$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b/8fc9b646-98e7-30c8-bb8b-1175b9921e43.roa File: 8fc9b646-98e7-30c8-bb8b-1175b9921e43.roa (raw, json) Hash identifier: /gMik+94b+4pEQTBItgJJ+HvhgJMPsmUnU0YDL2l+ns= Subject key identifier: A1:D1:85:11:67:12:11:BF:8A:0D:53:C3:8E:23:89:A8:06:22:33:0C Certificate issuer: /CN=c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b Certificate serial: 010D0C9F4328584F374D2E470EAD794673D2F040 Authority key identifier: 60:87:0B:AF:04:2C:FC:75:F9:1A:BB:8B:C4:9E:4C:35:6F:F7:5F:34 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b/8fc9b646-98e7-30c8-bb8b-1175b9921e43.roa Signing time: Fri 18 Sep 2026 13:00:12 +0000 ROA not before: Fri 18 Sep 2026 13:00:12 +0000 ROA not after: Thu 17 Dec 2026 14:00:12 +0000 asID: 19905 IP address blocks: 157.188.0.0/16 maxlen: 24 161.185.0.0/16 maxlen: 24 167.153.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:37:4d:2e:47:0e:ad:79:46:73:d2:f0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b Validity Not Before: Sep 18 13:00:12 2026 GMT Not After : Dec 17 14:00:12 2026 GMT Subject: CN=ee6144a5-f435-4aff-bd64-243251601f83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:31:24:ee:42:fe:2d:9d:7b:e9:63:27:4b:c8: 02:f7:8b:13:8b:25:c2:03:2b:8f:e7:ae:70:52:ab: be:48:23:9e:19:9e:fb:28:9c:e6:d8:6b:a8:e7:a7: d9:1a:c0:18:1e:8b:83:74:96:1b:25:14:51:4d:83: 2f:ec:69:80:91:fe:96:6f:63:54:36:f4:b5:cd:39: c4:94:f5:0a:8d:8c:de:63:1f:cc:c0:40:79:a1:63: 50:64:fb:f5:3e:82:ae:3c:81:76:1e:90:b6:1f:83: dd:68:33:cb:26:a3:58:5d:e2:99:a5:f3:a9:2b:e2: 3b:3c:c3:e8:a2:fb:fb:08:e8:d2:5f:6f:28:e2:7f: be:35:86:74:1a:a1:b7:5d:5f:d5:9f:5f:99:9a:fa: 23:ba:3e:39:28:8f:5a:56:27:13:7f:18:a0:c8:de: 19:34:e5:1d:e1:1d:41:b3:cb:80:05:a2:76:b1:97: 01:0f:23:f3:8b:e2:ec:ef:ca:a5:61:5b:af:45:00: ed:c1:9f:ee:98:6c:2a:d0:1e:bc:bc:80:44:03:5c: 46:14:66:ad:72:29:19:c1:2e:14:5c:a8:de:0b:76: 33:28:d3:8a:ce:29:bd:f7:55:6b:74:28:50:98:fa: 26:9d:f9:eb:4d:30:7e:16:f9:61:2e:8f:44:a4:c1: 9e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:D1:85:11:67:12:11:BF:8A:0D:53:C3:8E:23:89:A8:06:22:33:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b/8fc9b646-98e7-30c8-bb8b-1175b9921e43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b.crl X509v3 Authority Key Identifier: keyid:60:87:0B:AF:04:2C:FC:75:F9:1A:BB:8B:C4:9E:4C:35:6F:F7:5F:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b.cer sbgp-ipAddrBlock: critical IPv4: 157.188.0.0/16 161.185.0.0/16 167.153.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:ed:65:00:ad:20:9c:56:2d:67:df:e5:ab:58:1a:1e:9a:fe: 9e:74:62:2c:01:20:12:36:03:11:6d:cf:76:a1:a1:aa:0d:df: 0c:50:c2:d6:73:4c:54:75:55:0c:61:9f:ea:0c:90:2e:04:4a: 0f:9c:3c:c1:63:42:85:3e:75:cd:b4:9c:b2:57:8c:f3:98:86: 04:98:f7:70:1e:6f:89:d8:45:01:83:cb:7b:dc:13:6f:01:da: 41:0a:f5:b6:6f:0b:73:9b:3d:f9:a6:c2:0c:83:dc:3d:6e:7d: ba:3c:fd:a0:d0:9d:af:52:a6:4b:76:65:92:c0:5d:38:23:8e: f1:23:ca:a9:0b:88:82:e3:49:cd:e3:82:eb:b8:76:2a:1e:f8: d1:4c:25:87:4c:49:ae:53:57:ed:d6:86:71:50:16:69:bf:26: c1:19:cd:57:48:ac:33:e0:d3:56:e7:c9:29:8b:fb:ec:59:cf: d4:76:66:5b:7c:f8:69:3b:2e:26:66:68:5d:79:a0:26:dd:75: dc:e9:96:7f:b1:b8:4f:c7:89:e2:e6:3d:aa:72:18:cd:bd:81: 6f:3d:d0:2f:74:7d:ed:d4:a3:7f:fb:d1:57:2c:1f:e9:ba:af: 6b:18:c9:d2:8b:d5:98:77:a4:29:41:d3:81:e1:a5:65:3b:11: b0:81:39:e4 -----BEGIN CERTIFICATE----- MIIGTDCCBTSgAwIBAgIUAQ0Mn0MoWE83TS5HDq15RnPS8EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzM5MWE5ZTEtNGM3Zi00MmYxLTkwYmEtOGQyOWMyYzBi MzBiMB4XDTI2MDkxODEzMDAxMloXDTI2MTIxNzE0MDAxMlowLzEtMCsGA1UEAxMk ZWU2MTQ0YTUtZjQzNS00YWZmLWJkNjQtMjQzMjUxNjAxZjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTEk7kL+LZ176WMnS8gC94sTiyXCAyuP565w Uqu+SCOeGZ77KJzm2Guo56fZGsAYHouDdJYbJRRRTYMv7GmAkf6Wb2NUNvS1zTnE lPUKjYzeYx/MwEB5oWNQZPv1PoKuPIF2HpC2H4PdaDPLJqNYXeKZpfOpK+I7PMPo ovv7COjSX28o4n++NYZ0GqG3XV/Vn1+Zmvojuj45KI9aVicTfxigyN4ZNOUd4R1B s8uABaJ2sZcBDyPzi+Ls78qlYVuvRQDtwZ/umGwq0B68vIBEA1xGFGatcikZwS4U XKjeC3YzKNOKzim991VrdChQmPomnfnrTTB+FvlhLo9EpMGetwIDAQABo4IDXjCC A1owHQYDVR0OBBYEFKHRhRFnEhG/ig1Tw44jiagGIjMMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jMzkx YTllMS00YzdmLTQyZjEtOTBiYS04ZDI5YzJjMGIzMGIvOGZjOWI2NDYtOThlNy0z MGM4LWJiOGItMTE3NWI5OTIxZTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzM5MWE5ZTEtNGM3Zi00MmYxLTkw YmEtOGQyOWMyYzBiMzBiL2MzOTFhOWUxLTRjN2YtNDJmMS05MGJhLThkMjljMmMw YjMwYi5jcmwwHwYDVR0jBBgwFoAUYIcLrwQs/HX5GruLxJ5MNW/3XzQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jMzkxYTllMS00YzdmLTQyZjEtOTBiYS04ZDI5 YzJjMGIzMGIuY2VyMCgGCCsGAQUFBwEHAQH/BBkwFzAVBAIAATAPAwMAnbwDAwCh uQMDAKeZMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ KoZIhvcNAQELBQADggEBABbtZQCtIJxWLWff5atYGh6a/p50YiwBIBI2AxFtz3ah oaoN3wxQwtZzTFR1VQxhn+oMkC4ESg+cPMFjQoU+dc20nLJXjPOYhgSY93Aeb4nY RQGDy3vcE28B2kEK9bZvC3ObPfmmwgyD3D1ufbo8/aDQna9Spkt2ZZLAXTgjjvEj yqkLiILjSc3jguu4dioe+NFMJYdMSa5TV+3WhnFQFmm/JsEZzVdIrDPg01bnySmL ++xZz9R2Zlt8+Gk7LiZmaF15oCbdddzpln+xuE/HieLmPapyGM29gW890C90fe3U o3/70VcsH+m6r2sYydKL1Zh3pClB04HhpWU7EbCBOeQ= -----END CERTIFICATE-----Generated at Tue Sep 29 13:34:55 2026 by rpki-client