier: HlN3G/25vjzxyhhGGUFP0Bm1wZwDQ7H7y8KLB9ERXf4= Subject key identifier: 95:0A:78:2D:2D:6A:4E:52:81:50:52:FE:40:B7:42:35:AB:73:B1:F0 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F2ABD2E9EB1444A2F425A5C00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a10e4f18-5c74-332d-870d-98b131d94592.roa Signing time: Mon 14 Sep 2026 01:00:12 +0000 ROA not before: Mon 14 Sep 2026 01:00:12 +0000 ROA not after: Sun 13 Dec 2026 02:00:12 +0000 asID: 11049 IP address blocks: 163.192.164.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2a:bd:2e:9e:b1:44:4a:2f:42:5a:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 14 01:00:12 2026 GMT Not After : Dec 13 02:00:12 2026 GMT Subject: CN=e7155214-050f-495d-96c4-3bba2c94edce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:1a:37:d4:5e:7b:d7:85:86:0b:1f:60:2c:a3: 8a:20:1a:1c:eb:56:c6:22:ff:67:8a:2f:27:83:30: 4e:d4:fb:8c:86:3a:8c:af:8d:bc:e2:7b:60:f2:ff: 00:b4:ac:5a:32:b7:b0:4b:f7:ac:e1:71:17:7e:e8: 22:39:29:a4:19:c5:30:71:83:7c:ad:3b:72:bb:b3: 2d:ae:ee:c0:65:8c:48:a1:48:24:bc:5e:19:f0:1d: 2e:78:62:80:66:77:03:8d:e3:a0:8d:38:c4:ec:21: a8:e9:bf:55:5e:dd:d8:2c:df:60:4c:e0:2b:e2:f4: c1:30:7c:c5:23:14:5c:09:77:45:ea:12:4f:bd:9d: 49:a7:71:34:ec:ef:f0:e1:db:39:08:73:28:7f:03: 73:d0:bd:47:03:5c:7d:43:ce:9a:a8:c1:7e:50:f4: bc:21:c3:e0:4e:10:5c:c3:a2:3d:a1:47:b6:c8:cc: 9f:67:bf:58:80:d5:80:5f:54:dd:e6:37:0d:5a:70: 84:84:0c:5c:9e:0b:38:e4:28:55:d8:32:ac:e3:30: 08:4d:d5:cf:c2:38:4c:55:67:5f:c9:29:4c:03:08: a9:18:9f:e5:80:40:25:0d:9d:ff:0f:ae:fc:38:bd: 45:52:c5:59:18:aa:a9:15:e0:e0:ec:54:24:7c:42: ad:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:0A:78:2D:2D:6A:4E:52:81:50:52:FE:40:B7:42:35:AB:73:B1:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a10e4f18-5c74-332d-870d-98b131d94592.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 163.192.164.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:97:4c:03:7d:2e:83:5b:99:7c:d1:3a:ac:97:34:6c:fc:87: 1e:91:b4:c3:5a:04:03:4f:ec:57:83:0e:45:94:21:19:1c:18: 0a:fd:2f:94:f3:7a:04:99:04:e2:bf:62:49:d3:9e:33:d0:6e: 3f:04:ad:8d:86:23:6e:6d:5c:a7:5d:15:5f:72:56:ad:ea:a5: 6d:a5:f2:51:d5:d9:39:64:ec:17:94:32:56:3d:86:9b:06:ac: 4c:5e:f5:c4:32:6c:a6:d1:e3:ab:cb:13:d1:0b:29:39:4a:a8: 53:61:95:03:1e:a0:d1:b1:0c:0c:95:52:66:13:fe:10:ae:b7: 9f:82:ac:0c:b3:a6:51:2a:af:5f:f7:bb:4b:f0:84:e5:10:aa: b1:76:e3:07:67:f2:00:c5:8e:4e:1c:ea:37:86:fc:45:c5:17: 64:fb:4e:d7:e2:2b:4a:9e:b6:b9:98:5a:67:55:af:36:73:6a: 00:32:be:ff:a8:16:4a:04:61:66:2a:0b:ad:af:46:0d:63:78: 9b:3c:1c:c8:76:ee:e4:ad:d6:c0:38:56:54:5d:30:7e:42:52: 8d:ad:09:8e:b5:06:6e:b5:8b:bd:7c:6c:2d:e8:24:f9:0b:e4: d1:48:6c:ef:ff:8b:d0:95:aa:2b:cc:ee:76:a3:84:c0:7d:55: 9d:0c:72:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8qvS6esURKL0JaXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkxNDAxMDAxMloXDTI2MTIxMzAyMDAxMlowLzEtMCsGA1UEAxMk ZTcxNTUyMTQtMDUwZi00OTVkLTk2YzQtM2JiYTJjOTRlZGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBo31F5714WGCx9gLKOKIBoc61bGIv9nii8n gzBO1PuMhjqMr4284ntg8v8AtKxaMrewS/es4XEXfugiOSmkGcUwcYN8rTtyu7Mt ru7AZYxIoUgkvF4Z8B0ueGKAZncDjeOgjTjE7CGo6b9VXt3YLN9gTOAr4vTBMHzF IxRcCXdF6hJPvZ1Jp3E07O/w4ds5CHMofwNz0L1HA1x9Q86aqMF+UPS8IcPgThBc w6I9oUe2yMyfZ79YgNWAX1Td5jcNWnCEhAxcngs45ChV2DKs4zAITdXPwjhMVWdf ySlMAwipGJ/lgEAlDZ3/D678OL1FUsVZGKqpFeDg7FQkfEKtMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJUKeC0tak5SgVBS/kC3QjWrc7HwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYTEwZTRmMTgtNWM3NC0z MzJkLTg3MGQtOThiMTMxZDk0NTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBo8CkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHSXTAN9LoNbmXzROqyXNGz8hx6RtMNaBANP7FeDDkWUIRkcGAr9L5Tz egSZBOK/YknTnjPQbj8ErY2GI25tXKddFV9yVq3qpW2l8lHV2Tlk7BeUMlY9hpsG rExe9cQybKbR46vLE9ELKTlKqFNhlQMeoNGxDAyVUmYT/hCut5+CrAyzplEqr1/3 u0vwhOUQqrF24wdn8gDFjk4c6jeG/EXFF2T7TtfiK0qetrmYWmdVrzZzagAyvv+o FkoEYWYqC62vRg1jeJs8HMh27uSt1sA4VlRdMH5CUo2tCY61Bm61i718bC3oJPkL 5NFIbO//i9CVqivM7najhMB9VZ0Mci4= -----END CERTIFICATE-----Generated at Mon Sep 28 12:23:56 2026 by rpki-client