$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/273b1b8d-e65c-3026-a769-0a158bedada4.roa File: 273b1b8d-e65c-3026-a769-0a158bedada4.roa (raw, json) Hash identifier: iGlLqpVxM42aQN9HOOC+WYzk4f1IK5nsVKfjYXFG8VY= Subject key identifier: 98:CD:A6:FF:06:78:9E:3F:1A:CD:B4:44:B6:7D:37:59:E3:0B:68:88 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E709F690334F0A962B52CDA80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/273b1b8d-e65c-3026-a769-0a158bedada4.roa Signing time: Thu 09 Jul 2026 09:00:13 +0000 ROA not before: Thu 09 Jul 2026 09:00:13 +0000 ROA not after: Wed 07 Oct 2026 09:00:13 +0000 asID: 31898 IP address blocks: 129.146.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:70:9f:69:03:34:f0:a9:62:b5:2c:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 9 09:00:13 2026 GMT Not After : Oct 7 09:00:13 2026 GMT Subject: CN=93e61b2f-1df0-4f91-841a-6a74e456f1fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b5:fc:c5:05:29:f6:ff:6b:68:05:60:48:7e: 9f:1c:44:55:97:3a:9f:de:16:d0:a9:2e:62:1b:b9: 76:9c:01:c7:95:23:df:07:6a:42:c5:85:4a:1e:8c: f7:a5:d5:5e:a3:89:8f:a8:69:31:7c:27:29:de:2c: 0d:16:34:c1:f7:91:5f:56:7e:8b:c1:ed:1b:f6:63: 10:43:ec:df:bf:cf:db:74:eb:11:80:8b:12:5a:3a: fb:ab:9b:36:ec:6e:b5:e7:12:6d:20:3e:46:62:fb: da:09:d9:bb:5e:be:41:b4:0f:35:d1:d8:09:49:9e: 1f:64:12:c1:ea:da:a2:69:a0:84:fc:fb:08:99:3e: fb:7b:a7:2b:b1:72:af:70:b6:dc:5e:39:96:c9:8b: a9:1d:16:a3:cc:1a:2f:59:c8:f6:0b:2c:57:ff:e7: ca:9d:18:47:a5:bb:91:55:08:b9:f9:6c:e5:dd:cc: 95:b4:af:2b:3c:dc:99:1e:ea:33:b3:35:a6:6f:ad: ff:53:75:47:3a:b8:81:f5:bd:46:f9:03:45:52:e2: 9f:31:2b:50:be:f6:5c:1b:4f:59:4d:4c:5a:b0:bd: 85:88:6e:b0:15:05:12:9d:98:1d:a2:5d:91:05:0a: ba:1e:47:c9:fb:4b:47:7f:a4:2a:7b:89:1d:32:5c: 38:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:CD:A6:FF:06:78:9E:3F:1A:CD:B4:44:B6:7D:37:59:E3:0B:68:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/273b1b8d-e65c-3026-a769-0a158bedada4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.146.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:57:ac:e4:7a:96:8f:40:68:b9:97:fb:ee:5e:e3:7a:7a:22: 11:26:23:ac:01:01:d0:59:d3:e0:2c:d7:87:bd:5d:69:ce:45: e3:aa:8d:64:ba:01:aa:c1:94:41:99:68:2f:18:cd:97:f3:66: 6f:67:be:38:74:a7:09:a2:a9:a8:bc:12:a1:78:1e:60:e8:2e: e6:6e:4e:7a:3f:78:c1:42:b8:e1:4a:3e:76:c0:d1:63:6b:e0: b3:99:72:14:00:ba:22:0d:3d:e5:a5:ca:24:24:59:ba:35:85: 9a:06:f0:d5:01:ed:89:45:30:74:7b:c3:27:02:7a:da:ae:39: 5d:55:10:d9:19:d8:27:a5:ae:5c:c2:1e:aa:84:fa:07:47:57: 3e:4d:23:17:96:83:42:b9:ab:25:22:c1:8a:e6:62:86:10:b8: c7:d2:ef:93:ab:d9:4a:b9:6e:b0:fe:f6:93:e7:30:cc:df:80: 36:11:d3:35:f0:61:71:9b:1c:93:b7:64:8f:69:94:03:6b:71: 97:46:05:74:15:09:10:68:be:12:6c:f8:bd:9f:c5:89:48:f3: 46:f7:01:ec:91:c1:f5:5e:90:1e:e0:ca:68:5a:0e:49:a3:22: dd:f3:f2:90:26:d2:3f:cf:8f:f4:78:7c:64:22:64:79:4c:16: 85:51:44:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5wn2kDNPCpYrUs2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcwOTA5MDAxM1oXDTI2MTAwNzA5MDAxM1owLzEtMCsGA1UEAxMk OTNlNjFiMmYtMWRmMC00ZjkxLTg0MWEtNmE3NGU0NTZmMWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrX8xQUp9v9raAVgSH6fHERVlzqf3hbQqS5i G7l2nAHHlSPfB2pCxYVKHoz3pdVeo4mPqGkxfCcp3iwNFjTB95FfVn6Lwe0b9mMQ Q+zfv8/bdOsRgIsSWjr7q5s27G615xJtID5GYvvaCdm7Xr5BtA810dgJSZ4fZBLB 6tqiaaCE/PsImT77e6crsXKvcLbcXjmWyYupHRajzBovWcj2CyxX/+fKnRhHpbuR VQi5+Wzl3cyVtK8rPNyZHuozszWmb63/U3VHOriB9b1G+QNFUuKfMStQvvZcG09Z TUxasL2FiG6wFQUSnZgdol2RBQq6HkfJ+0tHf6Qqe4kdMlw4eQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJjNpv8GeJ4/Gs20RLZ9N1njC2iIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMjczYjFiOGQtZTY1Yy0z MDI2LWE3NjktMGExNThiZWRhZGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgZIPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZXrOR6lo9AaLmX++5e43p6IhEmI6wBAdBZ0+As14e9XWnOReOqjWS6 AarBlEGZaC8YzZfzZm9nvjh0pwmiqai8EqF4HmDoLuZuTno/eMFCuOFKPnbA0WNr 4LOZchQAuiINPeWlyiQkWbo1hZoG8NUB7YlFMHR7wycCetquOV1VENkZ2CelrlzC HqqE+gdHVz5NIxeWg0K5qyUiwYrmYoYQuMfS75Or2Uq5brD+9pPnMMzfgDYR0zXw YXGbHJO3ZI9plANrcZdGBXQVCRBovhJs+L2fxYlI80b3AeyRwfVekB7gymhaDkmj It3z8pAm0j/Pj/R4fGQiZHlMFoVRRCU= -----END CERTIFICATE-----Generated at Mon Jul 13 02:52:19 2026 by rpki-client