$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5f3d72a1-0b8c-3f95-9da9-8499d6c99d4b.roa File: 5f3d72a1-0b8c-3f95-9da9-8499d6c99d4b.roa (raw, json) Hash identifier: GSzIIf/fjIWR6QgxIfHljakOeakbnqF/T2hlMCywvlI= Subject key identifier: B6:C2:12:70:C6:ED:EE:51:5A:C8:FC:0E:FE:54:52:81:0D:88:E9:62 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E6C6F64140290E695F571A340 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5f3d72a1-0b8c-3f95-9da9-8499d6c99d4b.roa Signing time: Tue 07 Jul 2026 21:00:13 +0000 ROA not before: Tue 07 Jul 2026 21:00:13 +0000 ROA not after: Mon 05 Oct 2026 21:00:13 +0000 asID: 31898 IP address blocks: 168.129.234.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6c:6f:64:14:02:90:e6:95:f5:71:a3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 7 21:00:13 2026 GMT Not After : Oct 5 21:00:13 2026 GMT Subject: CN=86b2ae99-e033-49bf-87be-8e151d7f844c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:09:f4:90:33:31:fc:a7:07:51:6c:67:6a:67: b4:ef:4f:d1:89:5d:60:d1:42:e2:df:46:60:2c:b0: c2:ac:3e:78:04:4a:0a:d7:80:a5:35:f7:cf:7f:35: 3e:d8:3d:d6:f9:fc:e4:a3:f4:8d:85:09:2c:b9:aa: 5d:12:fe:a9:17:2a:35:4d:71:fd:61:c2:ba:2e:f7: 5a:c4:5c:b1:82:f5:69:98:84:49:e0:d5:3f:46:5d: c7:28:10:9f:ea:b1:ab:a4:15:78:cf:bf:1f:1a:f7: b5:ff:7e:ce:69:5f:84:ab:2f:61:a8:9d:72:f6:7d: f6:98:f4:12:a8:65:27:1b:85:47:6d:ed:a6:de:31: 03:13:7a:6e:95:78:a2:43:2c:6d:a1:0b:65:00:4e: 77:84:73:17:44:20:a8:4b:a3:f9:fa:ab:f9:4f:64: bb:2f:e5:2d:14:62:91:52:67:95:cb:61:d3:dd:d8: 50:f0:5e:33:1d:9f:57:b6:d1:f2:f8:ac:fe:f9:84: 0a:1d:17:8a:6d:11:45:f5:09:98:21:38:5c:18:46: a5:bd:5e:5f:46:67:e0:75:1a:ba:ff:e0:4e:68:5d: 19:48:92:57:e9:fe:6b:f1:f6:8e:d7:db:b2:f5:01: e2:91:61:ea:77:1d:a7:1b:ee:85:29:3b:01:88:dd: fd:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:C2:12:70:C6:ED:EE:51:5A:C8:FC:0E:FE:54:52:81:0D:88:E9:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5f3d72a1-0b8c-3f95-9da9-8499d6c99d4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.129.234.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:58:6b:6e:a7:d1:a6:9e:50:fb:48:63:6e:a0:29:7f:64:ba: 6e:50:5d:65:d2:6c:54:84:0c:9c:e7:ac:69:ec:01:b5:32:85: bc:79:49:b1:cd:33:17:2e:74:5e:61:15:e7:9e:35:93:d6:26: 3e:35:f0:bc:96:1b:b2:1f:39:f6:ca:a1:61:9e:f3:7d:8f:24: cf:36:0b:06:76:87:e8:58:ae:96:0f:1e:31:57:2b:d8:b3:57: ae:23:dc:ba:54:a8:ff:03:92:6c:40:73:0d:60:d4:d0:14:f5: 8d:46:ff:e4:26:3d:f2:f6:e8:a9:a0:c1:5d:27:f7:c3:fb:a0: b6:5b:d7:8f:fc:99:ec:54:db:33:d6:47:78:e4:37:62:c5:2f: e4:92:d0:1d:44:a9:65:59:e0:b5:a2:da:6a:f7:69:58:7a:e3: 75:76:7a:36:83:fc:1a:c4:cb:8d:2f:8e:c0:86:8b:7f:cd:58: 00:15:af:df:95:77:a5:de:df:51:52:65:e5:6b:f1:9b:aa:37: 78:6b:c0:9d:a1:b7:53:1d:c1:66:7a:8e:33:54:06:58:95:70: 6f:f6:83:4c:f7:61:14:3a:10:65:4e:ae:8c:7e:48:98:73:82: 60:20:84:d6:39:fb:ac:d6:72:9e:9b:14:bd:26:98:20:42:32: 8e:a3:a6:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5sb2QUApDmlfVxo0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcwNzIxMDAxM1oXDTI2MTAwNTIxMDAxM1owLzEtMCsGA1UEAxMk ODZiMmFlOTktZTAzMy00OWJmLTg3YmUtOGUxNTFkN2Y4NDRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwn0kDMx/KcHUWxname070/RiV1g0ULi30Zg LLDCrD54BEoK14ClNffPfzU+2D3W+fzko/SNhQksuapdEv6pFyo1TXH9YcK6Lvda xFyxgvVpmIRJ4NU/Rl3HKBCf6rGrpBV4z78fGve1/37OaV+Eqy9hqJ1y9n32mPQS qGUnG4VHbe2m3jEDE3pulXiiQyxtoQtlAE53hHMXRCCoS6P5+qv5T2S7L+UtFGKR UmeVy2HT3dhQ8F4zHZ9XttHy+Kz++YQKHReKbRFF9QmYIThcGEalvV5fRmfgdRq6 /+BOaF0ZSJJX6f5r8faO19uy9QHikWHqdx2nG+6FKTsBiN39DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLbCEnDG7e5RWsj8Dv5UUoENiOliMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNWYzZDcyYTEtMGI4Yy0z Zjk1LTlkYTktODQ5OWQ2Yzk5ZDRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqIHqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABdYa26n0aaeUPtIY26gKX9kum5QXWXSbFSEDJznrGnsAbUyhbx5SbHN MxcudF5hFeeeNZPWJj418LyWG7IfOfbKoWGe832PJM82CwZ2h+hYrpYPHjFXK9iz V64j3LpUqP8DkmxAcw1g1NAU9Y1G/+QmPfL26KmgwV0n98P7oLZb14/8mexU2zPW R3jkN2LFL+SS0B1EqWVZ4LWi2mr3aVh643V2ejaD/BrEy40vjsCGi3/NWAAVr9+V d6Xe31FSZeVr8ZuqN3hrwJ2ht1MdwWZ6jjNUBliVcG/2g0z3YRQ6EGVOrox+SJhz gmAghNY5+6zWcp6bFL0mmCBCMo6jpvY= -----END CERTIFICATE-----Generated at Mon Jul 13 02:52:00 2026 by rpki-client