$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e9f555d6-fba7-33c2-9cbc-eabcab91c0f1.roa File: e9f555d6-fba7-33c2-9cbc-eabcab91c0f1.roa (raw, json) Hash identifier: nuh7q6XyfLry0Ol4CehK+jK8xIJmolykGh46uuB1JDc= Subject key identifier: A7:07:5F:57:6C:87:23:51:41:23:1D:99:00:DD:D0:79:EF:CF:27:6D Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F093CE3D421F220B33C59CFA0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e9f555d6-fba7-33c2-9cbc-eabcab91c0f1.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 161.33.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:e3:d4:21:f2:20:b3:3c:59:cf:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=08eeb055-2b9f-408e-bfff-fa3c25330212 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:e2:40:7c:fe:5c:6f:56:dd:3e:59:24:75:38: ae:01:c5:10:12:52:3a:fe:7a:77:ac:9c:da:a0:b7: f0:1b:24:60:27:6c:ac:df:67:ae:03:23:e1:3d:5b: 51:22:a7:af:58:fd:cf:ee:c4:0a:ad:1a:f2:41:0e: 66:14:61:68:5c:fc:32:24:0d:d4:15:83:53:4a:1a: f7:f3:7e:a8:c0:07:24:1c:b3:09:2b:a3:29:d8:79: ca:f0:52:9c:24:25:68:a4:69:c4:f7:a2:16:5a:99: 36:cd:56:2a:97:a0:2c:c5:df:4f:5f:6f:8b:ee:49: 8a:ef:4c:f6:c3:46:a4:ec:cf:5d:c7:34:97:fd:16: f8:d4:0e:78:26:5d:bd:d0:af:c3:e9:c9:24:dd:e1: 55:9d:c4:d9:b1:3c:2a:eb:9e:9a:08:9a:08:35:28: 31:42:c2:35:61:68:39:0d:5d:9c:a7:66:0d:a5:f3: 0e:c5:61:4e:17:85:c7:3d:ba:1f:3f:52:e9:eb:11: 83:2f:4e:1d:0b:5e:5b:44:02:ab:dc:a6:bd:b8:f2: 9d:84:3d:e3:46:3e:d7:77:c9:04:a1:4e:53:5d:f1: ca:de:e2:d1:bf:56:c8:3b:aa:7f:a0:be:9f:a7:06: 9f:04:9d:e4:fa:86:8b:7f:1c:c4:3a:2e:d0:66:96: c6:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:07:5F:57:6C:87:23:51:41:23:1D:99:00:DD:D0:79:EF:CF:27:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e9f555d6-fba7-33c2-9cbc-eabcab91c0f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 161.33.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:50:2e:8f:61:3f:ab:8e:3b:b6:52:0c:45:8f:a5:32:6f:c3: c9:31:c5:89:8d:fc:79:0e:d9:9e:02:b5:e2:81:2d:18:60:37: a4:7a:e6:8d:a9:c9:57:4d:02:0b:85:bf:4f:89:ea:17:4e:d7: 97:93:2b:56:4a:d8:f3:0b:aa:a8:1a:b5:a1:33:5c:71:78:08: aa:77:ad:95:86:eb:85:4e:3e:bd:79:41:0f:47:7d:f9:4d:e7: 26:12:31:17:97:65:45:ad:3c:6d:a2:b6:d5:df:c4:92:82:54: 8a:8e:50:0f:32:d8:bf:f7:a1:66:53:d8:5d:a1:2c:45:85:ac: 5b:dc:79:ad:74:cb:b0:32:2b:4b:b3:ea:d8:69:21:aa:9f:3c: 9b:c3:82:e0:30:8a:09:1d:a9:d8:45:76:56:04:dd:10:9c:5a: dd:03:aa:ed:b3:76:e8:ba:db:c3:f7:3a:5c:a1:82:b2:81:75: ca:68:3e:8d:2f:72:97:96:3b:63:86:8d:9e:c9:50:fd:5f:42: 82:af:37:db:f7:1f:60:c3:b6:2a:cd:cc:42:af:67:29:29:32: e1:58:f5:d6:52:6c:e6:85:30:64:51:bf:41:3b:3d:86:84:03: e1:95:bf:01:fe:a1:2e:d4:9d:0a:4b:8d:fc:6d:17:8b:f3:0f: e1:55:09:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPOPUIfIgszxZz6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk MDhlZWIwNTUtMmI5Zi00MDhlLWJmZmYtZmEzYzI1MzMwMjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjeJAfP5cb1bdPlkkdTiuAcUQElI6/np3rJza oLfwGyRgJ2ys32euAyPhPVtRIqevWP3P7sQKrRryQQ5mFGFoXPwyJA3UFYNTShr3 836owAckHLMJK6Mp2HnK8FKcJCVopGnE96IWWpk2zVYql6Asxd9PX2+L7kmK70z2 w0ak7M9dxzSX/Rb41A54Jl290K/D6ckk3eFVncTZsTwq656aCJoINSgxQsI1YWg5 DV2cp2YNpfMOxWFOF4XHPbofP1Lp6xGDL04dC15bRAKr3Ka9uPKdhD3jRj7Xd8kE oU5TXfHK3uLRv1bIO6p/oL6fpwafBJ3k+oaLfxzEOi7QZpbGRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKcHX1dshyNRQSMdmQDd0HnvzydtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZTlmNTU1ZDYtZmJhNy0z M2MyLTljYmMtZWFiY2FiOTFjMGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGoSGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAARQLo9hP6uOO7ZSDEWPpTJvw8kxxYmN/HkO2Z4CteKBLRhgN6R65o2p yVdNAguFv0+J6hdO15eTK1ZK2PMLqqgataEzXHF4CKp3rZWG64VOPr15QQ9HfflN 5yYSMReXZUWtPG2ittXfxJKCVIqOUA8y2L/3oWZT2F2hLEWFrFvcea10y7AyK0uz 6thpIaqfPJvDguAwigkdqdhFdlYE3RCcWt0Dqu2zdui628P3OlyhgrKBdcpoPo0v cpeWO2OGjZ7JUP1fQoKvN9v3H2DDtirNzEKvZykpMuFY9dZSbOaFMGRRv0E7PYaE A+GVvwH+oS7UnQpLjfxtF4vzD+FVCUc= -----END CERTIFICATE-----Generated at Tue Sep 22 10:27:13 2026 by rpki-client