$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1177357f-8429-340d-92e6-efa42de387f4.roa File: 1177357f-8429-340d-92e6-efa42de387f4.roa (raw, json) Hash identifier: yzCD7MmEO/uGcGhAgrlmsojfZqdBcEA8xuzAj1gNu9Q= Subject key identifier: 40:D8:92:AC:D9:02:E3:61:14:A6:52:8B:B9:D2:9F:07:21:20:A8:65 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E78FF7AA936E36E2BBA3D4680 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1177357f-8429-340d-92e6-efa42de387f4.roa Signing time: Sun 12 Jul 2026 09:00:11 +0000 ROA not before: Sun 12 Jul 2026 09:00:11 +0000 ROA not after: Sat 10 Oct 2026 09:00:11 +0000 asID: 31898 IP address blocks: 168.129.64.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:78:ff:7a:a9:36:e3:6e:2b:ba:3d:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 12 09:00:11 2026 GMT Not After : Oct 10 09:00:11 2026 GMT Subject: CN=9ebeecb3-f661-43db-9042-d004a4cccf12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:58:37:50:da:e6:c2:7d:69:d9:e4:9f:5a:8e: 0d:6a:dc:74:f1:ac:2d:60:5e:40:82:16:b6:51:73: af:dc:0b:3e:fd:21:69:53:8f:45:fc:f7:1e:f5:bb: df:e0:01:5c:dc:e3:bb:1e:73:d5:b2:93:b5:ac:c1: b6:ea:e7:a8:73:29:70:68:bb:70:8b:cc:7e:95:f1: 79:bc:de:42:fb:56:da:25:7c:00:6d:cd:8d:5c:22: d5:17:00:5b:e4:cc:d8:00:b2:17:a3:ec:53:1a:0c: db:2a:0e:c6:10:a9:87:79:ff:1f:7f:1c:66:78:1d: 24:f0:2b:3b:13:25:da:af:d1:80:de:2c:97:44:86: 53:f5:cb:fa:86:51:3a:ac:17:67:1f:03:7a:b5:81: 59:34:e7:a0:17:da:17:a5:29:4c:c6:54:a0:7a:35: 50:a8:08:13:e0:08:a3:48:a5:62:74:f3:8e:92:85: 2f:3d:a2:7c:41:f0:85:74:fa:f3:17:dc:93:d9:49: bc:cd:c8:32:70:9f:28:4e:4a:dd:00:82:09:10:d8: f3:66:b7:60:06:2a:bb:38:54:04:d4:87:50:39:ad: 61:bb:d5:3d:13:a1:22:10:b7:74:71:9e:09:e6:ef: 4c:8b:db:6a:bc:20:0e:4f:0b:c9:10:83:6c:62:d3: 59:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:D8:92:AC:D9:02:E3:61:14:A6:52:8B:B9:D2:9F:07:21:20:A8:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1177357f-8429-340d-92e6-efa42de387f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.129.64.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:c3:46:63:3d:7d:1f:d1:d8:19:73:95:24:6e:f0:64:d2:84: 8a:79:fa:63:8e:6e:3b:a2:82:2b:7e:27:11:04:67:0d:76:03: 8a:4a:cb:69:bd:b5:90:70:f7:44:fe:0e:f2:e5:f4:f3:56:22: d4:af:e2:f7:06:4b:da:37:ac:d0:40:53:9c:34:70:32:7f:af: cf:23:18:8b:56:5e:1e:38:74:d5:a0:b2:83:f8:32:3a:12:b3: 80:88:e3:3f:0b:7a:5e:51:7d:4c:bf:0f:81:92:42:fc:a2:e3: 96:b2:ca:21:e2:9c:48:d0:f9:fb:12:78:a1:39:f7:c0:32:b1: 7c:7f:f2:d0:42:cb:da:3c:7c:52:3c:58:ca:12:bc:9a:d5:d5: fe:92:d2:89:fe:1a:7f:87:74:73:d7:50:ee:8f:d1:bb:c9:c1: c2:df:a6:4a:c9:d2:6b:2e:7d:4a:8e:99:b6:15:f4:12:5a:bc: 22:61:c2:a2:63:45:91:76:c4:9d:6d:f7:d5:39:cf:0b:ef:35: 93:76:dd:e6:38:29:ef:dc:52:d0:62:41:04:ee:1e:d8:af:28: e8:d4:0a:2a:71:b0:5f:34:d8:0b:92:55:78:2e:3c:38:a5:0a: ef:2a:cb:16:06:84:92:3a:37:d2:60:46:1a:4a:79:89:d6:62: 93:b5:96:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE54/3qpNuNuK7o9RoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcxMjA5MDAxMVoXDTI2MTAxMDA5MDAxMVowLzEtMCsGA1UEAxMk OWViZWVjYjMtZjY2MS00M2RiLTkwNDItZDAwNGE0Y2NjZjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1g3UNrmwn1p2eSfWo4Natx08awtYF5Agha2 UXOv3As+/SFpU49F/Pce9bvf4AFc3OO7HnPVspO1rMG26ueocylwaLtwi8x+lfF5 vN5C+1baJXwAbc2NXCLVFwBb5MzYALIXo+xTGgzbKg7GEKmHef8ffxxmeB0k8Cs7 EyXar9GA3iyXRIZT9cv6hlE6rBdnHwN6tYFZNOegF9oXpSlMxlSgejVQqAgT4Aij SKVidPOOkoUvPaJ8QfCFdPrzF9yT2Um8zcgycJ8oTkrdAIIJENjzZrdgBiq7OFQE 1IdQOa1hu9U9E6EiELd0cZ4J5u9Mi9tqvCAOTwvJEINsYtNZQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEDYkqzZAuNhFKZSi7nSnwchIKhlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMTE3NzM1N2YtODQyOS0z NDBkLTkyZTYtZWZhNDJkZTM4N2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqIFAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHbDRmM9fR/R2BlzlSRu8GTShIp5+mOObjuigit+JxEEZw12A4pKy2m9 tZBw90T+DvLl9PNWItSv4vcGS9o3rNBAU5w0cDJ/r88jGItWXh44dNWgsoP4MjoS s4CI4z8Lel5RfUy/D4GSQvyi45ayyiHinEjQ+fsSeKE598AysXx/8tBCy9o8fFI8 WMoSvJrV1f6S0on+Gn+HdHPXUO6P0bvJwcLfpkrJ0msufUqOmbYV9BJavCJhwqJj RZF2xJ1t99U5zwvvNZN23eY4Ke/cUtBiQQTuHtivKOjUCipxsF802AuSVXguPDil Cu8qyxYGhJI6N9JgRhpKeYnWYpO1lsk= -----END CERTIFICATE-----Generated at Mon Jul 13 02:49:25 2026 by rpki-client