$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3136b57f-6b27-3ba0-ac03-9a52a706ca21.roa File: 3136b57f-6b27-3ba0-ac03-9a52a706ca21.roa (raw, json) Hash identifier: 7rxu4DDsfobpjPNIm4WYS4VgKmm2Qdh7HuP7sxn1l4w= Subject key identifier: 1A:BF:F8:49:12:0C:99:7E:81:73:5A:9C:69:DD:DA:18:65:50:6C:96 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E6F3A2EDD8579A85C12E81D00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3136b57f-6b27-3ba0-ac03-9a52a706ca21.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 31898 IP address blocks: 132.145.4.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3a:2e:dd:85:79:a8:5c:12:e8:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=4643875f-fffd-41fc-af52-22ab3a424a19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:db:22:b9:bb:ef:1e:bc:c6:c2:8c:78:55:65: 2e:32:41:5c:3f:9b:38:43:57:a7:fd:e4:81:8f:41: ff:5d:d2:dc:b1:26:ec:14:95:6f:17:64:08:6c:1f: 11:87:6a:1b:45:5f:78:66:ce:db:86:5b:e6:1c:5f: ab:da:49:1a:3c:bf:e1:18:f4:4a:08:e1:69:58:32: 3e:9b:bb:49:6c:e7:0f:c4:51:e9:f3:cb:c9:6c:a7: 18:eb:e2:0f:0a:93:ca:1f:d0:6c:35:bd:2f:25:af: bf:2a:28:ee:47:e8:37:ce:0b:86:3b:ee:07:a9:d6: db:13:b7:a1:cb:b0:9e:0c:6e:bd:a4:a6:fa:6c:95: fd:88:04:33:f8:6e:89:6d:b7:ec:b9:57:14:78:36: ee:57:f7:20:3c:ba:05:18:9a:5e:2b:d0:0a:8a:67: 76:48:7b:73:b5:a7:25:26:5f:df:80:fa:65:76:c4: d7:9b:b6:47:d8:b3:79:3b:e3:ec:39:48:81:96:ec: 03:ae:19:8d:07:29:fe:53:32:7a:31:83:b3:4d:be: bf:cf:08:c3:ed:47:a5:03:21:61:f3:32:da:c1:c6: d4:c5:6f:39:2e:c2:9b:d0:6a:a7:68:00:62:99:d6: e4:f8:54:53:27:6c:df:bd:49:07:85:9f:e9:60:9b: b5:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:BF:F8:49:12:0C:99:7E:81:73:5A:9C:69:DD:DA:18:65:50:6C:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3136b57f-6b27-3ba0-ac03-9a52a706ca21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 132.145.4.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:51:d4:16:98:9a:69:ab:e4:99:f4:59:9b:b9:b3:0a:2e:a1: 8f:5f:d0:77:78:b2:3c:03:68:ea:3a:09:fa:50:1b:62:90:ed: 65:fd:09:24:71:b0:5c:2f:71:8b:dd:40:66:a9:d0:33:f3:49: b1:a2:3d:7e:2e:47:7d:7b:af:f0:01:0b:8d:81:26:fd:93:57: 1d:d9:d2:51:53:bd:ce:2b:54:a2:89:6d:a1:17:5d:a9:2e:ef: df:e0:c2:50:2c:ca:ad:dd:cb:06:17:18:00:df:77:3a:ba:cb: 8b:11:f7:29:b3:7f:db:ca:c7:18:89:7a:2a:b9:7d:01:8f:67: 8e:d6:f6:c2:c0:99:85:4f:3d:eb:59:5f:16:ef:14:1a:c0:d5: 07:38:b1:93:9b:16:53:bc:9e:a3:cb:9f:71:00:cb:31:14:e2: a3:5e:b9:20:d8:d9:6b:08:2c:fa:3b:db:a5:98:6c:71:ff:02: 95:6d:b9:83:10:b0:fd:fe:7f:ea:41:a2:4e:32:16:0c:19:d5: 49:5d:42:fd:ea:25:7d:56:ec:b2:67:cb:a2:9a:ac:b9:2b:68: 94:e1:ea:ce:93:88:87:5b:78:40:ad:3c:41:fe:26:f4:34:cb: 47:7d:e1:94:e1:bc:f3:e2:e5:43:32:41:98:a9:23:7c:fd:a4: a4:4c:c1:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vOi7dhXmoXBLoHQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk NDY0Mzg3NWYtZmZmZC00MWZjLWFmNTItMjJhYjNhNDI0YTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNsiubvvHrzGwox4VWUuMkFcP5s4Q1en/eSB j0H/XdLcsSbsFJVvF2QIbB8Rh2obRV94Zs7bhlvmHF+r2kkaPL/hGPRKCOFpWDI+ m7tJbOcPxFHp88vJbKcY6+IPCpPKH9BsNb0vJa+/KijuR+g3zguGO+4HqdbbE7eh y7CeDG69pKb6bJX9iAQz+G6JbbfsuVcUeDbuV/cgPLoFGJpeK9AKimd2SHtztacl Jl/fgPpldsTXm7ZH2LN5O+PsOUiBluwDrhmNByn+UzJ6MYOzTb6/zwjD7UelAyFh 8zLawcbUxW85LsKb0GqnaABimdbk+FRTJ2zfvUkHhZ/pYJu1FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBq/+EkSDJl+gXNanGnd2hhlUGyWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMzEzNmI1N2YtNmIyNy0z YmEwLWFjMDMtOWE1MmE3MDZjYTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhJEEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB1R1BaYmmmr5Jn0WZu5swouoY9f0Hd4sjwDaOo6CfpQG2KQ7WX9CSRx sFwvcYvdQGap0DPzSbGiPX4uR317r/ABC42BJv2TVx3Z0lFTvc4rVKKJbaEXXaku 79/gwlAsyq3dywYXGADfdzq6y4sR9ymzf9vKxxiJeiq5fQGPZ47W9sLAmYVPPetZ XxbvFBrA1Qc4sZObFlO8nqPLn3EAyzEU4qNeuSDY2WsILPo726WYbHH/ApVtuYMQ sP3+f+pBok4yFgwZ1UldQv3qJX1W7LJny6KarLkraJTh6s6TiIdbeECtPEH+JvQ0 y0d94ZThvPPi5UMyQZipI3z9pKRMweE= -----END CERTIFICATE-----Generated at Mon Jul 13 02:49:42 2026 by rpki-client