$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3f52cceb-82a1-3ae6-84d8-534eaa5363fa.roa File: 3f52cceb-82a1-3ae6-84d8-534eaa5363fa.roa (raw, json) Hash identifier: NRPw19uUYydEpICuaPkDokZ8PpbwNGdfdzQFmD0I6lw= Subject key identifier: 6A:EC:18:BB:C5:06:2C:27:BC:86:5A:47:87:53:63:E4:F6:36:EC:F3 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E7204E06FABEA8130D51E5E00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3f52cceb-82a1-3ae6-84d8-534eaa5363fa.roa Signing time: Thu 09 Jul 2026 21:00:11 +0000 ROA not before: Thu 09 Jul 2026 21:00:11 +0000 ROA not after: Wed 07 Oct 2026 21:00:11 +0000 asID: 31898 IP address blocks: 148.116.104.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:72:04:e0:6f:ab:ea:81:30:d5:1e:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 9 21:00:11 2026 GMT Not After : Oct 7 21:00:11 2026 GMT Subject: CN=90db5b0f-ce33-433e-b0bf-3646714c786c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:17:fe:ed:27:ab:a8:04:d5:ea:37:9e:ec:d6: 8e:22:de:75:d4:89:e5:8e:74:86:c6:7d:57:ea:28: 31:e1:c1:2e:01:8f:17:a2:de:df:37:f5:80:61:a6: 12:7e:56:8f:92:80:6c:7e:ca:d8:e4:01:d7:b6:f6: 2f:17:7d:36:42:34:ba:5b:0f:a1:4a:3c:b0:27:76: 2f:ca:65:59:03:e0:7c:58:29:ce:7f:da:c6:31:45: 21:97:e1:68:13:36:78:b1:4e:9d:8b:f8:5c:9a:0e: 74:34:e0:33:c1:cc:51:cf:13:92:76:43:55:16:fb: cc:52:eb:64:ce:a7:ec:5b:29:37:25:fe:1c:bf:96: 5c:4c:d2:37:f5:b1:0f:4a:c5:38:a8:c6:60:54:3d: c0:30:82:ad:2a:22:77:ee:8a:58:99:95:5c:1e:af: a1:9b:92:6c:6b:94:a3:68:5f:35:0f:2c:7b:20:3a: 41:cb:3a:38:ab:39:4d:93:95:5c:e1:a2:39:f5:fd: 9b:d6:72:f7:f8:84:77:b1:bc:35:6d:16:f1:12:a0: d0:2c:81:ca:e5:d6:8f:1d:bc:42:a4:90:cf:29:84: da:c9:df:ae:a7:44:b3:31:27:82:97:45:64:15:a4: 50:01:ab:13:b8:16:8a:79:64:f7:48:89:27:af:7d: 1c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:EC:18:BB:C5:06:2C:27:BC:86:5A:47:87:53:63:E4:F6:36:EC:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3f52cceb-82a1-3ae6-84d8-534eaa5363fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 148.116.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:44:86:ee:2f:8a:ac:5b:a5:df:fd:fe:97:82:09:17:1c:38: 0f:13:57:ad:13:7c:36:7b:f4:a6:6f:8a:d0:0c:dd:47:17:7e: ae:72:99:e5:0f:48:69:40:e8:19:ae:9b:9d:4a:1f:34:15:b5: 0c:2b:c1:e0:4b:ae:7a:8b:8c:82:d9:fb:aa:63:89:18:86:be: bc:82:ce:b5:6a:f3:a2:13:44:70:0d:14:79:b6:eb:fe:18:a8: 64:06:0b:95:80:7a:d4:94:e7:fc:a3:e0:6e:e3:ba:30:57:8f: dd:f0:a9:18:36:c2:92:65:48:6b:98:e8:75:96:19:1f:3c:b4: c6:46:c2:93:72:15:ed:33:bb:d8:35:f4:7d:40:58:b6:06:ab: 99:ab:7a:3d:a4:9a:a0:1f:63:c1:f0:03:03:66:6c:fb:18:97: 18:66:21:0f:31:f6:18:51:90:3e:18:c2:94:5c:e6:07:8c:b5: 15:0d:7e:13:6d:52:83:ed:8d:50:68:53:bd:62:d4:19:e0:8d: a5:8f:13:0c:49:ef:0d:6a:b8:dd:7d:7c:bf:fe:dc:21:6e:f6: f1:2a:32:1d:5b:d6:25:3b:a2:97:d7:0d:ed:e2:d4:38:3e:6e: 85:64:c0:94:52:d5:9a:26:72:3e:fc:d4:c8:6b:6c:03:29:c5: fd:c9:6e:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5yBOBvq+qBMNUeXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcwOTIxMDAxMVoXDTI2MTAwNzIxMDAxMVowLzEtMCsGA1UEAxMk OTBkYjViMGYtY2UzMy00MzNlLWIwYmYtMzY0NjcxNGM3ODZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBf+7SerqATV6jee7NaOIt511InljnSGxn1X 6igx4cEuAY8Xot7fN/WAYaYSflaPkoBsfsrY5AHXtvYvF302QjS6Ww+hSjywJ3Yv ymVZA+B8WCnOf9rGMUUhl+FoEzZ4sU6di/hcmg50NOAzwcxRzxOSdkNVFvvMUutk zqfsWyk3Jf4cv5ZcTNI39bEPSsU4qMZgVD3AMIKtKiJ37opYmZVcHq+hm5Jsa5Sj aF81Dyx7IDpByzo4qzlNk5Vc4aI59f2b1nL3+IR3sbw1bRbxEqDQLIHK5daPHbxC pJDPKYTayd+up0SzMSeCl0VkFaRQAasTuBaKeWT3SIknr30c5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGrsGLvFBiwnvIZaR4dTY+T2NuzzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvM2Y1MmNjZWItODJhMS0z YWU2LTg0ZDgtNTM0ZWFhNTM2M2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDlHRoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9Ehu4viqxbpd/9/peCCRccOA8TV60TfDZ79KZvitAM3UcXfq5ymeUP SGlA6Bmum51KHzQVtQwrweBLrnqLjILZ+6pjiRiGvryCzrVq86ITRHANFHm26/4Y qGQGC5WAetSU5/yj4G7jujBXj93wqRg2wpJlSGuY6HWWGR88tMZGwpNyFe0zu9g1 9H1AWLYGq5mrej2kmqAfY8HwAwNmbPsYlxhmIQ8x9hhRkD4YwpRc5geMtRUNfhNt UoPtjVBoU71i1BngjaWPEwxJ7w1quN19fL/+3CFu9vEqMh1b1iU7opfXDe3i1Dg+ boVkwJRS1Zomcj781MhrbAMpxf3Jbrk= -----END CERTIFICATE-----Generated at Mon Jul 13 02:52:05 2026 by rpki-client