$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b80d9746-fe21-3dac-874d-ef1dd6406fa2.roa File: b80d9746-fe21-3dac-874d-ef1dd6406fa2.roa (raw, json) Hash identifier: 6uXl7yG49+Af1dacld4xRT6dCZ1DilgTycRJAKnL7oY= Subject key identifier: 13:32:41:4B:BE:95:39:3B:F1:53:04:94:4B:03:F8:65:84:75:34:79 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F103796F5ED05B82C4A45CF80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b80d9746-fe21-3dac-874d-ef1dd6406fa2.roa Signing time: Fri 04 Sep 2026 13:00:12 +0000 ROA not before: Fri 04 Sep 2026 13:00:12 +0000 ROA not after: Thu 03 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 161.153.212.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:10:37:96:f5:ed:05:b8:2c:4a:45:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 4 13:00:12 2026 GMT Not After : Dec 3 14:00:12 2026 GMT Subject: CN=73491d0d-017f-4afa-b131-bd1651c1062d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:cb:e0:2a:f8:46:a4:7e:11:11:02:2d:fc:5a: ee:d7:38:30:b9:c8:12:72:1a:73:86:4d:bd:ba:1a: ad:f7:de:d2:9a:8b:60:d7:96:4d:6c:00:3c:3b:45: 6f:3a:25:f5:45:29:cc:f6:8b:9a:73:43:ee:a4:fc: c6:11:df:56:8a:40:bd:5f:06:2e:c9:71:13:88:bf: 0f:1f:ec:e4:37:3d:f6:d6:0c:85:ba:92:d0:00:f7: bc:9a:a7:23:99:4a:c9:13:f5:09:a0:2a:e3:e7:79: 26:63:43:cf:f4:e2:18:33:6d:0d:cc:41:b3:0c:03: 85:90:54:06:5f:c2:15:2e:46:d2:bd:4e:fc:d8:84: a6:a4:68:b7:31:61:ea:e4:ea:1f:5b:42:e1:da:77: 81:6e:ef:e3:2f:59:58:65:c0:fe:87:d5:a5:b5:87: 10:84:46:aa:84:0d:29:09:7e:27:4c:60:05:4a:3a: 57:10:a1:b5:28:79:15:a3:ac:0f:bf:60:83:fb:40: ef:64:fd:f3:8f:00:a7:c1:28:52:8b:8d:bf:de:b1: 0b:da:60:26:d6:34:35:42:10:67:4d:6f:76:16:ac: bd:63:8c:6b:e9:0a:60:a5:cf:0d:44:2f:16:ad:7e: 85:8f:bf:4a:54:13:04:d4:58:f8:27:1d:9b:5f:a6: f2:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:32:41:4B:BE:95:39:3B:F1:53:04:94:4B:03:F8:65:84:75:34:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b80d9746-fe21-3dac-874d-ef1dd6406fa2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 161.153.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:a2:32:e2:28:69:7a:f5:ed:bc:94:3f:94:42:05:0d:55:60: 1a:e5:81:8e:2d:88:64:4d:39:7a:7a:b0:50:9d:5e:a2:74:20: ed:49:0e:2e:16:89:28:f7:16:ea:c2:ae:7b:de:b0:c7:29:8d: 12:27:79:26:5b:af:ea:38:f8:72:a0:e2:1a:f4:a0:63:74:d1: 5d:5a:cc:6e:b4:af:46:19:cf:9c:a7:94:69:b3:49:72:79:c8: 57:ac:dc:e9:ec:a4:81:44:64:69:5a:d5:7a:5e:ac:3f:1b:dc: aa:e9:5f:01:4b:3c:52:84:b6:5f:b4:55:68:23:43:73:93:81: d1:9e:59:fd:91:49:25:42:7a:55:56:bd:e3:43:f3:d6:15:7b: 6e:23:7f:ba:3a:02:2d:ab:16:ba:85:6b:fc:69:f5:58:05:f5: 35:4e:b3:bc:bb:26:cd:22:5d:0b:fb:d0:c0:e7:ec:73:d4:46: 4e:fe:5a:80:9e:78:96:cc:08:7d:62:46:e6:51:0c:3f:9b:ce: 7a:38:18:55:a6:c8:c9:97:e7:eb:7d:5a:70:7d:9d:6f:4a:82: b6:72:dc:f2:8c:bb:6f:fe:f3:ee:a0:a6:0e:ca:db:12:8d:f9: 64:48:eb:86:19:c0:cb:ce:77:4f:82:e0:ef:f2:48:58:55:24: 6f:e7:62:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8QN5b17QW4LEpFz4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNDEzMDAxMloXDTI2MTIwMzE0MDAxMlowLzEtMCsGA1UEAxMk NzM0OTFkMGQtMDE3Zi00YWZhLWIxMzEtYmQxNjUxYzEwNjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8vgKvhGpH4REQIt/Fru1zgwucgSchpzhk29 uhqt997Smotg15ZNbAA8O0VvOiX1RSnM9ouac0PupPzGEd9WikC9XwYuyXETiL8P H+zkNz321gyFupLQAPe8mqcjmUrJE/UJoCrj53kmY0PP9OIYM20NzEGzDAOFkFQG X8IVLkbSvU782ISmpGi3MWHq5OofW0Lh2neBbu/jL1lYZcD+h9WltYcQhEaqhA0p CX4nTGAFSjpXEKG1KHkVo6wPv2CD+0DvZP3zjwCnwShSi42/3rEL2mAm1jQ1QhBn TW92Fqy9Y4xr6Qpgpc8NRC8WrX6Fj79KVBME1Fj4Jx2bX6byqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBMyQUu+lTk78VMElEsD+GWEdTR5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYjgwZDk3NDYtZmUyMS0z ZGFjLTg3NGQtZWYxZGQ2NDA2ZmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCoZnUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFqiMuIoaXr17byUP5RCBQ1VYBrlgY4tiGRNOXp6sFCdXqJ0IO1JDi4W iSj3FurCrnvesMcpjRIneSZbr+o4+HKg4hr0oGN00V1azG60r0YZz5ynlGmzSXJ5 yFes3OnspIFEZGla1XperD8b3KrpXwFLPFKEtl+0VWgjQ3OTgdGeWf2RSSVCelVW veND89YVe24jf7o6Ai2rFrqFa/xp9VgF9TVOs7y7Js0iXQv70MDn7HPURk7+WoCe eJbMCH1iRuZRDD+bzno4GFWmyMmX5+t9WnB9nW9KgrZy3PKMu2/+8+6gpg7K2xKN +WRI64YZwMvOd0+C4O/ySFhVJG/nYpM= -----END CERTIFICATE-----Generated at Tue Sep 22 13:01:12 2026 by rpki-client