$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3fa7443b-c654-356b-b2d2-4470e41cbde8.roa File: 3fa7443b-c654-356b-b2d2-4470e41cbde8.roa (raw, json) Hash identifier: 9Dqt6srYCZExX7zGPFWeAkhOe7zHhLhIP7YPqTqYfe0= Subject key identifier: B5:C4:78:44:3F:FE:EC:74:CE:EA:DC:EB:3D:DD:B3:A8:B5:41:B7:72 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E709F73581EA99CB5B0D75580 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3fa7443b-c654-356b-b2d2-4470e41cbde8.roa Signing time: Thu 09 Jul 2026 09:00:13 +0000 ROA not before: Thu 09 Jul 2026 09:00:13 +0000 ROA not after: Wed 07 Oct 2026 09:00:13 +0000 asID: 31898 IP address blocks: 161.153.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:70:9f:73:58:1e:a9:9c:b5:b0:d7:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 9 09:00:13 2026 GMT Not After : Oct 7 09:00:13 2026 GMT Subject: CN=7322124f-1cbf-4e63-a91d-e683dac6ed21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:52:a1:d7:2d:17:ed:50:d4:44:c7:3b:98:71: a4:45:47:14:1d:fd:1d:22:39:c6:82:72:f8:ef:17: 87:22:32:9f:d8:42:0c:90:ab:32:f5:15:69:4c:5c: 11:bd:5c:6a:84:17:9e:11:18:a5:96:73:4a:5b:d8: f1:1b:1a:d8:be:cb:d1:99:24:04:b0:85:5b:04:2e: 53:18:a1:58:6a:53:b2:0a:4a:7d:4a:76:88:94:b8: 4c:7a:b9:6d:57:e3:ac:d9:f6:8b:80:c6:83:20:ae: 68:5f:fa:14:a1:1f:70:cd:65:95:d7:6f:77:01:ac: 78:3e:c0:c3:d1:b4:c6:ee:23:28:9b:b0:f8:8d:1a: 01:d1:a7:cb:db:b0:5c:05:dd:11:99:c0:5b:25:7c: de:77:d1:d9:5a:e4:87:5d:38:5c:ed:be:ce:ae:f9: 22:a3:79:d3:48:bf:b9:67:b9:9a:86:64:00:f8:1c: cb:39:8b:71:88:a3:63:17:00:ae:9f:aa:7d:87:bc: b1:e1:2b:f9:aa:e3:64:68:45:49:17:b6:1b:4b:fc: ce:9b:a5:04:7d:dc:41:84:1e:3b:3f:e7:12:3b:c8: fa:9e:82:b6:5e:e1:5e:ad:45:2b:b4:f8:c3:fd:ab: 17:67:9c:8a:65:5a:df:33:44:ec:8b:e6:43:cf:b5: 1b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:C4:78:44:3F:FE:EC:74:CE:EA:DC:EB:3D:DD:B3:A8:B5:41:B7:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3fa7443b-c654-356b-b2d2-4470e41cbde8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 161.153.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:68:7f:03:9e:1b:1d:32:45:6d:8a:06:8e:e0:7f:11:d9:63: f2:68:f6:26:d2:cb:51:11:80:36:c1:39:a9:84:66:f1:1e:50: 73:bc:d1:ab:16:c0:1f:22:15:a5:e1:bf:c7:49:c9:7f:cf:49: 93:f5:de:42:5b:9a:bf:2f:04:d2:6f:ea:e5:23:20:09:ba:f2: 31:77:0e:41:57:74:2c:f1:79:bd:fd:e7:fb:32:7f:10:54:64: 37:81:cd:d6:09:8c:72:ee:a0:c6:36:53:2b:9d:1f:40:56:79: 08:62:ba:e8:a2:8a:66:d9:40:a8:8c:74:c1:65:de:c8:80:05: df:07:e9:21:ed:48:dd:cb:26:86:c0:cd:e0:41:44:db:f1:4b: 9e:19:1b:0e:b3:88:2e:34:15:e4:f8:48:c6:83:2d:73:3e:86: e0:37:ab:c4:e0:82:fe:4c:a4:22:ae:cd:2d:6f:bf:ec:a6:38: 40:e5:51:c4:e6:6e:ef:9a:1a:7b:c6:3b:d3:96:b4:42:39:1e: 62:50:95:09:c7:10:24:07:5c:d1:35:55:bd:54:02:c6:96:8b: a4:13:f8:f4:3a:db:63:74:05:3f:46:45:93:ff:31:9c:56:fe: 4d:2e:37:06:b5:25:e6:39:6d:78:ad:6d:63:49:de:f8:7c:cd: d3:4c:2d:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5wn3NYHqmctbDXVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcwOTA5MDAxM1oXDTI2MTAwNzA5MDAxM1owLzEtMCsGA1UEAxMk NzMyMjEyNGYtMWNiZi00ZTYzLWE5MWQtZTY4M2RhYzZlZDIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVKh1y0X7VDURMc7mHGkRUcUHf0dIjnGgnL4 7xeHIjKf2EIMkKsy9RVpTFwRvVxqhBeeERillnNKW9jxGxrYvsvRmSQEsIVbBC5T GKFYalOyCkp9SnaIlLhMerltV+Os2faLgMaDIK5oX/oUoR9wzWWV1293Aax4PsDD 0bTG7iMom7D4jRoB0afL27BcBd0RmcBbJXzed9HZWuSHXThc7b7Orvkio3nTSL+5 Z7mahmQA+BzLOYtxiKNjFwCun6p9h7yx4Sv5quNkaEVJF7YbS/zOm6UEfdxBhB47 P+cSO8j6noK2XuFerUUrtPjD/asXZ5yKZVrfM0Tsi+ZDz7Ub8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLXEeEQ//ux0zurc6z3ds6i1QbdyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvM2ZhNzQ0M2ItYzY1NC0z NTZiLWIyZDItNDQ3MGU0MWNiZGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHoZkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAANofwOeGx0yRW2KBo7gfxHZY/Jo9ibSy1ERgDbBOamEZvEeUHO80asW wB8iFaXhv8dJyX/PSZP13kJbmr8vBNJv6uUjIAm68jF3DkFXdCzxeb395/syfxBU ZDeBzdYJjHLuoMY2UyudH0BWeQhiuuiiimbZQKiMdMFl3siABd8H6SHtSN3LJobA zeBBRNvxS54ZGw6ziC40FeT4SMaDLXM+huA3q8Tggv5MpCKuzS1vv+ymOEDlUcTm bu+aGnvGO9OWtEI5HmJQlQnHECQHXNE1Vb1UAsaWi6QT+PQ622N0BT9GRZP/MZxW /k0uNwa1JeY5bXitbWNJ3vh8zdNMLS0= -----END CERTIFICATE-----Generated at Mon Jul 13 02:47:07 2026 by rpki-client