$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4173deef-ef45-3ca1-90ff-a2212aa5790b.roa File: 4173deef-ef45-3ca1-90ff-a2212aa5790b.roa (raw, json) Hash identifier: s7eJWDWaOWY2fta240AwBAptOC8d7jzVKep1vv0ilsM= Subject key identifier: B4:6A:B3:F7:76:8E:51:3A:30:1E:F4:60:E4:C1:4B:AD:91:C6:9C:78 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F119CE0450BD06941A7690E00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4173deef-ef45-3ca1-90ff-a2212aa5790b.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 165.1.110.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9c:e0:45:0b:d0:69:41:a7:69:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=0303e8e7-42dd-44da-92fb-6d0474c7a76e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:91:1f:f8:4e:0d:e9:90:5b:e7:db:47:e9:99: 28:05:84:81:86:cd:0d:75:8b:b6:2c:06:9f:8e:dd: 14:ae:67:39:3e:4a:d4:d9:99:c2:e9:c5:66:97:60: 8d:a7:ac:3d:2e:59:ab:88:fc:d9:46:b8:32:80:46: 07:bb:ec:05:7c:ae:8f:ef:56:7c:d5:7e:e1:62:78: 5c:f1:50:c9:81:73:2b:73:71:83:23:e6:f1:34:a2: 01:d6:9e:ee:87:1b:db:da:e0:e4:7e:30:7d:77:10: 7a:6a:66:df:85:d1:7f:66:93:bc:91:b7:91:dd:f2: 70:04:7d:18:c7:cf:ff:da:66:0a:59:89:c8:ce:28: 27:d5:90:40:82:a1:5e:65:60:b1:6e:3e:11:e0:33: 75:d8:9d:5b:39:63:ee:be:3d:db:77:94:95:42:ee: 25:2f:53:6e:dd:2d:0a:05:47:b3:c0:37:8b:6d:f6: b6:9b:a2:bc:f5:0f:e4:59:e8:fe:b7:66:90:a9:98: 8e:64:ce:85:3c:3b:cf:cf:92:ff:8b:c9:c6:c8:2d: 7f:56:80:a9:f2:17:7f:96:37:47:61:dd:d0:14:c4: ba:51:89:40:c5:9b:21:e4:5d:4f:f4:24:4b:38:09: 09:41:b1:84:90:ca:f1:5e:c9:58:5d:73:89:87:bb: 2f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:6A:B3:F7:76:8E:51:3A:30:1E:F4:60:E4:C1:4B:AD:91:C6:9C:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4173deef-ef45-3ca1-90ff-a2212aa5790b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 165.1.110.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:39:22:e6:dc:25:04:bc:50:af:be:78:66:72:17:d0:cf:83: f6:06:e2:d4:9f:dd:35:ee:53:d3:5d:05:63:aa:78:c5:9e:bf: 1e:da:b3:99:b8:6e:c8:e9:e1:c2:df:1c:85:eb:a3:be:3c:9b: eb:1b:78:2d:4c:e7:a5:97:0e:0d:e7:8a:b9:d8:99:56:7a:25: 4e:0a:ac:8b:30:bc:5f:5c:68:ad:cc:90:34:10:58:81:7b:71: 26:0e:2f:dc:58:be:af:44:95:f1:ba:e1:80:27:a0:c7:5b:0a: 66:86:1e:3a:f1:69:73:68:4e:26:83:d8:a8:55:f4:67:fc:1b: 43:d1:4f:6f:e3:2d:27:2d:98:e5:ec:f4:e4:52:83:11:db:3b: ef:79:fe:bf:2d:2c:90:43:7c:94:52:bd:b4:bb:47:44:cc:4a: fa:f5:21:12:e3:ed:de:f9:6b:81:af:e2:ea:76:d0:86:45:5b: ce:0f:f2:5e:57:a1:ea:81:e1:58:ec:69:9a:a1:7e:03:c0:2a: 05:29:e5:20:ce:78:e3:3c:dc:06:2d:eb:f9:ad:ad:2d:0c:87: dd:d4:a9:96:f2:a9:c6:53:91:33:be:96:58:86:84:12:72:6c: 7c:fd:5e:15:4d:b9:09:2b:75:25:7e:b3:35:45:4d:c7:4f:33: 56:0d:c1:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnOBFC9BpQadpDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk MDMwM2U4ZTctNDJkZC00NGRhLTkyZmItNmQwNDc0YzdhNzZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZEf+E4N6ZBb59tH6ZkoBYSBhs0NdYu2LAaf jt0Urmc5PkrU2ZnC6cVml2CNp6w9LlmriPzZRrgygEYHu+wFfK6P71Z81X7hYnhc 8VDJgXMrc3GDI+bxNKIB1p7uhxvb2uDkfjB9dxB6ambfhdF/ZpO8kbeR3fJwBH0Y x8//2mYKWYnIzign1ZBAgqFeZWCxbj4R4DN12J1bOWPuvj3bd5SVQu4lL1Nu3S0K BUezwDeLbfa2m6K89Q/kWej+t2aQqZiOZM6FPDvPz5L/i8nGyC1/VoCp8hd/ljdH Yd3QFMS6UYlAxZsh5F1P9CRLOAkJQbGEkMrxXslYXXOJh7svZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLRqs/d2jlE6MB70YOTBS62Rxpx4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNDE3M2RlZWYtZWY0NS0z Y2ExLTkwZmYtYTIyMTJhYTU3OTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpQFuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHA5IubcJQS8UK++eGZyF9DPg/YG4tSf3TXuU9NdBWOqeMWevx7as5m4 bsjp4cLfHIXro748m+sbeC1M56WXDg3nirnYmVZ6JU4KrIswvF9caK3MkDQQWIF7 cSYOL9xYvq9ElfG64YAnoMdbCmaGHjrxaXNoTiaD2KhV9Gf8G0PRT2/jLSctmOXs 9ORSgxHbO+95/r8tLJBDfJRSvbS7R0TMSvr1IRLj7d75a4Gv4up20IZFW84P8l5X oeqB4VjsaZqhfgPAKgUp5SDOeOM83AYt6/mtrS0Mh93UqZbyqcZTkTO+lliGhBJy bHz9XhVNuQkrdSV+szVFTcdPM1YNwaA= -----END CERTIFICATE-----Generated at Wed Sep 23 13:49:48 2026 by rpki-client