$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/86c0befc-6e9d-343e-800e-39ec04f1ce71.roa File: 86c0befc-6e9d-343e-800e-39ec04f1ce71.roa (raw, json) Hash identifier: 2sHTGLGPUULdyInAfxcMtG5kyL7G6DVWjYsvCYjUUmw= Subject key identifier: 62:2A:72:E2:9E:81:0F:77:2D:9F:E4:6B:06:60:26:FB:20:CB:FE:AA Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E5FDF76A11E61770428D73920 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/86c0befc-6e9d-343e-800e-39ec04f1ce71.roa Signing time: Fri 03 Jul 2026 09:00:12 +0000 ROA not before: Fri 03 Jul 2026 09:00:12 +0000 ROA not after: Thu 01 Oct 2026 09:00:12 +0000 asID: 31898 IP address blocks: 130.162.192.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5f:df:76:a1:1e:61:77:04:28:d7:39:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 3 09:00:12 2026 GMT Not After : Oct 1 09:00:12 2026 GMT Subject: CN=86c51f2b-af38-418d-b6d5-f0d26f55481f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:cf:d8:1a:d7:ad:76:0c:c5:76:d6:3a:a3:e5: 1c:14:26:19:7b:43:57:44:46:d1:6f:63:2b:28:39: fb:4a:73:07:88:18:aa:6d:01:d2:11:28:1c:7c:5a: 94:e7:97:19:97:30:d3:9f:69:06:85:69:24:f4:a9: bf:27:8f:e7:dd:a1:01:84:cc:71:c5:fa:e9:91:6e: 31:c6:b4:f8:9d:da:b9:54:e5:d3:af:d6:00:e7:82: 80:f1:3a:37:73:9f:a1:99:fa:76:00:ca:0b:49:fd: 14:51:b6:28:95:11:19:a0:32:37:e3:d3:e6:fa:f2: dd:45:a2:1e:97:51:b6:5a:b8:71:93:38:57:ae:ae: a4:5d:77:cc:a5:25:ab:6c:87:a6:d5:42:d9:41:49: e1:f5:68:c5:db:1a:34:46:f1:d3:6c:33:23:63:74: 3c:90:60:55:04:28:13:9f:1b:57:3e:05:f9:20:ad: 72:1c:7e:b0:66:1c:90:67:46:99:17:1f:4c:fa:32: e7:e5:2d:e4:5c:07:f4:fd:ae:f6:d2:35:64:59:4e: 84:03:e6:6b:82:92:a9:fd:6a:59:3f:fc:e9:af:d6: 2a:51:07:d0:ea:f2:e8:37:58:68:c6:0c:5e:c5:6b: b7:bb:b3:59:5d:d7:2d:2a:60:ce:f1:45:5e:3d:01: d9:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:2A:72:E2:9E:81:0F:77:2D:9F:E4:6B:06:60:26:FB:20:CB:FE:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/86c0befc-6e9d-343e-800e-39ec04f1ce71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 130.162.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:4a:ae:61:9b:22:7c:e8:23:da:2a:b7:95:ea:0b:4c:3d:6a: a1:e0:d2:33:ce:c8:21:76:bf:62:34:4e:81:bf:64:f8:19:25: 1d:ac:78:09:de:ba:a0:ea:ec:27:f2:ca:6d:43:94:ca:2a:7a: 9d:f0:a0:45:aa:41:57:55:dd:90:b6:51:9d:4d:56:bf:04:3b: 62:2f:a1:dd:3a:6c:ec:6c:58:2c:d7:c1:05:18:df:8a:e9:90: 8a:bf:47:cf:ec:22:f2:43:76:13:70:e9:07:78:d1:45:f9:e8: 74:c3:cf:3d:99:ee:30:3f:21:91:36:d5:9b:52:88:f3:4a:3a: cb:75:7a:54:4e:e8:6e:a2:f6:26:57:ea:3c:d7:03:ef:86:8b: 8b:5c:4f:32:b1:7b:b3:4e:5e:7c:4c:ec:cf:60:91:34:a6:92: bf:1d:81:11:f3:16:d6:89:5f:a9:83:cc:95:6e:1b:a1:2d:e4: 78:32:ac:5d:95:2d:57:f3:78:7c:48:97:0f:9d:5d:78:1d:14: 56:57:d0:3f:e2:b3:ae:ce:36:dc:48:af:d5:9b:54:71:ba:b5: 6b:b4:59:41:15:0e:78:81:73:59:59:fd:15:2a:8b:78:7f:16: 60:25:f3:94:cd:39:89:5f:9d:00:db:2b:be:fc:02:a1:66:30: 38:ce:6d:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5f33ahHmF3BCjXOSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcwMzA5MDAxMloXDTI2MTAwMTA5MDAxMlowLzEtMCsGA1UEAxMk ODZjNTFmMmItYWYzOC00MThkLWI2ZDUtZjBkMjZmNTU0ODFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxM/YGtetdgzFdtY6o+UcFCYZe0NXREbRb2Mr KDn7SnMHiBiqbQHSESgcfFqU55cZlzDTn2kGhWkk9Km/J4/n3aEBhMxxxfrpkW4x xrT4ndq5VOXTr9YA54KA8To3c5+hmfp2AMoLSf0UUbYolREZoDI349Pm+vLdRaIe l1G2WrhxkzhXrq6kXXfMpSWrbIem1ULZQUnh9WjF2xo0RvHTbDMjY3Q8kGBVBCgT nxtXPgX5IK1yHH6wZhyQZ0aZFx9M+jLn5S3kXAf0/a720jVkWU6EA+ZrgpKp/WpZ P/zpr9YqUQfQ6vLoN1hoxgxexWu3u7NZXdctKmDO8UVePQHZSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGIqcuKegQ93LZ/kawZgJvsgy/6qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvODZjMGJlZmMtNmU5ZC0z NDNlLTgwMGUtMzllYzA0ZjFjZTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgqLAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJKrmGbInzoI9oqt5XqC0w9aqHg0jPOyCF2v2I0ToG/ZPgZJR2seAne uqDq7Cfyym1DlMoqep3woEWqQVdV3ZC2UZ1NVr8EO2Ivod06bOxsWCzXwQUY34rp kIq/R8/sIvJDdhNw6Qd40UX56HTDzz2Z7jA/IZE21ZtSiPNKOst1elRO6G6i9iZX 6jzXA++Gi4tcTzKxe7NOXnxM7M9gkTSmkr8dgRHzFtaJX6mDzJVuG6Et5HgyrF2V LVfzeHxIlw+dXXgdFFZX0D/is67ONtxIr9WbVHG6tWu0WUEVDniBc1lZ/RUqi3h/ FmAl85TNOYlfnQDbK778AqFmMDjObRs= -----END CERTIFICATE-----Generated at Mon Jul 13 02:51:59 2026 by rpki-client