$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/09b5baab-600e-36fb-abec-ad3680ccbc27.roa File: 09b5baab-600e-36fb-abec-ad3680ccbc27.roa (raw, json) Hash identifier: e2P0MI6oc1mO3HYRQ2QaaD5J7VPk0pa41LmD9L0HF+0= Subject key identifier: 03:BB:6F:5B:2A:FF:B1:C0:89:8D:D8:D0:50:FB:AA:E6:00:54:B8:F3 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D8EF980EF99E139FDC487BB80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/09b5baab-600e-36fb-abec-ad3680ccbc27.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 31898 IP address blocks: 161.153.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f9:80:ef:99:e1:39:fd:c4:87:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=ebfc2b3a-04a0-4b27-9324-3793dcee9e60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:75:79:e3:82:51:d9:aa:4e:0e:61:1a:f7:57: b3:1c:a1:38:7d:e1:14:2f:c5:ea:5b:f4:dd:c3:5d: 1d:2a:ac:82:1a:bd:26:e5:3a:a8:9f:d6:84:86:32: f8:8f:98:c2:4f:d3:d1:69:e4:a4:ff:ac:0e:f6:64: 6b:ba:af:a3:6c:b3:48:b8:4b:af:ed:0d:38:30:eb: 10:84:11:d5:ef:b5:0c:12:90:05:37:14:0b:75:ab: 36:0d:ba:6c:61:eb:07:37:15:60:e5:22:ba:bd:78: e9:5c:b8:1e:92:04:e4:4b:0d:00:63:16:d1:4d:11: aa:a6:b4:b2:4a:5d:6c:f6:bf:3a:1d:c6:23:ff:b9: c0:ec:2e:6e:f2:b5:11:04:7b:ba:55:d2:80:00:91: f4:4e:27:7d:1f:1d:f0:ca:bf:44:b6:94:09:88:f2: 79:37:fa:4d:f1:25:9e:aa:dd:83:e2:f0:ed:8e:b8: 73:6c:ec:5a:d8:0e:77:d9:9d:ba:f8:55:cd:50:b9: 55:e2:95:14:af:af:e9:56:b5:1f:08:cd:b7:3c:e0: 70:0b:1e:07:17:e0:8f:81:63:23:70:9a:e2:52:93: fc:c3:af:7d:f2:e5:b0:78:55:78:f2:2e:58:bb:75: c7:71:64:af:75:e1:47:18:39:4c:5c:bc:c3:f8:5a: 2d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:BB:6F:5B:2A:FF:B1:C0:89:8D:D8:D0:50:FB:AA:E6:00:54:B8:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/09b5baab-600e-36fb-abec-ad3680ccbc27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 161.153.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:03:64:3e:98:53:05:49:07:9d:75:e4:e2:5a:66:86:8f:33: af:9a:88:bd:8b:16:00:84:3e:ab:6d:a2:02:90:e0:42:b5:16: ac:9b:3f:a0:a0:57:bc:d0:32:b5:01:d7:3c:57:74:63:4f:a6: 35:c6:76:6d:c9:6b:a0:db:f7:3f:6b:b7:d5:d5:bb:4b:8b:1b: 82:6a:59:f5:38:bc:18:03:02:38:d0:bf:c7:40:7d:4e:6a:48: dc:b4:cd:bf:70:b5:52:e6:c0:be:e7:e3:f2:a7:6b:3d:79:95: 49:ea:9b:89:a6:37:10:c8:fb:ec:a5:f6:2a:38:b5:c1:fd:ad: fc:f6:0c:06:4d:b6:dd:30:86:7c:02:ac:ac:8c:54:8c:63:f9: d0:92:de:61:a6:13:a8:18:fe:09:4c:b5:38:61:02:0d:f8:8d: 0a:8e:bd:63:df:63:92:80:92:7a:0b:07:00:ef:07:4e:7d:17: 14:54:c8:fe:57:9a:6c:3c:0b:6b:60:a7:66:41:34:9c:59:9b: ce:9d:49:89:01:07:bb:ac:19:95:b8:9a:31:3c:5d:fc:d8:1a: 5d:e1:74:47:48:d5:88:4a:fa:eb:c0:56:fc:6d:42:5d:f8:55: 5f:de:30:9f:a4:40:b6:f4:7a:66:4f:75:36:5b:1d:b7:d4:3d: 8f:d7:c9:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O+YDvmeE5/cSHu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk ZWJmYzJiM2EtMDRhMC00YjI3LTkzMjQtMzc5M2RjZWU5ZTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA63V544JR2apODmEa91ezHKE4feEUL8XqW/Td w10dKqyCGr0m5Tqon9aEhjL4j5jCT9PRaeSk/6wO9mRruq+jbLNIuEuv7Q04MOsQ hBHV77UMEpAFNxQLdas2DbpsYesHNxVg5SK6vXjpXLgekgTkSw0AYxbRTRGqprSy Sl1s9r86HcYj/7nA7C5u8rURBHu6VdKAAJH0Tid9Hx3wyr9EtpQJiPJ5N/pN8SWe qt2D4vDtjrhzbOxa2A532Z26+FXNULlV4pUUr6/pVrUfCM23POBwCx4HF+CPgWMj cJriUpP8w6998uWweFV48i5Yu3XHcWSvdeFHGDlMXLzD+FotSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAO7b1sq/7HAiY3Y0FD7quYAVLjzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMDliNWJhYWItNjAwZS0z NmZiLWFiZWMtYWQzNjgwY2NiYzI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDoZnwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAADZD6YUwVJB5115OJaZoaPM6+aiL2LFgCEPqttogKQ4EK1FqybP6Cg V7zQMrUB1zxXdGNPpjXGdm3Ja6Db9z9rt9XVu0uLG4JqWfU4vBgDAjjQv8dAfU5q SNy0zb9wtVLmwL7n4/Knaz15lUnqm4mmNxDI++yl9io4tcH9rfz2DAZNtt0whnwC rKyMVIxj+dCS3mGmE6gY/glMtThhAg34jQqOvWPfY5KAknoLBwDvB059FxRUyP5X mmw8C2tgp2ZBNJxZm86dSYkBB7usGZW4mjE8XfzYGl3hdEdI1YhK+uvAVvxtQl34 VV/eMJ+kQLb0emZPdTZbHbfUPY/XyXU= -----END CERTIFICATE-----Generated at Wed May 13 06:17:22 2026 by rpki-client