$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b236930b-e520-39d9-8b0f-9a8ee151dc01.roa File: b236930b-e520-39d9-8b0f-9a8ee151dc01.roa (raw, json) Hash identifier: +5JzaS6mjfP8qHWiziucZOuWn2OHA5u5YqUx341JYfQ= Subject key identifier: B0:09:F1:E8:4E:03:10:01:2A:6F:12:18:FA:D8:BF:0A:E5:F9:0B:B8 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F119CE6AE83DAB9719B6FAC80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b236930b-e520-39d9-8b0f-9a8ee151dc01.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 161.153.216.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9c:e6:ae:83:da:b9:71:9b:6f:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=f8b8a16d-17fa-492e-8806-b1f2ab9c3008 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:53:39:c1:36:7f:b7:73:0e:79:d2:96:28:93: d3:ad:30:a8:c7:48:4e:56:c6:d0:54:fe:fb:37:b9: 59:51:11:8d:7d:5d:c5:7e:69:7f:4c:96:71:a7:1d: 70:22:37:89:da:fb:cd:55:68:5b:23:b9:7d:b5:59: e9:4f:5a:0e:e1:b6:06:af:82:b8:4c:76:36:32:ca: 7f:83:53:bb:13:1c:93:bb:78:ec:ba:94:c2:0f:dd: 6c:aa:60:4c:06:a6:9c:7e:ac:74:62:84:91:3a:90: 90:43:fd:72:81:d0:e5:0e:b0:e5:d2:cc:2f:2e:75: 8a:ed:25:2a:e1:6d:4d:58:3b:b1:a4:a2:98:d5:52: ab:ca:38:26:1d:4c:62:c0:3f:51:99:1f:ef:48:b8: 1a:cb:e4:32:e4:d4:13:dc:3d:14:29:25:8c:46:b7: 9e:84:ae:fb:b3:f2:56:6d:6d:1d:76:df:6b:3e:ab: 78:5a:6d:68:b2:49:7d:42:88:5e:a8:95:bb:7b:71: 2b:ae:69:98:d1:a6:88:e0:d1:fa:85:99:cd:2a:c9: 38:61:ca:ed:3d:28:8b:0e:d3:bb:6e:9f:6f:49:b9: 15:7e:a0:ab:5d:8d:3b:8a:08:6b:af:23:31:f1:5c: bd:f1:aa:3d:d3:7f:74:b4:fa:23:22:94:a2:b1:e9: 40:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:09:F1:E8:4E:03:10:01:2A:6F:12:18:FA:D8:BF:0A:E5:F9:0B:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b236930b-e520-39d9-8b0f-9a8ee151dc01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 161.153.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:d3:13:20:86:f0:fc:a4:a9:7d:da:cf:fa:f8:0d:24:30:d4: b8:14:57:89:96:63:14:e0:5f:08:8b:e4:f5:5d:fe:2a:b6:39: db:5c:3f:d2:99:be:59:e9:bd:a1:1a:3f:1e:39:db:b4:bb:ec: 66:0b:72:de:80:46:fa:d9:2d:50:71:f8:ef:d2:55:48:a4:48: ca:c1:ed:ec:a1:33:61:2b:c9:4e:3a:df:9d:68:fa:3a:38:99: fd:b8:b3:fb:83:33:bb:c2:a3:1a:32:4d:35:79:af:c5:fe:88: 4e:f5:c6:06:7b:23:8a:01:f7:ce:f3:77:24:f6:0a:43:7e:fd: 0c:99:07:ce:ca:da:fb:81:2d:4e:f0:da:29:d8:81:d3:a4:c7: 54:6b:7b:d1:42:a1:4e:19:8e:f0:e6:61:5e:d7:4c:36:8f:eb: 16:d3:82:59:0a:03:ed:30:08:de:65:0c:bc:d9:45:48:29:55: d4:15:54:24:80:76:35:03:ac:19:3e:44:c2:13:79:67:dd:06: 45:78:db:e2:9b:5d:a5:78:72:b0:7b:19:f4:85:28:f0:0d:d8: 10:78:4a:92:86:c5:f9:33:e4:a7:05:e3:d4:d9:59:39:7c:fc: d2:75:83:ba:f7:31:6a:2e:eb:ce:46:bc:37:76:be:03:ca:b8: 74:5e:27:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnOaug9q5cZtvrIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjhiOGExNmQtMTdmYS00OTJlLTg4MDYtYjFmMmFiOWMzMDA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlM5wTZ/t3MOedKWKJPTrTCox0hOVsbQVP77 N7lZURGNfV3Ffml/TJZxpx1wIjeJ2vvNVWhbI7l9tVnpT1oO4bYGr4K4THY2Msp/ g1O7ExyTu3jsupTCD91sqmBMBqacfqx0YoSROpCQQ/1ygdDlDrDl0swvLnWK7SUq 4W1NWDuxpKKY1VKryjgmHUxiwD9RmR/vSLgay+Qy5NQT3D0UKSWMRreehK77s/JW bW0ddt9rPqt4Wm1oskl9QoheqJW7e3ErrmmY0aaI4NH6hZnNKsk4YcrtPSiLDtO7 bp9vSbkVfqCrXY07ighrryMx8Vy98ao90390tPojIpSiselAewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLAJ8ehOAxABKm8SGPrYvwrl+Qu4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYjIzNjkzMGItZTUyMC0z OWQ5LThiMGYtOWE4ZWUxNTFkYzAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDoZnYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKXTEyCG8PykqX3az/r4DSQw1LgUV4mWYxTgXwiL5PVd/iq2OdtcP9KZ vlnpvaEaPx4527S77GYLct6ARvrZLVBx+O/SVUikSMrB7eyhM2EryU46351o+jo4 mf24s/uDM7vCoxoyTTV5r8X+iE71xgZ7I4oB987zdyT2CkN+/QyZB87K2vuBLU7w 2inYgdOkx1Rre9FCoU4ZjvDmYV7XTDaP6xbTglkKA+0wCN5lDLzZRUgpVdQVVCSA djUDrBk+RMITeWfdBkV42+KbXaV4crB7GfSFKPAN2BB4SpKGxfkz5KcF49TZWTl8 /NJ1g7r3MWou685GvDd2vgPKuHReJyc= -----END CERTIFICATE-----Generated at Tue Sep 22 11:46:50 2026 by rpki-client