$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/752f8b33-1944-32bd-84b5-1a9da9f516ec.roa File: 752f8b33-1944-32bd-84b5-1a9da9f516ec.roa (raw, json) Hash identifier: juESmhGq0N4ilFg/LTdDclGnufJLA7p5ZUJvmozrqqE= Subject key identifier: F3:A8:C0:68:C1:B6:4D:CE:A9:73:D6:5C:E9:65:35:67:14:D2:76:7F Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E7A64F6F84FB386C90EC14100 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/752f8b33-1944-32bd-84b5-1a9da9f516ec.roa Signing time: Sun 12 Jul 2026 21:00:13 +0000 ROA not before: Sun 12 Jul 2026 21:00:13 +0000 ROA not after: Sat 10 Oct 2026 21:00:13 +0000 asID: 31898 IP address blocks: 64.181.150.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7a:64:f6:f8:4f:b3:86:c9:0e:c1:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 12 21:00:13 2026 GMT Not After : Oct 10 21:00:13 2026 GMT Subject: CN=2f959d31-0720-4e8f-b5d5-4a5a984ebffa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d1:51:a1:89:e7:f0:2f:9b:1f:43:24:2e:66: 03:87:b9:0e:08:40:6b:ec:08:6a:f4:44:88:b4:5e: 0b:ac:68:e1:eb:eb:20:9c:16:b8:15:16:0b:76:72: fc:44:32:d7:f4:97:11:be:eb:41:4d:5f:45:0d:31: e2:3b:63:b5:35:6c:db:c5:70:bf:f1:01:a5:9e:5d: bb:ab:98:eb:48:aa:c4:8b:f5:63:98:a9:77:54:ac: ff:26:4f:69:6b:d2:b6:04:19:2c:a1:e2:73:b0:86: e8:6a:ca:50:ea:34:4f:6f:01:32:1f:c0:85:1c:f8: f2:80:4b:14:5c:70:15:47:d0:03:70:eb:39:87:4c: 01:24:6e:56:96:2a:98:32:7b:50:22:b7:e5:1a:92: ed:16:84:f3:79:5a:4a:cc:c1:84:d1:80:19:99:f1: d3:99:66:b7:2f:cb:66:a6:a7:bd:2f:b2:4c:eb:2f: 36:7a:5c:91:71:2e:cc:82:aa:25:74:b5:0c:ed:b7: ad:ee:81:d5:6c:7d:31:c4:a1:e0:8e:88:17:9f:8e: 74:7f:91:de:b0:8c:ac:07:59:68:87:24:a6:78:c3: c6:2b:81:9c:4b:16:1d:c2:0d:56:38:ac:77:11:44: b8:d2:d0:58:50:76:ed:73:69:04:1b:a7:df:71:73: 79:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:A8:C0:68:C1:B6:4D:CE:A9:73:D6:5C:E9:65:35:67:14:D2:76:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/752f8b33-1944-32bd-84b5-1a9da9f516ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 64.181.150.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:17:f1:cf:d3:8c:4c:12:77:75:60:11:eb:89:fa:20:37:44: bd:9b:0c:84:9b:c8:3f:fc:6d:ec:3c:5e:d5:69:94:73:2f:35: da:52:57:c0:d8:8b:27:06:ed:8a:2c:f1:ff:5f:79:52:7a:e8: b2:b2:b7:d3:33:fa:38:fd:17:c8:50:41:e5:82:d0:35:9e:4e: 75:51:6d:51:1e:66:d5:a7:fa:50:d9:83:df:a2:f2:5c:a8:8f: 52:f9:57:88:81:bb:2f:4c:c6:97:79:47:41:76:ea:60:9d:84: e9:3e:ae:5d:e5:4a:c9:f2:70:e6:be:f7:e9:8e:03:40:1e:3e: 03:28:0d:88:f2:d9:0d:d8:0d:99:c6:e4:80:9f:a6:a1:13:8f: 1e:38:93:d0:9a:b1:0c:0a:78:5d:b9:7d:20:b4:f8:33:d8:a0: 30:e7:c7:9c:10:8f:a2:63:f4:18:f8:c5:30:7f:ec:5a:e3:be: 26:94:ee:7c:1a:f5:d9:a2:55:92:7a:ec:fb:a6:b1:fb:ec:e3: 72:c8:75:b2:c3:70:1d:88:31:46:da:bb:c0:aa:b8:9b:f2:ab: 18:82:65:1e:38:78:89:b7:e0:00:6f:dd:d0:bf:97:65:ae:ba: 2b:a7:d8:1c:61:cf:16:fc:fe:be:b8:fc:0b:07:06:47:ee:0a: e5:fd:80:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE56ZPb4T7OGyQ7BQQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcxMjIxMDAxM1oXDTI2MTAxMDIxMDAxM1owLzEtMCsGA1UEAxMk MmY5NTlkMzEtMDcyMC00ZThmLWI1ZDUtNGE1YTk4NGViZmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtFRoYnn8C+bH0MkLmYDh7kOCEBr7Ahq9ESI tF4LrGjh6+sgnBa4FRYLdnL8RDLX9JcRvutBTV9FDTHiO2O1NWzbxXC/8QGlnl27 q5jrSKrEi/VjmKl3VKz/Jk9pa9K2BBksoeJzsIboaspQ6jRPbwEyH8CFHPjygEsU XHAVR9ADcOs5h0wBJG5WliqYMntQIrflGpLtFoTzeVpKzMGE0YAZmfHTmWa3L8tm pqe9L7JM6y82elyRcS7MgqoldLUM7bet7oHVbH0xxKHgjogXn450f5HesIysB1lo hySmeMPGK4GcSxYdwg1WOKx3EUS40tBYUHbtc2kEG6ffcXN5AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPOowGjBtk3OqXPWXOllNWcU0nZ/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNzUyZjhiMzMtMTk0NC0z MmJkLTg0YjUtMWE5ZGE5ZjUxNmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQLWWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEgX8c/TjEwSd3VgEeuJ+iA3RL2bDISbyD/8bew8XtVplHMvNdpSV8DY iycG7Yos8f9feVJ66LKyt9Mz+jj9F8hQQeWC0DWeTnVRbVEeZtWn+lDZg9+i8lyo j1L5V4iBuy9Mxpd5R0F26mCdhOk+rl3lSsnycOa+9+mOA0AePgMoDYjy2Q3YDZnG 5ICfpqETjx44k9CasQwKeF25fSC0+DPYoDDnx5wQj6Jj9Bj4xTB/7FrjviaU7nwa 9dmiVZJ67Pumsfvs43LIdbLDcB2IMUbau8CquJvyqxiCZR44eIm34ABv3dC/l2Wu uiun2Bxhzxb8/r64/AsHBkfuCuX9gNQ= -----END CERTIFICATE-----Generated at Mon Jul 13 02:53:44 2026 by rpki-client