$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/658a0ed3-fb77-3710-b9de-363e15a1293b.roa File: 658a0ed3-fb77-3710-b9de-363e15a1293b.roa (raw, json) Hash identifier: +hUwejG6V5Tef4Gjm0oatGQzIC5cftVHjAWpw7ScoXM= Subject key identifier: 58:F8:E7:DF:FD:3B:7F:27:38:18:8B:85:23:C9:89:45:07:C7:97:3E Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E6DD4CAF3FA4D649EF40C0B00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/658a0ed3-fb77-3710-b9de-363e15a1293b.roa Signing time: Wed 08 Jul 2026 09:00:12 +0000 ROA not before: Wed 08 Jul 2026 09:00:12 +0000 ROA not after: Tue 06 Oct 2026 09:00:12 +0000 asID: 31898 IP address blocks: 159.112.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6d:d4:ca:f3:fa:4d:64:9e:f4:0c:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 8 09:00:12 2026 GMT Not After : Oct 6 09:00:12 2026 GMT Subject: CN=a5e454e1-d175-41c4-bb48-ebdd93ce48b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:de:4c:47:3f:02:3b:12:90:3a:e1:77:14:5e: ee:31:2f:f6:e8:99:62:fe:e6:a3:c7:aa:52:8b:e1: 1c:a3:c3:e2:a8:a6:4e:d7:d6:77:c5:fe:eb:f9:b7: 52:3b:22:a7:f2:85:8f:35:08:ae:03:84:f6:e9:e7: 94:07:4c:67:80:89:c6:58:b4:6c:32:dd:29:f5:58: 7f:ea:d7:03:5b:77:7a:bc:aa:d2:75:1d:85:00:64: 6c:b5:30:1e:24:71:93:27:e4:26:e9:1b:21:c6:c8: 3d:ef:90:b9:70:ec:28:74:28:4f:da:4a:70:98:90: 05:61:a3:f4:ad:88:50:92:09:c0:84:45:2e:51:68: 9f:ed:e0:38:10:df:5b:01:ab:65:9c:e3:04:d3:7f: 43:00:a8:fa:07:b4:6f:a3:1a:ab:35:e7:e0:67:f6: 36:75:34:a7:9c:0e:16:17:65:3d:12:6a:9a:1c:14: ab:ac:e9:ac:c3:a7:29:a6:31:27:45:32:c5:76:8c: fd:6d:75:71:bc:84:a7:62:f4:9b:ed:e5:13:d4:d8: 3f:ed:6a:9c:b0:ce:d5:25:cd:6c:e6:78:60:ec:91: 4a:0c:50:89:7b:20:ee:0c:9f:40:ed:92:fe:8c:3c: 16:5a:bd:bc:f5:82:10:f4:d0:24:20:c6:dd:0c:75: 48:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:F8:E7:DF:FD:3B:7F:27:38:18:8B:85:23:C9:89:45:07:C7:97:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/658a0ed3-fb77-3710-b9de-363e15a1293b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 159.112.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:6a:0c:bf:b1:17:22:f5:95:ae:85:ed:9b:39:41:43:dc:71: 59:38:36:67:12:4e:c5:cc:e7:a4:ca:5f:20:7e:d9:fb:d4:ba: 16:4c:e7:93:6d:4d:23:c4:bc:aa:52:4e:c0:15:4c:04:db:0a: a8:99:53:bd:b5:45:07:f9:5d:ed:52:96:e5:c9:32:98:a1:9d: 12:11:8a:f1:c9:0d:2b:8b:81:5b:5a:2a:eb:e0:32:00:e7:65: f7:2c:ed:21:db:cc:58:78:5a:b8:94:12:12:ac:ef:d0:8a:22: de:b3:74:1b:4c:14:7c:1c:ba:3c:fe:9f:12:be:9f:80:86:2e: 10:fe:ba:b9:25:85:34:0a:e6:3a:c6:34:0c:e5:d3:6d:5d:b3: 89:b2:c0:87:71:bd:67:31:cf:f4:2b:69:60:e3:08:88:7b:23: 5e:8b:6c:36:b9:29:1f:43:1b:b1:cc:75:b5:82:1c:e1:70:4c: c5:5e:89:15:a6:58:ee:f0:0d:8e:74:52:eb:85:63:36:98:49: 99:7e:ee:ad:ff:b2:4c:eb:d9:31:80:6a:d0:10:e0:e5:0d:2a: d7:2e:40:d3:68:db:bb:fa:07:8c:32:8e:9d:5a:c8:68:61:4f: df:cc:0a:26:59:cf:2a:81:eb:41:48:36:61:ba:e2:15:0d:34: 6f:a1:e0:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5t1Mrz+k1knvQMCwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcwODA5MDAxMloXDTI2MTAwNjA5MDAxMlowLzEtMCsGA1UEAxMk YTVlNDU0ZTEtZDE3NS00MWM0LWJiNDgtZWJkZDkzY2U0OGI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuN5MRz8COxKQOuF3FF7uMS/26Jli/uajx6pS i+Eco8PiqKZO19Z3xf7r+bdSOyKn8oWPNQiuA4T26eeUB0xngInGWLRsMt0p9Vh/ 6tcDW3d6vKrSdR2FAGRstTAeJHGTJ+Qm6Rshxsg975C5cOwodChP2kpwmJAFYaP0 rYhQkgnAhEUuUWif7eA4EN9bAatlnOME039DAKj6B7RvoxqrNefgZ/Y2dTSnnA4W F2U9EmqaHBSrrOmsw6cppjEnRTLFdoz9bXVxvISnYvSb7eUT1Ng/7WqcsM7VJc1s 5nhg7JFKDFCJeyDuDJ9A7ZL+jDwWWr289YIQ9NAkIMbdDHVIyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFj459/9O38nOBiLhSPJiUUHx5c+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNjU4YTBlZDMtZmI3Ny0z NzEwLWI5ZGUtMzYzZTE1YTEyOTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCn3CsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAERqDL+xFyL1la6F7Zs5QUPccVk4NmcSTsXM56TKXyB+2fvUuhZM55Nt TSPEvKpSTsAVTATbCqiZU721RQf5Xe1SluXJMpihnRIRivHJDSuLgVtaKuvgMgDn Zfcs7SHbzFh4WriUEhKs79CKIt6zdBtMFHwcujz+nxK+n4CGLhD+urklhTQK5jrG NAzl021ds4mywIdxvWcxz/QraWDjCIh7I16LbDa5KR9DG7HMdbWCHOFwTMVeiRWm WO7wDY50UuuFYzaYSZl+7q3/skzr2TGAatAQ4OUNKtcuQNNo27v6B4wyjp1ayGhh T9/MCiZZzyqB60FINmG64hUNNG+h4NA= -----END CERTIFICATE-----Generated at Mon Jul 13 02:54:44 2026 by rpki-client