$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1ec20e74-a8ad-3fc9-91a1-562886e87b19.roa File: 1ec20e74-a8ad-3fc9-91a1-562886e87b19.roa (raw, json) Hash identifier: ZJNOcnM15NuglD8YN+iwkdIGQz0W31L8nQXMDhFESmQ= Subject key identifier: C7:66:0C:1C:3D:32:13:78:93:4D:62:3B:72:6C:2E:A2:D5:48:02:0A Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E6F3A1B65720B2FA0CEC49680 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1ec20e74-a8ad-3fc9-91a1-562886e87b19.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 31898 IP address blocks: 168.138.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3a:1b:65:72:0b:2f:a0:ce:c4:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=dd2fffbb-6bc0-44d1-b90d-64960e113d2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:21:89:ea:9a:1e:7d:e6:b8:45:f2:ec:a4:2a: fc:2a:cb:74:fb:dc:53:84:96:af:43:0d:04:18:fc: 6b:10:5c:74:6b:8d:3c:69:fe:54:06:a1:b3:d7:a6: 9d:a1:83:40:b2:af:a9:4c:6e:12:45:72:ae:70:c4: c6:83:45:d6:3e:ae:e2:0c:4c:20:86:d2:cd:e9:0e: 90:83:bb:42:e3:a7:d7:15:81:71:4e:bb:fe:59:d1: 06:89:84:69:76:95:88:77:ce:af:94:ae:14:14:fe: 7e:4e:e5:7f:0b:3f:a1:a3:ec:6f:8f:7f:56:ef:e4: ff:78:f4:d8:23:83:7b:18:3f:52:60:e9:65:35:30: 8c:1a:9a:de:04:66:3f:1d:ac:4c:8a:52:04:19:27: 84:00:c1:bc:c4:04:fc:b1:b7:43:f2:f5:c0:d5:7c: 0b:ff:c4:76:4f:40:71:d9:e9:a0:07:ce:81:eb:9a: b4:34:b1:e2:2b:50:95:ca:82:33:a7:ae:52:a1:b9: 46:a9:cc:83:8b:5b:be:58:1e:19:19:ea:37:c8:fc: 97:f1:60:a0:ae:38:30:da:2c:b8:24:b8:95:94:7d: 86:12:35:d9:27:5c:65:2c:26:a2:59:90:c2:58:bf: 30:23:31:4c:e6:5d:26:fb:a8:c3:59:d1:db:0c:4d: a6:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:66:0C:1C:3D:32:13:78:93:4D:62:3B:72:6C:2E:A2:D5:48:02:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1ec20e74-a8ad-3fc9-91a1-562886e87b19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.138.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:0d:87:0f:d3:ef:30:c7:ef:0e:df:7e:d1:b5:42:e4:88:9a: 49:85:27:a9:3e:23:a9:02:84:e1:d9:c8:dc:98:42:e0:95:a1: 22:29:11:72:89:58:98:4a:a5:f6:30:7a:7c:2e:3f:c3:66:b8: bb:34:90:99:f9:de:9d:71:d2:30:6e:91:b0:ca:91:21:84:d7: 8d:71:ae:0a:24:db:ac:96:50:66:46:1c:f9:2b:80:fa:f2:95: 0e:b7:60:bc:f7:bb:27:61:bf:c7:d5:13:33:72:cc:e0:13:81: 5e:23:5b:30:9d:33:25:03:fb:d7:31:1c:c6:f3:56:e5:27:d1: 0c:ad:56:89:8a:ef:31:94:09:e9:b1:74:b0:1e:17:61:05:58: e2:67:5b:c1:53:ec:cf:fe:33:5e:f5:dc:0e:59:e4:b7:bd:35: 4e:dc:c7:9c:27:d5:8c:d9:dc:ea:92:21:ef:55:0f:95:81:01: 0d:5f:4b:c7:3a:bb:4d:e2:c7:a2:57:06:42:3e:9f:69:2c:4f: 58:21:b2:02:0e:90:47:8e:3b:c9:3a:e6:ee:ae:e1:fd:59:e8: 22:50:24:ad:21:17:97:c2:fb:ee:f8:3a:4f:d0:84:c5:e9:f6: d2:07:1d:1b:ca:85:45:90:a8:16:a2:a4:c9:cb:0f:21:33:52: 8e:f4:03:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vOhtlcgsvoM7EloAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk ZGQyZmZmYmItNmJjMC00NGQxLWI5MGQtNjQ5NjBlMTEzZDJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiGJ6poefea4RfLspCr8Kst0+9xThJavQw0E GPxrEFx0a408af5UBqGz16adoYNAsq+pTG4SRXKucMTGg0XWPq7iDEwghtLN6Q6Q g7tC46fXFYFxTrv+WdEGiYRpdpWId86vlK4UFP5+TuV/Cz+ho+xvj39W7+T/ePTY I4N7GD9SYOllNTCMGpreBGY/HaxMilIEGSeEAMG8xAT8sbdD8vXA1XwL/8R2T0Bx 2emgB86B65q0NLHiK1CVyoIzp65SoblGqcyDi1u+WB4ZGeo3yPyX8WCgrjgw2iy4 JLiVlH2GEjXZJ1xlLCaiWZDCWL8wIzFM5l0m+6jDWdHbDE2mwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMdmDBw9MhN4k01iO3JsLqLVSAIKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMWVjMjBlNzQtYThhZC0z ZmM5LTkxYTEtNTYyODg2ZTg3YjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqIqQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQNhw/T7zDH7w7fftG1QuSImkmFJ6k+I6kChOHZyNyYQuCVoSIpEXKJ WJhKpfYwenwuP8NmuLs0kJn53p1x0jBukbDKkSGE141xrgok26yWUGZGHPkrgPry lQ63YLz3uydhv8fVEzNyzOATgV4jWzCdMyUD+9cxHMbzVuUn0QytVomK7zGUCemx dLAeF2EFWOJnW8FT7M/+M1713A5Z5Le9NU7cx5wn1YzZ3OqSIe9VD5WBAQ1fS8c6 u03ix6JXBkI+n2ksT1ghsgIOkEeOO8k65u6u4f1Z6CJQJK0hF5fC++74Ok/QhMXp 9tIHHRvKhUWQqBaipMnLDyEzUo70A+I= -----END CERTIFICATE-----Generated at Mon Jul 13 02:50:30 2026 by rpki-client