$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/40f3578c-8ddd-3ae7-8e46-ce25193b583f.roa File: 40f3578c-8ddd-3ae7-8e46-ce25193b583f.roa (raw, json) Hash identifier: fSSa8CmZzMft4F9mkOEDDrG9oRUw6EUNXbJSpJCUiK8= Subject key identifier: 43:FD:07:14:AF:A1:BE:2C:C4:E0:3B:E9:47:1B:80:12:E4:4D:90:BB Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E6DD4D4039E42486B1363B800 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/40f3578c-8ddd-3ae7-8e46-ce25193b583f.roa Signing time: Wed 08 Jul 2026 09:00:12 +0000 ROA not before: Wed 08 Jul 2026 09:00:12 +0000 ROA not after: Tue 06 Oct 2026 09:00:12 +0000 asID: 31898 IP address blocks: 129.148.184.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6d:d4:d4:03:9e:42:48:6b:13:63:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 8 09:00:12 2026 GMT Not After : Oct 6 09:00:12 2026 GMT Subject: CN=79d32f7f-16fe-4156-8fda-c0fbb5c93b54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:24:a3:3c:1a:83:94:88:8a:c3:45:a6:8f:4b: 68:ae:b7:c3:51:ad:ea:5e:17:2e:6b:3d:3e:4f:7e: e1:e6:1d:49:1a:8c:83:1c:e8:d4:ee:ff:15:31:d3: 7b:6c:74:02:d8:53:7b:d0:7f:41:90:b6:bf:13:98: de:a4:b5:56:01:ce:a3:52:7c:c6:5f:17:bc:7d:4f: 76:c7:c9:db:6e:ee:50:a1:fe:2d:7a:47:fd:4e:8a: 3e:b3:c7:e6:32:d8:f1:3a:62:4c:d8:ec:85:a9:fb: 8b:25:1d:4f:3a:25:01:4f:41:de:a4:cf:88:ac:30: 90:aa:d6:e1:0f:62:64:7d:e3:a1:83:f0:fd:04:2c: 18:8f:e9:4a:24:10:b7:a2:70:ee:05:58:88:b6:fa: f9:3b:8d:4a:48:7f:97:fc:13:09:40:40:35:53:a5: 83:20:d9:70:02:5a:dd:f2:56:e3:95:6f:25:b0:f7: 9f:49:61:3c:51:08:6f:86:b6:a0:ec:1c:fd:b9:06: 4b:77:c2:91:93:df:4c:3b:b6:e2:7f:8e:eb:34:52: 53:41:c9:7e:18:6c:f7:c0:49:6d:ec:bf:c4:ac:ee: 6d:a8:f9:b5:ee:ca:a2:5a:27:e0:ba:a1:76:23:b5: 84:18:36:9f:f8:d8:30:3b:be:c5:67:4c:17:4e:20: 47:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:FD:07:14:AF:A1:BE:2C:C4:E0:3B:E9:47:1B:80:12:E4:4D:90:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/40f3578c-8ddd-3ae7-8e46-ce25193b583f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.148.184.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:d2:bd:d8:ed:41:7d:ea:e0:2b:f1:e8:44:23:e0:5b:6b:dd: f9:68:d9:4c:cb:c3:b3:71:09:41:b2:97:3b:17:76:9a:c9:79: cb:8b:4a:c1:67:17:89:d8:ec:13:3f:8c:b6:1d:6e:15:56:ea: 61:03:b0:86:71:50:49:ba:fd:bf:fa:a7:90:51:2a:07:23:b0: 88:30:9d:ee:67:c6:68:01:9d:23:08:aa:5d:69:68:ec:bb:17: 7b:48:7d:bf:a1:b1:4e:37:7a:ed:37:a4:75:5a:55:8f:90:38: a1:30:0c:ab:e1:5b:07:9d:10:30:df:a9:f1:48:ca:41:b7:1b: 58:9c:18:bd:2c:20:89:09:74:7f:bf:1e:26:8e:43:f6:7b:1a: dc:e5:03:06:59:f8:8d:97:a1:3d:4f:74:f3:d2:04:3d:b3:d1: f9:ef:0c:25:3d:cb:3e:fe:49:67:76:7e:ee:77:bb:09:f2:83: 0c:3e:4c:ce:eb:ad:60:e2:83:77:aa:1f:2a:84:f0:d1:ff:9f: b9:3f:48:2d:d1:d0:84:f3:e6:f3:0d:52:68:c2:41:22:bc:ad: 91:8c:97:ef:e5:86:d4:8e:d1:71:b5:9e:f9:f9:fd:c1:df:56: fe:ab:a6:b8:f3:4b:76:b7:3d:b7:95:5f:fc:84:81:0c:06:53: a2:0d:8b:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5t1NQDnkJIaxNjuAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcwODA5MDAxMloXDTI2MTAwNjA5MDAxMlowLzEtMCsGA1UEAxMk NzlkMzJmN2YtMTZmZS00MTU2LThmZGEtYzBmYmI1YzkzYjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCSjPBqDlIiKw0Wmj0torrfDUa3qXhcuaz0+ T37h5h1JGoyDHOjU7v8VMdN7bHQC2FN70H9BkLa/E5jepLVWAc6jUnzGXxe8fU92 x8nbbu5Qof4tekf9Too+s8fmMtjxOmJM2OyFqfuLJR1POiUBT0HepM+IrDCQqtbh D2JkfeOhg/D9BCwYj+lKJBC3onDuBViItvr5O41KSH+X/BMJQEA1U6WDINlwAlrd 8lbjlW8lsPefSWE8UQhvhrag7Bz9uQZLd8KRk99MO7bif47rNFJTQcl+GGz3wElt 7L/ErO5tqPm17sqiWifguqF2I7WEGDaf+NgwO77FZ0wXTiBHbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEP9BxSvob4sxOA76UcbgBLkTZC7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNDBmMzU3OGMtOGRkZC0z YWU3LThlNDYtY2UyNTE5M2I1ODNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgZS4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACvSvdjtQX3q4Cvx6EQj4Ftr3flo2UzLw7NxCUGylzsXdprJecuLSsFn F4nY7BM/jLYdbhVW6mEDsIZxUEm6/b/6p5BRKgcjsIgwne5nxmgBnSMIql1paOy7 F3tIfb+hsU43eu03pHVaVY+QOKEwDKvhWwedEDDfqfFIykG3G1icGL0sIIkJdH+/ HiaOQ/Z7GtzlAwZZ+I2XoT1PdPPSBD2z0fnvDCU9yz7+SWd2fu53uwnygww+TM7r rWDig3eqHyqE8NH/n7k/SC3R0ITz5vMNUmjCQSK8rZGMl+/lhtSO0XG1nvn5/cHf Vv6rprjzS3a3PbeVX/yEgQwGU6INi4o= -----END CERTIFICATE-----Generated at Mon Jul 13 02:49:14 2026 by rpki-client