$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8595f784-ef14-3b0b-85c0-e4b0debb49c2.roa File: 8595f784-ef14-3b0b-85c0-e4b0debb49c2.roa (raw, json) Hash identifier: fjgicM2QfLJ/4ob9WDpgtuyQRVdN/IDqEsh9g+BHgew= Subject key identifier: 5B:80:EB:CE:A4:46:FC:1D:C2:F3:A9:DC:51:23:0D:C9:71:F3:D8:67 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E6B0A2B64EA4A24E2C2895500 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8595f784-ef14-3b0b-85c0-e4b0debb49c2.roa Signing time: Tue 07 Jul 2026 09:00:12 +0000 ROA not before: Tue 07 Jul 2026 09:00:12 +0000 ROA not after: Mon 05 Oct 2026 09:00:12 +0000 asID: 31898 IP address blocks: 132.145.84.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6b:0a:2b:64:ea:4a:24:e2:c2:89:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 7 09:00:12 2026 GMT Not After : Oct 5 09:00:12 2026 GMT Subject: CN=b77e02ee-9623-4a7e-9e05-d05d1e546bc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:76:44:46:bb:29:03:6f:78:41:6f:40:8b:92: 31:83:6d:9e:34:46:c2:b0:e8:f7:d9:11:d6:e0:6f: 40:a0:3f:b8:9b:cd:1c:dc:7a:a5:ed:06:90:7e:d5: 63:9e:eb:c4:22:29:1e:81:9d:6a:97:a8:87:c3:45: c1:57:23:38:5c:c9:99:8e:e5:11:d3:0b:6b:0e:79: d8:5b:53:0a:05:dc:78:4d:88:f3:92:13:1c:07:75: 63:a9:86:bc:00:b3:90:78:80:b9:a9:c3:02:88:56: 46:04:a0:76:42:2e:06:1d:4e:d8:81:de:74:17:a1: 95:13:e2:35:aa:7c:8d:c1:01:92:9f:fb:9a:a2:df: d3:36:53:ce:75:54:d2:25:a2:38:9e:dd:76:f0:f8: f7:df:d6:03:d7:48:f9:f8:cb:fa:85:09:61:91:b6: f3:8a:36:ea:57:b5:19:fb:7b:73:13:47:b1:eb:92: 43:6e:cd:47:e0:2f:5c:20:d2:c4:69:31:26:9b:8d: be:8d:0a:15:83:27:cc:a5:ad:66:c8:9d:65:fa:aa: 10:44:f6:3c:67:d5:d3:84:28:d8:e7:57:d7:a7:35: a8:4c:a2:cf:70:c7:18:d6:61:ef:86:8f:50:bb:6a: 9f:b9:cf:5b:43:ad:17:44:44:ff:99:a4:35:73:47: a9:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:80:EB:CE:A4:46:FC:1D:C2:F3:A9:DC:51:23:0D:C9:71:F3:D8:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8595f784-ef14-3b0b-85c0-e4b0debb49c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 132.145.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:61:94:d0:9b:7a:c8:80:70:e9:d9:17:aa:07:c2:ba:bd:b6: 0f:cd:dd:14:c6:fe:f1:67:a3:29:f7:81:f8:60:a0:54:eb:45: 05:85:ec:93:b5:4e:54:05:29:b8:86:ac:79:23:02:94:d8:b4: f9:71:25:86:39:06:1b:24:c0:b8:ec:9c:f9:93:3d:17:4d:01: 31:95:7a:c4:2a:54:d9:d7:61:0e:d3:a7:d7:1d:f0:9a:6e:82: 5c:ff:78:51:6b:1f:10:df:94:b2:8a:92:0a:fc:29:2b:b2:bd: cb:23:96:e2:cf:ea:34:06:87:72:a8:13:c9:83:f7:ab:a6:dd: 9d:ac:13:7f:43:a8:ce:75:2b:6b:86:52:81:1b:0f:5a:a6:ed: 3f:e2:57:64:6f:96:97:42:cc:66:c5:f0:d5:97:a1:e5:1d:f9: e2:df:4d:11:a8:ab:43:9d:a6:c7:84:65:9a:04:0a:19:82:fc: a9:a2:b2:18:1c:81:b0:12:46:13:c7:fd:6d:1f:5a:23:bf:1e: 37:53:66:31:9d:27:1a:03:d4:ce:a4:40:f9:a7:a7:2f:34:1d: 53:4c:c7:db:f9:bc:38:40:39:9c:0a:b6:7c:a9:7d:d1:34:ec: af:2f:3d:05:16:92:3d:9a:4c:f0:3d:b5:0d:27:7c:8e:87:3e: 83:cc:e3:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5rCitk6kok4sKJVQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcwNzA5MDAxMloXDTI2MTAwNTA5MDAxMlowLzEtMCsGA1UEAxMk Yjc3ZTAyZWUtOTYyMy00YTdlLTllMDUtZDA1ZDFlNTQ2YmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3ZERrspA294QW9Ai5Ixg22eNEbCsOj32RHW 4G9AoD+4m80c3Hql7QaQftVjnuvEIikegZ1ql6iHw0XBVyM4XMmZjuUR0wtrDnnY W1MKBdx4TYjzkhMcB3VjqYa8ALOQeIC5qcMCiFZGBKB2Qi4GHU7Ygd50F6GVE+I1 qnyNwQGSn/uaot/TNlPOdVTSJaI4nt128Pj339YD10j5+Mv6hQlhkbbzijbqV7UZ +3tzE0ex65JDbs1H4C9cINLEaTEmm42+jQoVgyfMpa1myJ1l+qoQRPY8Z9XThCjY 51fXpzWoTKLPcMcY1mHvho9Qu2qfuc9bQ60XRET/maQ1c0epcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFuA686kRvwdwvOp3FEjDclx89hnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvODU5NWY3ODQtZWYxNC0z YjBiLTg1YzAtZTRiMGRlYmI0OWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQChJFUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKlhlNCbesiAcOnZF6oHwrq9tg/N3RTG/vFnoyn3gfhgoFTrRQWF7JO1 TlQFKbiGrHkjApTYtPlxJYY5BhskwLjsnPmTPRdNATGVesQqVNnXYQ7Tp9cd8Jpu glz/eFFrHxDflLKKkgr8KSuyvcsjluLP6jQGh3KoE8mD96um3Z2sE39DqM51K2uG UoEbD1qm7T/iV2RvlpdCzGbF8NWXoeUd+eLfTRGoq0OdpseEZZoEChmC/Kmishgc gbASRhPH/W0fWiO/HjdTZjGdJxoD1M6kQPmnpy80HVNMx9v5vDhAOZwKtnypfdE0 7K8vPQUWkj2aTPA9tQ0nfI6HPoPM4y0= -----END CERTIFICATE-----Generated at Mon Jul 13 02:46:43 2026 by rpki-client