$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0af20f2c-b1a3-32f2-8d3f-9ba513e2f28a.roa File: 0af20f2c-b1a3-32f2-8d3f-9ba513e2f28a.roa (raw, json) Hash identifier: Vvqg2HN4ItF5pSuuPh63kxqyN+N3xTImyfKeSnlVKB0= Subject key identifier: 3B:2C:ED:59:84:1A:93:2C:28:C6:6D:BF:E2:34:D1:16:64:C4:1C:93 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E66DA12AA2BB6E510F987E3C0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0af20f2c-b1a3-32f2-8d3f-9ba513e2f28a.roa Signing time: Sun 05 Jul 2026 21:00:11 +0000 ROA not before: Sun 05 Jul 2026 21:00:11 +0000 ROA not after: Sat 03 Oct 2026 21:00:11 +0000 asID: 31898 IP address blocks: 158.101.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:66:da:12:aa:2b:b6:e5:10:f9:87:e3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 5 21:00:11 2026 GMT Not After : Oct 3 21:00:11 2026 GMT Subject: CN=c4cd4b74-d95f-43d8-98d3-91fc9e247449 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:fe:f2:ba:77:b1:18:69:ed:07:c4:6b:c6:9c: 39:a2:aa:ae:8e:75:e4:e0:a7:f2:a1:99:13:f0:46: 85:4d:0d:aa:ca:c0:30:61:6b:e8:ea:93:65:16:b5: fa:27:26:61:61:8e:61:55:f4:55:5f:31:65:30:c5: ef:3a:3a:80:c9:bf:0f:7d:eb:50:c9:18:e7:a5:2a: 4f:2d:5c:60:d4:66:fd:28:9c:e2:3b:7a:f4:55:f5: 95:4f:2e:a0:53:65:0e:11:24:ce:d6:59:3e:58:ed: f9:80:aa:99:b0:9f:22:8c:fc:55:b6:73:34:7e:7b: 56:1b:ca:87:dd:f7:08:03:fc:46:52:ed:14:ca:f3: 54:57:d8:9f:ed:f8:1f:d8:9e:c2:ea:24:0e:f3:46: a2:5f:86:3f:31:64:55:3f:b6:96:83:b9:78:e0:b4: c8:02:cb:9d:26:30:ae:94:f8:57:c8:9b:54:fa:b9: 01:26:72:a0:89:3c:1f:76:fa:91:69:ce:0e:87:56: 08:4f:f9:28:cd:80:4d:fe:c9:a6:13:dc:51:ad:fc: 95:0f:60:50:3e:c6:3d:46:68:d9:ac:21:10:17:53: 25:ef:2f:34:a9:61:4e:20:e5:eb:94:f7:a7:e1:0f: 5e:ca:a1:01:0a:bd:9b:76:ee:c5:fd:2d:de:e9:df: 05:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:2C:ED:59:84:1A:93:2C:28:C6:6D:BF:E2:34:D1:16:64:C4:1C:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0af20f2c-b1a3-32f2-8d3f-9ba513e2f28a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 158.101.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:9f:5a:c4:49:a3:06:47:73:fa:d6:17:b2:88:b5:9a:c6:b6: e2:8d:f6:a7:df:93:fa:dc:98:41:7c:06:ed:4f:da:f3:8e:81: 25:d0:2f:2d:9c:c5:7a:b1:41:b8:a1:84:3b:e1:91:3a:b1:d6: 87:17:9e:74:35:29:51:7d:c4:6d:b1:fa:bb:4b:83:5d:38:bb: 50:ce:81:80:db:38:5c:1b:7c:70:19:ab:99:49:c2:d8:a3:51: ab:0e:f8:0e:b8:ac:51:04:3a:50:03:7c:74:30:47:d9:49:98: b9:7d:c7:9e:3e:08:1a:5a:bb:60:96:f5:4d:dc:99:23:fd:5f: 91:4c:64:4a:d8:15:4f:6e:00:ec:7d:5b:5e:9b:97:e2:74:1a: ef:62:00:8b:2e:45:c5:63:94:58:46:e6:fc:9f:1e:1d:9c:e5: 9f:6b:8d:7b:40:06:cb:7d:fb:93:fd:68:fc:14:16:41:88:f5: b3:e4:c0:3d:0c:15:07:8a:cf:50:f4:d3:39:fb:31:d3:32:5f: 14:ce:01:2f:04:73:7b:a3:79:69:e0:4c:1f:11:5d:6e:76:b4: 1d:36:78:34:41:9d:ad:6e:24:42:de:84:ed:dd:e2:bd:42:5c: cc:1b:5b:eb:81:24:fd:5f:29:50:7f:7a:41:c1:03:41:2f:eb: 71:ff:f0:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5m2hKqK7blEPmH48AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcwNTIxMDAxMVoXDTI2MTAwMzIxMDAxMVowLzEtMCsGA1UEAxMk YzRjZDRiNzQtZDk1Zi00M2Q4LTk4ZDMtOTFmYzllMjQ3NDQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6P7yunexGGntB8Rrxpw5oqqujnXk4KfyoZkT 8EaFTQ2qysAwYWvo6pNlFrX6JyZhYY5hVfRVXzFlMMXvOjqAyb8PfetQyRjnpSpP LVxg1Gb9KJziO3r0VfWVTy6gU2UOESTO1lk+WO35gKqZsJ8ijPxVtnM0fntWG8qH 3fcIA/xGUu0UyvNUV9if7fgf2J7C6iQO80aiX4Y/MWRVP7aWg7l44LTIAsudJjCu lPhXyJtU+rkBJnKgiTwfdvqRac4Oh1YIT/kozYBN/smmE9xRrfyVD2BQPsY9RmjZ rCEQF1Ml7y80qWFOIOXrlPen4Q9eyqEBCr2bdu7F/S3e6d8F+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDss7VmEGpMsKMZtv+I00RZkxByTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMGFmMjBmMmMtYjFhMy0z MmYyLThkM2YtOWJhNTEzZTJmMjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFnmWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIyfWsRJowZHc/rWF7KItZrGtuKN9qffk/rcmEF8Bu1P2vOOgSXQLy2c xXqxQbihhDvhkTqx1ocXnnQ1KVF9xG2x+rtLg104u1DOgYDbOFwbfHAZq5lJwtij UasO+A64rFEEOlADfHQwR9lJmLl9x54+CBpau2CW9U3cmSP9X5FMZErYFU9uAOx9 W16bl+J0Gu9iAIsuRcVjlFhG5vyfHh2c5Z9rjXtABst9+5P9aPwUFkGI9bPkwD0M FQeKz1D00zn7MdMyXxTOAS8Ec3ujeWngTB8RXW52tB02eDRBna1uJELehO3d4r1C XMwbW+uBJP1fKVB/ekHBA0Ev63H/8LI= -----END CERTIFICATE-----Generated at Mon Jul 13 02:46:47 2026 by rpki-client