$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1061ba1c-1db7-358a-98a0-4fe1c8f9c1c9.roa File: 1061ba1c-1db7-358a-98a0-4fe1c8f9c1c9.roa (raw, json) Hash identifier: qhugliBXETEgR7R2I5/dAloNLebunaT67epYvtjklQ0= Subject key identifier: CE:25:ED:64:6E:24:A7:E0:57:4F:64:21:30:40:EF:48:E3:38:AA:7E Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E709F6E1A644D275867ABCCC0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1061ba1c-1db7-358a-98a0-4fe1c8f9c1c9.roa Signing time: Thu 09 Jul 2026 09:00:13 +0000 ROA not before: Thu 09 Jul 2026 09:00:13 +0000 ROA not after: Wed 07 Oct 2026 09:00:13 +0000 asID: 31898 IP address blocks: 155.248.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:70:9f:6e:1a:64:4d:27:58:67:ab:cc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 9 09:00:13 2026 GMT Not After : Oct 7 09:00:13 2026 GMT Subject: CN=d322d762-140d-4a2d-b987-a553c88e2ef8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0d:e1:41:3f:52:05:d6:98:f4:1c:14:5b:a5: 41:d5:0d:2b:3a:a5:4d:94:84:a9:53:b8:a1:07:44: a6:c2:fb:8c:ff:91:30:95:00:02:aa:4a:0c:04:09: 76:59:1e:f6:54:f0:29:af:2d:31:13:06:10:2d:93: 23:1c:a6:99:c4:72:78:6d:00:4f:c5:7f:63:e3:de: 0d:4f:bb:4d:82:45:24:64:67:23:96:8c:71:d6:ab: 84:e1:f4:ce:a1:54:a2:37:72:4b:80:13:c4:4e:bf: 4c:3c:1d:aa:b9:cc:c1:12:da:57:5e:60:41:b2:ec: 21:77:e9:70:5c:a3:e2:f0:41:c1:3d:6f:ce:1a:80: c5:a5:1f:72:42:17:ca:ff:5d:08:24:21:4c:af:8e: 42:45:a6:96:36:b6:b4:88:23:fd:38:b9:2f:f7:c2: fe:d4:c7:91:a8:05:85:52:fd:de:0b:11:86:ff:a7: ad:bf:6b:fe:3f:68:65:11:67:76:a9:bc:37:20:2a: 70:de:53:17:c1:5f:22:4f:14:b3:89:d1:d6:02:86: 4f:e5:78:0e:9e:ba:28:59:9e:ba:da:f7:f1:00:02: 56:9e:e0:42:d1:de:b0:ff:d4:56:5d:f9:c3:75:df: 76:55:5b:14:6a:81:68:11:e7:4a:d1:b0:21:3d:d2: 4f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:25:ED:64:6E:24:A7:E0:57:4F:64:21:30:40:EF:48:E3:38:AA:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1061ba1c-1db7-358a-98a0-4fe1c8f9c1c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 155.248.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:06:5b:38:37:25:62:55:a2:4d:d0:71:f5:83:d0:c8:b1:f7: 19:9b:41:8d:20:09:88:df:8f:5c:83:e1:fc:96:93:5f:48:61: 12:68:9b:3e:4b:0b:5f:1c:8f:7c:01:04:74:fa:8b:0f:1f:75: 28:ef:a3:ab:e6:9f:e3:00:97:2b:dd:c8:52:98:51:25:d3:55: 02:a9:f3:b3:a1:60:e2:68:b5:18:93:2f:30:43:d5:ec:ea:72: a8:27:c7:ab:03:86:af:b4:5e:fa:c0:7c:a6:41:34:99:83:a3: df:47:8b:67:d9:9c:3f:ce:13:6c:5c:15:43:24:f5:ef:40:8e: 1d:9c:47:c1:51:da:77:44:b1:17:05:e4:41:6a:21:2f:99:3b: 4c:13:00:34:b5:4f:55:78:fd:b2:e0:dc:f3:53:cc:98:c8:f3: de:9d:7b:07:11:43:eb:1f:af:14:a7:db:16:6c:94:b1:03:d6: 6e:eb:29:85:ee:87:50:e6:bc:77:57:4f:e4:0a:2f:51:99:fa: 87:de:b8:84:62:b9:15:98:9e:43:46:d1:9d:d4:2a:c8:de:52: b3:32:2c:35:a8:d6:a6:c7:eb:b4:6e:63:1f:0a:8c:36:1a:06: 2a:8b:4d:ab:46:13:e7:b7:c5:ca:93:b1:df:e3:f1:b1:61:da: 63:31:00:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5wn24aZE0nWGerzMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcwOTA5MDAxM1oXDTI2MTAwNzA5MDAxM1owLzEtMCsGA1UEAxMk ZDMyMmQ3NjItMTQwZC00YTJkLWI5ODctYTU1M2M4OGUyZWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsg3hQT9SBdaY9BwUW6VB1Q0rOqVNlISpU7ih B0SmwvuM/5EwlQACqkoMBAl2WR72VPApry0xEwYQLZMjHKaZxHJ4bQBPxX9j494N T7tNgkUkZGcjloxx1quE4fTOoVSiN3JLgBPETr9MPB2quczBEtpXXmBBsuwhd+lw XKPi8EHBPW/OGoDFpR9yQhfK/10IJCFMr45CRaaWNra0iCP9OLkv98L+1MeRqAWF Uv3eCxGG/6etv2v+P2hlEWd2qbw3ICpw3lMXwV8iTxSzidHWAoZP5XgOnrooWZ66 2vfxAAJWnuBC0d6w/9RWXfnDdd92VVsUaoFoEedK0bAhPdJPNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM4l7WRuJKfgV09kITBA70jjOKp+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMTA2MWJhMWMtMWRiNy0z NThhLTk4YTAtNGZlMWM4ZjljMWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEm/jgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIwGWzg3JWJVok3QcfWD0Mix9xmbQY0gCYjfj1yD4fyWk19IYRJomz5L C18cj3wBBHT6iw8fdSjvo6vmn+MAlyvdyFKYUSXTVQKp87OhYOJotRiTLzBD1ezq cqgnx6sDhq+0XvrAfKZBNJmDo99Hi2fZnD/OE2xcFUMk9e9Ajh2cR8FR2ndEsRcF 5EFqIS+ZO0wTADS1T1V4/bLg3PNTzJjI896dewcRQ+sfrxSn2xZslLED1m7rKYXu h1DmvHdXT+QKL1GZ+ofeuIRiuRWYnkNG0Z3UKsjeUrMyLDWo1qbH67RuYx8KjDYa BiqLTatGE+e3xcqTsd/j8bFh2mMxALY= -----END CERTIFICATE-----Generated at Mon Jul 13 02:45:43 2026 by rpki-client