$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7f61a666-452b-3608-8ee6-12ec698a32f0.roa File: 7f61a666-452b-3608-8ee6-12ec698a32f0.roa (raw, json) Hash identifier: sEvpn+lnB4EvldzHGs7qWrCwX6pvkQPufRzCHNWlTqo= Subject key identifier: F2:CD:E0:1F:C5:B4:41:B7:2A:C6:A6:11:BE:2B:A6:B8:74:82:06:A5 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E66DA109777E4A45E86C339C0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7f61a666-452b-3608-8ee6-12ec698a32f0.roa Signing time: Sun 05 Jul 2026 21:00:11 +0000 ROA not before: Sun 05 Jul 2026 21:00:11 +0000 ROA not after: Sat 03 Oct 2026 21:00:11 +0000 asID: 31898 IP address blocks: 168.138.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:66:da:10:97:77:e4:a4:5e:86:c3:39:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 5 21:00:11 2026 GMT Not After : Oct 3 21:00:11 2026 GMT Subject: CN=dfd07cf2-084a-4653-ae79-169f786e41ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c3:d3:11:77:0a:05:aa:56:b4:71:db:aa:12: 2b:db:9e:be:a0:19:e9:df:26:47:3c:5f:26:7f:e6: 4f:6b:2a:52:a6:1f:f4:57:c0:16:fc:c4:92:88:f7: 9e:0d:22:42:56:86:2d:e3:05:23:68:c4:95:4f:bb: 25:93:34:6c:1a:2c:2e:41:f3:56:28:b9:8b:8f:05: 27:3d:76:33:f1:84:62:fb:4c:37:04:31:9d:d2:eb: 4d:f5:3b:e7:2e:50:57:c7:25:34:dd:aa:92:d8:36: e2:b0:17:fd:02:ce:47:6c:03:8d:f2:75:6c:cc:31: 33:08:20:da:60:e2:c8:f3:4c:62:bf:5c:ac:bd:a9: a0:16:2d:b4:9d:6d:45:06:e7:2f:3c:5b:1e:96:c8: 6c:a8:59:57:a7:92:a6:d6:21:73:84:46:9b:2d:0a: 5e:69:f5:f8:6f:22:47:83:9b:92:1a:71:87:9c:ec: 1d:f3:37:22:fd:5b:46:5d:60:9b:83:f4:d9:45:21: 21:dd:2b:6e:3f:e9:4f:67:e4:86:56:4f:70:27:2c: f1:1f:0f:66:dc:2c:5d:0d:44:e2:f2:d8:9d:f9:65: 9d:7a:ee:b1:43:48:8c:4b:5e:6f:07:f9:8a:89:ad: 9e:32:5b:3c:31:d1:5c:52:ce:49:c8:39:50:61:86: 0b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:CD:E0:1F:C5:B4:41:B7:2A:C6:A6:11:BE:2B:A6:B8:74:82:06:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7f61a666-452b-3608-8ee6-12ec698a32f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.138.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:07:d7:8d:7c:b5:f9:9d:55:bd:2e:b0:73:64:1e:8c:1b:3b: ee:53:a4:65:94:fc:80:a0:97:21:87:6f:70:14:5f:6f:07:d7: 34:5e:48:32:bc:88:92:d1:d9:4e:d7:45:b3:ff:eb:a7:5d:da: 01:41:d0:5f:63:ef:1a:48:b0:0b:ea:55:99:f9:5d:7e:91:fa: a7:1a:13:7f:f9:3d:fd:f8:15:58:4e:9f:25:90:c5:1a:76:7b: 46:4e:78:b4:17:03:1f:a4:46:06:36:ff:6f:02:03:74:db:a7: 18:42:1b:46:8b:7a:3b:7b:b2:f6:ee:af:bc:a9:8d:39:fa:2c: c9:30:78:1f:81:37:2e:a1:50:15:af:aa:f6:82:bf:bb:49:e6: d8:c8:ad:d9:40:b0:6a:36:8c:90:02:92:36:88:8c:71:11:f3: cb:40:b9:ba:a5:eb:0b:86:9d:1c:f4:0c:2f:e1:f9:57:76:24: 6a:32:31:0e:41:ad:a9:1a:9a:74:ee:6d:cf:cd:06:ac:f0:13: 22:82:51:94:c4:ab:23:7b:ee:d4:62:6a:84:db:73:c5:26:78: 2b:f8:c5:03:31:99:62:40:20:fc:8a:66:3c:32:b6:63:4a:0e: 9b:59:f9:b3:f3:37:d6:ca:5d:6d:6d:24:23:64:e3:9b:2d:0f: 08:0d:21:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5m2hCXd+SkXobDOcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcwNTIxMDAxMVoXDTI2MTAwMzIxMDAxMVowLzEtMCsGA1UEAxMk ZGZkMDdjZjItMDg0YS00NjUzLWFlNzktMTY5Zjc4NmU0MWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncPTEXcKBapWtHHbqhIr256+oBnp3yZHPF8m f+ZPaypSph/0V8AW/MSSiPeeDSJCVoYt4wUjaMSVT7slkzRsGiwuQfNWKLmLjwUn PXYz8YRi+0w3BDGd0utN9TvnLlBXxyU03aqS2DbisBf9As5HbAON8nVszDEzCCDa YOLI80xiv1ysvamgFi20nW1FBucvPFselshsqFlXp5Km1iFzhEabLQpeafX4byJH g5uSGnGHnOwd8zci/VtGXWCbg/TZRSEh3StuP+lPZ+SGVk9wJyzxHw9m3CxdDUTi 8tid+WWdeu6xQ0iMS15vB/mKia2eMls8MdFcUs5JyDlQYYYL9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPLN4B/FtEG3KsamEb4rprh0ggalMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvN2Y2MWE2NjYtNDUyYi0z NjA4LThlZTYtMTJlYzY5OGEzMmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFqIogMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJYH1418tfmdVb0usHNkHowbO+5TpGWU/ICglyGHb3AUX28H1zReSDK8 iJLR2U7XRbP/66dd2gFB0F9j7xpIsAvqVZn5XX6R+qcaE3/5Pf34FVhOnyWQxRp2 e0ZOeLQXAx+kRgY2/28CA3TbpxhCG0aLejt7svbur7ypjTn6LMkweB+BNy6hUBWv qvaCv7tJ5tjIrdlAsGo2jJACkjaIjHER88tAubql6wuGnRz0DC/h+Vd2JGoyMQ5B rakamnTubc/NBqzwEyKCUZTEqyN77tRiaoTbc8UmeCv4xQMxmWJAIPyKZjwytmNK DptZ+bPzN9bKXW1tJCNk45stDwgNIVI= -----END CERTIFICATE-----Generated at Mon Jul 13 02:49:24 2026 by rpki-client