$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/24b20201-385a-38c8-90b4-64fc391327a2.roa File: 24b20201-385a-38c8-90b4-64fc391327a2.roa (raw, json) Hash identifier: 4yJPWpgX2iWBOIB1GBf8756bDQmCU3jVLM9Q1+++3T4= Subject key identifier: 53:97:63:09:AB:0B:16:DE:C0:AE:EA:89:FB:5C:3F:D7:9B:24:F0:CD Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E709F7200657FD85A6D9CD140 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/24b20201-385a-38c8-90b4-64fc391327a2.roa Signing time: Thu 09 Jul 2026 09:00:13 +0000 ROA not before: Thu 09 Jul 2026 09:00:13 +0000 ROA not after: Wed 07 Oct 2026 09:00:13 +0000 asID: 31898 IP address blocks: 129.153.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:70:9f:72:00:65:7f:d8:5a:6d:9c:d1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 9 09:00:13 2026 GMT Not After : Oct 7 09:00:13 2026 GMT Subject: CN=b2aa9cf3-6181-4541-a530-dcb442c452c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:cf:61:22:43:62:95:42:5c:26:b5:b2:85:b1: 2f:13:d5:af:9e:73:b5:83:d5:01:31:f8:5e:ce:71: 5f:2c:df:aa:55:f7:de:4b:0e:ae:7c:f7:b7:6f:5d: 58:f1:c1:3e:e7:11:1e:da:74:01:fb:13:5e:39:7a: 4a:4c:c9:48:a0:f4:25:46:59:03:94:a0:bf:49:c1: 83:2f:0e:97:e3:7b:28:e9:18:f5:56:f9:c3:28:c1: 08:73:b9:1f:85:35:8f:bf:02:90:42:69:ed:a5:07: 9f:78:ff:71:ac:85:a7:62:49:7d:0c:1a:0b:ca:14: 02:8e:cf:3e:3d:33:ca:42:24:86:7b:1f:44:03:b6: 6f:20:8c:2f:61:a0:f0:c2:a5:b7:6d:ab:5f:94:0d: 29:03:f0:7b:19:9d:20:b0:c8:68:1a:5a:db:38:1e: 80:b7:e4:45:ac:4a:c6:70:81:e3:fc:00:e8:83:27: 6b:a0:9e:c7:67:86:47:b2:b8:8d:07:c7:32:d9:1f: c3:67:44:c8:9c:44:c6:d9:2c:42:83:c4:fa:c1:dc: a4:44:82:ac:1e:86:a4:35:00:3d:41:bb:7d:d9:9e: b6:3a:4c:e5:34:eb:f8:a2:c1:0f:22:be:93:fe:ae: a6:81:4d:39:68:0c:55:9b:57:18:17:c4:83:25:f3: 68:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:97:63:09:AB:0B:16:DE:C0:AE:EA:89:FB:5C:3F:D7:9B:24:F0:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/24b20201-385a-38c8-90b4-64fc391327a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.153.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:3a:91:0a:c6:8b:bc:36:33:54:57:4d:62:2e:28:2e:f9:c4: 19:6a:d1:ec:06:31:8d:39:12:aa:6f:52:ea:3f:e3:54:98:23: 6b:cf:71:bb:67:54:d5:a1:4b:9f:d1:9a:3d:19:6c:76:7d:2a: da:1a:19:7a:b5:bb:76:28:1b:e2:63:13:2a:6a:3b:6b:71:ea: 0a:ae:23:cc:2a:af:90:04:bf:97:15:09:28:2a:70:a1:dc:2f: c8:24:b1:05:1c:e8:21:98:50:17:85:b4:33:54:1e:94:40:73: 9b:9d:09:83:af:72:b2:9b:c7:03:27:f7:c1:a6:48:90:b0:87: e1:b9:28:a2:8c:6e:c4:99:3a:40:a4:58:82:b0:95:73:c6:83: 20:b9:51:99:10:fc:56:d3:34:fa:4c:ef:6e:4d:c2:2c:82:1e: b3:ef:99:c2:ae:6e:0f:30:de:71:30:54:f4:90:11:4d:be:a7: 2e:b9:27:17:0a:cd:97:3e:6a:0f:f4:95:ec:4f:8a:86:e1:91: 28:10:10:2a:16:cb:6b:df:23:5b:29:ee:a3:3d:31:42:0e:48: 4e:fb:b2:8c:4d:b3:b9:6e:94:7d:47:2e:f9:6c:e2:ab:c3:3d: bd:72:c3:b8:ce:b5:e0:84:0f:1a:08:21:d2:b5:4a:58:6a:62: 01:f3:b2:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5wn3IAZX/YWm2c0UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcwOTA5MDAxM1oXDTI2MTAwNzA5MDAxM1owLzEtMCsGA1UEAxMk YjJhYTljZjMtNjE4MS00NTQxLWE1MzAtZGNiNDQyYzQ1MmM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAns9hIkNilUJcJrWyhbEvE9WvnnO1g9UBMfhe znFfLN+qVffeSw6ufPe3b11Y8cE+5xEe2nQB+xNeOXpKTMlIoPQlRlkDlKC/ScGD Lw6X43so6Rj1VvnDKMEIc7kfhTWPvwKQQmntpQefeP9xrIWnYkl9DBoLyhQCjs8+ PTPKQiSGex9EA7ZvIIwvYaDwwqW3batflA0pA/B7GZ0gsMhoGlrbOB6At+RFrErG cIHj/ADogydroJ7HZ4ZHsriNB8cy2R/DZ0TInETG2SxCg8T6wdykRIKsHoakNQA9 Qbt92Z62OkzlNOv4osEPIr6T/q6mgU05aAxVm1cYF8SDJfNohwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFOXYwmrCxbewK7qiftcP9ebJPDNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMjRiMjAyMDEtMzg1YS0z OGM4LTkwYjQtNjRmYzM5MTMyN2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFgZnAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJM6kQrGi7w2M1RXTWIuKC75xBlq0ewGMY05EqpvUuo/41SYI2vPcbtn VNWhS5/Rmj0ZbHZ9KtoaGXq1u3YoG+JjEypqO2tx6gquI8wqr5AEv5cVCSgqcKHc L8gksQUc6CGYUBeFtDNUHpRAc5udCYOvcrKbxwMn98GmSJCwh+G5KKKMbsSZOkCk WIKwlXPGgyC5UZkQ/FbTNPpM725NwiyCHrPvmcKubg8w3nEwVPSQEU2+py65JxcK zZc+ag/0lexPiobhkSgQECoWy2vfI1sp7qM9MUIOSE77soxNs7lulH1HLvls4qvD Pb1yw7jOteCEDxoIIdK1SlhqYgHzstQ= -----END CERTIFICATE-----Generated at Mon Jul 13 02:54:44 2026 by rpki-client