$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a1c2532e-e8e1-385a-8f4f-6a0c6fd5208b.roa File: a1c2532e-e8e1-385a-8f4f-6a0c6fd5208b.roa (raw, json) Hash identifier: vrSCWdtlQFBZVPd5gVeRWhdFX8s6p6WKnubiB3yv5u8= Subject key identifier: F6:CA:F0:79:CE:34:84:9E:48:79:AE:4A:9E:64:9E:42:4D:07:5A:93 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F4C3D7298B2B7521EEEB55160 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a1c2532e-e8e1-385a-8f4f-6a0c6fd5208b.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 31898 IP address blocks: 147.15.176.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:72:98:b2:b7:52:1e:ee:b5:51:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=e4884c70-07fb-4909-a8e1-8802eef474d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:b9:cb:60:7e:40:41:8d:77:5f:93:20:5b:12: 41:3e:9e:15:1e:a3:77:1f:24:08:96:ae:e1:d3:d6: ca:d4:ad:62:c9:40:51:78:52:9a:f5:a8:1c:b8:4f: cc:55:47:cb:c2:f7:27:dd:7b:b1:d0:b3:db:6e:4e: b2:bf:04:f3:a6:74:71:1c:a0:ec:61:f5:3d:a3:bf: 02:bc:48:50:9b:1c:9e:7c:e2:21:93:6e:3b:b1:cb: 0d:38:5c:80:e0:0d:cf:d0:4a:9d:85:8f:9c:a5:a4: dd:ec:80:6f:94:0b:26:d8:f8:37:0d:d2:fe:11:15: 07:f8:ac:b9:0d:1b:1d:a5:b1:ba:d8:c8:89:80:c3: fe:d2:d8:f7:db:7a:a8:a8:01:23:88:d8:fc:79:5d: f5:97:e0:f9:b4:5f:9d:dd:36:9c:78:34:63:e8:fa: f9:83:5c:7a:1c:aa:df:a2:5c:e1:c8:f2:60:da:0d: 07:8b:17:1d:3d:89:7f:0b:63:26:91:21:c1:50:c9: b0:94:09:d0:63:d5:89:e2:52:92:4f:2e:97:38:5a: 1b:10:b0:8e:dc:d8:30:a1:43:e1:13:b2:f5:c7:89: 0d:90:01:91:fa:cc:8b:53:b8:d0:cd:0b:1a:6e:85: 83:6d:e3:71:92:f2:43:c1:5e:1c:80:4a:0f:e7:0f: 2e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:CA:F0:79:CE:34:84:9E:48:79:AE:4A:9E:64:9E:42:4D:07:5A:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a1c2532e-e8e1-385a-8f4f-6a0c6fd5208b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 147.15.176.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:e5:f2:a6:33:43:8f:55:fc:59:b0:8f:76:96:b6:3a:e2:2a: 58:ac:e8:04:e1:09:fe:94:2b:c3:fc:ee:1a:ae:70:dc:5d:61: b8:50:c0:81:20:17:f9:6c:1b:70:9b:74:35:c9:98:25:c2:88: b0:5f:06:64:fe:48:be:f8:ea:de:d0:9a:f8:96:6f:13:a4:ef: 1b:ac:fa:85:ee:f9:f9:e0:25:3e:43:42:32:b1:f6:4e:ae:24: 76:e4:85:36:38:e8:04:04:d0:ad:d5:2f:ba:56:05:03:c9:ac: 3e:f8:31:41:89:c4:bb:a0:da:a0:60:a1:3a:b4:e7:7d:70:13: 5d:cd:1d:0c:73:82:fc:e1:26:97:e7:c3:55:ed:b4:1e:9c:27: 67:5a:20:ed:e6:2a:1d:0f:21:3b:86:14:5c:34:08:23:bb:62: 9d:1b:c1:4e:44:7d:a3:c9:ce:04:e6:dd:7b:23:47:20:95:ba: b1:66:e9:c1:38:84:64:8b:b3:b9:02:67:8b:7b:8e:ae:65:f5: 40:72:2c:e3:c0:9f:ba:9f:0b:51:a2:ce:e4:25:d3:49:a2:0c: 78:d1:b2:1c:1d:29:e3:35:ff:00:70:7e:15:fc:25:b3:bd:f2: 23:01:12:0e:cb:3e:47:95:cc:f6:b5:9b:d3:44:bd:60:81:42: 2f:7d:04:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPXKYsrdSHu61UWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZTQ4ODRjNzAtMDdmYi00OTA5LWE4ZTEtODgwMmVlZjQ3NGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9rnLYH5AQY13X5MgWxJBPp4VHqN3HyQIlq7h 09bK1K1iyUBReFKa9agcuE/MVUfLwvcn3Xux0LPbbk6yvwTzpnRxHKDsYfU9o78C vEhQmxyefOIhk247scsNOFyA4A3P0EqdhY+cpaTd7IBvlAsm2Pg3DdL+ERUH+Ky5 DRsdpbG62MiJgMP+0tj323qoqAEjiNj8eV31l+D5tF+d3TaceDRj6Pr5g1x6HKrf olzhyPJg2g0HixcdPYl/C2MmkSHBUMmwlAnQY9WJ4lKSTy6XOFobELCO3NgwoUPh E7L1x4kNkAGR+syLU7jQzQsaboWDbeNxkvJDwV4cgEoP5w8uDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPbK8HnONISeSHmuSp5knkJNB1qTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYTFjMjUzMmUtZThlMS0z ODVhLThmNGYtNmEwYzZmZDUyMDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBkw+wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKXl8qYzQ49V/Fmwj3aWtjriKlis6AThCf6UK8P87hqucNxdYbhQwIEg F/lsG3CbdDXJmCXCiLBfBmT+SL746t7QmviWbxOk7xus+oXu+fngJT5DQjKx9k6u JHbkhTY46AQE0K3VL7pWBQPJrD74MUGJxLug2qBgoTq0531wE13NHQxzgvzhJpfn w1XttB6cJ2daIO3mKh0PITuGFFw0CCO7Yp0bwU5EfaPJzgTm3XsjRyCVurFm6cE4 hGSLs7kCZ4t7jq5l9UByLOPAn7qfC1GizuQl00miDHjRshwdKeM1/wBwfhX8JbO9 8iMBEg7LPkeVzPa1m9NEvWCBQi99BLc= -----END CERTIFICATE-----Generated at Sun Oct 11 14:31:32 2026 by rpki-client