$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b80d9746-fe21-3dac-874d-ef1dd6406fa2.roa File: b80d9746-fe21-3dac-874d-ef1dd6406fa2.roa (raw, json) Hash identifier: YLJgPz9ibeQfanbPGF53C7NHVYMWq21433O6imRmc8A= Subject key identifier: D3:21:04:2C:96:09:A8:5A:72:A2:A8:78:B1:9C:F6:DE:ED:2C:70:84 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E6DD4C850803FA8FA36020040 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b80d9746-fe21-3dac-874d-ef1dd6406fa2.roa Signing time: Wed 08 Jul 2026 09:00:12 +0000 ROA not before: Wed 08 Jul 2026 09:00:12 +0000 ROA not after: Tue 06 Oct 2026 09:00:12 +0000 asID: 31898 IP address blocks: 161.153.212.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6d:d4:c8:50:80:3f:a8:fa:36:02:00:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 8 09:00:12 2026 GMT Not After : Oct 6 09:00:12 2026 GMT Subject: CN=35448402-9b5f-4a8a-9e76-8d0768d3ab1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3e:90:6c:47:07:ef:a4:df:4f:97:69:8f:e9: aa:68:04:ce:71:8a:b1:93:fa:46:36:dd:80:14:44: fb:7a:14:28:35:d1:39:98:b4:a7:f2:e9:8d:18:88: 17:10:ec:67:07:ea:db:01:4a:eb:fe:89:db:75:86: eb:df:1b:30:a7:80:2b:bc:0f:d3:23:fd:b7:23:7c: 2b:0c:7b:f5:42:22:68:fb:9d:07:1f:f9:af:32:a1: 5c:dc:18:a0:53:32:16:6f:5f:33:33:87:bb:2d:c8: 46:9c:06:e3:e7:ac:2d:d3:16:d9:dd:c7:e3:de:10: db:b8:bb:2c:36:90:fd:71:cb:32:af:45:90:6d:af: ac:0a:74:9d:e9:ab:51:1d:a6:57:0e:8b:26:a5:79: 83:db:ab:d2:b3:7a:34:ed:6a:85:1b:1c:fc:8e:ef: 17:78:bd:62:64:3b:f6:ac:39:19:8f:70:50:46:86: 50:e6:04:44:dc:f9:a2:8c:a5:53:6a:40:80:e1:af: 91:b5:a8:62:48:a1:c5:84:1c:4d:1b:6a:9b:e6:bf: a8:9b:6b:eb:74:88:3e:bc:d2:ba:75:d6:d1:b9:b8: 6e:e9:f3:cd:06:cb:99:d2:9c:fc:4a:95:90:af:af: 22:75:5b:c3:15:d7:29:13:c0:a3:94:b4:61:07:22: b5:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:21:04:2C:96:09:A8:5A:72:A2:A8:78:B1:9C:F6:DE:ED:2C:70:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b80d9746-fe21-3dac-874d-ef1dd6406fa2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 161.153.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:4a:2e:ad:60:a5:af:0f:30:70:38:9f:10:48:37:dd:0f:0b: 77:f8:cf:cd:66:0a:fc:78:ca:cf:6c:58:6c:8e:8e:eb:22:aa: 79:b4:bc:14:b7:db:b8:ab:83:59:c4:35:a8:14:e4:d1:6b:47: ac:3d:86:c7:e6:36:c6:d5:85:cb:30:a3:bd:a1:42:79:25:5a: 30:b5:61:00:1c:17:f1:06:c5:d6:b6:ba:9f:3e:15:1a:06:e0: 09:c5:d4:ea:c9:7f:2a:84:69:75:5d:52:5a:33:ac:c0:c4:d9: fe:5d:cb:ff:93:0a:47:e3:4b:27:01:45:9a:27:da:d8:34:18: 0a:fe:b9:e2:7a:4d:fb:8b:ef:db:27:be:8d:e3:2a:d3:d9:2b: 34:13:df:00:44:32:b3:8a:69:4b:61:5f:87:b0:86:c2:3f:a8: d1:33:af:c5:a4:00:b7:52:89:27:d7:84:c5:ec:37:9e:84:38: 33:da:d7:9f:9f:ab:ef:14:9d:50:d7:83:6d:cb:9d:45:05:9e: 1c:80:df:4f:8a:d8:52:67:6a:3a:52:ae:08:9e:bc:b4:d9:4e: 34:fb:ff:30:7a:bd:19:34:63:55:c4:2f:75:8f:4c:36:c2:1f: d8:75:e9:6f:52:fb:f6:5c:ee:89:78:d5:de:96:8a:95:11:52: 50:8f:23:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5t1MhQgD+o+jYCAEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcwODA5MDAxMloXDTI2MTAwNjA5MDAxMlowLzEtMCsGA1UEAxMk MzU0NDg0MDItOWI1Zi00YThhLTllNzYtOGQwNzY4ZDNhYjFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuz6QbEcH76TfT5dpj+mqaATOcYqxk/pGNt2A FET7ehQoNdE5mLSn8umNGIgXEOxnB+rbAUrr/onbdYbr3xswp4ArvA/TI/23I3wr DHv1QiJo+50HH/mvMqFc3BigUzIWb18zM4e7LchGnAbj56wt0xbZ3cfj3hDbuLss NpD9ccsyr0WQba+sCnSd6atRHaZXDosmpXmD26vSs3o07WqFGxz8ju8XeL1iZDv2 rDkZj3BQRoZQ5gRE3PmijKVTakCA4a+RtahiSKHFhBxNG2qb5r+om2vrdIg+vNK6 ddbRubhu6fPNBsuZ0pz8SpWQr68idVvDFdcpE8CjlLRhByK1bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNMhBCyWCahacqKoeLGc9t7tLHCEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYjgwZDk3NDYtZmUyMS0z ZGFjLTg3NGQtZWYxZGQ2NDA2ZmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCoZnUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEhKLq1gpa8PMHA4nxBIN90PC3f4z81mCvx4ys9sWGyOjusiqnm0vBS3 27irg1nENagU5NFrR6w9hsfmNsbVhcswo72hQnklWjC1YQAcF/EGxda2up8+FRoG 4AnF1OrJfyqEaXVdUlozrMDE2f5dy/+TCkfjSycBRZon2tg0GAr+ueJ6TfuL79sn vo3jKtPZKzQT3wBEMrOKaUthX4ewhsI/qNEzr8WkALdSiSfXhMXsN56EODPa15+f q+8UnVDXg23LnUUFnhyA30+K2FJnajpSrgievLTZTjT7/zB6vRk0Y1XEL3WPTDbC H9h16W9S+/Zc7ol41d6WipURUlCPIzA= -----END CERTIFICATE-----Generated at Mon Jul 13 02:51:36 2026 by rpki-client