$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ad67ab36-a827-3fe4-b540-333ff1735a82.roa File: ad67ab36-a827-3fe4-b540-333ff1735a82.roa (raw, json) Hash identifier: Qfcmp3JyGBbaYXwNeqFzihVeQe6/W4XTCLiniQ146Z0= Subject key identifier: 7E:B6:50:FB:D2:0D:8E:91:C5:D6:4A:B6:62:14:04:0A:45:EC:7D:60 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F119CE8C02A523BB3D44D5F80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ad67ab36-a827-3fe4-b540-333ff1735a82.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 165.1.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9c:e8:c0:2a:52:3b:b3:d4:4d:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=331a0fd2-5032-4b11-a5b1-e43c06eba395 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e7:72:51:87:81:23:6b:b0:81:71:fa:d0:fc: 7d:e6:63:aa:66:bf:a6:21:82:9f:f0:f4:fb:c6:d3: 6a:4c:c9:48:38:78:e5:3b:91:53:47:8d:37:fc:4f: 64:ca:da:b1:1a:3a:cb:9f:76:60:03:68:42:af:72: 87:7d:d6:82:e3:11:8a:63:35:72:6f:95:5c:e5:95: b6:97:db:46:ee:d2:8e:92:79:57:ed:58:cd:2e:95: 30:6b:f9:17:9e:63:65:81:4e:1a:87:b3:54:30:5e: 11:03:ca:9e:aa:85:99:0b:39:64:aa:e4:a8:2e:7f: fa:72:f8:2b:9c:70:a9:cd:ef:7b:20:bd:72:73:7b: ab:83:04:21:f0:06:d2:ce:b4:74:a0:4e:d1:04:f6: 5e:28:e2:4f:31:6a:2f:ce:34:d6:1f:88:3a:10:da: 7b:70:16:f2:4b:63:92:2d:da:a1:22:8a:3f:89:40: 9b:f4:64:9f:80:a5:2e:7f:55:81:c8:51:0b:17:0a: f1:f8:c6:b2:0e:dc:5a:da:b8:89:5c:46:2a:75:a5: 63:81:7b:44:f7:68:f4:71:a6:e5:1c:98:ce:3b:56: 53:25:01:b8:0c:a7:e6:c5:9c:ec:8a:3e:83:63:bb: f7:76:2f:92:b8:8f:ad:12:d3:f5:ee:70:69:31:0c: 6e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:B6:50:FB:D2:0D:8E:91:C5:D6:4A:B6:62:14:04:0A:45:EC:7D:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ad67ab36-a827-3fe4-b540-333ff1735a82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 165.1.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:9c:7a:bb:56:34:b4:55:26:d4:3d:38:19:58:5c:3e:cd:7d: 5f:06:3f:ab:d7:e2:46:fa:ec:f5:14:6b:85:7e:9d:92:d4:73: fe:e8:40:1a:0b:73:b5:cf:e1:2a:84:59:aa:f6:41:db:79:8e: 9b:7a:c5:8a:e1:ce:65:f0:f6:11:66:8b:51:51:ec:79:df:fd: b0:79:63:6e:ba:18:50:32:23:73:9d:33:93:18:e1:d8:8c:ca: d7:77:c6:53:2b:c1:63:3c:99:5c:05:46:9a:fe:dd:c2:3b:22: 06:08:6d:9b:a4:93:fe:5c:b6:03:0e:c0:6e:c9:15:98:0c:75: 01:a1:dd:9f:60:7f:e7:ee:72:ec:b3:e3:7b:af:61:57:a1:f7: 75:e6:36:93:ad:71:86:82:a0:aa:b5:f3:2f:a3:ad:b2:41:46: 80:17:eb:7e:e2:14:5a:43:73:85:7d:61:69:7e:49:7d:30:3a: b0:c5:cc:a9:0b:23:1b:ab:a1:8f:41:91:46:05:96:a9:ce:4b: 39:d5:ea:ba:1f:33:d9:f0:55:1f:1b:8a:b8:0f:9b:fa:4b:8c: 40:7b:33:b5:62:d6:b4:3f:60:4a:8f:1b:05:c1:8a:40:9d:b7: f5:46:51:64:bb:c8:78:95:ac:f3:c8:7b:cc:4f:4a:b9:31:7f: d1:93:4e:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnOjAKlI7s9RNX4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk MzMxYTBmZDItNTAzMi00YjExLWE1YjEtZTQzYzA2ZWJhMzk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOdyUYeBI2uwgXH60Px95mOqZr+mIYKf8PT7 xtNqTMlIOHjlO5FTR403/E9kytqxGjrLn3ZgA2hCr3KHfdaC4xGKYzVyb5Vc5ZW2 l9tG7tKOknlX7VjNLpUwa/kXnmNlgU4ah7NUMF4RA8qeqoWZCzlkquSoLn/6cvgr nHCpze97IL1yc3urgwQh8AbSzrR0oE7RBPZeKOJPMWovzjTWH4g6ENp7cBbyS2OS LdqhIoo/iUCb9GSfgKUuf1WByFELFwrx+MayDtxa2riJXEYqdaVjgXtE92j0cabl HJjOO1ZTJQG4DKfmxZzsij6DY7v3di+SuI+tEtP17nBpMQxupQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH62UPvSDY6RxdZKtmIUBApF7H1gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYWQ2N2FiMzYtYTgyNy0z ZmU0LWI1NDAtMzMzZmYxNzM1YTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDpQFgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAicertWNLRVJtQ9OBlYXD7NfV8GP6vX4kb67PUUa4V+nZLUc/7oQBoL c7XP4SqEWar2Qdt5jpt6xYrhzmXw9hFmi1FR7Hnf/bB5Y266GFAyI3OdM5MY4diM ytd3xlMrwWM8mVwFRpr+3cI7IgYIbZukk/5ctgMOwG7JFZgMdQGh3Z9gf+fucuyz 43uvYVeh93XmNpOtcYaCoKq18y+jrbJBRoAX637iFFpDc4V9YWl+SX0wOrDFzKkL IxuroY9BkUYFlqnOSznV6rofM9nwVR8birgPm/pLjEB7M7Vi1rQ/YEqPGwXBikCd t/VGUWS7yHiVrPPIe8xPSrkxf9GTTvU= -----END CERTIFICATE-----Generated at Tue Sep 22 17:46:05 2026 by rpki-client