$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0c1d78ae-d145-3c72-ad7d-5522f55ff688.roa File: 0c1d78ae-d145-3c72-ad7d-5522f55ff688.roa (raw, json) Hash identifier: eFMB1QzdYwoJFW3Y6kk/2UrXxLzIkyO8godDoyNUTeQ= Subject key identifier: 08:48:AF:D7:8B:8D:28:6F:EC:73:AD:37:A5:01:3F:BD:EF:7B:21:54 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E6F3ECC643D419349E5CAA800 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0c1d78ae-d145-3c72-ad7d-5522f55ff688.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 31898 IP address blocks: 168.129.180.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3e:cc:64:3d:41:93:49:e5:ca:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=7b8c3e4a-616c-404d-9439-1fb8762c1da2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:dc:f1:d7:f7:a5:dd:63:74:a1:9a:3f:8c:06: f8:16:a9:7c:82:02:c6:88:ff:62:77:78:cc:32:21: a9:26:5b:6e:98:27:23:44:35:ca:c5:b5:d9:09:1f: 8b:8d:e9:45:f7:4d:8a:ae:0c:fb:4a:c0:ff:e0:99: 2c:a7:dc:3b:b4:ce:e1:bb:dc:e0:8c:5b:56:7f:bc: e2:e1:40:56:e4:5c:09:a7:fb:76:92:ff:37:65:83: 60:c8:63:f9:87:8a:89:05:03:99:74:b6:db:99:2a: 4a:b4:4b:dd:bb:3a:2c:96:32:13:22:f4:b6:84:2b: f2:7c:43:97:bf:70:0b:9e:32:71:ac:46:07:a2:01: 21:9d:ee:c7:89:cb:2d:3c:25:20:13:34:42:fd:20: 91:ea:e9:27:3b:59:7b:6d:01:9a:c3:1c:25:18:51: 0a:30:ba:97:ee:79:2b:8c:01:b6:3b:b5:a7:b4:1d: 8c:d5:2e:a0:19:0f:7f:bc:5d:89:ef:7e:f6:c6:f7: 45:ae:b6:7f:29:89:20:12:61:32:f9:36:10:66:00: 9e:58:a2:6f:98:19:17:2a:d9:3e:4b:87:98:de:e1: da:22:11:af:e8:3b:3c:b1:30:5b:4e:94:d3:1c:9e: 00:22:f0:29:94:0f:ee:9c:61:8b:9e:66:77:95:4f: 29:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:48:AF:D7:8B:8D:28:6F:EC:73:AD:37:A5:01:3F:BD:EF:7B:21:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0c1d78ae-d145-3c72-ad7d-5522f55ff688.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.129.180.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:df:ff:9c:d4:92:e1:ed:37:e1:3c:62:c6:c4:94:9b:48:33: 0d:3c:31:8b:97:f0:91:2c:8f:46:2e:6d:17:ba:37:04:eb:08: 0d:05:cd:2a:99:4b:94:39:65:e9:99:17:18:c3:ca:65:3a:93: 55:bd:16:93:a8:8e:41:88:65:6f:c9:43:85:23:da:fa:09:81: a6:69:3d:93:6b:c5:c2:d9:61:af:a3:7b:db:31:8f:d5:49:4b: 74:8b:cb:b9:ae:fc:d8:83:e8:d4:cc:95:bf:5e:88:0f:33:10: 69:2f:07:13:ac:c3:09:98:1f:95:f4:cd:68:8b:81:aa:c7:ab: fc:9b:f2:49:02:22:77:c0:9e:de:63:b0:07:9b:52:68:c0:50: 2c:9c:e1:49:a7:b2:de:83:15:55:c7:e7:a3:92:8e:46:17:e7: f8:93:50:a1:94:ed:8c:f1:18:0f:75:c1:50:af:5b:d7:95:ef: f8:0f:9e:21:6b:03:a6:2d:15:e7:42:2d:b8:8e:c9:6b:20:e8: ff:8b:1f:64:08:85:95:77:9a:20:be:23:ca:ee:02:45:c0:10: 93:0a:fe:9d:0f:44:0c:40:ea:f1:57:0a:09:bb:1b:65:08:12: cd:cc:8c:82:9b:68:8d:73:6b:a6:c9:e9:97:3e:b7:4b:b6:ef: 00:99:da:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vPsxkPUGTSeXKqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk N2I4YzNlNGEtNjE2Yy00MDRkLTk0MzktMWZiODc2MmMxZGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydzx1/el3WN0oZo/jAb4Fql8ggLGiP9id3jM MiGpJltumCcjRDXKxbXZCR+LjelF902Krgz7SsD/4Jksp9w7tM7hu9zgjFtWf7zi 4UBW5FwJp/t2kv83ZYNgyGP5h4qJBQOZdLbbmSpKtEvduzosljITIvS2hCvyfEOX v3ALnjJxrEYHogEhne7HicstPCUgEzRC/SCR6uknO1l7bQGawxwlGFEKMLqX7nkr jAG2O7WntB2M1S6gGQ9/vF2J7372xvdFrrZ/KYkgEmEy+TYQZgCeWKJvmBkXKtk+ S4eY3uHaIhGv6Ds8sTBbTpTTHJ4AIvAplA/unGGLnmZ3lU8pLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAhIr9eLjShv7HOtN6UBP73veyFUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMGMxZDc4YWUtZDE0NS0z YzcyLWFkN2QtNTUyMmY1NWZmNjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqIG0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIff/5zUkuHtN+E8YsbElJtIMw08MYuX8JEsj0YubRe6NwTrCA0FzSqZ S5Q5ZemZFxjDymU6k1W9FpOojkGIZW/JQ4Uj2voJgaZpPZNrxcLZYa+je9sxj9VJ S3SLy7mu/NiD6NTMlb9eiA8zEGkvBxOswwmYH5X0zWiLgarHq/yb8kkCInfAnt5j sAebUmjAUCyc4Umnst6DFVXH56OSjkYX5/iTUKGU7YzxGA91wVCvW9eV7/gPniFr A6YtFedCLbiOyWsg6P+LH2QIhZV3miC+I8ruAkXAEJMK/p0PRAxA6vFXCgm7G2UI Es3MjIKbaI1za6bJ6Zc+t0u27wCZ2g8= -----END CERTIFICATE-----Generated at Mon Jul 13 02:54:47 2026 by rpki-client