$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6a291944-a71f-31b4-b568-db5f8fd7a909.roa File: 6a291944-a71f-31b4-b568-db5f8fd7a909.roa (raw, json) Hash identifier: cYohwkjoD47AZrSUFACAVi4ScSUEoguo9/Qidy6kcKk= Subject key identifier: 0B:1E:D9:4F:ED:A2:CC:75:00:4C:CD:B5:E6:B5:B3:FE:56:94:89:62 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E6B0A2DD70713B91ACAC8D2C0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6a291944-a71f-31b4-b568-db5f8fd7a909.roa Signing time: Tue 07 Jul 2026 09:00:12 +0000 ROA not before: Tue 07 Jul 2026 09:00:12 +0000 ROA not after: Mon 05 Oct 2026 09:00:12 +0000 asID: 31898 IP address blocks: 168.138.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6b:0a:2d:d7:07:13:b9:1a:ca:c8:d2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 7 09:00:12 2026 GMT Not After : Oct 5 09:00:12 2026 GMT Subject: CN=f1b0dbbd-2e14-49b3-bf00-85ec720a0ffc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:63:ab:24:eb:57:2c:d2:f3:78:3f:2e:11:2d: 9c:14:19:cc:00:2a:ce:30:fa:f5:35:26:a6:4d:3a: 3a:70:10:8f:05:d1:b4:ca:38:b6:d9:d0:b4:23:28: c0:ab:fe:e3:fc:10:10:44:80:58:c1:14:3d:f8:88: 48:d9:29:dd:d9:43:d7:08:78:76:a7:b7:2a:82:60: 4a:1c:fa:63:13:dc:1d:34:d4:f3:c7:d4:6d:46:ba: 2d:96:1e:3e:cf:d8:6b:e2:9d:65:e1:4a:62:d9:6e: c7:24:a5:85:f4:f0:90:ec:d9:01:e7:cd:52:74:f3: 8a:7f:20:b4:90:cc:78:01:d4:2e:ef:c1:13:17:1f: b4:a4:9f:61:c9:1b:0d:bf:db:27:8c:8d:97:9d:3c: 45:0d:d3:14:40:5a:a2:9d:ee:d9:15:b4:3c:e5:0c: 06:fc:e6:28:82:ef:04:04:a6:82:57:a8:ea:03:f4: a8:40:2f:6c:4d:0c:b4:51:c2:ab:56:6b:e5:36:e5: 0a:49:5b:ee:9f:04:29:70:81:c7:07:66:01:73:d9: a1:50:3d:8d:05:d3:00:84:6c:9a:7a:43:34:aa:23: d7:dd:cb:50:ca:87:8d:fe:e0:0e:fe:32:95:0f:28: f2:97:33:75:13:4b:2f:ea:f8:3b:58:8a:f3:4e:97: f8:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:1E:D9:4F:ED:A2:CC:75:00:4C:CD:B5:E6:B5:B3:FE:56:94:89:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6a291944-a71f-31b4-b568-db5f8fd7a909.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.138.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:8a:48:e2:bc:87:75:1e:b2:78:c9:7d:c7:9b:98:78:ba:03: f0:e1:2b:a9:28:c8:e8:90:71:d0:60:64:a8:ff:a7:56:c2:0a: e7:b1:3d:a5:03:99:60:53:ea:cf:4a:99:a5:68:55:bc:5b:88: 2a:e3:8e:a6:45:4b:52:68:95:53:f5:9e:41:0f:08:84:52:b8: b5:b5:bf:fb:d2:97:c6:2c:73:ed:75:af:00:3b:a4:d6:f9:f5: 1c:8d:41:17:16:c3:a8:20:38:54:f3:e4:57:33:ff:e9:0c:00: 6e:db:1a:50:48:dd:1d:0e:ab:c7:44:95:60:55:14:af:39:84: 08:be:a8:71:ff:16:9b:3d:1d:49:9a:f7:2e:79:c6:69:15:80: 20:cd:22:50:aa:d7:bf:af:3e:f9:8f:20:12:bc:ee:d1:62:98: 29:f1:31:ef:24:64:19:e4:96:97:d2:74:4f:19:7b:c4:db:1f: 16:e1:40:32:aa:4a:4b:68:39:49:14:c8:ee:fb:69:dd:e4:bd: 17:67:ad:37:4e:1e:68:a1:44:88:11:b0:6f:91:30:ac:4e:56: 9f:d9:d2:84:c4:8d:81:b8:ae:8b:2b:ef:32:3a:39:5b:ba:74: bc:66:49:6d:5a:80:18:01:24:75:59:30:be:d4:8a:ee:91:7b: 8c:67:ec:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5rCi3XBxO5GsrI0sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcwNzA5MDAxMloXDTI2MTAwNTA5MDAxMlowLzEtMCsGA1UEAxMk ZjFiMGRiYmQtMmUxNC00OWIzLWJmMDAtODVlYzcyMGEwZmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mOrJOtXLNLzeD8uES2cFBnMACrOMPr1NSam TTo6cBCPBdG0yji22dC0IyjAq/7j/BAQRIBYwRQ9+IhI2Snd2UPXCHh2p7cqgmBK HPpjE9wdNNTzx9RtRrotlh4+z9hr4p1l4Upi2W7HJKWF9PCQ7NkB581SdPOKfyC0 kMx4AdQu78ETFx+0pJ9hyRsNv9snjI2XnTxFDdMUQFqine7ZFbQ85QwG/OYogu8E BKaCV6jqA/SoQC9sTQy0UcKrVmvlNuUKSVvunwQpcIHHB2YBc9mhUD2NBdMAhGya ekM0qiPX3ctQyoeN/uAO/jKVDyjylzN1E0sv6vg7WIrzTpf4nwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAse2U/tosx1AEzNtea1s/5WlIliMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNmEyOTE5NDQtYTcxZi0z MWI0LWI1NjgtZGI1ZjhmZDdhOTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqIpwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHaKSOK8h3UesnjJfcebmHi6A/DhK6koyOiQcdBgZKj/p1bCCuexPaUD mWBT6s9KmaVoVbxbiCrjjqZFS1JolVP1nkEPCIRSuLW1v/vSl8Ysc+11rwA7pNb5 9RyNQRcWw6ggOFTz5Fcz/+kMAG7bGlBI3R0Oq8dElWBVFK85hAi+qHH/Fps9HUma 9y55xmkVgCDNIlCq17+vPvmPIBK87tFimCnxMe8kZBnklpfSdE8Ze8TbHxbhQDKq SktoOUkUyO77ad3kvRdnrTdOHmihRIgRsG+RMKxOVp/Z0oTEjYG4rosr7zI6OVu6 dLxmSW1agBgBJHVZML7Uiu6Re4xn7Hg= -----END CERTIFICATE-----Generated at Mon Jul 13 02:49:37 2026 by rpki-client