$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ae2feee7-88e2-3ab5-ab59-1f7a72c69ac0.roa File: ae2feee7-88e2-3ab5-ab59-1f7a72c69ac0.roa (raw, json) Hash identifier: 2n12U9j47QsBJZa4bTWRI0ftjZue42vpVn3ydABIh2M= Subject key identifier: 75:FD:A3:3D:0F:A4:FD:9B:5F:4E:F5:E2:F6:DE:73:27:13:DD:88:99 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F119D012F7527CCD20F716C80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ae2feee7-88e2-3ab5-ab59-1f7a72c69ac0.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 161.153.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9d:01:2f:75:27:cc:d2:0f:71:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=493a8ebd-d9a1-4d8b-8f34-800d98d61f68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:6c:f0:6c:3e:54:47:cf:a0:62:fc:46:82:c0: 65:9e:f5:d7:27:ce:f3:7a:aa:f0:e9:ba:5e:e8:74: 9b:68:e6:d8:22:40:d9:17:82:bc:0d:b9:92:a8:43: 0c:2c:e8:8a:4e:df:bf:7c:8a:22:5b:95:4d:88:4c: 87:a7:85:c9:b0:2d:9d:fd:bb:96:ab:3d:82:85:c8: b1:31:fb:2d:79:4c:3a:3f:1e:b4:f6:bb:f2:e6:dc: 93:6d:03:0b:69:84:dc:d1:4b:c1:31:c2:5c:b9:8c: 28:96:d8:0a:24:8a:8b:ce:32:f6:d8:28:c8:4e:43: 2b:c3:5d:b3:49:d2:32:7f:26:ac:eb:ef:75:c7:c1: aa:86:3a:4f:11:4b:7d:ad:bf:a8:91:c7:45:31:89: 39:86:ab:f6:4d:9c:a7:fe:09:be:b6:5d:31:25:78: 32:ce:dd:c2:88:be:32:9d:12:a2:85:0f:98:80:19: 15:e0:2d:92:15:9e:27:64:63:42:eb:12:06:9f:c3: 6b:c8:6b:ac:38:60:94:47:8b:01:e1:b9:12:f9:ed: 4b:eb:64:a7:90:24:ad:3c:6c:5d:89:40:e5:0c:84: 0f:2a:6f:68:5d:ae:6a:31:e3:e7:18:82:0c:3c:76: 9d:3e:a5:f3:fa:f6:d2:ef:ee:9c:f1:cc:83:df:b8: 2f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:FD:A3:3D:0F:A4:FD:9B:5F:4E:F5:E2:F6:DE:73:27:13:DD:88:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ae2feee7-88e2-3ab5-ab59-1f7a72c69ac0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 161.153.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:24:a2:fe:92:d9:fe:10:81:1f:2f:27:20:17:69:dd:26:64: 67:d7:84:d8:89:e8:71:1d:96:62:a8:7b:c2:67:ad:43:38:a6: 2f:3c:9c:05:6a:e0:ab:24:97:47:3f:2f:3a:83:ef:54:95:e0: a0:9b:34:27:14:f0:79:58:4f:73:e7:75:7b:ec:0c:85:ba:f8: 3e:96:54:c1:f9:f6:41:8c:dd:f4:43:37:5d:94:e9:3f:1a:f4: 91:85:ba:fe:ee:bf:11:4e:7d:71:aa:1f:c0:48:33:80:88:71: 07:94:05:39:ed:5b:59:f1:56:68:71:39:4e:a3:a5:e3:6d:59: cb:e9:c6:41:63:3d:61:68:f0:54:bb:5f:d9:14:39:22:dc:a0: 3c:5a:18:36:5d:1a:ea:0f:48:01:4b:b8:fa:39:a8:0b:60:c5: 12:66:a3:1d:9f:fa:83:ba:77:0a:c7:69:a9:97:fb:db:7b:de: a3:1d:15:d0:0a:02:e6:51:22:e7:80:18:b3:98:6a:87:2f:5d: 99:4e:25:06:15:8e:4b:f1:a8:3b:ab:b5:1c:5a:0b:d9:ab:a7: 6f:ea:6a:73:62:fa:85:2a:3d:90:4f:a6:67:8e:8b:af:15:81: f3:e9:e7:27:f5:50:93:00:ae:91:71:6b:71:2b:99:56:49:8c: c3:dc:e3:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnQEvdSfM0g9xbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk NDkzYThlYmQtZDlhMS00ZDhiLThmMzQtODAwZDk4ZDYxZjY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7GzwbD5UR8+gYvxGgsBlnvXXJ87zeqrw6bpe 6HSbaObYIkDZF4K8DbmSqEMMLOiKTt+/fIoiW5VNiEyHp4XJsC2d/buWqz2Chcix MfsteUw6Px609rvy5tyTbQMLaYTc0UvBMcJcuYwoltgKJIqLzjL22CjITkMrw12z SdIyfyas6+91x8GqhjpPEUt9rb+okcdFMYk5hqv2TZyn/gm+tl0xJXgyzt3CiL4y nRKihQ+YgBkV4C2SFZ4nZGNC6xIGn8NryGusOGCUR4sB4bkS+e1L62SnkCStPGxd iUDlDIQPKm9oXa5qMePnGIIMPHadPqXz+vbS7+6c8cyD37gvawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHX9oz0PpP2bX0714vbecycT3YiZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYWUyZmVlZTctODhlMi0z YWI1LWFiNTktMWY3YTcyYzY5YWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEoZngMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI4kov6S2f4QgR8vJyAXad0mZGfXhNiJ6HEdlmKoe8JnrUM4pi88nAVq 4Kskl0c/LzqD71SV4KCbNCcU8HlYT3PndXvsDIW6+D6WVMH59kGM3fRDN12U6T8a 9JGFuv7uvxFOfXGqH8BIM4CIcQeUBTntW1nxVmhxOU6jpeNtWcvpxkFjPWFo8FS7 X9kUOSLcoDxaGDZdGuoPSAFLuPo5qAtgxRJmox2f+oO6dwrHaamX+9t73qMdFdAK AuZRIueAGLOYaocvXZlOJQYVjkvxqDurtRxaC9mrp2/qanNi+oUqPZBPpmeOi68V gfPp5yf1UJMArpFxa3ErmVZJjMPc43c= -----END CERTIFICATE-----Generated at Sat Sep 26 11:15:25 2026 by rpki-client