$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/aa3d6dee-53c0-3eea-9b77-1295aac0b49d.roa File: aa3d6dee-53c0-3eea-9b77-1295aac0b49d.roa (raw, json) Hash identifier: /Tl2+x1NNqhYRXRGmYR17Thy17YE/CbnhbupP7oU+UI= Subject key identifier: 19:65:17:C9:B3:87:1E:7B:4F:73:85:44:FE:7A:D1:DB:BF:7A:31:EA Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F1C1521D27A7A6827F8C12E00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/aa3d6dee-53c0-3eea-9b77-1295aac0b49d.roa Signing time: Tue 08 Sep 2026 19:00:40 +0000 ROA not before: Tue 08 Sep 2026 19:00:40 +0000 ROA not after: Mon 07 Dec 2026 20:00:40 +0000 asID: 31898 IP address blocks: 155.181.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1c:15:21:d2:7a:7a:68:27:f8:c1:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 8 19:00:40 2026 GMT Not After : Dec 7 20:00:40 2026 GMT Subject: CN=f4041012-d944-4c35-85a7-fb21f331e96c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:df:15:c3:c9:57:37:fb:61:8f:25:c4:a7:7c: 3e:3b:a1:fa:02:58:c1:c4:d5:a3:19:a1:ca:f0:1a: d7:76:a1:6e:7a:39:f4:49:5b:e9:79:6e:29:dd:f7: 2f:80:e8:40:49:87:fe:c6:62:53:45:3a:9f:8e:13: 4f:07:9d:34:97:a7:4c:af:6b:93:68:aa:6c:36:a8: 6e:df:f6:47:ab:e3:e3:b0:de:c2:9a:59:e2:c6:38: 01:4a:58:6e:ab:1d:0e:a0:26:57:7a:3e:8e:01:b6: 48:0d:7f:26:89:eb:cd:73:0d:c8:b6:2e:12:25:e6: b7:bb:15:29:96:c1:91:83:64:23:4d:15:2f:59:b4: 85:f8:88:09:55:f2:2a:df:2a:3a:5a:5a:89:2e:c0: 87:35:99:df:03:ed:a1:a1:05:a3:64:71:64:dc:4e: 66:9d:df:5c:1a:88:cd:a6:51:53:b8:1c:6e:89:f5: 4a:02:c8:9f:78:82:21:5f:4c:12:a9:a6:ca:25:ef: 35:10:84:d6:be:e8:01:fe:cf:89:c9:6b:dd:78:08: 3d:04:f9:fd:d8:f8:f2:f9:9a:6c:42:fe:6b:47:cc: 2f:42:a3:39:fa:95:13:42:85:47:18:d9:12:eb:a0: 54:52:31:5d:97:3b:04:99:ea:43:16:96:a2:eb:bb: b5:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:65:17:C9:B3:87:1E:7B:4F:73:85:44:FE:7A:D1:DB:BF:7A:31:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/aa3d6dee-53c0-3eea-9b77-1295aac0b49d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 155.181.81.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:8f:ff:ac:9f:67:58:b9:ef:93:45:70:cd:27:80:10:00:45: 8c:ef:76:c0:bb:ce:36:01:d5:9c:03:0a:cf:16:db:93:fd:39: 61:90:69:7c:15:b5:25:94:e6:89:39:1e:60:73:5b:d6:0a:e5: b3:88:6d:39:41:21:be:a3:69:58:3b:8a:65:86:ee:80:a1:e9: aa:99:cc:fb:b5:43:80:3c:16:dc:40:12:19:b1:50:2d:9c:5f: 7f:15:9e:6a:fa:ae:11:02:b3:af:27:bf:39:1f:5d:02:d6:5b: 8b:af:cf:d8:c3:cf:9f:da:0b:0c:aa:de:67:a0:70:33:24:65: 1b:b0:b2:b6:60:d0:4c:d1:16:ad:39:69:56:79:dd:35:6e:84: 77:67:14:81:14:90:98:2a:f0:b9:82:f7:87:95:de:89:73:1e: 0d:ee:66:ba:e1:8d:f0:11:a5:6c:d1:1f:7f:b9:89:b8:81:89: c5:63:cd:64:5d:b9:eb:7c:4b:69:90:86:8a:a2:34:3a:39:6b: de:2e:6c:0f:19:40:04:34:83:72:ac:bb:db:7a:d0:53:25:46: 24:da:17:1f:04:0d:25:72:39:b0:e1:6c:df:61:82:82:c3:a5: 18:6c:5f:30:03:ef:07:f6:bf:06:e7:fe:57:92:e6:59:a4:8e: 98:e4:c5:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8cFSHSenpoJ/jBLgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwODE5MDA0MFoXDTI2MTIwNzIwMDA0MFowLzEtMCsGA1UEAxMk ZjQwNDEwMTItZDk0NC00YzM1LTg1YTctZmIyMWYzMzFlOTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvd8Vw8lXN/thjyXEp3w+O6H6AljBxNWjGaHK 8BrXdqFuejn0SVvpeW4p3fcvgOhASYf+xmJTRTqfjhNPB500l6dMr2uTaKpsNqhu 3/ZHq+PjsN7CmlnixjgBSlhuqx0OoCZXej6OAbZIDX8mievNcw3Iti4SJea3uxUp lsGRg2QjTRUvWbSF+IgJVfIq3yo6WlqJLsCHNZnfA+2hoQWjZHFk3E5mnd9cGojN plFTuBxuifVKAsifeIIhX0wSqabKJe81EITWvugB/s+JyWvdeAg9BPn92Pjy+Zps Qv5rR8wvQqM5+pUTQoVHGNkS66BUUjFdlzsEmepDFpai67u1DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBllF8mzhx57T3OFRP560du/ejHqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYWEzZDZkZWUtNTNjMC0z ZWVhLTliNzctMTI5NWFhYzBiNDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAm7VRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKSP/6yfZ1i575NFcM0ngBAARYzvdsC7zjYB1ZwDCs8W25P9OWGQaXwV tSWU5ok5HmBzW9YK5bOIbTlBIb6jaVg7imWG7oCh6aqZzPu1Q4A8FtxAEhmxUC2c X38Vnmr6rhECs68nvzkfXQLWW4uvz9jDz5/aCwyq3megcDMkZRuwsrZg0EzRFq05 aVZ53TVuhHdnFIEUkJgq8LmC94eV3olzHg3uZrrhjfARpWzRH3+5ibiBicVjzWRd uet8S2mQhoqiNDo5a94ubA8ZQAQ0g3Ksu9t60FMlRiTaFx8EDSVyObDhbN9hgoLD pRhsXzAD7wf2vwbn/leS5lmkjpjkxa8= -----END CERTIFICATE-----Generated at Mon Sep 21 14:59:45 2026 by rpki-client