$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3f870c90-a8f7-3ece-8eea-81ee04959770.roa File: 3f870c90-a8f7-3ece-8eea-81ee04959770.roa (raw, json) Hash identifier: hSoTtxuKrVWFF/wBCs+aj1+TXOResa8XompSa8Mt64A= Subject key identifier: 24:38:88:CE:8C:E0:10:37:72:14:B1:21:AF:9D:8E:87:06:EA:88:A6 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E4AEF70B9EFC3ABE0F0BEC000 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3f870c90-a8f7-3ece-8eea-81ee04959770.roa Signing time: Thu 25 Jun 2026 21:00:12 +0000 ROA not before: Thu 25 Jun 2026 21:00:12 +0000 ROA not after: Wed 23 Sep 2026 21:00:12 +0000 asID: 31898 IP address blocks: 129.159.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4a:ef:70:b9:ef:c3:ab:e0:f0:be:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jun 25 21:00:12 2026 GMT Not After : Sep 23 21:00:12 2026 GMT Subject: CN=12fb6ac5-2a01-4b56-beae-0661fbf45d8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:9d:62:83:e8:f3:38:33:26:65:a0:31:86:f3: 29:b2:88:ca:0d:1b:7c:31:40:6e:34:bf:0b:b3:73: fe:fc:9e:78:d5:7f:91:17:21:26:bf:1f:c3:d3:09: 47:73:8d:9f:14:f9:7b:22:b0:b9:91:e9:c1:af:37: 2b:30:30:d8:8e:85:b5:ab:67:73:18:2c:45:bd:fd: fe:59:06:ab:af:be:a4:3c:f9:f3:d7:52:15:ff:8e: 63:06:cf:ef:e6:0d:4c:b7:20:be:17:76:9b:fb:cc: bd:21:9f:ed:fb:01:28:7f:ba:7e:3a:ca:34:04:27: 26:8a:64:df:4e:ca:87:c3:05:a4:f1:e4:3f:5d:23: 0b:b2:d0:ea:1b:a3:cb:73:c8:99:c7:b6:62:46:8c: b2:05:f8:af:b0:41:76:ed:24:ca:a9:86:3c:6a:8d: ec:18:ea:80:b8:2a:c5:a0:5e:f2:ad:59:e4:e0:6c: 67:0b:b4:67:eb:a7:ad:91:80:6c:e4:0b:9b:e0:97: 1c:61:59:5e:13:bb:bf:23:36:ef:ff:48:aa:9e:9b: 77:7f:b6:ef:c2:3c:dd:fa:b7:0e:a4:25:a2:d9:ad: ac:df:be:07:d0:02:a4:6c:b6:dd:fa:7d:03:88:23: 76:4c:5e:ad:27:1c:ea:46:bd:b9:8a:1b:aa:c8:58: 62:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:38:88:CE:8C:E0:10:37:72:14:B1:21:AF:9D:8E:87:06:EA:88:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3f870c90-a8f7-3ece-8eea-81ee04959770.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.159.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:db:a1:64:5d:cd:0e:09:71:fc:ea:f4:0e:0d:0a:59:3e:3f: 08:66:b5:6f:83:6e:79:90:63:ba:19:dd:47:c9:a4:12:c0:38: de:bc:2f:7b:2e:61:53:9f:4f:b0:41:54:d7:2f:7c:ca:55:45: 61:51:7f:d8:05:0c:ba:5c:1a:1a:df:28:f0:a1:9f:ca:a4:df: 6c:f0:a9:3f:3d:e1:27:11:97:d3:33:38:14:06:e6:07:ab:65: ff:cb:ac:6d:72:01:90:1e:03:14:ab:2e:2b:df:92:e7:ee:fa: ac:4d:0b:97:2a:db:7b:14:e9:23:07:48:09:54:25:4d:96:a0: c8:28:0d:73:de:09:7a:e2:71:c0:cb:e5:8f:e7:51:24:a5:5c: 6d:69:63:64:80:c3:b3:b0:68:fa:35:35:65:04:3c:31:b8:a8: 3b:1c:11:24:e0:89:78:f7:1a:dd:3e:f7:b8:fa:6c:b2:c9:9e: e2:a2:87:d1:b1:c0:7a:a2:17:4e:1c:17:f0:67:cb:8d:70:1d: 20:b6:7c:0f:67:f7:36:11:a4:97:d2:e2:ce:24:7d:14:0d:34: a5:23:13:32:76:6f:da:12:37:e6:68:7c:83:32:79:21:2e:ce: 4f:a1:97:f8:cd:a7:cd:12:02:05:8f:35:1e:2e:c5:7e:26:d8: 53:24:07:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5K73C578Or4PC+wAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDYyNTIxMDAxMloXDTI2MDkyMzIxMDAxMlowLzEtMCsGA1UEAxMk MTJmYjZhYzUtMmEwMS00YjU2LWJlYWUtMDY2MWZiZjQ1ZDhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgp1ig+jzODMmZaAxhvMpsojKDRt8MUBuNL8L s3P+/J541X+RFyEmvx/D0wlHc42fFPl7IrC5kenBrzcrMDDYjoW1q2dzGCxFvf3+ WQarr76kPPnz11IV/45jBs/v5g1MtyC+F3ab+8y9IZ/t+wEof7p+Oso0BCcmimTf TsqHwwWk8eQ/XSMLstDqG6PLc8iZx7ZiRoyyBfivsEF27STKqYY8ao3sGOqAuCrF oF7yrVnk4GxnC7Rn66etkYBs5Aub4JccYVleE7u/Izbv/0iqnpt3f7bvwjzd+rcO pCWi2a2s374H0AKkbLbd+n0DiCN2TF6tJxzqRr25ihuqyFhihwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCQ4iM6M4BA3chSxIa+djocG6oimMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvM2Y4NzBjOTAtYThmNy0z ZWNlLThlZWEtODFlZTA0OTU5NzcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGgZ9AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACHboWRdzQ4Jcfzq9A4NClk+PwhmtW+DbnmQY7oZ3UfJpBLAON68L3su YVOfT7BBVNcvfMpVRWFRf9gFDLpcGhrfKPChn8qk32zwqT894ScRl9MzOBQG5ger Zf/LrG1yAZAeAxSrLivfkufu+qxNC5cq23sU6SMHSAlUJU2WoMgoDXPeCXriccDL 5Y/nUSSlXG1pY2SAw7OwaPo1NWUEPDG4qDscESTgiXj3Gt0+97j6bLLJnuKih9Gx wHqiF04cF/Bny41wHSC2fA9n9zYRpJfS4s4kfRQNNKUjEzJ2b9oSN+ZofIMyeSEu zk+hl/jNp80SAgWPNR4uxX4m2FMkBxg= -----END CERTIFICATE-----Generated at Mon Jul 13 02:49:12 2026 by rpki-client