$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b434b400-b1a6-3968-9911-72ab167e9b40.roa File: b434b400-b1a6-3968-9911-72ab167e9b40.roa (raw, json) Hash identifier: EcCw5yhby+p+y8d1GrMo0nkOKbT3vNnxD9zupIY5dWc= Subject key identifier: D5:50:5D:19:0D:53:E0:2B:DC:C1:42:DF:E8:A1:D3:34:BB:D6:DA:A7 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F20F7A5734678883E55B13880 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b434b400-b1a6-3968-9911-72ab167e9b40.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 160.34.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:a5:73:46:78:88:3e:55:b1:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=2c539092-b995-48d7-a2ec-a8a1097ac8fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:bb:ff:a0:80:d8:18:d1:2e:da:0d:97:cf:f8: a9:14:81:77:c2:18:fb:2f:e2:80:ee:bf:21:b4:e2: 5f:6c:3d:77:be:f0:97:a2:38:9b:25:92:0c:dd:47: 2d:48:6e:53:8e:90:bc:a7:e5:08:a3:ba:78:e6:42: 3e:d1:3c:60:d0:16:4a:d0:a9:82:2f:05:fb:6f:ee: cc:f7:d9:92:3f:06:98:71:5a:33:d2:2b:91:a9:db: 22:ec:ec:cc:61:af:40:f8:23:65:f2:82:65:46:d2: f9:38:ce:40:d2:e5:53:72:95:f7:bb:f2:e0:5a:5f: 64:74:9b:9f:1d:70:2b:fa:ec:28:56:57:b2:4c:e9: e5:a0:cf:3e:d0:c8:e2:90:4a:84:d2:ec:b7:e6:84: 65:73:c6:95:7c:a4:3b:49:71:82:d6:96:a5:22:9d: 01:e8:1f:16:ba:48:91:67:f7:7f:0d:52:77:1b:97: 9e:38:77:fa:ad:78:ce:04:d7:85:9d:3a:6c:9d:2f: 34:44:6d:c9:a1:07:7b:0b:ca:c4:dc:3a:fb:83:83: 8f:86:9e:f6:2d:3d:e7:84:5f:d0:99:d6:6f:b7:4a: 6b:0f:3f:68:95:6d:03:5e:d0:2b:58:76:d2:70:9e: 97:09:af:d5:1e:6a:16:a0:7b:8a:4b:b1:b7:a8:5f: 86:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:50:5D:19:0D:53:E0:2B:DC:C1:42:DF:E8:A1:D3:34:BB:D6:DA:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b434b400-b1a6-3968-9911-72ab167e9b40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 160.34.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:e1:02:24:cf:a7:f2:89:03:e5:8d:a9:4a:d3:ad:56:c5:66: 2a:da:5f:36:10:22:d7:87:a8:61:e2:3a:cb:24:ae:d0:84:94: af:28:8c:fe:93:aa:0e:52:d3:57:53:2b:48:15:ea:ff:ff:42: c5:71:05:7a:bb:bf:d0:b5:df:25:5b:0a:75:ad:f3:0f:e5:31: 9d:5a:0c:8d:af:86:26:ca:05:ae:9b:dd:73:57:8b:c0:ed:71: 68:d3:2b:3f:f1:6e:32:a8:d1:b4:55:e9:2e:5f:41:3f:1a:57: eb:ed:12:ab:5a:fe:a3:80:61:57:c7:47:db:83:26:50:70:d1: 1c:63:63:87:d1:74:f7:31:9e:0d:e2:9f:d2:44:fb:bd:83:c7: 16:5d:43:ab:81:3e:c1:6d:61:b3:40:c3:2b:19:d4:43:8a:00: b9:25:5f:51:70:67:7b:b5:53:f7:3a:14:72:2c:44:16:e8:53: bd:cd:56:c4:e6:f2:9c:66:af:6f:2f:8c:b2:79:9f:f0:03:e7: ad:2e:52:cb:2d:85:ac:8b:76:93:3c:6e:af:cd:3f:21:2d:66: 51:1a:aa:38:85:ba:6b:47:ff:bc:4d:7f:99:07:f6:1c:5c:c9: e0:c7:0f:ac:3e:6f:fa:56:cb:16:15:ff:45:82:47:f9:c6:7a: 0c:f1:11:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g96VzRniIPlWxOIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk MmM1MzkwOTItYjk5NS00OGQ3LWEyZWMtYThhMTA5N2FjOGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+bv/oIDYGNEu2g2Xz/ipFIF3whj7L+KA7r8h tOJfbD13vvCXojibJZIM3UctSG5TjpC8p+UIo7p45kI+0Txg0BZK0KmCLwX7b+7M 99mSPwaYcVoz0iuRqdsi7OzMYa9A+CNl8oJlRtL5OM5A0uVTcpX3u/LgWl9kdJuf HXAr+uwoVleyTOnloM8+0MjikEqE0uy35oRlc8aVfKQ7SXGC1palIp0B6B8WukiR Z/d/DVJ3G5eeOHf6rXjOBNeFnTpsnS80RG3JoQd7C8rE3Dr7g4OPhp72LT3nhF/Q mdZvt0prDz9olW0DXtArWHbScJ6XCa/VHmoWoHuKS7G3qF+GwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNVQXRkNU+Ar3MFC3+ih0zS71tqnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYjQzNGI0MDAtYjFhNi0z OTY4LTk5MTEtNzJhYjE2N2U5YjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoCJ9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGLhAiTPp/KJA+WNqUrTrVbFZiraXzYQIteHqGHiOsskrtCElK8ojP6T qg5S01dTK0gV6v//QsVxBXq7v9C13yVbCnWt8w/lMZ1aDI2vhibKBa6b3XNXi8Dt cWjTKz/xbjKo0bRV6S5fQT8aV+vtEqta/qOAYVfHR9uDJlBw0RxjY4fRdPcxng3i n9JE+72DxxZdQ6uBPsFtYbNAwysZ1EOKALklX1FwZ3u1U/c6FHIsRBboU73NVsTm 8pxmr28vjLJ5n/AD560uUssthayLdpM8bq/NPyEtZlEaqjiFumtH/7xNf5kH9hxc yeDHD6w+b/pWyxYV/0WCR/nGegzxEcs= -----END CERTIFICATE-----Generated at Tue Sep 29 17:42:26 2026 by rpki-client