$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/eea532ab-078c-39c1-ab60-65d324b56dbe.roa File: eea532ab-078c-39c1-ab60-65d324b56dbe.roa (raw, json) Hash identifier: ICkIm9klPSFttvgzSgyeddCTbalYJlOQ4c7PUqdiZys= Subject key identifier: 00:EF:52:F3:03:DA:BE:AA:3A:83:F2:F4:01:65:3D:11:F0:C1:33:C2 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F119D0262D6389527960FE180 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/eea532ab-078c-39c1-ab60-65d324b56dbe.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 161.153.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9d:02:62:d6:38:95:27:96:0f:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=56c5354c-830c-40be-b6c6-bbde700ce470 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:13:7c:e3:e8:91:86:65:9d:ec:f1:16:60:1b: fa:7f:90:80:40:81:4d:b1:83:5e:f2:20:de:04:d0: 4f:fe:c1:07:75:f8:2d:28:26:13:7c:2e:94:22:ed: 98:fc:f0:a1:c9:90:b9:15:5f:c5:54:bf:f4:a6:44: 5d:ea:be:b9:79:7b:d5:95:09:f3:0b:23:42:94:b5: c7:1b:b2:ea:27:7a:33:da:04:5f:6d:0e:1d:4a:46: 4c:f0:21:67:d9:03:73:49:0f:b2:f7:ef:47:db:78: be:f9:3b:84:1c:40:ec:c2:6b:07:1c:3e:f7:03:55: 11:aa:80:e9:47:7f:63:a9:47:23:a0:1d:3b:62:73: a7:d6:cc:d1:87:a7:41:e2:7b:aa:d9:24:4f:30:f7: a8:df:c8:11:1d:71:3c:c0:76:4c:b9:d2:bc:e4:6c: 65:47:40:4d:b7:95:72:4e:05:8b:73:93:c3:8b:93: 37:37:67:cb:c6:a4:8d:87:5c:f6:96:a9:3d:ef:41: c3:de:97:64:62:2b:48:63:ee:33:e1:ac:73:7b:25: 35:da:51:4e:22:b3:76:ac:e9:d1:ae:43:48:9c:28: f7:5b:6d:19:40:79:54:9b:bc:74:cb:04:9b:93:71: a8:f0:79:e1:bc:85:45:eb:30:11:9e:1e:f8:40:9d: 19:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:EF:52:F3:03:DA:BE:AA:3A:83:F2:F4:01:65:3D:11:F0:C1:33:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/eea532ab-078c-39c1-ab60-65d324b56dbe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 161.153.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:55:d8:81:43:9f:90:69:ab:45:a4:10:0a:1f:3e:ec:38:7b: 29:0a:57:6b:d1:a5:e5:72:a8:2a:72:f0:20:af:28:eb:4c:d1: 54:47:a0:e2:d7:8d:4e:23:53:39:f8:ce:b3:c9:4b:64:4e:5e: 01:f9:e6:ff:ff:a2:75:44:ba:95:df:d7:66:e4:06:8e:99:b1: 2f:7f:9e:82:8c:32:b1:9d:12:f8:9d:97:31:92:d0:f6:d2:8c: 2d:2a:cf:c7:b9:ea:f4:c8:0f:26:e9:6e:13:e4:05:ee:c3:f5: be:9d:2f:b6:a5:0b:67:1f:72:ad:3f:74:fe:81:12:a5:b5:dd: 02:b7:4a:33:6b:f0:36:8e:80:60:87:4d:24:1b:73:58:0b:08: d5:bc:fb:cb:a3:90:2a:35:0e:75:e5:2a:96:58:21:de:10:7d: 83:fb:05:1e:55:82:cf:cf:08:e9:2d:87:7e:85:37:00:8c:27: d4:b7:0b:7f:8d:78:24:1f:86:15:bf:31:4d:1b:76:eb:a1:94: 81:23:32:bb:40:5c:cb:9c:a5:ab:64:0e:a5:7e:11:29:55:be: 4d:28:bb:a9:5a:d7:1d:69:3b:93:de:2a:16:46:1c:37:e8:4c: b3:d7:cd:b5:52:e3:ee:30:fc:b6:6a:f2:b7:3f:3f:4b:2d:dd: 66:f0:68:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnQJi1jiVJ5YP4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk NTZjNTM1NGMtODMwYy00MGJlLWI2YzYtYmJkZTcwMGNlNDcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghN84+iRhmWd7PEWYBv6f5CAQIFNsYNe8iDe BNBP/sEHdfgtKCYTfC6UIu2Y/PChyZC5FV/FVL/0pkRd6r65eXvVlQnzCyNClLXH G7LqJ3oz2gRfbQ4dSkZM8CFn2QNzSQ+y9+9H23i++TuEHEDswmsHHD73A1URqoDp R39jqUcjoB07YnOn1szRh6dB4nuq2SRPMPeo38gRHXE8wHZMudK85GxlR0BNt5Vy TgWLc5PDi5M3N2fLxqSNh1z2lqk970HD3pdkYitIY+4z4axzeyU12lFOIrN2rOnR rkNInCj3W20ZQHlUm7x0ywSbk3Go8HnhvIVF6zARnh74QJ0ZCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFADvUvMD2r6qOoPy9AFlPRHwwTPCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZWVhNTMyYWItMDc4Yy0z OWMxLWFiNjAtNjVkMzI0YjU2ZGJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDoZn4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFpV2IFDn5Bpq0WkEAofPuw4eykKV2vRpeVyqCpy8CCvKOtM0VRHoOLX jU4jUzn4zrPJS2ROXgH55v//onVEupXf12bkBo6ZsS9/noKMMrGdEvidlzGS0PbS jC0qz8e56vTIDybpbhPkBe7D9b6dL7alC2cfcq0/dP6BEqW13QK3SjNr8DaOgGCH TSQbc1gLCNW8+8ujkCo1DnXlKpZYId4QfYP7BR5Vgs/PCOkth36FNwCMJ9S3C3+N eCQfhhW/MU0bduuhlIEjMrtAXMucpatkDqV+ESlVvk0ou6la1x1pO5PeKhZGHDfo TLPXzbVS4+4w/LZq8rc/P0st3WbwaMA= -----END CERTIFICATE-----Generated at Mon Sep 21 22:57:46 2026 by rpki-client