$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e0f87845-17e9-37e6-a63e-bbaa645920c3.roa File: e0f87845-17e9-37e6-a63e-bbaa645920c3.roa (raw, json) Hash identifier: rHci48fq9Mk+x8Z05e2cmnc1AIlTO3FJQqW2LUMXoEk= Subject key identifier: D1:A3:D4:4E:43:A7:63:B7:3C:83:3D:AD:C9:60:50:CD:49:97:81:2D Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F0242188653425A6185E0BB00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e0f87845-17e9-37e6-a63e-bbaa645920c3.roa Signing time: Sun 30 Aug 2026 13:00:11 +0000 ROA not before: Sun 30 Aug 2026 13:00:11 +0000 ROA not after: Sat 28 Nov 2026 14:00:11 +0000 asID: 31898 IP address blocks: 152.67.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:02:42:18:86:53:42:5a:61:85:e0:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 30 13:00:11 2026 GMT Not After : Nov 28 14:00:11 2026 GMT Subject: CN=d48679d0-4303-4a4e-875c-a1d3e40f5e62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:44:97:30:89:1a:f3:74:44:22:9a:e0:28:a7: 75:46:18:29:7c:c5:87:aa:fe:51:9d:32:c9:65:cb: 3b:0c:80:13:74:77:7e:ed:d7:4d:2c:b2:ae:77:15: 55:81:20:36:64:7b:13:6d:53:61:97:a0:2d:3e:de: 01:b6:9f:c0:66:bf:60:d0:eb:88:d8:32:43:ec:7f: d8:b7:4f:81:64:e1:b1:6c:e0:04:10:c7:d3:e8:69: 57:af:67:86:0e:e7:2f:81:76:6c:f4:2d:77:ae:99: 4c:bd:c0:ff:bc:52:d3:a7:e9:62:65:8c:8f:79:f1: f2:6e:3a:58:b9:53:c3:8e:c4:5d:06:c4:fe:bb:a2: 0c:0c:e6:95:a5:d1:6e:85:98:ef:a6:40:0e:9f:18: 1c:54:80:4f:0a:be:22:71:0d:59:7f:a0:4d:9d:65: fd:c9:4d:fb:84:61:12:e3:b8:1a:07:88:d1:4c:c5: 76:5d:4c:40:9b:ec:3b:fd:15:6a:e1:8e:72:f6:c8: 0b:30:e3:17:11:6b:07:47:bb:a2:12:16:3a:c5:06: db:c7:a4:fc:74:f1:36:f2:77:e2:73:87:71:56:35: d8:21:11:cc:c7:ab:cd:de:77:44:e9:72:08:c4:e5: bf:78:73:45:bd:1d:07:21:42:1a:ae:cd:eb:24:f4: cf:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:A3:D4:4E:43:A7:63:B7:3C:83:3D:AD:C9:60:50:CD:49:97:81:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e0f87845-17e9-37e6-a63e-bbaa645920c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 152.67.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:0e:f1:a7:e4:e6:71:20:7a:9f:d2:22:fe:ab:75:f1:1c:4e: fa:8c:b4:93:28:1b:de:2e:b1:37:01:da:9f:7e:53:ae:80:a3: f7:11:6f:e4:ee:37:f9:15:b1:e3:9b:fe:c4:59:a1:f2:35:63: 7d:66:4d:a0:92:37:b1:de:40:eb:ac:5b:44:f7:65:b6:b3:02: 45:e4:dd:7d:b8:f8:67:bd:ff:56:58:ed:f6:20:25:0b:8d:d8: 3a:98:e0:38:73:40:18:34:60:2e:a5:d9:ef:aa:2f:79:b6:9e: 62:e9:ca:66:d2:86:b0:69:bf:64:fb:51:94:e9:dc:24:9c:a4: b4:e1:bf:db:31:95:08:80:47:82:cb:ad:08:5b:ad:ac:14:1d: dd:8b:72:5f:e5:63:6e:18:61:1a:ff:f4:5f:e8:3c:f3:8a:b9: ae:1e:8d:d4:44:4a:37:7e:2a:19:7c:70:75:2d:e4:e2:f0:53: c8:ea:c0:a4:d2:8c:f9:2a:4f:63:39:89:6b:51:40:a0:3f:df: f7:e6:8c:59:9f:24:1b:fd:89:5c:fc:0d:7b:8b:7f:27:b8:8d: 3e:5d:67:03:18:39:8a:f6:37:6f:d3:48:be:50:e4:19:48:4f: 19:f5:fd:8e:59:33:df:e7:2c:43:a6:d5:6e:7b:f7:e6:19:6a: 7f:ba:fa:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8CQhiGU0JaYYXguwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk ZDQ4Njc5ZDAtNDMwMy00YTRlLTg3NWMtYTFkM2U0MGY1ZTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgESXMIka83REIprgKKd1RhgpfMWHqv5RnTLJ Zcs7DIATdHd+7ddNLLKudxVVgSA2ZHsTbVNhl6AtPt4Btp/AZr9g0OuI2DJD7H/Y t0+BZOGxbOAEEMfT6GlXr2eGDucvgXZs9C13rplMvcD/vFLTp+liZYyPefHybjpY uVPDjsRdBsT+u6IMDOaVpdFuhZjvpkAOnxgcVIBPCr4icQ1Zf6BNnWX9yU37hGES 47gaB4jRTMV2XUxAm+w7/RVq4Y5y9sgLMOMXEWsHR7uiEhY6xQbbx6T8dPE28nfi c4dxVjXYIRHMx6vN3ndE6XIIxOW/eHNFvR0HIUIars3rJPTPBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNGj1E5Dp2O3PIM9rclgUM1Jl4EtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZTBmODc4NDUtMTdlOS0z N2U2LWE2M2UtYmJhYTY0NTkyMGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmEPAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADYO8afk5nEgep/SIv6rdfEcTvqMtJMoG94usTcB2p9+U66Ao/cRb+Tu N/kVseOb/sRZofI1Y31mTaCSN7HeQOusW0T3ZbazAkXk3X24+Ge9/1ZY7fYgJQuN 2DqY4DhzQBg0YC6l2e+qL3m2nmLpymbShrBpv2T7UZTp3CScpLThv9sxlQiAR4LL rQhbrawUHd2Lcl/lY24YYRr/9F/oPPOKua4ejdRESjd+Khl8cHUt5OLwU8jqwKTS jPkqT2M5iWtRQKA/3/fmjFmfJBv9iVz8DXuLfye4jT5dZwMYOYr2N2/TSL5Q5BlI Txn1/Y5ZM9/nLEOm1W579+YZan+6+gs= -----END CERTIFICATE-----Generated at Tue Sep 22 19:44:22 2026 by rpki-client