$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4edf815a-03f2-3138-af2a-25b8d01e79fc.roa File: 4edf815a-03f2-3138-af2a-25b8d01e79fc.roa (raw, json) Hash identifier: isfqAAlWxvTbCmsoJPlaGWWYnXzK9lqc9MCuoVeh9oc= Subject key identifier: BD:7B:90:D3:85:E9:2C:B0:84:C7:90:56:F7:2B:79:80:C7:36:6B:8F Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E709F73F54AD52C4750A9BC40 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4edf815a-03f2-3138-af2a-25b8d01e79fc.roa Signing time: Thu 09 Jul 2026 09:00:13 +0000 ROA not before: Thu 09 Jul 2026 09:00:13 +0000 ROA not after: Wed 07 Oct 2026 09:00:13 +0000 asID: 31898 IP address blocks: 168.129.240.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:70:9f:73:f5:4a:d5:2c:47:50:a9:bc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 9 09:00:13 2026 GMT Not After : Oct 7 09:00:13 2026 GMT Subject: CN=e54ff738-37c6-407a-b3db-bb49e23c09a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:e4:7b:f9:42:12:a4:03:80:43:7e:84:44:1d: 70:49:af:3a:fc:65:2a:b8:0e:59:ee:39:76:50:33: 75:f2:ec:47:eb:aa:29:7b:1b:c7:b4:ef:ec:d8:32: 38:e7:e7:f2:31:66:82:e1:59:53:18:0a:8b:81:ea: 56:53:eb:97:48:ce:67:c9:fe:4b:ef:4c:d8:6f:d8: d7:fa:c9:b4:8c:ef:fc:36:3b:0f:b9:9f:90:d7:5e: 8a:7a:57:af:58:ed:7f:a5:be:f4:e0:b4:e8:70:62: d8:e6:73:b6:18:31:01:aa:5d:0b:31:d5:8c:75:6b: b7:19:d0:38:5e:23:3b:4f:46:bc:55:20:57:7f:ad: 1c:f6:6d:84:5f:4f:1e:bc:a7:64:ce:77:0b:65:ec: d7:51:d6:0c:2e:fe:85:32:82:31:68:5c:b0:23:f3: 4a:2f:9a:f1:64:11:77:e5:c3:c4:13:3a:4d:a5:c8: 43:f2:e0:23:c2:0a:dc:5c:0b:88:49:75:c4:f2:da: 00:9d:c0:58:41:6c:22:f8:af:d9:17:2e:53:80:4b: 63:6a:36:ec:2a:2a:de:84:f0:0a:88:c2:40:92:6a: 26:3f:c6:06:cf:c3:d7:ba:34:78:de:0b:45:69:4d: d7:e1:21:43:ba:ed:df:ed:55:d5:2c:00:4f:d5:3d: 7b:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:7B:90:D3:85:E9:2C:B0:84:C7:90:56:F7:2B:79:80:C7:36:6B:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4edf815a-03f2-3138-af2a-25b8d01e79fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.129.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:92:e7:65:51:00:2a:6a:87:09:c0:ce:d1:37:d6:e3:c9:11: ca:c5:4e:f2:8b:83:fb:e3:f8:cc:19:46:e1:8f:70:23:fc:a4: 6f:87:a0:d7:06:fa:cb:27:3a:bf:13:35:01:e2:4a:0e:df:62: c0:24:d9:da:80:db:f7:7b:f7:98:6e:db:7d:ad:6d:5b:32:f3: f3:03:e9:b7:c4:f8:71:a9:82:3b:9f:c0:35:fd:7f:9d:af:65: b1:35:6d:04:72:64:36:68:32:90:30:0a:1d:76:bd:f3:72:be: 36:cd:2f:2d:56:9a:66:df:ab:cd:a0:91:6a:30:95:f2:87:fc: 95:2f:5b:a3:92:d0:a3:e6:a9:be:cc:ae:6f:ae:c6:89:a8:f1: 52:f1:1f:4a:bd:da:4d:13:1c:5b:7e:de:87:d6:80:7e:a5:85: 32:57:17:13:ff:9a:aa:1f:aa:ee:22:c9:fe:fd:94:6e:f5:6e: 39:9c:80:92:8a:0a:e4:c0:5b:b4:67:1c:a3:44:5b:47:31:bc: cd:be:71:66:1d:7f:21:3b:3f:bd:19:f2:58:46:f9:22:22:9b: c7:13:5d:a9:86:20:14:79:b9:f6:63:3a:48:af:b9:55:82:ba: fe:cf:98:11:53:c2:09:d5:dc:2f:79:65:56:23:44:d0:51:46: 66:66:3f:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5wn3P1StUsR1CpvEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcwOTA5MDAxM1oXDTI2MTAwNzA5MDAxM1owLzEtMCsGA1UEAxMk ZTU0ZmY3MzgtMzdjNi00MDdhLWIzZGItYmI0OWUyM2MwOWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuR7+UISpAOAQ36ERB1wSa86/GUquA5Z7jl2 UDN18uxH66opexvHtO/s2DI45+fyMWaC4VlTGAqLgepWU+uXSM5nyf5L70zYb9jX +sm0jO/8NjsPuZ+Q116KelevWO1/pb704LTocGLY5nO2GDEBql0LMdWMdWu3GdA4 XiM7T0a8VSBXf60c9m2EX08evKdkzncLZezXUdYMLv6FMoIxaFywI/NKL5rxZBF3 5cPEEzpNpchD8uAjwgrcXAuISXXE8toAncBYQWwi+K/ZFy5TgEtjajbsKirehPAK iMJAkmomP8YGz8PXujR43gtFaU3X4SFDuu3f7VXVLABP1T17KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL17kNOF6SywhMeQVvcreYDHNmuPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNGVkZjgxNWEtMDNmMi0z MTM4LWFmMmEtMjViOGQwMWU3OWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqIHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH2S52VRACpqhwnAztE31uPJEcrFTvKLg/vj+MwZRuGPcCP8pG+HoNcG +ssnOr8TNQHiSg7fYsAk2dqA2/d795hu232tbVsy8/MD6bfE+HGpgjufwDX9f52v ZbE1bQRyZDZoMpAwCh12vfNyvjbNLy1Wmmbfq82gkWowlfKH/JUvW6OS0KPmqb7M rm+uxomo8VLxH0q92k0THFt+3ofWgH6lhTJXFxP/mqofqu4iyf79lG71bjmcgJKK CuTAW7RnHKNEW0cxvM2+cWYdfyE7P70Z8lhG+SIim8cTXamGIBR5ufZjOkivuVWC uv7PmBFTwgnV3C95ZVYjRNBRRmZmP9I= -----END CERTIFICATE-----Generated at Mon Jul 13 02:47:04 2026 by rpki-client