$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f5a5a7ba-baef-3762-b000-0ec32d3b6ab0.roa File: f5a5a7ba-baef-3762-b000-0ec32d3b6ab0.roa (raw, json) Hash identifier: MBmohZoKOFhV0vkx5ngG+SKuQrJ3xdjcjt8CdFaPwjA= Subject key identifier: 85:91:48:85:D8:0B:4B:2D:10:D9:A4:01:39:A9:06:76:4B:ED:A9:8E Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F0D6CD9A880AA5890F3B59F40 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f5a5a7ba-baef-3762-b000-0ec32d3b6ab0.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 192.29.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:d9:a8:80:aa:58:90:f3:b5:9f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=866c2f9e-1507-4832-827f-df8da005d23d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:0d:77:7d:2f:78:57:8e:31:17:67:0b:54:3a: 3d:72:61:8a:73:1b:57:c4:c1:8b:9a:aa:e0:6a:aa: f8:99:05:f1:24:75:a0:b2:a5:4d:fd:d6:99:fc:d2: 46:93:76:42:2a:53:f6:c4:77:86:5c:fa:b1:9f:2d: 35:35:e8:ea:64:80:15:8b:01:4c:7e:d7:c8:97:b4: b4:c7:b3:fc:f9:c1:cc:34:f0:72:c8:4a:3e:38:ed: ca:8c:09:b4:0b:3c:55:b4:ee:92:b9:5b:f3:e2:f2: b4:ef:97:70:eb:c4:4d:38:a0:cf:a1:46:66:7c:87: cb:76:93:5e:80:5e:bd:a8:f0:ab:ad:da:2c:54:f9: c6:8f:c2:91:27:18:e3:8d:ac:c2:3c:79:09:9a:ca: 39:37:56:a7:fc:aa:3b:77:b3:21:3a:97:4f:3a:46: 25:e4:67:3c:51:64:cd:b5:08:b8:a7:7c:05:8c:8b: 70:e1:4d:69:6a:ab:37:bc:69:6e:86:24:cd:44:09: f7:6a:25:57:76:da:7b:95:11:b9:49:fc:09:99:fa: 6e:64:14:e0:ea:29:d1:c3:bc:18:d8:6a:f5:1e:8f: 31:31:1c:c7:db:f9:2a:ce:51:b5:6c:5e:6b:2e:da: 81:72:6b:fd:f8:50:8e:a5:d2:62:d6:c2:f8:d5:4f: 74:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:91:48:85:D8:0B:4B:2D:10:D9:A4:01:39:A9:06:76:4B:ED:A9:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f5a5a7ba-baef-3762-b000-0ec32d3b6ab0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 192.29.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:f7:fb:06:91:e2:a6:7d:01:de:7b:e3:72:fd:42:d6:3d:5f: f4:6e:2a:fd:09:bb:55:33:26:5c:a5:2c:93:df:7c:8e:8f:ce: 9f:62:ed:53:0d:e6:b5:f5:bf:1b:48:73:ad:6f:4a:64:9d:fc: 34:0a:38:b5:08:4f:6c:af:72:b0:f7:0c:94:d7:07:65:ac:15: 1e:f5:75:52:1d:f5:33:90:e1:4d:da:c7:7d:85:97:5b:dc:03: 70:db:46:3e:54:e9:a9:73:30:90:58:f5:ad:7b:4f:1d:03:2d: 9c:ba:0e:36:74:eb:69:b8:a9:85:c4:b6:d6:49:1a:ac:ec:14: 62:79:8c:d3:29:fd:f7:b5:61:52:be:21:2a:e4:96:38:64:97: 8f:0d:04:8c:71:be:30:7c:37:5b:c6:8a:a9:e8:0d:53:d3:1e: f3:43:c6:44:98:a7:d9:df:26:26:da:79:76:63:d1:cf:97:ac: ab:25:28:54:b6:0b:82:e1:cb:de:e5:56:44:6b:80:c4:17:50: bf:26:3f:3d:36:1f:5b:1e:f5:a5:b9:fc:1f:1c:4a:ae:0f:32: 76:23:fe:c9:e4:55:b8:bb:80:4c:53:c9:d6:77:59:c5:13:92: 52:50:81:ba:37:1f:dd:73:d4:dd:2e:00:94:db:7f:7d:5d:cf: 4e:ac:a3:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbNmogKpYkPO1n0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk ODY2YzJmOWUtMTUwNy00ODMyLTgyN2YtZGY4ZGEwMDVkMjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2A13fS94V44xF2cLVDo9cmGKcxtXxMGLmqrg aqr4mQXxJHWgsqVN/daZ/NJGk3ZCKlP2xHeGXPqxny01NejqZIAViwFMftfIl7S0 x7P8+cHMNPByyEo+OO3KjAm0CzxVtO6SuVvz4vK075dw68RNOKDPoUZmfIfLdpNe gF69qPCrrdosVPnGj8KRJxjjjazCPHkJmso5N1an/Ko7d7MhOpdPOkYl5Gc8UWTN tQi4p3wFjItw4U1paqs3vGluhiTNRAn3aiVXdtp7lRG5SfwJmfpuZBTg6inRw7wY 2Gr1Ho8xMRzH2/kqzlG1bF5rLtqBcmv9+FCOpdJi1sL41U90zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIWRSIXYC0stENmkATmpBnZL7amOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZjVhNWE3YmEtYmFlZi0z NzYyLWIwMDAtMGVjMzJkM2I2YWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwB2gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGr3+waR4qZ9Ad5743L9QtY9X/RuKv0Ju1UzJlylLJPffI6Pzp9i7VMN 5rX1vxtIc61vSmSd/DQKOLUIT2yvcrD3DJTXB2WsFR71dVId9TOQ4U3ax32Fl1vc A3DbRj5U6alzMJBY9a17Tx0DLZy6DjZ062m4qYXEttZJGqzsFGJ5jNMp/fe1YVK+ ISrkljhkl48NBIxxvjB8N1vGiqnoDVPTHvNDxkSYp9nfJibaeXZj0c+XrKslKFS2 C4Lhy97lVkRrgMQXUL8mPz02H1se9aW5/B8cSq4PMnYj/snkVbi7gExTydZ3WcUT klJQgbo3H91z1N0uAJTbf31dz06so9w= -----END CERTIFICATE-----Generated at Fri Sep 25 05:22:32 2026 by rpki-client