$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c214daa5-dac2-3547-abbf-3770a7fade8a.roa File: c214daa5-dac2-3547-abbf-3770a7fade8a.roa (raw, json) Hash identifier: hOV2MRK9l+4pATX+ip1AOxWCHGz3vb75vyLv3df4Eu0= Subject key identifier: C7:ED:B6:BA:1F:E4:10:6F:56:8C:8D:02:25:BD:81:BD:A6:99:FA:11 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F27F255ACB6F653D9B8776F00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c214daa5-dac2-3547-abbf-3770a7fade8a.roa Signing time: Sun 13 Sep 2026 01:00:12 +0000 ROA not before: Sun 13 Sep 2026 01:00:12 +0000 ROA not after: Sat 12 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 160.34.112.0/24 maxlen: 24 160.34.114.0/24 maxlen: 24 160.34.116.0/24 maxlen: 24 160.34.117.0/24 maxlen: 24 160.34.118.0/24 maxlen: 24 160.34.119.0/24 maxlen: 24 160.34.120.0/24 maxlen: 24 160.34.122.0/24 maxlen: 24 160.34.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:27:f2:55:ac:b6:f6:53:d9:b8:77:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 13 01:00:12 2026 GMT Not After : Dec 12 02:00:12 2026 GMT Subject: CN=8924ef6b-af81-4e8c-973e-ffc2bd1f8a38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ef:af:15:49:cc:e6:5a:0b:b3:bf:d9:62:73: 5e:0e:1c:46:17:7c:8e:84:0a:18:53:fb:ef:54:5d: 00:db:e9:2c:1d:c1:58:06:ac:25:40:0f:7c:a6:36: 71:10:32:f7:4c:66:79:bf:4f:86:f1:62:00:e2:69: 46:33:6e:fc:e7:48:4c:ca:3e:40:0d:2a:81:a4:f8: f4:04:2b:b2:29:8f:19:44:4c:89:39:21:c7:5b:dd: ce:2b:df:dd:5c:a8:85:cc:86:af:66:ed:20:48:1c: df:a2:5c:a1:b9:4b:a8:ac:a7:ad:12:d4:d1:d9:19: ae:60:bc:51:48:e7:b8:b7:3b:46:c5:76:0b:99:1d: 73:d4:04:4c:fe:1e:22:d7:e1:ce:5a:db:62:4d:a5: 86:87:df:15:2c:fa:8b:20:4f:02:b1:61:3b:9e:e7: 41:22:ff:66:1d:b9:7b:c1:1b:8c:6a:3e:c7:b0:e0: a3:62:ce:44:4d:1a:c4:dd:a3:45:e6:73:5a:f2:b7: 52:7d:83:f2:7a:72:c6:22:63:a4:37:87:e8:58:a4: 13:92:83:23:f3:a0:99:2b:88:47:64:d6:3a:92:c7: d2:4c:6d:a1:0d:74:79:96:99:48:8b:d1:79:9e:4a: d9:e1:27:8f:38:a8:79:a6:ca:73:01:8d:1d:87:a2: be:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:ED:B6:BA:1F:E4:10:6F:56:8C:8D:02:25:BD:81:BD:A6:99:FA:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c214daa5-dac2-3547-abbf-3770a7fade8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 160.34.112.0/24 160.34.114.0/24 160.34.116.0-160.34.120.255 160.34.122.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:ca:09:b3:ff:36:db:3a:83:13:60:3f:7a:92:34:c6:f2:6d: 74:bf:e5:6a:ae:62:23:3a:1f:3f:fe:ba:7b:ad:07:b9:9f:b6: fa:5d:81:ee:c5:67:a4:c1:2c:a7:13:a5:e8:a5:df:ee:ae:3a: 68:dd:82:23:31:f9:20:fe:88:27:9a:aa:60:db:5c:b6:ed:fc: fc:65:31:e5:14:15:a3:85:30:88:e0:ed:35:7d:4f:ab:3c:a2: d2:19:f2:03:3f:61:2c:d7:8c:7b:b4:a0:78:cb:52:7b:9c:d3: dc:59:ef:7e:b1:c1:55:f3:11:57:e4:0c:d1:40:b4:65:6f:0a: a6:f6:79:1f:28:e4:05:4b:f5:81:97:0f:29:39:a4:ec:c2:4b: ba:13:04:75:43:84:68:06:55:4a:01:e0:2a:8b:d2:3d:22:01: 2b:4e:c7:39:01:f2:33:ab:f6:64:af:d2:2f:dd:54:eb:9d:83: d0:9f:39:17:2b:04:4d:75:96:a1:09:b6:55:cb:8a:09:ab:7c: d0:f4:02:3c:70:ea:9b:44:2c:9a:f5:d8:91:b3:67:64:e6:c5: 64:ec:c4:cf:e8:b6:1a:4f:0a:9d:18:02:a1:12:d1:ce:05:de: 9c:5a:27:03:4f:bb:41:9e:65:d1:c5:16:a1:9a:a3:f0:ad:2d: 7a:17:7f:ba -----BEGIN CERTIFICATE----- MIIGXTCCBUWgAwIBAgIUAQ0Mn0MoWE8n8lWstvZT2bh3bwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkxMzAxMDAxMloXDTI2MTIxMjAyMDAxMlowLzEtMCsGA1UEAxMk ODkyNGVmNmItYWY4MS00ZThjLTk3M2UtZmZjMmJkMWY4YTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi++vFUnM5loLs7/ZYnNeDhxGF3yOhAoYU/vv VF0A2+ksHcFYBqwlQA98pjZxEDL3TGZ5v0+G8WIA4mlGM27850hMyj5ADSqBpPj0 BCuyKY8ZREyJOSHHW93OK9/dXKiFzIavZu0gSBzfolyhuUuorKetEtTR2RmuYLxR SOe4tztGxXYLmR1z1ARM/h4i1+HOWttiTaWGh98VLPqLIE8CsWE7nudBIv9mHbl7 wRuMaj7HsOCjYs5ETRrE3aNF5nNa8rdSfYPyenLGImOkN4foWKQTkoMj86CZK4hH ZNY6ksfSTG2hDXR5lplIi9F5nkrZ4SePOKh5pspzAY0dh6K+XQIDAQABo4IDbzCC A2swHQYDVR0OBBYEFMfttrof5BBvVoyNAiW9gb2mmfoRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYzIxNGRhYTUtZGFjMi0z NTQ3LWFiYmYtMzc3MGE3ZmFkZThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQAoCJwAwQA oCJyMAwDBAKgInQDBACgIngDBAGgInowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEARsoJs/822zqDE2A/epI0 xvJtdL/laq5iIzofP/66e60HuZ+2+l2B7sVnpMEspxOl6KXf7q46aN2CIzH5IP6I J5qqYNtctu38/GUx5RQVo4UwiODtNX1Pqzyi0hnyAz9hLNeMe7SgeMtSe5zT3Fnv frHBVfMRV+QM0UC0ZW8KpvZ5HyjkBUv1gZcPKTmk7MJLuhMEdUOEaAZVSgHgKovS PSIBK07HOQHyM6v2ZK/SL91U652D0J85FysETXWWoQm2VcuKCat80PQCPHDqm0Qs mvXYkbNnZObFZOzEz+i2Gk8KnRgCoRLRzgXenFonA0+7QZ5l0cUWoZqj8K0tehd/ ug== -----END CERTIFICATE-----Generated at Sun Sep 20 21:57:32 2026 by rpki-client