$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2b23d6f2-d1c0-3536-82c3-fbfc977e734b.roa File: 2b23d6f2-d1c0-3536-82c3-fbfc977e734b.roa (raw, json) Hash identifier: afysfrCusr+VJ9EipbNpLScrUaosTC2MEeDomt0A75Y= Subject key identifier: 36:09:7B:60:87:43:35:54:90:F0:98:17:0F:C9:A7:E0:75:E6:2A:94 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E709F6E979D0333A3B3760180 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2b23d6f2-d1c0-3536-82c3-fbfc977e734b.roa Signing time: Thu 09 Jul 2026 09:00:13 +0000 ROA not before: Thu 09 Jul 2026 09:00:13 +0000 ROA not after: Wed 07 Oct 2026 09:00:13 +0000 asID: 31898 IP address blocks: 129.146.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:70:9f:6e:97:9d:03:33:a3:b3:76:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 9 09:00:13 2026 GMT Not After : Oct 7 09:00:13 2026 GMT Subject: CN=1f493cbb-0126-4126-b397-4920c2240e9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:33:31:b6:c7:a8:00:d5:7c:af:a2:c7:55:ec: 09:da:d2:62:30:2c:7d:1b:a1:d8:a5:06:7b:c8:bb: 31:97:5c:88:d8:d9:2d:6b:15:bc:ce:65:67:9f:b0: 1e:4c:0c:95:4f:75:9e:9c:68:2b:fe:21:91:2d:20: d3:19:ab:1d:d8:5b:05:08:3a:da:8e:a2:b7:d3:fa: 47:54:cb:08:ef:56:f2:da:7d:6c:65:1d:1b:4d:ec: ad:71:3b:c5:fa:5a:c5:5c:24:56:1e:fe:82:c2:4e: df:e8:d6:3b:d5:25:30:55:b3:6e:00:ae:c8:77:ca: 76:84:a7:a7:0a:33:cc:83:13:72:01:dc:9e:16:43: 00:b3:d3:8d:2f:77:2d:41:13:0b:e2:7c:3b:74:9d: 7f:bc:22:7e:44:4a:2d:07:1a:37:85:67:07:0c:8c: 16:64:34:4e:28:a7:37:45:bf:04:a2:4b:5c:76:5e: 66:55:75:65:82:ab:41:15:9b:5e:fa:17:91:1f:7e: 42:37:99:13:f0:0a:07:48:bd:b4:b6:9b:35:45:e7: c5:25:35:3c:e1:06:a8:f5:8b:57:58:24:55:f9:cd: 88:c9:c1:19:50:06:d7:c5:9d:37:17:47:27:be:04: 8e:55:7d:bb:ed:9e:a2:26:73:00:cc:36:a4:41:50: e0:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:09:7B:60:87:43:35:54:90:F0:98:17:0F:C9:A7:E0:75:E6:2A:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2b23d6f2-d1c0-3536-82c3-fbfc977e734b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.146.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:8b:4d:ad:b1:0f:10:50:2a:78:48:28:c2:76:1e:53:f3:fe: 1b:1f:ad:50:23:9e:d4:33:d6:f1:a3:0c:04:79:79:3f:aa:dd: 5e:9b:d1:51:af:94:28:c3:c0:88:a8:71:da:ae:60:b7:7b:13: f2:b8:5a:4d:63:a9:82:a7:20:38:4b:4c:40:63:49:4a:e7:dd: eb:44:1a:c1:98:19:d8:bf:fb:f2:af:e5:bf:77:ed:7f:65:52: 07:65:b2:0f:6f:42:0b:05:83:cf:9b:97:74:04:4d:0a:78:94: 23:c1:af:9f:1a:2c:84:bc:1b:ab:7a:cd:23:1e:d5:c3:a5:d7: e4:82:32:50:33:a5:3e:72:d9:32:fb:cd:a3:85:06:dc:63:a7: 33:c2:0f:ad:5b:4f:84:dd:b5:c2:a3:71:42:a0:7b:f8:6a:c7: 4f:1e:aa:09:60:ff:af:e1:61:4f:89:70:4f:d0:aa:bc:fb:8a: 22:2c:69:ce:2a:ea:a1:5f:b4:37:38:af:b1:bc:df:08:8a:ac: c7:b3:b9:09:ff:dc:8c:c2:f6:00:43:52:26:69:2e:1a:fa:4f: eb:71:03:52:bb:b3:e5:03:52:64:09:b3:30:73:53:2c:71:e7: a2:ad:88:26:ed:39:1e:c9:c3:98:6a:a8:fe:23:47:ad:9f:fd: ee:2f:70:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5wn26XnQMzo7N2AYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcwOTA5MDAxM1oXDTI2MTAwNzA5MDAxM1owLzEtMCsGA1UEAxMk MWY0OTNjYmItMDEyNi00MTI2LWIzOTctNDkyMGMyMjQwZTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzMxtseoANV8r6LHVewJ2tJiMCx9G6HYpQZ7 yLsxl1yI2NktaxW8zmVnn7AeTAyVT3WenGgr/iGRLSDTGasd2FsFCDrajqK30/pH VMsI71by2n1sZR0bTeytcTvF+lrFXCRWHv6Cwk7f6NY71SUwVbNuAK7Id8p2hKen CjPMgxNyAdyeFkMAs9ONL3ctQRML4nw7dJ1/vCJ+REotBxo3hWcHDIwWZDROKKc3 Rb8Eoktcdl5mVXVlgqtBFZte+heRH35CN5kT8AoHSL20tps1RefFJTU84Qao9YtX WCRV+c2IycEZUAbXxZ03F0cnvgSOVX277Z6iJnMAzDakQVDgSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDYJe2CHQzVUkPCYFw/Jp+B15iqUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMmIyM2Q2ZjItZDFjMC0z NTM2LTgyYzMtZmJmYzk3N2U3MzRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgZIAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+LTa2xDxBQKnhIKMJ2HlPz/hsfrVAjntQz1vGjDAR5eT+q3V6b0VGv lCjDwIiocdquYLd7E/K4Wk1jqYKnIDhLTEBjSUrn3etEGsGYGdi/+/Kv5b937X9l Ugdlsg9vQgsFg8+bl3QETQp4lCPBr58aLIS8G6t6zSMe1cOl1+SCMlAzpT5y2TL7 zaOFBtxjpzPCD61bT4TdtcKjcUKge/hqx08eqglg/6/hYU+JcE/Qqrz7iiIsac4q 6qFftDc4r7G83wiKrMezuQn/3IzC9gBDUiZpLhr6T+txA1K7s+UDUmQJszBzUyxx 56KtiCbtOR7Jw5hqqP4jR62f/e4vcFo= -----END CERTIFICATE-----Generated at Mon Jul 13 02:47:05 2026 by rpki-client