$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/76f299d5-60cc-3294-ba42-4c7c70c2f1d7.roa File: 76f299d5-60cc-3294-ba42-4c7c70c2f1d7.roa (raw, json) Hash identifier: 3C/uHq9rEmv+8+yWWHRNuJe/D8a6mTaQWqaVPlZ8af0= Subject key identifier: C1:94:4B:EF:AB:CE:20:36:64:B4:08:88:C7:D0:76:FA:CD:74:7C:2F Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E709F754E99B27E4074918580 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/76f299d5-60cc-3294-ba42-4c7c70c2f1d7.roa Signing time: Thu 09 Jul 2026 09:00:13 +0000 ROA not before: Thu 09 Jul 2026 09:00:13 +0000 ROA not after: Wed 07 Oct 2026 09:00:13 +0000 asID: 31898 IP address blocks: 129.146.64.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:70:9f:75:4e:99:b2:7e:40:74:91:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 9 09:00:13 2026 GMT Not After : Oct 7 09:00:13 2026 GMT Subject: CN=5edf6c10-74dc-45a1-9abf-00770f9f5728 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:7e:cf:92:37:fa:a6:1b:a7:52:ca:8c:1b:4b: b9:ed:ba:8a:cb:10:c6:81:99:a0:29:68:e7:07:41: 84:a1:0b:3e:14:0a:81:8f:d4:d6:6c:9b:8c:15:bb: 4d:18:e9:9e:a7:20:c5:48:cc:4b:9d:21:0e:e0:c3: f6:fe:7c:d7:3e:0a:04:42:46:35:8b:80:23:62:ee: 07:66:04:56:b5:2f:71:9a:f2:b3:05:b1:42:49:dc: dd:ad:31:4d:5b:1c:dd:7c:d1:12:73:e4:45:df:0c: a8:2d:04:fd:55:d3:ee:45:b7:f5:fb:aa:35:8a:c4: b3:ad:89:fd:e4:27:5c:89:c3:b3:5b:d2:8e:e8:91: 59:e3:c9:d8:5a:56:d1:94:d9:72:a8:65:60:91:b6: 34:32:c2:d5:05:57:3e:b6:06:7b:62:81:ae:a7:45: 8b:7f:f7:5e:08:9e:15:82:a1:96:5a:8f:d4:c5:df: f6:b7:0d:9d:00:aa:cc:a1:89:ff:53:1b:e5:01:09: d9:2f:34:05:c5:3f:4d:d5:85:46:de:8c:45:93:67: 0f:90:d9:9b:28:33:37:0b:b5:9d:ad:7f:26:b3:38: 34:dc:18:a8:f9:61:39:0c:c0:10:9f:fd:e9:51:aa: 39:58:08:23:ff:51:3b:14:0a:70:72:0f:8f:9f:1e: ae:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:94:4B:EF:AB:CE:20:36:64:B4:08:88:C7:D0:76:FA:CD:74:7C:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/76f299d5-60cc-3294-ba42-4c7c70c2f1d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.146.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:b1:85:8f:ce:33:17:26:35:ca:4d:2b:10:31:c0:2d:f8:3a: 80:ce:eb:4a:f0:17:49:35:3b:9d:e0:6f:a0:43:a5:d7:63:f2: 73:e6:a3:85:5e:d4:67:7b:7f:a3:2e:fa:3b:1c:04:4e:35:da: 55:e3:28:f9:c7:1b:34:4d:51:92:5e:23:ca:1e:96:4a:79:0a: 10:80:d8:e4:f6:6d:ba:dc:14:87:d9:90:fc:17:e0:af:f5:78: 97:6f:4c:60:70:f4:b6:3a:4f:79:9e:be:90:1f:1d:ab:cb:94: 90:11:5d:fb:b0:98:6e:90:b3:ad:76:16:cf:4a:8d:6c:99:1e: 4d:76:6b:e7:25:78:e0:05:8b:57:5b:3b:06:c0:f9:bb:a9:1b: d1:26:f5:4a:05:26:e3:37:19:7c:0c:5f:ba:37:ca:b6:dc:10: e6:bd:98:7a:dd:1b:43:4b:89:a8:cb:28:ba:e5:7b:f9:03:15: 67:78:d7:12:9e:20:7a:19:ae:03:9b:7f:be:63:9c:77:4e:47: 04:1b:24:5b:ba:c4:34:fc:69:69:99:fe:7e:b8:68:b0:39:4a: 99:6a:77:2f:3e:27:5a:2f:84:65:6e:c6:0b:fa:28:53:b2:ce: 0b:81:a3:ee:54:e1:36:b0:90:af:7e:13:58:89:fe:d2:26:3b: c8:a7:d2:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5wn3VOmbJ+QHSRhYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcwOTA5MDAxM1oXDTI2MTAwNzA5MDAxM1owLzEtMCsGA1UEAxMk NWVkZjZjMTAtNzRkYy00NWExLTlhYmYtMDA3NzBmOWY1NzI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg37Pkjf6phunUsqMG0u57bqKyxDGgZmgKWjn B0GEoQs+FAqBj9TWbJuMFbtNGOmepyDFSMxLnSEO4MP2/nzXPgoEQkY1i4AjYu4H ZgRWtS9xmvKzBbFCSdzdrTFNWxzdfNESc+RF3wyoLQT9VdPuRbf1+6o1isSzrYn9 5CdcicOzW9KO6JFZ48nYWlbRlNlyqGVgkbY0MsLVBVc+tgZ7YoGup0WLf/deCJ4V gqGWWo/Uxd/2tw2dAKrMoYn/UxvlAQnZLzQFxT9N1YVG3oxFk2cPkNmbKDM3C7Wd rX8mszg03Bio+WE5DMAQn/3pUao5WAgj/1E7FApwcg+Pnx6uJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMGUS++rziA2ZLQIiMfQdvrNdHwvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNzZmMjk5ZDUtNjBjYy0z Mjk0LWJhNDItNGM3YzcwYzJmMWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgZJAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADCxhY/OMxcmNcpNKxAxwC34OoDO60rwF0k1O53gb6BDpddj8nPmo4Ve 1Gd7f6Mu+jscBE412lXjKPnHGzRNUZJeI8oelkp5ChCA2OT2bbrcFIfZkPwX4K/1 eJdvTGBw9LY6T3mevpAfHavLlJARXfuwmG6Qs612Fs9KjWyZHk12a+cleOAFi1db OwbA+bupG9Em9UoFJuM3GXwMX7o3yrbcEOa9mHrdG0NLiajLKLrle/kDFWd41xKe IHoZrgObf75jnHdORwQbJFu6xDT8aWmZ/n64aLA5Splqdy8+J1ovhGVuxgv6KFOy zguBo+5U4TawkK9+E1iJ/tImO8in0ug= -----END CERTIFICATE-----Generated at Mon Jul 13 02:49:05 2026 by rpki-client