$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7afe701f-55d7-3d3d-b025-de469d0ca0f0.roa File: 7afe701f-55d7-3d3d-b025-de469d0ca0f0.roa (raw, json) Hash identifier: MfDcFQymejFmhoRJw5YNb1A3bmA9bbgKV6+MwpASIMQ= Subject key identifier: FE:52:64:0A:5E:34:70:BB:FD:F2:2C:14:30:25:03:B3:22:5D:D0:65 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E4F1F317FF154DD5FC970B2C0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7afe701f-55d7-3d3d-b025-de469d0ca0f0.roa Signing time: Sat 27 Jun 2026 09:00:12 +0000 ROA not before: Sat 27 Jun 2026 09:00:12 +0000 ROA not after: Fri 25 Sep 2026 09:00:12 +0000 asID: 31898 IP address blocks: 132.145.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4f:1f:31:7f:f1:54:dd:5f:c9:70:b2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jun 27 09:00:12 2026 GMT Not After : Sep 25 09:00:12 2026 GMT Subject: CN=f6d42c60-8538-412f-81f4-d9b1341cf7ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:84:53:24:0e:99:53:10:38:f9:49:58:eb:6d: 22:20:07:6f:1a:dc:87:8c:e6:e0:de:5c:92:d8:f5: 16:78:04:9d:84:5b:58:ac:36:04:88:58:d4:1b:76: dc:f1:2d:fe:78:99:a3:21:c8:fc:36:06:f6:45:5a: db:3c:df:f0:6c:7d:46:27:2d:35:b2:c6:5f:5e:a4: a6:ba:9f:76:32:4b:34:6d:e7:fa:f3:51:68:0b:4e: 9c:0c:61:b4:c8:d0:82:c4:53:07:4b:ef:7f:76:a1: 1f:cc:f9:5f:59:05:88:af:0c:08:01:e9:05:64:cf: 59:82:a3:2c:47:b2:2d:4d:af:30:68:8f:ed:f1:bf: 95:ab:d2:e5:6a:61:53:e3:ea:ed:fa:34:de:28:31: 48:a3:e2:1e:6e:02:fd:a5:f3:06:8a:45:13:46:b4: d4:58:8e:0f:4e:a6:59:7e:b9:c5:b9:ba:7c:4a:d4: a3:27:fb:0f:0a:e1:5d:e8:73:a5:4f:0c:33:13:7e: 9f:1b:84:43:64:1b:29:30:d2:4c:f0:6e:1c:47:83: c8:00:1a:85:51:fb:49:0f:e0:8a:3d:20:58:b8:df: 1c:20:37:29:f5:ef:71:60:8d:96:17:1a:59:5b:8b: 56:eb:3e:74:8d:6d:39:54:85:c3:92:12:9c:08:9b: df:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:52:64:0A:5E:34:70:BB:FD:F2:2C:14:30:25:03:B3:22:5D:D0:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7afe701f-55d7-3d3d-b025-de469d0ca0f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 132.145.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:79:ef:cd:a0:fa:99:46:4f:e3:30:a6:c9:16:a1:5e:01:d9: 2f:4d:c8:2a:b6:b5:12:b1:0a:18:d6:d3:6e:10:2e:c9:8c:6d: f3:c8:a1:dd:46:59:b6:ed:dd:bd:ed:e1:62:1b:96:a1:a3:80: ea:93:6c:3e:a8:0d:26:92:bd:a3:af:5e:ba:aa:6c:6c:75:05: 61:ec:3c:ca:82:46:bc:af:f1:0f:d6:4d:0a:07:b9:e4:d1:dc: 4d:66:0b:b9:3f:be:d6:42:19:78:97:31:49:1b:42:62:59:c5: 80:aa:74:87:be:4c:02:71:ce:72:bb:6a:55:f1:a7:8e:75:da: bc:64:c3:dc:bc:bc:eb:a3:81:2d:68:05:8c:77:02:5b:b8:70: 1f:72:17:09:8b:45:46:00:af:95:94:c5:13:88:98:92:fa:7e: 51:a9:a3:bc:97:c0:8c:d8:e8:52:29:99:13:86:05:3d:e6:8e: e2:80:6c:cd:2b:fd:57:71:5c:cd:12:2c:8a:cb:83:d3:95:83: 3e:dd:0b:55:92:a9:5f:67:a2:38:5a:66:f8:25:f8:12:f6:a1: 1d:0f:06:e1:0f:79:0d:22:cb:38:c1:49:cd:ee:d5:34:4d:80: b9:09:46:44:24:39:83:8c:5b:13:eb:69:11:24:c1:cc:f3:e9: 83:9c:74:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5PHzF/8VTdX8lwssAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDYyNzA5MDAxMloXDTI2MDkyNTA5MDAxMlowLzEtMCsGA1UEAxMk ZjZkNDJjNjAtODUzOC00MTJmLTgxZjQtZDliMTM0MWNmN2VlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIRTJA6ZUxA4+UlY620iIAdvGtyHjObg3lyS 2PUWeASdhFtYrDYEiFjUG3bc8S3+eJmjIcj8Ngb2RVrbPN/wbH1GJy01ssZfXqSm up92Mks0bef681FoC06cDGG0yNCCxFMHS+9/dqEfzPlfWQWIrwwIAekFZM9ZgqMs R7ItTa8waI/t8b+Vq9LlamFT4+rt+jTeKDFIo+IebgL9pfMGikUTRrTUWI4PTqZZ frnFubp8StSjJ/sPCuFd6HOlTwwzE36fG4RDZBspMNJM8G4cR4PIABqFUftJD+CK PSBYuN8cIDcp9e9xYI2WFxpZW4tW6z50jW05VIXDkhKcCJvfEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP5SZApeNHC7/fIsFDAlA7MiXdBlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvN2FmZTcwMWYtNTVkNy0z ZDNkLWIwMjUtZGU0NjlkMGNhMGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEhJEQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGh5782g+plGT+MwpskWoV4B2S9NyCq2tRKxChjW024QLsmMbfPIod1G Wbbt3b3t4WIblqGjgOqTbD6oDSaSvaOvXrqqbGx1BWHsPMqCRryv8Q/WTQoHueTR 3E1mC7k/vtZCGXiXMUkbQmJZxYCqdIe+TAJxznK7alXxp4512rxkw9y8vOujgS1o BYx3Alu4cB9yFwmLRUYAr5WUxROImJL6flGpo7yXwIzY6FIpmROGBT3mjuKAbM0r /VdxXM0SLIrLg9OVgz7dC1WSqV9nojhaZvgl+BL2oR0PBuEPeQ0iyzjBSc3u1TRN gLkJRkQkOYOMWxPraREkwczz6YOcdPg= -----END CERTIFICATE-----Generated at Mon Jul 13 02:53:49 2026 by rpki-client