$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fbb63f68-4f41-3f80-9da5-3d10066be957.roa File: fbb63f68-4f41-3f80-9da5-3d10066be957.roa (raw, json) Hash identifier: 9bAKydzioeZaJ2lWKjv1ZqbK6ECTWLhtQL0MvQCyJ9k= Subject key identifier: 77:9C:DE:99:4B:07:E2:F1:21:15:2B:09:C1:5B:57:27:24:46:7E:84 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F0242232582BC09036A1DD680 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fbb63f68-4f41-3f80-9da5-3d10066be957.roa Signing time: Sun 30 Aug 2026 13:00:11 +0000 ROA not before: Sun 30 Aug 2026 13:00:11 +0000 ROA not after: Sat 28 Nov 2026 14:00:11 +0000 asID: 31898 IP address blocks: 152.67.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:02:42:23:25:82:bc:09:03:6a:1d:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 30 13:00:11 2026 GMT Not After : Nov 28 14:00:11 2026 GMT Subject: CN=342aed48-3ea8-4852-9d94-016f34717a45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:96:a1:91:dc:34:6a:a5:59:07:6e:e1:69:f1: bf:a0:d6:c9:67:a0:a2:a2:4d:28:84:45:e4:43:32: 65:57:37:b7:fc:63:22:cb:bd:40:97:08:ca:79:c5: 6e:b4:b2:10:d7:f2:2e:9a:30:39:8e:31:e7:50:35: f7:e1:f3:50:e6:61:60:5f:ca:35:71:45:82:5d:da: 1c:b4:e8:6e:8c:37:19:b4:5c:5d:1a:42:bd:17:8b: 9f:01:e3:a1:5c:89:4e:34:41:81:6e:9e:4f:6e:57: d6:d5:a8:50:8f:ac:e5:f6:16:85:58:26:61:a3:59: b0:00:f2:f3:d7:54:5c:83:08:c5:87:ef:1d:7f:7d: 50:81:9b:7d:38:30:b0:90:50:18:f6:be:10:5b:66: dc:cb:76:ad:7c:70:95:b3:96:da:e9:f4:7a:22:46: ce:24:94:b6:e0:dc:c4:bd:20:57:67:71:4a:fa:4d: 81:e2:09:6f:43:3b:4c:11:b2:82:b5:2c:69:24:46: f0:04:df:d1:8d:04:8f:38:5d:ea:99:e8:d5:77:aa: a8:a7:95:f1:ca:b3:d3:96:d1:91:c5:1e:b3:c0:c5: 26:aa:13:09:b0:1e:cc:a3:3c:ce:29:9e:51:0a:14: 9d:ea:7b:ad:76:b9:23:1c:9d:a4:9f:1b:e8:81:ba: 64:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:9C:DE:99:4B:07:E2:F1:21:15:2B:09:C1:5B:57:27:24:46:7E:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fbb63f68-4f41-3f80-9da5-3d10066be957.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 152.67.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:5b:8a:ea:16:00:39:1b:a1:f0:94:8a:29:f7:8e:5e:c3:33: e6:73:3a:c3:b6:b7:f3:e6:5d:df:d9:d9:aa:a2:aa:d8:c1:73: 39:f2:43:cb:d5:6f:0f:68:89:b7:38:5f:73:8f:ed:af:40:8d: 1e:d8:66:9e:e3:0d:26:58:c9:f6:d8:3f:a7:49:3b:c0:47:53: 30:cb:92:31:ec:40:27:49:75:95:51:52:8b:30:14:a2:f3:f7: 03:2b:4c:27:95:ed:6e:1b:63:a6:ea:b9:e7:e8:6d:3a:a8:ee: 02:5c:54:1d:43:97:ca:fe:f1:fd:02:37:a3:ce:d6:34:e8:aa: b4:79:58:2f:85:84:dd:1a:86:ef:2c:b0:77:94:d8:23:65:54: 4f:b2:d9:7c:b4:47:7e:eb:28:10:9a:d3:0f:ee:0b:d7:8e:4e: 70:43:07:8d:f7:71:14:24:97:08:8f:9b:34:39:c7:aa:cb:b3: 14:bf:04:7e:9c:2f:ec:8d:c3:d9:64:4a:4d:40:50:85:9f:02: fb:58:1b:9f:e4:6e:1d:7b:61:a3:49:e8:79:8a:4c:d4:0a:95: aa:a6:cc:84:cc:82:b7:6c:57:9b:b3:17:3c:02:54:e6:0e:45: 6d:49:af:ec:a3:12:d6:1e:57:a0:e1:11:01:07:cb:21:3c:e2: e5:ac:22:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8CQiMlgrwJA2od1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk MzQyYWVkNDgtM2VhOC00ODUyLTlkOTQtMDE2ZjM0NzE3YTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJahkdw0aqVZB27hafG/oNbJZ6Ciok0ohEXk QzJlVze3/GMiy71AlwjKecVutLIQ1/IumjA5jjHnUDX34fNQ5mFgX8o1cUWCXdoc tOhujDcZtFxdGkK9F4ufAeOhXIlONEGBbp5PblfW1ahQj6zl9haFWCZho1mwAPLz 11RcgwjFh+8df31QgZt9ODCwkFAY9r4QW2bcy3atfHCVs5ba6fR6IkbOJJS24NzE vSBXZ3FK+k2B4glvQztMEbKCtSxpJEbwBN/RjQSPOF3qmejVd6qop5XxyrPTltGR xR6zwMUmqhMJsB7MozzOKZ5RChSd6nutdrkjHJ2knxvogbpkKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHec3plLB+LxIRUrCcFbVyckRn6EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZmJiNjNmNjgtNGY0MS0z ZjgwLTlkYTUtM2QxMDA2NmJlOTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmEOgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFxbiuoWADkbofCUiin3jl7DM+ZzOsO2t/PmXd/Z2aqiqtjBcznyQ8vV bw9oibc4X3OP7a9AjR7YZp7jDSZYyfbYP6dJO8BHUzDLkjHsQCdJdZVRUoswFKLz 9wMrTCeV7W4bY6bquefobTqo7gJcVB1Dl8r+8f0CN6PO1jToqrR5WC+FhN0ahu8s sHeU2CNlVE+y2Xy0R37rKBCa0w/uC9eOTnBDB433cRQklwiPmzQ5x6rLsxS/BH6c L+yNw9lkSk1AUIWfAvtYG5/kbh17YaNJ6HmKTNQKlaqmzITMgrdsV5uzFzwCVOYO RW1Jr+yjEtYeV6DhEQEHyyE84uWsIuA= -----END CERTIFICATE-----Generated at Thu Sep 24 23:51:44 2026 by rpki-client