$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0fb2b91b-7ae4-3847-9668-c174ea24aaa0.roa File: 0fb2b91b-7ae4-3847-9668-c174ea24aaa0.roa (raw, json) Hash identifier: rKLVeU4tJLOd+wBGzClMEwpgETerSJ7+9i2+4xBEZhU= Subject key identifier: A2:01:0B:B6:28:E9:1C:D4:62:66:44:B4:51:AF:EA:4C:70:EC:82:D4 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E4AEF6D771C04222D1A279980 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0fb2b91b-7ae4-3847-9668-c174ea24aaa0.roa Signing time: Thu 25 Jun 2026 21:00:12 +0000 ROA not before: Thu 25 Jun 2026 21:00:12 +0000 ROA not after: Wed 23 Sep 2026 21:00:12 +0000 asID: 31898 IP address blocks: 129.151.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4a:ef:6d:77:1c:04:22:2d:1a:27:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jun 25 21:00:12 2026 GMT Not After : Sep 23 21:00:12 2026 GMT Subject: CN=cfd9ca77-363d-4e2c-a3dc-b38a422ca7bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:f5:84:e9:78:3d:49:af:3a:f9:79:66:54:8a: 96:76:af:8c:5d:e2:d3:36:9b:99:51:1d:3c:12:a5: 75:ee:ea:32:49:7b:97:43:57:0c:71:6c:90:a7:ff: 2c:c9:5f:22:ca:1b:2f:1b:ff:04:c6:41:99:ef:60: 94:a6:c2:d0:d7:9e:94:d7:e5:0a:1f:7f:6d:af:80: 28:6e:80:8a:66:1c:3b:36:24:59:ce:2a:1e:e4:9a: 76:d9:be:10:aa:60:2c:f0:19:62:02:80:22:8e:dd: 0e:1a:2a:5d:57:d0:b1:f8:bc:07:a9:47:d8:8e:5f: a2:f5:88:5b:fa:3c:67:b8:fb:94:07:13:a0:09:55: 41:a1:01:9f:3b:6d:c8:b8:c0:ca:2a:09:f2:e7:14: 1e:d3:22:03:be:3f:d6:c1:3e:f7:ac:d1:ec:cc:0a: 3d:c7:fb:ba:80:b4:d7:3e:98:d2:c5:3c:99:0e:19: 4d:1d:6e:5a:68:9d:34:94:46:fa:35:91:35:50:90: 3a:82:46:d6:39:70:85:2c:32:78:a9:69:ee:05:0e: 4d:c5:a9:80:01:2e:b1:8a:93:00:21:58:97:e6:1d: 43:54:6c:1d:b9:44:aa:d2:de:e0:92:f0:fa:7e:d3: a8:5e:b4:34:91:fa:91:c1:1d:04:7e:08:fe:e9:45: 55:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:01:0B:B6:28:E9:1C:D4:62:66:44:B4:51:AF:EA:4C:70:EC:82:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0fb2b91b-7ae4-3847-9668-c174ea24aaa0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.151.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:fd:29:94:d2:61:6f:e6:b8:51:32:59:89:41:4d:1d:30:b2: 70:bc:a2:b0:03:eb:56:e4:24:44:e8:4c:c1:c5:23:2a:d8:fe: 0b:b3:57:ee:31:d8:53:6b:46:dd:8b:dc:4c:90:70:04:ec:72: c9:6e:2b:ad:c5:f1:0a:d4:32:63:fc:04:5e:a9:0f:1c:73:f9: d6:19:60:f2:7a:51:38:cb:aa:4d:db:e4:25:02:45:7a:cd:08: 32:4e:0a:21:67:ca:96:32:2e:39:d9:72:25:ec:f1:78:41:3d: 2d:f6:ca:d3:87:a2:e5:b0:00:81:9d:12:fb:82:54:25:7c:1e: 30:f7:d2:44:9e:51:4b:c0:da:32:9d:42:af:7d:0d:2b:56:58: 55:60:f6:1b:74:e8:61:48:71:fb:b7:8e:12:4c:b6:d8:47:7f: 99:bf:60:48:5f:44:92:b2:0a:3e:b9:5a:da:49:40:05:3e:e6: 43:cf:55:dd:d9:fb:7d:cc:7d:fa:05:32:32:36:7b:49:8c:3a: 8d:01:0a:d6:19:d7:ba:00:6e:7d:1e:8f:92:ba:1c:67:18:d2: 36:0b:8c:41:8d:9c:a5:1d:35:d1:d1:f2:88:df:b8:6e:65:e1: 4a:9d:b9:18:0d:82:84:e7:7c:20:a4:dd:e3:fa:f8:76:5a:9e: 77:25:e7:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5K7213HAQiLRonmYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDYyNTIxMDAxMloXDTI2MDkyMzIxMDAxMlowLzEtMCsGA1UEAxMk Y2ZkOWNhNzctMzYzZC00ZTJjLWEzZGMtYjM4YTQyMmNhN2JmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvWE6Xg9Sa86+XlmVIqWdq+MXeLTNpuZUR08 EqV17uoySXuXQ1cMcWyQp/8syV8iyhsvG/8ExkGZ72CUpsLQ156U1+UKH39tr4Ao boCKZhw7NiRZzioe5Jp22b4QqmAs8BliAoAijt0OGipdV9Cx+LwHqUfYjl+i9Yhb +jxnuPuUBxOgCVVBoQGfO23IuMDKKgny5xQe0yIDvj/WwT73rNHszAo9x/u6gLTX PpjSxTyZDhlNHW5aaJ00lEb6NZE1UJA6gkbWOXCFLDJ4qWnuBQ5NxamAAS6xipMA IViX5h1DVGwduUSq0t7gkvD6ftOoXrQ0kfqRwR0Efgj+6UVVWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKIBC7Yo6RzUYmZEtFGv6kxw7ILUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMGZiMmI5MWItN2FlNC0z ODQ3LTk2NjgtYzE3NGVhMjRhYWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFgZdAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC79KZTSYW/muFEyWYlBTR0wsnC8orAD61bkJEToTMHFIyrY/guzV+4x 2FNrRt2L3EyQcATscsluK63F8QrUMmP8BF6pDxxz+dYZYPJ6UTjLqk3b5CUCRXrN CDJOCiFnypYyLjnZciXs8XhBPS32ytOHouWwAIGdEvuCVCV8HjD30kSeUUvA2jKd Qq99DStWWFVg9ht06GFIcfu3jhJMtthHf5m/YEhfRJKyCj65WtpJQAU+5kPPVd3Z +33MffoFMjI2e0mMOo0BCtYZ17oAbn0ej5K6HGcY0jYLjEGNnKUdNdHR8ojfuG5l 4UqduRgNgoTnfCCk3eP6+HZanncl58w= -----END CERTIFICATE-----Generated at Mon Jul 13 02:52:06 2026 by rpki-client