$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3fc70aae-db76-3dcb-9528-331f12650b38.roa File: 3fc70aae-db76-3dcb-9528-331f12650b38.roa (raw, json) Hash identifier: x1NKdz2pOL+Yp4+3Ds2nl+zOa2pnD2cRRZ80d4vGM7I= Subject key identifier: 1F:7F:BB:9D:66:42:CF:51:27:15:B9:48:85:BE:8D:A3:42:3A:D3:9F Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E84B22E83CD2ED1D9FD93DE80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3fc70aae-db76-3dcb-9528-331f12650b38.roa Signing time: Thu 16 Jul 2026 13:34:14 +0000 ROA not before: Thu 16 Jul 2026 13:34:14 +0000 ROA not after: Wed 14 Oct 2026 13:34:14 +0000 asID: 2763 IP address blocks: 156.151.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:84:b2:2e:83:cd:2e:d1:d9:fd:93:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 16 13:34:14 2026 GMT Not After : Oct 14 13:34:14 2026 GMT Subject: CN=0ffbb900-f6d4-4d24-b89e-4676593c8166 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9d:62:ff:12:55:6f:f4:3e:24:d6:9b:07:af: 05:3e:ef:c8:9b:d2:32:0e:12:b0:56:08:8a:86:39: 6b:0f:b7:79:05:e4:6d:3b:8c:34:33:72:c9:ac:a5: d3:7d:8b:b7:aa:44:48:4b:42:3b:f1:e4:8d:22:63: 0f:ba:e1:92:37:c4:41:4c:56:35:e8:1e:43:12:4f: 57:db:a7:76:ac:16:d8:08:88:46:57:90:00:18:2b: 4d:8e:22:dc:7e:7f:e7:f5:c3:cb:45:5f:35:4b:f0: e7:6a:00:85:96:21:e6:6a:ae:61:69:fe:f4:d7:e4: 2a:bd:c1:b2:8a:28:de:a0:99:24:17:c8:d0:b0:d5: 7b:73:f6:58:21:9a:1b:1d:5c:46:52:b8:31:fa:e1: 94:a1:0d:d4:ee:26:df:66:cc:b3:93:e0:b7:9c:12: 9b:a5:d2:60:e1:f5:2d:70:ad:89:71:7d:87:eb:ad: 12:97:00:09:5d:37:5d:53:c8:b2:10:00:6b:a1:e0: f9:fe:df:e1:b2:0c:da:b2:c1:4a:1d:b5:04:9f:82: b3:d9:1d:a1:32:80:a9:73:34:ff:13:e4:c2:44:f7: 11:64:e2:e9:fe:18:ab:82:9f:6d:b7:c4:93:b2:8b: d2:34:c4:cf:d4:11:24:82:f1:0e:5a:f7:9f:11:e0: 8b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:7F:BB:9D:66:42:CF:51:27:15:B9:48:85:BE:8D:A3:42:3A:D3:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3fc70aae-db76-3dcb-9528-331f12650b38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 156.151.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:fb:0f:8a:87:03:4d:d2:e7:2f:4f:d8:0f:62:5f:3c:6c:1b: ac:64:5f:1c:69:da:55:4d:7f:ac:fa:fd:75:55:8d:23:92:33: 92:05:9d:22:4e:80:3d:3d:cb:36:3a:93:ce:81:9c:6d:a0:19: b7:78:d5:6f:aa:be:09:7d:c2:e4:c9:74:4d:08:af:23:e6:83: 50:3f:20:ed:51:15:d1:13:a5:bd:af:00:fa:53:1e:ea:96:c7: b1:7f:19:9f:7c:08:c6:00:7b:13:44:97:ab:24:d2:23:76:48: f6:dc:a4:f6:29:6e:0e:e7:54:c2:9a:94:04:ff:e3:64:55:d3: 90:d8:27:81:62:51:fb:45:50:73:3a:2b:9b:5d:c6:29:66:ab: c6:b6:04:5b:51:08:eb:c4:1a:7b:3e:6e:29:4e:1e:50:4d:fe: 59:f8:63:c8:08:0b:8b:bd:33:ba:2c:33:26:5f:ec:77:f4:93: 66:d0:76:de:87:0f:2b:02:f3:a0:5c:af:f4:6b:21:b4:29:f2: d7:19:96:f9:7e:de:ec:e7:f3:12:ab:b8:84:87:68:98:bf:72: c2:89:0d:6d:06:82:74:6c:b9:1d:2d:3c:d5:d0:0a:62:75:9b: 4e:9b:60:85:0a:9e:84:6f:68:71:2b:a1:b7:8b:3d:ea:b9:99: 3b:1f:2b:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6Esi6DzS7R2f2T3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcxNjEzMzQxNFoXDTI2MTAxNDEzMzQxNFowLzEtMCsGA1UEAxMk MGZmYmI5MDAtZjZkNC00ZDI0LWI4OWUtNDY3NjU5M2M4MTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZ1i/xJVb/Q+JNabB68FPu/Im9IyDhKwVgiK hjlrD7d5BeRtO4w0M3LJrKXTfYu3qkRIS0I78eSNImMPuuGSN8RBTFY16B5DEk9X 26d2rBbYCIhGV5AAGCtNjiLcfn/n9cPLRV81S/DnagCFliHmaq5haf701+QqvcGy iijeoJkkF8jQsNV7c/ZYIZobHVxGUrgx+uGUoQ3U7ibfZsyzk+C3nBKbpdJg4fUt cK2JcX2H660SlwAJXTddU8iyEABroeD5/t/hsgzassFKHbUEn4Kz2R2hMoCpczT/ E+TCRPcRZOLp/hirgp9tt8STsovSNMTP1BEkgvEOWvefEeCLjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB9/u51mQs9RJxW5SIW+jaNCOtOfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvM2ZjNzBhYWUtZGI3Ni0z ZGNiLTk1MjgtMzMxZjEyNjUwYjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJfbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB77D4qHA03S5y9P2A9iXzxsG6xkXxxp2lVNf6z6/XVVjSOSM5IFnSJO gD09yzY6k86BnG2gGbd41W+qvgl9wuTJdE0IryPmg1A/IO1RFdETpb2vAPpTHuqW x7F/GZ98CMYAexNEl6sk0iN2SPbcpPYpbg7nVMKalAT/42RV05DYJ4FiUftFUHM6 K5tdxilmq8a2BFtRCOvEGns+bilOHlBN/ln4Y8gIC4u9M7osMyZf7Hf0k2bQdt6H DysC86Bcr/RrIbQp8tcZlvl+3uzn8xKruISHaJi/csKJDW0GgnRsuR0tPNXQCmJ1 m06bYIUKnoRvaHErobeLPeq5mTsfK3M= -----END CERTIFICATE-----Generated at Wed Jul 22 02:31:35 2026 by rpki-client