$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/81725f95-aa9b-39b5-8c47-b89056bb8193.roa File: 81725f95-aa9b-39b5-8c47-b89056bb8193.roa (raw, json) Hash identifier: iRra76RFO/NuVkT/Gjj4Oc2boGSv6i7TyEUDb4xOywI= Subject key identifier: 11:B5:24:BB:75:EF:A0:B9:05:EA:40:81:26:28:A7:D1:D1:06:56:23 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E6F3A111A438A092CCD50D340 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/81725f95-aa9b-39b5-8c47-b89056bb8193.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 31898 IP address blocks: 147.154.208.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3a:11:1a:43:8a:09:2c:cd:50:d3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=af2656c1-558c-47d1-88e0-7d2d1f8651c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9d:ae:5e:5f:c6:cb:d3:53:5c:2d:8c:d8:15: 07:58:00:a4:7d:84:c1:88:62:58:13:9d:95:b0:ef: 1d:dc:32:41:7d:7f:87:bb:ee:e6:28:f3:dc:75:9c: 89:6b:58:92:a7:64:27:cb:4f:d7:2d:33:cf:39:62: 83:db:60:ed:fb:df:1e:49:4c:0c:ae:ab:03:ce:f8: 0c:84:8a:8a:30:7c:30:ae:be:90:61:7a:74:59:ba: 94:ee:4b:c3:50:fa:63:49:1c:f4:04:3d:c4:a6:f8: c5:1a:ed:b8:6f:44:9b:0e:06:b3:c4:da:d1:06:8b: 9b:ee:5a:7b:b0:d4:73:fa:84:f5:15:01:e6:9b:b4: d0:31:2d:78:af:82:25:5d:18:f3:45:a3:0d:bc:f9: 35:d8:b7:95:ee:70:77:b5:11:27:07:80:75:bb:d4: bb:a4:9b:63:eb:41:b2:16:1e:37:df:49:d9:6e:51: 32:b0:98:0e:f6:c1:57:18:04:19:0f:e6:c2:d7:7d: 78:80:16:5c:40:1e:95:d9:eb:fd:23:ee:50:dc:f7: 73:30:f9:68:8d:8a:6f:51:6d:cc:55:5c:71:0c:d0: 40:08:f5:7b:a0:cf:be:91:57:83:91:17:2d:83:e9: 5c:42:92:d2:54:bd:e5:5b:f2:2d:f8:e1:da:6b:d0: 3c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:B5:24:BB:75:EF:A0:B9:05:EA:40:81:26:28:A7:D1:D1:06:56:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/81725f95-aa9b-39b5-8c47-b89056bb8193.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 147.154.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:02:3c:14:63:27:92:cc:a4:93:69:92:d1:05:f5:8f:f8:97: 85:48:be:4c:84:99:4b:a2:96:f7:86:92:e0:b0:97:dc:9d:59: 3e:d9:fe:51:b5:a3:c4:b0:dd:f1:0d:e4:2a:81:c4:ba:7c:16: 27:aa:54:0a:26:ed:d7:e3:87:69:9b:0e:ea:ac:d4:6e:f2:5e: 48:ed:a5:bb:43:2b:75:ec:1e:b2:ec:29:25:ae:d9:3a:8e:e1: dd:42:bd:cb:59:2d:cc:5d:63:2a:f5:ba:75:d2:d0:30:a7:72: 17:9d:1b:cb:a2:3d:f0:51:17:22:05:f3:32:9e:4a:84:95:51: fb:37:d7:b6:22:be:86:f1:3e:f4:f9:62:b9:14:58:3a:21:6e: 95:ba:a3:a3:86:fc:05:11:0f:e0:78:af:45:0b:b3:2b:6f:9c: 72:39:63:36:fb:f9:ac:e4:af:2a:31:02:54:c1:79:b1:cb:08: 79:08:79:86:85:c6:14:03:9f:29:45:91:1f:93:8e:11:cc:27: da:5a:f8:6c:e4:87:3d:da:2d:75:cd:b5:66:35:4f:b2:ba:8d: 31:e8:69:ce:53:9e:84:f7:95:09:43:9f:79:34:d5:7a:95:70: d7:87:22:c0:c8:0c:f8:29:d2:f2:c8:27:40:d7:62:57:6a:29: ab:9b:2f:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vOhEaQ4oJLM1Q00AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk YWYyNjU2YzEtNTU4Yy00N2QxLTg4ZTAtN2QyZDFmODY1MWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZ2uXl/Gy9NTXC2M2BUHWACkfYTBiGJYE52V sO8d3DJBfX+Hu+7mKPPcdZyJa1iSp2Qny0/XLTPPOWKD22Dt+98eSUwMrqsDzvgM hIqKMHwwrr6QYXp0WbqU7kvDUPpjSRz0BD3EpvjFGu24b0SbDgazxNrRBoub7lp7 sNRz+oT1FQHmm7TQMS14r4IlXRjzRaMNvPk12LeV7nB3tREnB4B1u9S7pJtj60Gy Fh4330nZblEysJgO9sFXGAQZD+bC1314gBZcQB6V2ev9I+5Q3PdzMPlojYpvUW3M VVxxDNBACPV7oM++kVeDkRctg+lcQpLSVL3lW/It+OHaa9A8gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBG1JLt176C5BepAgSYop9HRBlYjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvODE3MjVmOTUtYWE5Yi0z OWI1LThjNDctYjg5MDU2YmI4MTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDk5rQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABMCPBRjJ5LMpJNpktEF9Y/4l4VIvkyEmUuilveGkuCwl9ydWT7Z/lG1 o8Sw3fEN5CqBxLp8FieqVAom7dfjh2mbDuqs1G7yXkjtpbtDK3XsHrLsKSWu2TqO 4d1CvctZLcxdYyr1unXS0DCnchedG8uiPfBRFyIF8zKeSoSVUfs317YivobxPvT5 YrkUWDohbpW6o6OG/AURD+B4r0ULsytvnHI5Yzb7+azkryoxAlTBebHLCHkIeYaF xhQDnylFkR+TjhHMJ9pa+Gzkhz3aLXXNtWY1T7K6jTHoac5TnoT3lQlDn3k01XqV cNeHIsDIDPgp0vLIJ0DXYldqKaubL+s= -----END CERTIFICATE-----Generated at Mon Jul 13 02:50:32 2026 by rpki-client