$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2987a4f0-4cb9-3f40-b6dd-3d6a0e60efa1.roa File: 2987a4f0-4cb9-3f40-b6dd-3d6a0e60efa1.roa (raw, json) Hash identifier: MvkgNul8fy2RUxBsfIVDi1a1/QMllZ3s69bzcaXQ+MU= Subject key identifier: 0B:EB:5B:5B:09:89:94:F9:02:55:35:01:2D:35:9C:AD:12:C6:AF:41 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E709F777D029EAC053FCF7700 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2987a4f0-4cb9-3f40-b6dd-3d6a0e60efa1.roa Signing time: Thu 09 Jul 2026 09:00:13 +0000 ROA not before: Thu 09 Jul 2026 09:00:13 +0000 ROA not after: Wed 07 Oct 2026 09:00:13 +0000 asID: 31898 IP address blocks: 161.153.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:70:9f:77:7d:02:9e:ac:05:3f:cf:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 9 09:00:13 2026 GMT Not After : Oct 7 09:00:13 2026 GMT Subject: CN=6b5b4fc2-7b47-4628-91cb-6b41f041b6f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:35:0d:93:73:75:f4:f3:a9:a4:31:bb:d5:ef: 25:51:7b:f2:2b:7a:1c:bb:ba:9d:00:51:53:cf:83: 85:ea:50:95:bb:95:32:ad:7f:df:98:6a:33:91:2d: d2:7e:94:56:b6:d3:35:1c:13:b5:4f:b3:70:1e:17: 79:20:ea:fd:0d:e6:3b:e3:c3:eb:df:23:51:9e:77: 89:20:95:3e:24:e2:20:a5:b9:af:5e:ec:e0:2c:f0: b6:08:7b:36:31:85:df:ba:ae:95:03:50:43:b9:20: 91:14:1f:f2:f6:6b:ea:d9:ba:66:7b:82:3b:5a:5d: d9:53:20:a2:99:c4:bb:15:3b:8a:35:fc:56:42:a7: 15:71:b1:18:32:39:5e:a9:61:d1:09:d4:86:80:54: 8d:a7:19:ea:db:cb:cf:67:84:87:4b:01:c2:c2:74: 0e:98:aa:01:47:7f:27:b1:35:fd:a2:59:0e:55:c3: 27:f9:b5:4e:e7:dc:c9:60:2b:a6:47:f7:f5:74:14: fe:78:f4:50:df:34:69:df:51:03:8a:6d:7b:20:59: 62:70:86:23:7f:8c:f9:35:49:5c:05:91:39:6a:4f: 20:21:44:43:dd:fa:69:4f:af:28:1b:8a:a1:57:26: e8:6b:62:5f:5e:c6:36:60:5a:ff:66:b5:ab:ae:ab: 8e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:EB:5B:5B:09:89:94:F9:02:55:35:01:2D:35:9C:AD:12:C6:AF:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2987a4f0-4cb9-3f40-b6dd-3d6a0e60efa1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 161.153.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:9c:bf:7d:8b:86:16:1b:d4:49:9f:45:f8:85:f5:2c:d3:c3: 29:c4:1c:11:8b:ca:92:06:e1:bc:78:61:ca:22:56:ec:09:25: 2f:07:0f:b3:69:f9:20:bb:89:40:87:d0:24:8a:22:31:6e:e8: 99:55:39:4e:f6:2a:ca:9e:93:e8:05:7b:cc:7d:3f:75:9e:cc: 52:eb:26:e6:64:55:4c:eb:9c:1c:3a:f6:ad:10:d8:39:fb:ec: a5:69:57:19:c1:07:5e:04:41:17:cf:0c:02:b1:a5:29:eb:ea: ed:b9:cc:92:56:8f:d0:95:60:31:ca:6d:f6:24:57:d6:0b:cf: 02:ee:c9:2b:62:85:0c:f8:27:3a:20:c8:8b:79:5e:e8:fd:da: 1e:cf:87:71:35:e1:a5:78:f5:51:8d:08:d8:1a:76:d4:8b:3e: 72:81:f8:84:01:c3:a0:04:16:4b:78:dc:41:3b:06:ac:e3:89: ab:69:19:68:c8:f0:4c:b8:d3:7a:4f:7b:24:f3:e5:c5:07:56: 6b:b1:86:f3:0d:77:d1:21:ba:50:df:e1:cc:ea:39:84:81:57: 04:22:2a:a1:d7:c7:69:11:af:aa:8e:84:3a:f7:da:03:71:b6: bb:c1:dc:f5:3d:f8:d5:21:29:7f:5f:50:13:a5:2b:66:ad:16: a0:ed:11:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5wn3d9Ap6sBT/PdwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcwOTA5MDAxM1oXDTI2MTAwNzA5MDAxM1owLzEtMCsGA1UEAxMk NmI1YjRmYzItN2I0Ny00NjI4LTkxY2ItNmI0MWYwNDFiNmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjUNk3N19POppDG71e8lUXvyK3ocu7qdAFFT z4OF6lCVu5UyrX/fmGozkS3SfpRWttM1HBO1T7NwHhd5IOr9DeY748Pr3yNRnneJ IJU+JOIgpbmvXuzgLPC2CHs2MYXfuq6VA1BDuSCRFB/y9mvq2bpme4I7Wl3ZUyCi mcS7FTuKNfxWQqcVcbEYMjleqWHRCdSGgFSNpxnq28vPZ4SHSwHCwnQOmKoBR38n sTX9olkOVcMn+bVO59zJYCumR/f1dBT+ePRQ3zRp31EDim17IFlicIYjf4z5NUlc BZE5ak8gIURD3fppT68oG4qhVyboa2JfXsY2YFr/ZrWrrquO9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAvrW1sJiZT5AlU1AS01nK0Sxq9BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMjk4N2E0ZjAtNGNiOS0z ZjQwLWI2ZGQtM2Q2YTBlNjBlZmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGoZmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWcv32LhhYb1EmfRfiF9SzTwynEHBGLypIG4bx4YcoiVuwJJS8HD7Np +SC7iUCH0CSKIjFu6JlVOU72Ksqek+gFe8x9P3WezFLrJuZkVUzrnBw69q0Q2Dn7 7KVpVxnBB14EQRfPDAKxpSnr6u25zJJWj9CVYDHKbfYkV9YLzwLuyStihQz4Jzog yIt5Xuj92h7Ph3E14aV49VGNCNgadtSLPnKB+IQBw6AEFkt43EE7BqzjiatpGWjI 8Ey403pPeyTz5cUHVmuxhvMNd9EhulDf4czqOYSBVwQiKqHXx2kRr6qOhDr32gNx trvB3PU9+NUhKX9fUBOlK2atFqDtER4= -----END CERTIFICATE-----Generated at Mon Jul 13 02:51:39 2026 by rpki-client