$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5e79704e-eb03-3bb9-8ba0-1326acd68af6.roa File: 5e79704e-eb03-3bb9-8ba0-1326acd68af6.roa (raw, json) Hash identifier: bKws0g+UlURBQxSa9327ZsQyCB3ZJX/B2doHqGcVyMc= Subject key identifier: D9:31:12:DE:E6:2A:6F:4C:DF:70:3E:FB:A7:4B:09:EC:B0:33:90:8D Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E683F632C7A7785A25B09F580 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5e79704e-eb03-3bb9-8ba0-1326acd68af6.roa Signing time: Mon 06 Jul 2026 09:00:12 +0000 ROA not before: Mon 06 Jul 2026 09:00:12 +0000 ROA not after: Sun 04 Oct 2026 09:00:12 +0000 asID: 31898 IP address blocks: 158.247.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:68:3f:63:2c:7a:77:85:a2:5b:09:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 6 09:00:12 2026 GMT Not After : Oct 4 09:00:12 2026 GMT Subject: CN=c79cd4bb-1c8a-4c96-aa02-13c17e95999b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:cc:82:a6:db:9f:b3:17:53:0c:d1:ce:56:52: b5:6a:26:ba:4d:42:2b:62:84:43:b8:a5:f4:8f:69: 80:91:47:4b:5e:91:a5:d3:d0:5d:28:1c:fc:d8:70: 2f:e4:ce:9d:db:d9:82:6d:a0:2e:ba:44:23:92:2b: a8:5c:df:08:25:94:28:e9:f8:44:96:cb:69:1c:3f: 86:09:0f:36:ad:00:a7:2c:3d:ce:21:b5:00:5e:c4: 5d:02:25:b7:d7:f5:8d:e0:2e:19:01:b6:8f:23:8f: 5c:84:42:19:3a:c1:6a:27:59:63:06:f7:c6:3a:72: 98:af:16:0e:cc:ba:94:bd:01:b4:38:19:ae:0e:ce: 72:a9:a6:80:27:95:30:dc:a9:17:ef:4c:db:af:83: 17:99:15:3e:04:17:bb:61:ef:0c:c9:8b:24:30:44: b0:24:24:a1:5f:84:61:ba:94:26:20:d0:b1:d5:1a: 9b:92:5f:d7:1c:3a:69:af:d6:8f:11:9b:b7:ce:bd: 82:50:9d:60:53:a0:49:3b:bb:75:da:fa:0b:78:90: 3a:da:86:0a:c1:92:35:3c:82:f6:18:97:ef:ed:3d: d5:65:fa:74:fc:9b:11:4d:e0:5b:14:90:1b:c0:93: 86:37:18:0a:21:2f:89:68:e6:95:b1:c7:15:24:1e: 72:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:31:12:DE:E6:2A:6F:4C:DF:70:3E:FB:A7:4B:09:EC:B0:33:90:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5e79704e-eb03-3bb9-8ba0-1326acd68af6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 158.247.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:e1:5d:13:07:aa:02:5f:ab:cd:bc:77:40:02:f4:0a:21:ce: 35:f4:93:8b:f5:8a:6d:d7:70:64:96:c5:fd:ff:41:5f:15:22: c3:6f:2d:2b:d3:9e:24:80:5c:f1:d6:71:60:61:fa:97:71:61: f8:35:16:f2:e9:f4:01:f3:2a:b9:f5:40:d8:90:a3:b6:8f:67: 7f:d6:f2:5e:4d:05:d9:f6:22:ef:f7:3f:60:6f:91:93:be:35: 57:3a:f8:59:c3:67:f7:f8:c0:3b:a1:e5:f6:ad:79:6b:41:35: 14:5e:50:40:35:22:bd:89:31:fb:0a:57:d2:d9:80:74:b4:aa: ce:25:bd:99:15:90:ae:32:00:c4:c0:32:45:f9:c2:aa:a4:fd: 95:92:c2:b3:26:ad:b2:aa:d8:f5:74:a8:75:0d:97:18:ca:4a: 95:04:5b:61:4c:10:a7:5e:ce:cb:bd:9d:c1:04:93:fe:80:f4: 45:6a:69:8d:de:a0:47:13:7c:b7:43:cb:bd:19:ec:64:8c:65: d6:59:fa:89:52:18:29:d0:27:73:4a:84:a2:e7:cf:fa:24:35: 33:51:b5:7b:47:c9:44:13:0b:b1:34:c1:d0:d5:61:dc:d1:4b: 6f:e1:1d:f4:b4:53:50:42:47:08:d8:65:98:bc:c8:c4:dd:18: 05:c3:12:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5oP2MseneFolsJ9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcwNjA5MDAxMloXDTI2MTAwNDA5MDAxMlowLzEtMCsGA1UEAxMk Yzc5Y2Q0YmItMWM4YS00Yzk2LWFhMDItMTNjMTdlOTU5OTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0syCptufsxdTDNHOVlK1aia6TUIrYoRDuKX0 j2mAkUdLXpGl09BdKBz82HAv5M6d29mCbaAuukQjkiuoXN8IJZQo6fhElstpHD+G CQ82rQCnLD3OIbUAXsRdAiW31/WN4C4ZAbaPI49chEIZOsFqJ1ljBvfGOnKYrxYO zLqUvQG0OBmuDs5yqaaAJ5Uw3KkX70zbr4MXmRU+BBe7Ye8MyYskMESwJCShX4Rh upQmINCx1Rqbkl/XHDppr9aPEZu3zr2CUJ1gU6BJO7t12voLeJA62oYKwZI1PIL2 GJfv7T3VZfp0/JsRTeBbFJAbwJOGNxgKIS+JaOaVsccVJB5ydQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNkxEt7mKm9M33A++6dLCeywM5CNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNWU3OTcwNGUtZWIwMy0z YmI5LThiYTAtMTMyNmFjZDY4YWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnvd4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKXhXRMHqgJfq828d0AC9AohzjX0k4v1im3XcGSWxf3/QV8VIsNvLSvT niSAXPHWcWBh+pdxYfg1FvLp9AHzKrn1QNiQo7aPZ3/W8l5NBdn2Iu/3P2BvkZO+ NVc6+FnDZ/f4wDuh5fateWtBNRReUEA1Ir2JMfsKV9LZgHS0qs4lvZkVkK4yAMTA MkX5wqqk/ZWSwrMmrbKq2PV0qHUNlxjKSpUEW2FMEKdezsu9ncEEk/6A9EVqaY3e oEcTfLdDy70Z7GSMZdZZ+olSGCnQJ3NKhKLnz/okNTNRtXtHyUQTC7E0wdDVYdzR S2/hHfS0U1BCRwjYZZi8yMTdGAXDErg= -----END CERTIFICATE-----Generated at Mon Jul 13 02:49:03 2026 by rpki-client