$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/673fc5f1-83f6-37bf-a155-4138a1b7a18e.roa File: 673fc5f1-83f6-37bf-a155-4138a1b7a18e.roa (raw, json) Hash identifier: t0JYvuNmUpRyorwVjRvmQHJTKN7PSXcGGmnWgskwHg8= Subject key identifier: FB:F7:F0:23:F6:26:B0:D6:D2:0C:F2:B6:BD:20:A7:D5:20:41:14:66 Certificate issuer: /CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Certificate serial: 010D0C9F4328584F4976740C74203E4B837ADF40 Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/673fc5f1-83f6-37bf-a155-4138a1b7a18e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16433 IP address blocks: 160.79.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:74:0c:74:20:3e:4b:83:7a:df:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=74246045-f6f1-4b30-aa28-b8da06c20de9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:45:89:9f:2c:10:bb:4c:47:1d:55:a6:99:d4: 8c:35:c6:66:ed:92:bd:40:ff:70:d5:30:0f:2f:fb: b4:e7:a0:22:01:f1:a5:54:ea:20:67:cd:c0:33:c1: 3c:c3:58:0f:83:64:96:70:1d:70:6d:2b:07:ee:b5: ef:4e:19:05:88:65:99:ed:ae:7b:7b:5b:36:b3:97: f4:e4:5f:26:9f:83:9d:b0:fc:b6:ba:2b:54:94:e9: 33:49:aa:b3:16:93:8a:f7:3e:b2:21:74:bb:82:fa: 9b:9c:22:d7:0c:e5:5a:f8:64:3f:c9:ac:ad:5e:9e: 24:bf:73:03:51:3d:4a:2b:7f:e4:5b:1a:b2:a4:3b: 2c:8e:e2:dc:fb:20:cc:2c:9b:a3:46:d3:2b:7c:f6: 4f:6c:b9:5f:8f:4d:68:5a:5e:90:3e:92:01:b0:d9: 99:53:8e:98:7b:ec:57:67:01:55:cc:15:67:6f:c4: 37:46:0e:70:a9:9d:58:fb:aa:2a:ca:78:89:13:41: 32:9a:a2:0a:63:d0:1f:41:fd:15:63:a7:d5:47:a2: 05:75:9a:0d:b1:83:aa:a5:e9:89:42:cb:84:dc:80: b9:38:61:5a:80:a6:69:44:5b:49:d7:a0:df:d2:75: d9:c2:f4:8d:14:b7:6b:ea:74:23:72:01:6f:a3:1c: 88:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:F7:F0:23:F6:26:B0:D6:D2:0C:F2:B6:BD:20:A7:D5:20:41:14:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/673fc5f1-83f6-37bf-a155-4138a1b7a18e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl X509v3 Authority Key Identifier: keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer sbgp-ipAddrBlock: critical IPv4: 160.79.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:fa:d0:44:ce:2a:4f:31:f2:e7:90:94:50:05:5f:a3:29:5d: b0:d3:36:b5:21:d9:c2:cf:58:b7:08:9a:61:9e:0c:c3:a2:47: 11:2f:b8:06:2d:70:59:b7:ff:92:20:96:8d:0a:43:eb:e1:2c: 71:db:57:9b:ca:16:70:6b:c3:38:fe:f4:1d:0a:a5:88:9c:9c: 5b:ba:74:dd:63:71:e0:a5:4a:af:59:74:87:12:f4:f2:ba:a3: 6e:fe:c4:e9:6e:3c:2d:59:a8:47:ab:23:97:b8:72:3f:2a:cd: 86:ea:3f:9f:60:30:14:91:fe:5a:d4:4a:10:17:99:41:6d:b2: dd:3e:16:13:52:37:da:e2:7d:ea:58:02:7b:4d:d3:01:59:e2: 2f:4f:70:d4:5e:38:d3:fa:e2:84:05:4b:26:de:4a:e9:7e:66: 1f:48:91:53:0c:a8:93:0a:d9:f0:ec:13:d3:b8:77:cd:19:df: 76:8c:d3:f5:37:cd:85:b7:07:59:ff:67:1d:17:08:97:e2:26: 12:65:09:81:21:80:fb:ef:a7:4c:cd:f9:da:e8:8c:08:58:36: 50:b2:61:b7:61:30:fd:ef:2b:23:1b:77:42:2d:d6:88:9f:64: 59:78:19:e9:21:ec:3c:1e:a0:3a:d6:dc:2d:d0:48:6c:85:b6: 97:55:18:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdnQMdCA+S4N630AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRiZjYwNGYtMjRiMC00MjZlLTgwOWQtZTY1YjA4YmU1 ZDUwMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NzQyNDYwNDUtZjZmMS00YjMwLWFhMjgtYjhkYTA2YzIwZGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEWJnywQu0xHHVWmmdSMNcZm7ZK9QP9w1TAP L/u056AiAfGlVOogZ83AM8E8w1gPg2SWcB1wbSsH7rXvThkFiGWZ7a57e1s2s5f0 5F8mn4OdsPy2uitUlOkzSaqzFpOK9z6yIXS7gvqbnCLXDOVa+GQ/yaytXp4kv3MD UT1KK3/kWxqypDssjuLc+yDMLJujRtMrfPZPbLlfj01oWl6QPpIBsNmZU46Ye+xX ZwFVzBVnb8Q3Rg5wqZ1Y+6oqyniJE0EymqIKY9AfQf0VY6fVR6IFdZoNsYOqpemJ QsuE3IC5OGFagKZpRFtJ16Df0nXZwvSNFLdr6nQjcgFvoxyIxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPv38CP2JrDW0gzytr0gp9UgQRRmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZGJm NjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjViMDhiZTVkNTAvNjczZmM1ZjEtODNmNi0z N2JmLWExNTUtNDEzOGExYjdhMThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmRiZjYwNGYtMjRiMC00MjZlLTgw OWQtZTY1YjA4YmU1ZDUwLzJkYmY2MDRmLTI0YjAtNDI2ZS04MDlkLWU2NWIwOGJl NWQ1MC5jcmwwHwYDVR0jBBgwFoAUnwuW5LWIWZ7uukF5kcCTydHD9UIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZGJmNjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjVi MDhiZTVkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEoE8QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEX60ETOKk8x8ueQlFAFX6MpXbDTNrUh2cLPWLcImmGeDMOiRxEvuAYt cFm3/5Iglo0KQ+vhLHHbV5vKFnBrwzj+9B0KpYicnFu6dN1jceClSq9ZdIcS9PK6 o27+xOluPC1ZqEerI5e4cj8qzYbqP59gMBSR/lrUShAXmUFtst0+FhNSN9rifepY AntN0wFZ4i9PcNReONP64oQFSybeSul+Zh9IkVMMqJMK2fDsE9O4d80Z33aM0/U3 zYW3B1n/Zx0XCJfiJhJlCYEhgPvvp0zN+drojAhYNlCyYbdhMP3vKyMbd0It1oif ZFl4Gekh7DweoDrW3C3QSGyFtpdVGJU= -----END CERTIFICATE-----Generated at Sun Sep 27 10:35:37 2026 by rpki-client