$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4faebc4b-4621-371a-b55b-980b9dfaa752.roa File: 4faebc4b-4621-371a-b55b-980b9dfaa752.roa (raw, json) Hash identifier: gd+qo9w0wYxJVUJ2VjONzenY35NX89tKNGQUIzeI8Ow= Subject key identifier: C6:33:89:36:28:B0:63:A4:DC:0D:9F:67:D5:01:D9:6A:B5:C0:58:A5 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F1037967796F3DC056381C7C0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4faebc4b-4621-371a-b55b-980b9dfaa752.roa Signing time: Fri 04 Sep 2026 13:00:12 +0000 ROA not before: Fri 04 Sep 2026 13:00:12 +0000 ROA not after: Thu 03 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 164.152.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:10:37:96:77:96:f3:dc:05:63:81:c7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 4 13:00:12 2026 GMT Not After : Dec 3 14:00:12 2026 GMT Subject: CN=76711363-9b18-4dcd-9bb1-620b3fa0911f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:16:92:52:52:09:9a:a2:90:a2:31:e3:53:ca: c3:71:e9:13:be:16:59:29:9c:e5:f3:c1:63:a0:89: 4a:77:24:e8:36:50:96:a9:25:ab:9b:41:83:1c:b6: cc:29:bb:11:09:75:fa:01:5c:fa:a0:bf:cb:e1:bf: da:23:63:81:f3:f6:7a:05:08:54:5d:77:ee:34:72: 72:cb:dd:b8:4e:76:6a:9f:d2:1d:bb:ce:f7:63:ab: e0:0a:4e:6c:b7:9e:61:d1:ea:03:ce:c9:73:a4:a9: cf:e2:76:31:56:e0:e7:39:78:0d:1a:3e:33:d4:f7: 5f:eb:88:3b:ab:10:8e:7d:8b:1d:d3:bf:04:2b:77: 1e:7b:39:2d:d4:b7:d8:3b:ca:a2:8e:a9:6b:90:9b: 86:a9:4b:ee:17:c8:18:e8:e7:8e:fd:93:6b:81:cd: a3:24:ed:40:1d:73:57:3d:d7:68:ba:49:03:cb:8b: 4b:87:15:d5:6a:e2:1d:71:bb:37:12:5a:7c:c1:57: 37:0b:30:b3:59:59:67:8a:0f:65:0a:80:22:8d:c1: a8:cb:82:8a:40:26:8b:f1:3c:51:cc:2e:38:b5:c0: e2:18:a5:59:4e:ad:73:d3:f7:e3:72:f5:f0:dd:e9: b3:f0:9b:4d:0c:3d:eb:63:fc:36:b9:f4:50:23:10: 75:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:33:89:36:28:B0:63:A4:DC:0D:9F:67:D5:01:D9:6A:B5:C0:58:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4faebc4b-4621-371a-b55b-980b9dfaa752.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 164.152.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:0b:b0:c1:35:31:a9:90:b1:53:21:f0:4a:30:30:68:0c:91: 29:36:3e:94:d6:ba:70:42:dd:34:aa:0b:28:2c:65:b6:2d:23: ed:2d:23:58:71:d7:b3:c7:5a:7a:50:30:b5:35:25:32:83:e7: e4:8f:fb:e5:52:b7:df:aa:54:57:5d:c9:bc:ac:04:28:17:3d: a1:ba:aa:8a:3c:34:52:06:56:1f:4d:c7:26:6e:ca:ca:6d:c5: dc:72:f3:c4:f6:f9:35:93:bc:bd:e9:32:9f:dc:8f:dc:52:63: 33:82:a2:bd:37:c7:9f:6b:cc:46:33:35:d6:d7:66:ed:83:6b: 45:f7:52:67:f1:cc:f1:43:37:1f:9c:3b:50:42:19:29:29:e5: 0f:7b:20:86:54:a6:21:4d:b0:0e:e8:70:a4:f8:9d:75:6e:64: cb:56:59:7a:44:54:cf:b0:21:4c:8b:9b:3e:87:0f:8f:22:70: 52:bc:81:d1:07:64:7a:2c:d8:77:76:f7:43:96:d4:60:c4:4a: 8c:4d:b5:bb:52:9c:80:7f:03:1d:9f:12:4e:c4:8b:46:db:6f: e1:13:dc:52:2e:8d:67:43:87:b4:61:7a:6c:02:8b:ef:10:b1: 1c:3a:e2:f2:58:eb:62:a8:3b:5f:83:00:31:a0:08:42:8d:ff: 5a:4a:da:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8QN5Z3lvPcBWOBx8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNDEzMDAxMloXDTI2MTIwMzE0MDAxMlowLzEtMCsGA1UEAxMk NzY3MTEzNjMtOWIxOC00ZGNkLTliYjEtNjIwYjNmYTA5MTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRaSUlIJmqKQojHjU8rDcekTvhZZKZzl88Fj oIlKdyToNlCWqSWrm0GDHLbMKbsRCXX6AVz6oL/L4b/aI2OB8/Z6BQhUXXfuNHJy y924TnZqn9Idu873Y6vgCk5st55h0eoDzslzpKnP4nYxVuDnOXgNGj4z1Pdf64g7 qxCOfYsd078EK3ceezkt1LfYO8qijqlrkJuGqUvuF8gY6OeO/ZNrgc2jJO1AHXNX PddoukkDy4tLhxXVauIdcbs3Elp8wVc3CzCzWVlnig9lCoAijcGoy4KKQCaL8TxR zC44tcDiGKVZTq1z0/fjcvXw3emz8JtNDD3rY/w2ufRQIxB1rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMYziTYosGOk3A2fZ9UB2Wq1wFilMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNGZhZWJjNGItNDYyMS0z NzFhLWI1NWItOTgwYjlkZmFhNzUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEpJjwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEELsME1MamQsVMh8EowMGgMkSk2PpTWunBC3TSqCygsZbYtI+0tI1hx 17PHWnpQMLU1JTKD5+SP++VSt9+qVFddybysBCgXPaG6qoo8NFIGVh9NxyZuyspt xdxy88T2+TWTvL3pMp/cj9xSYzOCor03x59rzEYzNdbXZu2Da0X3UmfxzPFDNx+c O1BCGSkp5Q97IIZUpiFNsA7ocKT4nXVuZMtWWXpEVM+wIUyLmz6HD48icFK8gdEH ZHos2Hd290OW1GDESoxNtbtSnIB/Ax2fEk7Ei0bbb+ET3FIujWdDh7RhemwCi+8Q sRw64vJY62KoO1+DADGgCEKN/1pK2vM= -----END CERTIFICATE-----Generated at Wed Sep 23 08:02:23 2026 by rpki-client