$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/589cb6b5-5ca7-34fb-86fd-2880c365db8c.roa File: 589cb6b5-5ca7-34fb-86fd-2880c365db8c.roa (raw, json) Hash identifier: GKTJdkMXO9gfK/XV+dKkKepDFXTEB8GdFWFsjcLJGn0= Subject key identifier: BA:6B:C1:B0:12:A2:E2:93:67:21:9C:06:37:32:D0:D4:87:08:4C:55 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E7A64F7B6914680D0F333A380 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/589cb6b5-5ca7-34fb-86fd-2880c365db8c.roa Signing time: Sun 12 Jul 2026 21:00:13 +0000 ROA not before: Sun 12 Jul 2026 21:00:13 +0000 ROA not after: Sat 10 Oct 2026 21:00:13 +0000 asID: 31898 IP address blocks: 168.129.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7a:64:f7:b6:91:46:80:d0:f3:33:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 12 21:00:13 2026 GMT Not After : Oct 10 21:00:13 2026 GMT Subject: CN=8925b26a-4b1a-496b-a4ed-beb38d82224c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:cc:77:6d:ea:86:0d:90:57:b1:91:31:d4:e3: 58:c8:8e:12:a4:eb:a4:e3:91:1c:0c:ab:96:27:30: dd:d5:3b:85:8b:50:d4:f3:5a:ad:8d:dc:49:fd:30: 12:1e:47:45:91:d3:93:9e:94:da:a6:fc:dc:d4:d6: 7a:1f:93:8c:97:9b:d5:c3:ab:39:03:69:ba:36:e0: ef:d2:6a:67:ec:ea:c5:7d:dd:55:7d:b0:7c:8c:64: 9b:b3:0b:d5:18:5e:38:b6:84:46:6e:df:ae:b8:7d: e2:fa:2f:89:c1:d6:ed:4d:89:62:d3:db:a4:76:b0: 06:0b:b0:53:f2:ce:ba:49:ac:da:f1:e3:16:58:52: 43:22:0b:1c:dc:66:fe:71:5d:70:e1:eb:c6:85:ea: e0:7e:13:d0:e5:11:51:00:22:d8:25:e4:95:2d:5b: 32:ad:b0:6c:87:1b:b4:c6:68:59:33:25:4c:b9:20: 27:26:2c:ed:74:87:ff:27:3e:d6:8e:c0:3f:da:35: a1:16:79:dc:a0:03:4e:5a:18:ba:39:96:a0:2c:ea: 1e:25:5c:d9:bb:8f:23:58:26:4b:be:e0:2a:14:7b: c3:f4:6f:ea:20:ca:4e:9c:f5:f8:c1:b8:9c:43:7f: d5:5a:a2:e3:af:b8:07:de:83:83:a7:9a:e4:b8:ce: 53:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:6B:C1:B0:12:A2:E2:93:67:21:9C:06:37:32:D0:D4:87:08:4C:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/589cb6b5-5ca7-34fb-86fd-2880c365db8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.129.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:a6:b7:dd:92:30:f9:30:ed:81:c3:62:b8:3a:a2:5f:42:1e: 4e:20:95:ec:37:5e:74:46:42:b6:c1:7e:16:68:9f:87:80:cd: 60:e2:d7:28:a7:80:3b:40:c5:a9:de:b8:ae:ce:05:25:63:49: 9c:e4:b2:9d:10:38:ee:05:fc:86:4f:cc:8a:be:5c:31:6c:a6: d5:bc:29:30:94:3e:8a:d5:5f:11:39:d7:39:6c:cb:0d:55:cb: 2a:ea:fa:40:54:d9:ca:55:bc:bf:95:19:8a:15:ce:ac:b1:0d: 9d:f7:b4:4a:a3:4e:de:5c:1c:c9:b9:99:e7:1d:60:36:87:57: 69:55:c1:50:9c:ea:04:a7:44:2c:ce:33:bd:f8:ca:96:75:8c: ae:27:69:d8:d0:67:ec:6c:ef:23:a7:14:f8:41:66:18:f4:2d: 08:92:8a:88:e3:16:19:bf:53:fb:59:3c:28:c4:75:9d:83:47: d8:51:d3:6f:74:02:35:95:dc:72:57:4d:b1:21:ab:e6:37:28: fd:04:91:06:cf:c2:02:96:6d:cd:17:95:af:a7:bc:bc:00:5d: 90:ba:6d:e8:ec:dd:f9:f1:97:3d:aa:86:eb:32:2c:ad:03:4e: e6:ea:a9:db:e3:3e:f8:a5:b7:b4:c6:60:6e:9d:2d:0a:85:7b: e6:8b:a5:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE56ZPe2kUaA0PMzo4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcxMjIxMDAxM1oXDTI2MTAxMDIxMDAxM1owLzEtMCsGA1UEAxMk ODkyNWIyNmEtNGIxYS00OTZiLWE0ZWQtYmViMzhkODIyMjRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcx3beqGDZBXsZEx1ONYyI4SpOuk45EcDKuW JzDd1TuFi1DU81qtjdxJ/TASHkdFkdOTnpTapvzc1NZ6H5OMl5vVw6s5A2m6NuDv 0mpn7OrFfd1VfbB8jGSbswvVGF44toRGbt+uuH3i+i+JwdbtTYli09ukdrAGC7BT 8s66Saza8eMWWFJDIgsc3Gb+cV1w4evGhergfhPQ5RFRACLYJeSVLVsyrbBshxu0 xmhZMyVMuSAnJiztdIf/Jz7WjsA/2jWhFnncoANOWhi6OZagLOoeJVzZu48jWCZL vuAqFHvD9G/qIMpOnPX4wbicQ3/VWqLjr7gH3oODp5rkuM5T3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLprwbASouKTZyGcBjcy0NSHCExVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNTg5Y2I2YjUtNWNhNy0z NGZiLTg2ZmQtMjg4MGMzNjVkYjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqIGgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACumt92SMPkw7YHDYrg6ol9CHk4glew3XnRGQrbBfhZon4eAzWDi1yin gDtAxaneuK7OBSVjSZzksp0QOO4F/IZPzIq+XDFsptW8KTCUPorVXxE51zlsyw1V yyrq+kBU2cpVvL+VGYoVzqyxDZ33tEqjTt5cHMm5mecdYDaHV2lVwVCc6gSnRCzO M734ypZ1jK4nadjQZ+xs7yOnFPhBZhj0LQiSiojjFhm/U/tZPCjEdZ2DR9hR0290 AjWV3HJXTbEhq+Y3KP0EkQbPwgKWbc0Xla+nvLwAXZC6bejs3fnxlz2qhusyLK0D TubqqdvjPvilt7TGYG6dLQqFe+aLpeo= -----END CERTIFICATE-----Generated at Mon Jul 13 02:49:16 2026 by rpki-client