$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9ece6eb8-c662-3845-b3e8-c4e860cf4e8c.roa File: 9ece6eb8-c662-3845-b3e8-c4e860cf4e8c.roa (raw, json) Hash identifier: 8Xd8j/68xuTXZ3MBFha9y+TIcKvJLhJmKn7LnE4EcrU= Subject key identifier: E5:40:F0:AD:44:25:74:52:89:29:5E:D8:FB:3A:B3:12:79:58:F8:C4 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584FC3012BBCF43821615AFB6500 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9ece6eb8-c662-3845-b3e8-c4e860cf4e8c.roa Signing time: Sat 07 Nov 2026 14:00:12 +0000 ROA not before: Sat 07 Nov 2026 14:00:12 +0000 ROA not after: Fri 05 Feb 2027 14:00:12 +0000 asID: 31898 IP address blocks: 160.34.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:c3:01:2b:bc:f4:38:21:61:5a:fb:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Nov 7 14:00:12 2026 GMT Not After : Feb 5 14:00:12 2027 GMT Subject: CN=b9979d0e-97f8-4332-9862-e53af3abd8c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:eb:f3:ad:a1:22:65:5a:b8:dc:6e:db:34:83: 72:fc:04:47:12:80:b0:dd:b5:aa:22:4f:a9:d4:14: 88:fc:69:3a:58:63:af:e5:d1:af:b0:d1:55:e2:2f: 21:19:8e:9a:29:ae:11:2e:17:71:92:19:12:19:28: de:1c:18:ab:c0:6c:2c:f7:51:17:8f:99:d9:73:4d: 18:85:00:1b:25:98:f0:25:e4:ec:ef:47:be:1c:a3: 62:29:c1:ee:71:60:38:d5:d5:04:84:1f:4d:05:c4: cc:08:62:5a:af:1d:30:e5:f6:b8:47:c9:da:3c:d6: 90:39:c2:72:8d:7b:c6:8a:92:17:02:08:01:74:02: f7:3b:4b:59:78:47:5c:84:70:9c:06:8d:b8:71:55: 9f:71:4d:c6:54:6f:db:81:72:ae:13:9c:0d:82:60: ae:d4:0a:99:90:ff:d4:5f:24:39:e8:7c:cc:12:5c: f8:57:83:8a:cc:17:a2:e0:89:df:c5:1f:d3:1e:fa: 2b:c0:4f:77:5a:a6:a6:35:dc:b8:9b:19:9f:62:84: 44:fd:b0:bc:b1:8f:a7:26:ae:50:dc:74:dd:11:c6: 99:24:3e:00:04:94:07:4a:de:d4:c4:37:14:74:e1: 9e:e5:43:70:af:97:66:2d:fb:66:e6:9a:b4:4a:f9: 99:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:40:F0:AD:44:25:74:52:89:29:5E:D8:FB:3A:B3:12:79:58:F8:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9ece6eb8-c662-3845-b3e8-c4e860cf4e8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 160.34.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:ab:58:9d:d4:75:c6:1b:10:de:0f:48:e6:05:a8:89:07:64: 66:e7:c6:0d:43:54:fd:18:20:c6:47:2e:45:3f:33:b5:a3:fd: 59:16:a7:f0:b0:7b:81:cd:51:a9:ff:01:89:1a:d3:d5:24:cf: d0:f7:31:f8:0b:71:a7:0a:49:87:03:aa:93:ad:18:7a:f5:dc: 48:e3:ee:7c:85:72:22:d1:46:0d:5b:b5:88:bf:04:f6:b5:9b: 2f:0c:ba:c2:2c:63:b5:d6:ba:94:24:5d:c9:10:fb:4d:94:f0: 9b:c2:f3:60:a3:1c:0c:0a:be:ee:b9:c2:46:5c:cb:c6:35:8c: 22:0a:24:0b:5a:f7:36:d1:04:b5:49:ae:3f:9b:ec:58:a3:26: 9a:e4:32:13:96:88:56:fe:ed:fd:36:98:53:6b:32:ec:93:09: 2e:5e:cc:68:b4:6d:50:f0:b8:be:4f:d9:c1:bb:23:d0:20:42: 57:68:a3:88:b8:a3:75:85:0f:e3:02:1c:4c:b4:43:39:a2:1a: a4:a7:cc:c3:01:e5:5e:c4:90:b6:d6:a4:a6:c2:6b:22:6c:6c: 9d:20:31:0c:a2:44:c0:2d:7c:f5:b1:cd:da:f1:db:bf:31:39: aa:67:03:93:18:e9:48:5e:5d:ec:75:b3:0c:19:7d:85:33:cf: fd:92:c4:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE/DASu89DghYVr7ZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MTEwNzE0MDAxMloXDTI3MDIwNTE0MDAxMlowLzEtMCsGA1UEAxMk Yjk5NzlkMGUtOTdmOC00MzMyLTk4NjItZTUzYWYzYWJkOGM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+vzraEiZVq43G7bNINy/ARHEoCw3bWqIk+p 1BSI/Gk6WGOv5dGvsNFV4i8hGY6aKa4RLhdxkhkSGSjeHBirwGws91EXj5nZc00Y hQAbJZjwJeTs70e+HKNiKcHucWA41dUEhB9NBcTMCGJarx0w5fa4R8naPNaQOcJy jXvGipIXAggBdAL3O0tZeEdchHCcBo24cVWfcU3GVG/bgXKuE5wNgmCu1AqZkP/U XyQ56HzMElz4V4OKzBei4InfxR/THvorwE93WqamNdy4mxmfYoRE/bC8sY+nJq5Q 3HTdEcaZJD4ABJQHSt7UxDcUdOGe5UNwr5dmLftm5pq0SvmZiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOVA8K1EJXRSiSle2Ps6sxJ5WPjEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOWVjZTZlYjgtYzY2Mi0z ODQ1LWIzZTgtYzRlODYwY2Y0ZThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoCJ+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABCrWJ3UdcYbEN4PSOYFqIkHZGbnxg1DVP0YIMZHLkU/M7Wj/VkWp/Cw e4HNUan/AYka09Ukz9D3MfgLcacKSYcDqpOtGHr13Ejj7nyFciLRRg1btYi/BPa1 my8MusIsY7XWupQkXckQ+02U8JvC82CjHAwKvu65wkZcy8Y1jCIKJAta9zbRBLVJ rj+b7FijJprkMhOWiFb+7f02mFNrMuyTCS5ezGi0bVDwuL5P2cG7I9AgQldoo4i4 o3WFD+MCHEy0QzmiGqSnzMMB5V7EkLbWpKbCayJsbJ0gMQyiRMAtfPWxzdrx278x OapnA5MY6UheXex1swwZfYUzz/2SxBE= -----END CERTIFICATE-----Generated at Sat Nov 14 20:44:57 2026 by rpki-client