$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/235b6fae-087e-327e-a1ad-3f6566ede764.roa File: 235b6fae-087e-327e-a1ad-3f6566ede764.roa (raw, json) Hash identifier: jWVcEvEabDND+OTdgenNemGAmI0tHOXZJiBU5kn7AwA= Subject key identifier: EA:A4:78:1F:EF:2D:10:F5:5D:B3:AE:B5:22:25:70:E4:05:19:F2:02 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584EA786E6E64AEF26DCC3FBAB80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/235b6fae-087e-327e-a1ad-3f6566ede764.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 54253 IP address blocks: 137.131.72.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:86:e6:e6:4a:ef:26:dc:c3:fb:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=e1c04de6-0eda-4d60-a2f4-33de2c308ed0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d1:d9:66:c8:04:67:09:3f:dd:89:68:db:1c: 1f:49:f3:2c:37:1f:20:0c:e1:07:43:7a:e8:42:71: 84:51:63:29:64:01:e3:36:a0:40:b6:5f:47:a1:61: 15:05:44:77:45:f7:ad:88:0e:ba:b3:2f:78:89:33: 0c:30:b1:c1:64:a6:02:16:9c:72:83:2a:75:78:a3: 5a:ee:33:b0:e3:e9:fa:19:45:1a:41:c7:2f:86:60: da:0d:1e:6b:97:b7:92:c9:a7:46:4b:3f:b3:57:4e: 92:3e:1b:8c:02:6f:87:88:fd:b3:fa:18:57:ee:be: 28:dc:5e:cd:1a:7c:bd:73:c9:86:2c:5a:da:a5:54: e0:b7:bb:c5:54:7a:af:13:49:ed:c8:5b:77:f0:a6: 1f:34:e9:70:38:ee:24:ae:32:63:b7:0c:05:d0:9c: f0:8e:f8:3c:52:5d:d2:fa:83:7b:b4:ac:23:1c:ac: 86:65:4e:78:7a:07:82:60:eb:96:6c:70:76:59:8e: 35:ee:43:e9:48:c7:8d:37:22:c1:87:60:f9:ee:16: ab:6d:ee:e9:4e:11:41:a0:33:2b:f5:47:de:f7:86: 90:41:a6:19:01:e3:d3:84:84:1b:4c:e2:f0:4a:c7: 74:08:cb:f3:b3:7b:c7:64:96:93:94:e3:be:c5:ff: 15:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:A4:78:1F:EF:2D:10:F5:5D:B3:AE:B5:22:25:70:E4:05:19:F2:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/235b6fae-087e-327e-a1ad-3f6566ede764.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 137.131.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:27:9f:71:81:99:bd:2d:bb:dc:a5:c8:d2:80:c2:c1:27:ee: 81:e7:c2:5e:72:34:2e:b7:28:74:d0:7e:aa:88:b7:4d:fa:f0: c2:40:a2:d3:98:0c:b1:5b:22:b7:2d:12:7a:aa:fd:74:f2:ea: 87:fd:a2:62:e9:bc:9b:eb:ef:11:c3:32:9b:e4:42:41:91:36: f4:e6:9f:2c:d6:3f:61:0f:16:b6:c2:51:3a:ee:4f:ab:0d:9c: c4:41:f2:72:0a:d3:e4:1d:44:d4:76:4b:54:61:1d:8d:05:02: 51:0d:5c:45:15:ab:54:a5:da:42:46:23:b0:ed:77:00:3f:02: d5:41:14:80:60:c8:78:e7:01:38:04:6f:57:16:f3:71:e6:e0: 0a:55:18:e5:bd:88:53:20:0a:f0:55:7a:c0:10:2c:f9:7f:fc: 55:df:89:ed:18:59:be:c7:7e:e4:65:0b:a6:2b:68:22:00:1b: 31:e1:dd:fb:9d:9e:ed:c5:78:67:5e:0e:0e:f2:b8:4e:ec:c6: 49:83:23:d3:8b:ac:73:f1:e5:fb:fd:9e:28:da:5f:79:fd:3b: f8:4a:8f:3a:c8:be:2c:12:7f:68:fb:c5:91:67:3d:d3:7d:a8: ea:48:99:71:48:ca:1f:f6:d5:0a:8f:76:9f:09:79:c3:10:78: e6:c9:59:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nhubmSu8m3MP7q4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZTFjMDRkZTYtMGVkYS00ZDYwLWEyZjQtMzNkZTJjMzA4ZWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltHZZsgEZwk/3Ylo2xwfSfMsNx8gDOEHQ3ro QnGEUWMpZAHjNqBAtl9HoWEVBUR3RfetiA66sy94iTMMMLHBZKYCFpxygyp1eKNa 7jOw4+n6GUUaQccvhmDaDR5rl7eSyadGSz+zV06SPhuMAm+HiP2z+hhX7r4o3F7N Gny9c8mGLFrapVTgt7vFVHqvE0ntyFt38KYfNOlwOO4krjJjtwwF0Jzwjvg8Ul3S +oN7tKwjHKyGZU54egeCYOuWbHB2WY417kPpSMeNNyLBh2D57harbe7pThFBoDMr 9Ufe94aQQaYZAePThIQbTOLwSsd0CMvzs3vHZJaTlOO+xf8VZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOqkeB/vLRD1XbOutSIlcOQFGfICMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMjM1YjZmYWUtMDg3ZS0z MjdlLWExYWQtM2Y2NTY2ZWRlNzY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDiYNIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIInn3GBmb0tu9ylyNKAwsEn7oHnwl5yNC63KHTQfqqIt0368MJAotOY DLFbIrctEnqq/XTy6of9omLpvJvr7xHDMpvkQkGRNvTmnyzWP2EPFrbCUTruT6sN nMRB8nIK0+QdRNR2S1RhHY0FAlENXEUVq1Sl2kJGI7DtdwA/AtVBFIBgyHjnATgE b1cW83Hm4ApVGOW9iFMgCvBVesAQLPl//FXfie0YWb7HfuRlC6YraCIAGzHh3fud nu3FeGdeDg7yuE7sxkmDI9OLrHPx5fv9nijaX3n9O/hKjzrIviwSf2j7xZFnPdN9 qOpImXFIyh/21QqPdp8JecMQeObJWX0= -----END CERTIFICATE-----Generated at Thu Aug 27 15:20:30 2026 by rpki-client