$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8728d3bc-5c7e-3c5f-a645-b4545dcdf76d.roa File: 8728d3bc-5c7e-3c5f-a645-b4545dcdf76d.roa (raw, json) Hash identifier: 7ZgXzDlCGGvtmC3iS+7mxd3SmoQz7vHyA8jBm/ZDD/I= Subject key identifier: 1B:87:F1:E4:07:2E:F9:0E:3C:56:81:00:0F:C2:78:C8:F5:E5:09:A1 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E7A64DB01DF01A7EB63377000 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8728d3bc-5c7e-3c5f-a645-b4545dcdf76d.roa Signing time: Sun 12 Jul 2026 21:00:13 +0000 ROA not before: Sun 12 Jul 2026 21:00:13 +0000 ROA not after: Sat 10 Oct 2026 21:00:13 +0000 asID: 31898 IP address blocks: 140.204.124.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7a:64:db:01:df:01:a7:eb:63:37:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 12 21:00:13 2026 GMT Not After : Oct 10 21:00:13 2026 GMT Subject: CN=566e5246-7acd-42de-a6d6-56a242ab11dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:97:35:92:b4:d9:09:8b:14:76:b3:f7:67:ed: ab:e1:9e:91:aa:9f:c4:fb:f7:46:02:13:b9:c6:48: 65:43:31:1b:2c:c4:29:b1:2e:89:45:29:42:d0:c3: 0d:74:24:30:33:13:3e:e9:ab:e1:69:d2:9a:1c:10: 83:62:3d:e1:d8:7f:46:aa:df:e7:87:5e:05:0a:ba: 00:60:99:7c:92:3f:6e:20:b4:ba:13:33:87:f0:f1: 45:85:a4:d4:08:ab:7b:f1:7e:46:24:4e:51:f3:25: 6d:bc:68:fb:67:a2:51:0b:84:8b:ea:f2:0e:8e:10: 92:30:cb:05:2e:63:73:7e:e4:a0:89:5f:b2:1b:e5: 64:fd:46:d7:db:ae:aa:1d:2c:17:1a:1c:f8:a8:fa: 7d:1c:71:a5:8a:52:39:62:5c:ed:1b:10:57:be:10: 7b:5c:07:fd:cc:d5:79:00:1a:13:78:29:f6:6a:42: b6:23:8a:42:45:57:28:55:d2:7f:1a:c4:10:f7:bf: ca:a0:92:85:71:f4:5a:8b:7f:f2:ee:c1:ea:04:3f: dc:62:07:8b:fb:e8:16:b0:a3:e6:70:32:e2:bc:88: 61:fc:f1:d1:6b:76:8d:8a:5a:bb:d6:69:29:46:3e: 75:a2:19:c1:cc:81:3d:f4:a2:21:f3:c5:19:fc:25: 15:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:87:F1:E4:07:2E:F9:0E:3C:56:81:00:0F:C2:78:C8:F5:E5:09:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8728d3bc-5c7e-3c5f-a645-b4545dcdf76d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.124.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:12:d3:a2:78:fd:7c:da:5b:03:fd:3d:9a:63:8d:c7:0f:cc: 12:85:16:ea:a3:ce:d1:45:d2:01:af:78:0c:d5:54:f2:ce:46: 03:9c:29:96:08:c4:79:e6:51:ba:6b:43:08:04:07:2f:5d:ae: a7:b6:e1:02:5b:fa:79:6b:19:69:27:75:08:81:43:4d:3c:bd: 1c:72:1f:fd:20:a1:56:59:19:ed:d0:6a:92:b0:fd:f8:39:a4: 09:79:3f:35:58:77:e5:44:d4:f4:c6:f6:12:e3:49:8a:02:4e: cc:4f:1a:81:a0:11:37:3c:5c:19:da:a8:46:5c:f1:9a:1f:78: fb:70:9c:b5:bd:09:56:c4:06:fd:a9:b1:f2:3e:70:d3:c0:ea: 0f:28:0d:2e:22:69:40:7a:69:36:e0:83:53:82:32:2a:33:fe: ee:fc:03:ac:30:9e:9d:9c:29:9c:78:87:b3:41:0d:27:89:7c: 26:91:e3:88:3d:5b:0b:fe:ee:d4:7e:f4:8b:b9:a0:22:5c:14: 7c:94:de:b9:f1:d3:26:0d:8a:44:12:ef:7e:df:e7:a6:a6:d1: 6e:ff:5a:4f:7c:e0:b1:f6:18:b9:2d:b8:de:6f:bb:dd:ac:81: 40:17:58:df:a4:fe:13:28:6f:48:bb:3a:63:33:a7:37:7c:23: d3:10:50:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE56ZNsB3wGn62M3cAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcxMjIxMDAxM1oXDTI2MTAxMDIxMDAxM1owLzEtMCsGA1UEAxMk NTY2ZTUyNDYtN2FjZC00MmRlLWE2ZDYtNTZhMjQyYWIxMWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35c1krTZCYsUdrP3Z+2r4Z6Rqp/E+/dGAhO5 xkhlQzEbLMQpsS6JRSlC0MMNdCQwMxM+6avhadKaHBCDYj3h2H9Gqt/nh14FCroA YJl8kj9uILS6EzOH8PFFhaTUCKt78X5GJE5R8yVtvGj7Z6JRC4SL6vIOjhCSMMsF LmNzfuSgiV+yG+Vk/UbX266qHSwXGhz4qPp9HHGlilI5YlztGxBXvhB7XAf9zNV5 ABoTeCn2akK2I4pCRVcoVdJ/GsQQ97/KoJKFcfRai3/y7sHqBD/cYgeL++gWsKPm cDLivIhh/PHRa3aNilq71mkpRj51ohnBzIE99KIh88UZ/CUVjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBuH8eQHLvkOPFaBAA/CeMj15QmhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvODcyOGQzYmMtNWM3ZS0z YzVmLWE2NDUtYjQ1NDVkY2RmNzZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMx8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE0S06J4/XzaWwP9PZpjjccPzBKFFuqjztFF0gGveAzVVPLORgOcKZYI xHnmUbprQwgEBy9drqe24QJb+nlrGWkndQiBQ008vRxyH/0goVZZGe3QapKw/fg5 pAl5PzVYd+VE1PTG9hLjSYoCTsxPGoGgETc8XBnaqEZc8ZofePtwnLW9CVbEBv2p sfI+cNPA6g8oDS4iaUB6aTbgg1OCMioz/u78A6wwnp2cKZx4h7NBDSeJfCaR44g9 Wwv+7tR+9Iu5oCJcFHyU3rnx0yYNikQS737f56am0W7/Wk984LH2GLktuN5vu92s gUAXWN+k/hMob0i7OmMzpzd8I9MQUC4= -----END CERTIFICATE-----Generated at Mon Jul 13 02:52:01 2026 by rpki-client