$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3b235726-c232-318e-a28f-85863c8c83c2.roa File: 3b235726-c232-318e-a28f-85863c8c83c2.roa (raw, json) Hash identifier: iK4TcCFN1lyrTLZwEfQAwmUCkRXJFax0hlFbZ4JOIjs= Subject key identifier: C2:E4:FE:FB:FD:A9:DC:03:F3:14:9E:AC:91:CA:BF:15:F1:77:BA:12 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E709F713377750EEA18C11B30 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3b235726-c232-318e-a28f-85863c8c83c2.roa Signing time: Thu 09 Jul 2026 09:00:13 +0000 ROA not before: Thu 09 Jul 2026 09:00:13 +0000 ROA not after: Wed 07 Oct 2026 09:00:13 +0000 asID: 31898 IP address blocks: 129.146.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:70:9f:71:33:77:75:0e:ea:18:c1:1b:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 9 09:00:13 2026 GMT Not After : Oct 7 09:00:13 2026 GMT Subject: CN=feeea0a5-d7b7-4924-a7b8-fa1e9621b2c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:9c:99:0c:49:6f:34:10:b4:82:31:be:f3:20: 71:d5:d3:42:d0:65:18:68:54:ab:81:e6:50:47:a8: 27:c0:fc:da:27:ee:4e:a8:36:7e:4c:b8:a7:5b:f5: b0:26:19:1f:56:a7:32:3f:6f:b0:b9:e7:b3:ee:85: e2:53:dc:8a:d8:9e:9b:da:e5:b9:5b:63:b6:3a:63: 4c:7e:13:19:e3:23:af:04:49:38:f4:eb:70:da:d2: f4:f9:b1:36:99:99:42:67:65:88:a8:4e:f0:2c:fb: 6c:5c:c1:93:40:ce:95:08:69:db:f6:b1:59:f7:6b: 3e:98:fe:44:31:d3:18:f8:95:b8:1c:86:a9:d6:b7: 64:5e:57:9c:04:f7:2f:dd:7e:ff:5c:8b:25:0b:81: de:18:9b:da:fb:bc:7f:e0:ea:59:16:40:53:9e:47: bc:7b:57:b1:f4:2f:3d:33:ec:7a:91:7d:bb:5f:8a: 9d:ee:52:b0:7f:0a:ae:cd:7d:bb:cc:d8:ec:75:e1: 72:eb:af:67:8b:61:8f:20:31:e1:35:f2:17:cc:7c: 38:f4:34:c0:79:b7:88:2f:34:98:5f:5f:3b:f7:a8: 97:be:9f:02:16:19:d7:c5:93:09:9d:a6:27:86:b9: 18:04:74:c3:5a:9f:62:0b:10:ed:85:ea:ab:b9:d5: d8:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:E4:FE:FB:FD:A9:DC:03:F3:14:9E:AC:91:CA:BF:15:F1:77:BA:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3b235726-c232-318e-a28f-85863c8c83c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.146.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:ea:25:fa:11:dc:53:d7:e6:07:fe:c7:60:40:61:e8:f9:cd: 09:30:9d:ff:c7:0b:34:e2:9e:24:14:9d:50:71:61:14:58:19: 8c:f9:f1:cf:ef:6b:ed:dc:c1:b2:ba:11:6f:c5:32:d1:04:e7: 31:6a:5b:4a:2b:ca:ae:aa:8e:47:6b:c3:a9:f6:37:27:ce:cb: 85:5d:9e:58:51:27:a3:36:86:96:23:ec:f5:9a:44:c7:c0:d3: c8:82:6c:e0:f5:22:56:d5:bb:5c:04:06:fa:01:9d:52:7f:e9: 59:a8:ff:1a:5b:fb:7e:61:7a:67:22:a4:56:3b:2b:df:50:9b: 58:27:52:ba:4d:66:9f:32:f2:b8:3f:1d:32:f8:c0:3c:eb:b0: d9:c2:eb:7c:c7:c1:4c:e5:60:81:40:c8:ad:10:d5:2f:0e:72: 6f:3c:f3:0f:15:d6:23:04:99:21:44:64:71:af:51:99:00:f8: 28:fb:30:6e:20:b0:ec:55:c1:6a:f1:bd:27:10:c2:84:b7:a4: ec:bb:a4:33:9c:f5:ef:e6:7a:01:73:40:aa:fe:e9:0a:e7:4d: 15:d4:cb:c2:08:49:a8:d3:be:23:ac:13:8f:68:c3:c3:9c:27: 6e:3d:50:69:d8:cc:0a:02:8f:c8:6d:f7:36:d7:8a:f4:27:ca: 3f:b6:69:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5wn3Ezd3UO6hjBGzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcwOTA5MDAxM1oXDTI2MTAwNzA5MDAxM1owLzEtMCsGA1UEAxMk ZmVlZWEwYTUtZDdiNy00OTI0LWE3YjgtZmExZTk2MjFiMmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ZyZDElvNBC0gjG+8yBx1dNC0GUYaFSrgeZQ R6gnwPzaJ+5OqDZ+TLinW/WwJhkfVqcyP2+wueez7oXiU9yK2J6b2uW5W2O2OmNM fhMZ4yOvBEk49Otw2tL0+bE2mZlCZ2WIqE7wLPtsXMGTQM6VCGnb9rFZ92s+mP5E MdMY+JW4HIap1rdkXlecBPcv3X7/XIslC4HeGJva+7x/4OpZFkBTnke8e1ex9C89 M+x6kX27X4qd7lKwfwquzX27zNjsdeFy669ni2GPIDHhNfIXzHw49DTAebeILzSY X18796iXvp8CFhnXxZMJnaYnhrkYBHTDWp9iCxDtheqrudXYJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMLk/vv9qdwD8xSerJHKvxXxd7oSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvM2IyMzU3MjYtYzIzMi0z MThlLWEyOGYtODU4NjNjOGM4M2MyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgZIcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIbqJfoR3FPX5gf+x2BAYej5zQkwnf/HCzTiniQUnVBxYRRYGYz58c/v a+3cwbK6EW/FMtEE5zFqW0oryq6qjkdrw6n2NyfOy4VdnlhRJ6M2hpYj7PWaRMfA 08iCbOD1IlbVu1wEBvoBnVJ/6Vmo/xpb+35hemcipFY7K99Qm1gnUrpNZp8y8rg/ HTL4wDzrsNnC63zHwUzlYIFAyK0Q1S8Ocm888w8V1iMEmSFEZHGvUZkA+Cj7MG4g sOxVwWrxvScQwoS3pOy7pDOc9e/megFzQKr+6QrnTRXUy8IISajTviOsE49ow8Oc J249UGnYzAoCj8ht9zbXivQnyj+2aZw= -----END CERTIFICATE-----Generated at Mon Jul 13 02:54:43 2026 by rpki-client