$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2/ebeb1cdf-1c18-3586-a3f2-5fd7d09fdd09.roa File: ebeb1cdf-1c18-3586-a3f2-5fd7d09fdd09.roa (raw, json) Hash identifier: Ey6aIU6C9Hm8nWFgSnESDCBAObDRC0mkYR+9mp6GQmA= Subject key identifier: 81:2D:90:8D:67:03:AE:23:39:A9:33:98:AF:E9:0F:CA:4F:BC:E4:EB Certificate issuer: /CN=39bc904e-c316-4e84-92fb-2339457361b2 Certificate serial: 010D0C9F4328584F49755E6292B28A4D2EF49000 Authority key identifier: 6D:F3:74:64:84:3E:5A:9E:67:40:83:A9:E8:53:A4:32:38:AE:71:83 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2/ebeb1cdf-1c18-3586-a3f2-5fd7d09fdd09.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 40102 IP address blocks: 160.253.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2/39bc904e-c316-4e84-92fb-2339457361b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2/39bc904e-c316-4e84-92fb-2339457361b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:5e:62:92:b2:8a:4d:2e:f4:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39bc904e-c316-4e84-92fb-2339457361b2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=2b72d575-d486-42f4-8767-18badb3faab3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:0b:a8:ea:d8:b5:b6:f2:5a:1f:f6:ad:10:ad: b5:52:24:19:eb:6a:72:25:bb:45:69:8b:76:e1:60: 11:16:e8:20:2d:35:8e:73:6b:e0:58:84:2d:04:4b: fa:5e:2e:cf:bc:75:f8:c1:a8:0a:d9:db:da:25:36: a6:bc:52:46:e5:49:c9:f0:e3:aa:cf:7e:33:5f:ca: 76:51:13:66:d9:08:f6:76:10:16:47:81:40:3c:b7: 92:7d:ec:3e:10:74:ca:0e:d3:e2:d2:25:c3:36:3f: c9:3c:48:a8:27:84:3d:e5:7e:ad:d5:03:02:b2:be: 7a:c4:3c:3b:c8:92:32:67:5e:7d:56:28:90:06:62: fc:d8:5c:4c:cd:1a:03:14:7a:38:9c:87:09:9e:1c: 18:84:6a:6b:12:84:f2:92:de:19:93:f4:9b:e6:2d: 6c:3e:93:aa:df:19:05:9d:d0:7f:d5:45:df:3b:27: 89:96:22:2c:e1:60:8e:dc:3b:1b:ba:2e:29:b6:5a: bc:fb:29:1a:84:37:65:bb:dc:ef:8f:25:27:6e:07: 80:02:68:09:80:b8:ca:ee:81:85:4a:67:89:85:7e: 8a:b7:b5:cb:0b:78:bc:b3:84:23:b8:30:db:3e:19: 79:8e:19:a1:3b:fd:54:9d:26:df:2c:62:d9:df:7b: 43:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:2D:90:8D:67:03:AE:23:39:A9:33:98:AF:E9:0F:CA:4F:BC:E4:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2/ebeb1cdf-1c18-3586-a3f2-5fd7d09fdd09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2/39bc904e-c316-4e84-92fb-2339457361b2.crl X509v3 Authority Key Identifier: keyid:6D:F3:74:64:84:3E:5A:9E:67:40:83:A9:E8:53:A4:32:38:AE:71:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2.cer sbgp-ipAddrBlock: critical IPv4: 160.253.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:83:9e:c7:de:31:07:36:7b:4f:68:f3:e0:4a:43:74:0b:9a: 77:35:05:41:a3:86:4b:db:2a:38:0d:26:88:0f:8f:b3:29:3f: 02:e1:9c:d1:ed:bf:70:f6:48:49:df:cb:68:66:13:0a:24:d1: 23:c7:db:94:ee:f8:a1:c8:d8:ce:24:46:e8:2a:14:ba:00:9e: ee:86:1b:96:0e:b7:39:69:fc:0b:da:81:e5:81:47:94:4c:02: 09:14:f5:00:2b:a5:90:1c:db:83:d6:b0:b8:0c:3e:80:fb:f5: 6f:5f:0d:e1:fc:00:fe:58:2c:5f:4c:da:70:52:5a:82:46:63: 54:76:14:25:c6:d3:58:7c:d6:db:a7:b1:ca:c9:a6:48:5b:a9: 20:68:8d:7a:7d:d0:17:9c:12:f5:9a:60:e0:a2:32:26:b8:35: 93:97:45:f4:55:c0:6a:fd:81:13:d9:cc:20:a5:14:04:45:09: d4:ed:30:d5:ba:27:e5:3b:29:66:70:2c:4d:3d:80:af:f3:15: 2d:a9:4e:6c:44:a6:ac:2c:ec:be:35:d4:a3:e7:12:db:a9:84: 91:cc:3c:c8:28:fd:81:76:91:71:37:84:50:ac:a4:98:34:d6: 35:5c:36:9f:3b:a0:6b:52:3b:e4:62:a1:24:03:06:54:1b:0e: 5c:e3:ec:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdV5ikrKKTS70kAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzliYzkwNGUtYzMxNi00ZTg0LTkyZmItMjMzOTQ1NzM2 MWIyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MmI3MmQ1NzUtZDQ4Ni00MmY0LTg3NjctMThiYWRiM2ZhYWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAuo6ti1tvJaH/atEK21UiQZ62pyJbtFaYt2 4WARFuggLTWOc2vgWIQtBEv6Xi7PvHX4wagK2dvaJTamvFJG5UnJ8OOqz34zX8p2 URNm2Qj2dhAWR4FAPLeSfew+EHTKDtPi0iXDNj/JPEioJ4Q95X6t1QMCsr56xDw7 yJIyZ159ViiQBmL82FxMzRoDFHo4nIcJnhwYhGprEoTykt4Zk/Sb5i1sPpOq3xkF ndB/1UXfOyeJliIs4WCO3Dsbui4ptlq8+ykahDdlu9zvjyUnbgeAAmgJgLjK7oGF SmeJhX6Kt7XLC3i8s4QjuDDbPhl5jhmhO/1UnSbfLGLZ33tD9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIEtkI1nA64jOakzmK/pD8pPvOTrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zOWJj OTA0ZS1jMzE2LTRlODQtOTJmYi0yMzM5NDU3MzYxYjIvZWJlYjFjZGYtMWMxOC0z NTg2LWEzZjItNWZkN2QwOWZkZDA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzliYzkwNGUtYzMxNi00ZTg0LTky ZmItMjMzOTQ1NzM2MWIyLzM5YmM5MDRlLWMzMTYtNGU4NC05MmZiLTIzMzk0NTcz NjFiMi5jcmwwHwYDVR0jBBgwFoAUbfN0ZIQ+Wp5nQIOp6FOkMjiucYMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zOWJjOTA0ZS1jMzE2LTRlODQtOTJmYi0yMzM5 NDU3MzYxYjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGoP1AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABmDnsfeMQc2e09o8+BKQ3QLmnc1BUGjhkvbKjgNJogPj7MpPwLhnNHt v3D2SEnfy2hmEwok0SPH25Tu+KHI2M4kRugqFLoAnu6GG5YOtzlp/AvageWBR5RM AgkU9QArpZAc24PWsLgMPoD79W9fDeH8AP5YLF9M2nBSWoJGY1R2FCXG01h81tun scrJpkhbqSBojXp90BecEvWaYOCiMia4NZOXRfRVwGr9gRPZzCClFARFCdTtMNW6 J+U7KWZwLE09gK/zFS2pTmxEpqws7L411KPnEtuphJHMPMgo/YF2kXE3hFCspJg0 1jVcNp87oGtSO+RioSQDBlQbDlzj7I0= -----END CERTIFICATE-----Generated at Mon Sep 28 16:23:36 2026 by rpki-client