$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8bc3f3db-5a95-3768-96d8-2b31aac6cd03.roa File: 8bc3f3db-5a95-3768-96d8-2b31aac6cd03.roa (raw, json) Hash identifier: 5RfTWrHrH1/avSF9Qr54d2h/ZS6nXitzzYePbVw5MAA= Subject key identifier: 5D:A6:B8:7A:46:F9:DA:40:81:F0:DA:1D:FC:12:05:23:CE:FB:99:0F Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E78FF7A42C2C3E95CA36DAE80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8bc3f3db-5a95-3768-96d8-2b31aac6cd03.roa Signing time: Sun 12 Jul 2026 09:00:11 +0000 ROA not before: Sun 12 Jul 2026 09:00:11 +0000 ROA not after: Sat 10 Oct 2026 09:00:11 +0000 asID: 31898 IP address blocks: 147.154.64.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:78:ff:7a:42:c2:c3:e9:5c:a3:6d:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 12 09:00:11 2026 GMT Not After : Oct 10 09:00:11 2026 GMT Subject: CN=97057681-b194-4697-afba-1f7948b344c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f6:ef:0c:32:d4:49:45:00:5a:e7:7c:2d:9b: ad:17:c6:c4:8c:42:6e:c9:6b:65:1d:83:b4:40:ec: dc:97:c3:9f:ab:b1:e3:93:d2:aa:7b:9f:f2:50:33: a6:94:7c:78:53:0c:b4:7e:d0:3b:b0:92:eb:24:d5: 5a:f0:4b:d4:71:e1:51:0a:ad:85:1f:4f:07:7d:2f: ab:0d:22:d2:d8:08:a6:f9:21:6a:54:4e:5e:90:b0: 23:27:9d:c0:6f:63:b6:26:32:b8:81:43:db:15:c3: c2:60:6d:49:99:ec:0a:83:05:34:dd:89:af:93:2f: 4b:af:95:e9:3d:f0:41:4d:68:8b:7b:e7:58:35:41: 8b:f1:be:e1:cf:8c:19:a4:2f:f2:b2:0b:8e:57:3a: 28:7d:b5:ce:d8:d8:8a:17:98:54:59:70:0f:ea:68: c8:0f:45:86:5d:3b:fa:fd:50:73:4c:62:7e:b4:c9: 92:eb:e4:38:24:30:cc:53:d3:4f:17:45:ae:d5:cf: 02:d2:3e:e7:65:a0:9b:b5:02:c8:eb:2b:ca:89:18: a4:dc:3b:67:70:67:f8:b0:0d:ee:fa:ec:c1:20:89: 44:7a:b6:5d:0f:48:40:c9:51:59:37:65:90:0d:fc: fe:b1:b2:7a:0d:9d:a2:4a:58:f0:b5:46:37:d4:89: c6:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:A6:B8:7A:46:F9:DA:40:81:F0:DA:1D:FC:12:05:23:CE:FB:99:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8bc3f3db-5a95-3768-96d8-2b31aac6cd03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 147.154.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:a2:44:64:9d:8e:13:90:63:c4:cf:4f:f4:bf:87:58:f8:a0: 02:78:32:00:27:e9:71:81:03:4e:32:41:98:09:89:7c:55:4d: 58:82:96:64:a2:c0:7b:af:40:1b:b3:b0:4e:fc:31:f2:b2:d3: a8:46:46:19:a7:cf:00:c6:1a:99:a0:c1:e4:a0:17:aa:ff:32: 13:71:04:77:e9:94:0c:53:3e:11:81:36:b9:f9:ec:3b:4a:a8: 08:69:d7:27:8f:94:cc:5b:9c:cc:4f:34:4e:c0:5a:a2:ed:d5: 9d:3d:18:35:9d:39:b7:35:de:9f:68:59:4a:3b:48:37:26:5c: 77:5f:df:5f:5f:86:fa:a9:a3:75:22:55:61:0b:2f:df:7b:c6: 84:2a:28:ad:a0:94:5c:67:06:83:76:e4:13:84:66:4b:4e:6c: b6:26:a2:ce:6b:5f:fc:6d:af:e9:5e:14:c2:ea:f6:c7:a5:c7: d1:99:47:8f:3c:15:0f:d3:69:60:33:39:46:bf:42:0a:3b:bc: df:0b:e6:fe:11:56:eb:32:e0:79:91:c9:57:2f:e1:0e:28:54: b1:ba:e9:fb:43:2f:d8:2c:90:b9:e5:de:19:15:f5:3c:ec:04: ea:d4:8f:0d:0d:ce:6c:b5:93:67:50:5b:0c:da:ac:4b:89:02: 12:04:07:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE54/3pCwsPpXKNtroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcxMjA5MDAxMVoXDTI2MTAxMDA5MDAxMVowLzEtMCsGA1UEAxMk OTcwNTc2ODEtYjE5NC00Njk3LWFmYmEtMWY3OTQ4YjM0NGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPbvDDLUSUUAWud8LZutF8bEjEJuyWtlHYO0 QOzcl8Ofq7Hjk9Kqe5/yUDOmlHx4Uwy0ftA7sJLrJNVa8EvUceFRCq2FH08HfS+r DSLS2Aim+SFqVE5ekLAjJ53Ab2O2JjK4gUPbFcPCYG1JmewKgwU03Ymvky9Lr5Xp PfBBTWiLe+dYNUGL8b7hz4wZpC/ysguOVzoofbXO2NiKF5hUWXAP6mjID0WGXTv6 /VBzTGJ+tMmS6+Q4JDDMU9NPF0Wu1c8C0j7nZaCbtQLI6yvKiRik3DtncGf4sA3u +uzBIIlEerZdD0hAyVFZN2WQDfz+sbJ6DZ2iSljwtUY31InG7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF2muHpG+dpAgfDaHfwSBSPO+5kPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOGJjM2YzZGItNWE5NS0z NzY4LTk2ZDgtMmIzMWFhYzZjZDAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDk5pAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+iRGSdjhOQY8TPT/S/h1j4oAJ4MgAn6XGBA04yQZgJiXxVTViClmSi wHuvQBuzsE78MfKy06hGRhmnzwDGGpmgweSgF6r/MhNxBHfplAxTPhGBNrn57DtK qAhp1yePlMxbnMxPNE7AWqLt1Z09GDWdObc13p9oWUo7SDcmXHdf319fhvqpo3Ui VWELL997xoQqKK2glFxnBoN25BOEZktObLYmos5rX/xtr+leFMLq9selx9GZR488 FQ/TaWAzOUa/Qgo7vN8L5v4RVusy4HmRyVcv4Q4oVLG66ftDL9gskLnl3hkV9Tzs BOrUjw0Nzmy1k2dQWwzarEuJAhIEByc= -----END CERTIFICATE-----Generated at Mon Jul 13 02:46:37 2026 by rpki-client