$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8f2ab85e-02ef-3896-8c69-9fc85acdcc7e.roa File: 8f2ab85e-02ef-3896-8c69-9fc85acdcc7e.roa (raw, json) Hash identifier: B/XVn7c4nf0a12VHlaU8X0oHk7QINmgvDougdjCvj0Q= Subject key identifier: A8:C8:06:98:9B:72:83:5F:54:F4:20:DA:56:20:22:84:31:E9:7E:7B Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E5FDF76D0508110C90F790100 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8f2ab85e-02ef-3896-8c69-9fc85acdcc7e.roa Signing time: Fri 03 Jul 2026 09:00:12 +0000 ROA not before: Fri 03 Jul 2026 09:00:12 +0000 ROA not after: Thu 01 Oct 2026 09:00:12 +0000 asID: 31898 IP address blocks: 68.233.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5f:df:76:d0:50:81:10:c9:0f:79:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 3 09:00:12 2026 GMT Not After : Oct 1 09:00:12 2026 GMT Subject: CN=baf0f3e0-50df-4a2f-a863-8bad8e522cdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:62:48:65:85:f4:a9:36:5c:fb:4c:b1:e0:d5: cf:63:df:b3:43:1e:de:a6:9a:07:f8:06:9d:85:9c: 84:4a:36:42:b1:55:59:d8:97:21:67:b0:4c:3a:27: df:f5:e5:cd:0c:b2:25:14:dc:73:d0:03:e3:4f:3e: b1:2b:9f:71:42:53:07:2b:ff:7f:f9:eb:3d:fa:b5: c0:d9:45:fa:68:bc:23:ca:1d:86:8f:b9:73:33:3c: 32:b0:e1:e9:31:70:61:33:a9:d1:6a:0d:e3:79:b6: f1:7e:81:ff:de:e5:58:e4:97:06:07:1c:7a:d8:0a: 44:29:21:f7:14:3e:69:d1:29:0f:bf:ea:5c:cb:13: 2d:64:c9:ac:ab:1d:cf:f6:2d:a1:88:ad:f0:3b:a9: 05:5f:24:17:c5:65:4c:a7:bc:79:3e:f4:77:90:3f: 15:13:4c:5a:51:28:bc:3d:21:b5:ba:0f:12:32:b0: 2d:d2:c3:eb:62:55:7d:61:49:e7:86:3f:03:7e:1c: b1:c4:2a:d2:e4:ab:c9:6c:24:8c:c7:c7:ae:d6:5e: 7e:0b:a0:03:f7:82:98:b1:83:c7:4a:e3:04:43:b1: 86:e7:6c:db:fe:d4:4d:b5:5f:c5:1e:77:65:66:91: 54:13:10:62:00:71:af:05:14:a0:17:4f:e2:43:c8: f0:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:C8:06:98:9B:72:83:5F:54:F4:20:DA:56:20:22:84:31:E9:7E:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8f2ab85e-02ef-3896-8c69-9fc85acdcc7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 68.233.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:2e:24:87:de:ed:3b:de:9c:de:40:57:cb:55:d1:2b:30:27: 1b:78:39:12:99:4c:6a:a4:9f:13:b5:a5:92:81:71:83:90:29: be:61:0a:c9:75:7a:16:75:17:8c:d0:a3:8f:d0:01:bc:35:4f: 84:b7:44:0a:18:f4:0a:d3:f4:3d:c6:37:7a:c0:9a:1c:2c:62: 90:cf:07:d4:62:e3:4b:df:3a:da:53:99:1d:42:da:9f:3b:a5: e4:87:da:c6:d9:b8:03:89:b0:ec:b5:af:f3:3e:6a:bf:64:2d: 19:a2:25:95:26:2a:e1:a6:1c:c0:db:a5:bf:df:97:51:3f:ef: 62:84:64:fd:da:b6:6b:98:85:d5:44:c6:3a:3c:af:e3:1a:60: 00:05:5c:01:67:53:d6:9e:18:f8:09:52:b1:0b:e4:1a:d8:54: 2d:23:28:9f:e9:f2:b3:67:75:48:83:a4:07:ad:34:c1:2a:a9: 72:53:78:22:de:38:ec:41:7b:7e:2b:ea:cf:49:3d:fe:94:a7: 7f:d1:10:79:9e:3a:e1:41:c9:1d:23:9f:0f:4e:d6:0f:10:d1: b9:a2:7d:fc:56:7e:cb:b8:fa:ed:de:b5:29:26:81:d1:33:cc: b5:f7:9d:a4:66:9b:7e:4d:f5:82:9a:12:29:03:d0:7a:e4:64: 20:ba:e1:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5f33bQUIEQyQ95AQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcwMzA5MDAxMloXDTI2MTAwMTA5MDAxMlowLzEtMCsGA1UEAxMk YmFmMGYzZTAtNTBkZi00YTJmLWE4NjMtOGJhZDhlNTIyY2RjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWJIZYX0qTZc+0yx4NXPY9+zQx7eppoH+Aad hZyESjZCsVVZ2JchZ7BMOiff9eXNDLIlFNxz0APjTz6xK59xQlMHK/9/+es9+rXA 2UX6aLwjyh2Gj7lzMzwysOHpMXBhM6nRag3jebbxfoH/3uVY5JcGBxx62ApEKSH3 FD5p0SkPv+pcyxMtZMmsqx3P9i2hiK3wO6kFXyQXxWVMp7x5PvR3kD8VE0xaUSi8 PSG1ug8SMrAt0sPrYlV9YUnnhj8DfhyxxCrS5KvJbCSMx8eu1l5+C6AD94KYsYPH SuMEQ7GG52zb/tRNtV/FHndlZpFUExBiAHGvBRSgF0/iQ8jwfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKjIBpibcoNfVPQg2lYgIoQx6X57MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOGYyYWI4NWUtMDJlZi0z ODk2LThjNjktOWZjODVhY2RjYzdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDROlwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKguJIfe7TvenN5AV8tV0SswJxt4ORKZTGqknxO1pZKBcYOQKb5hCsl1 ehZ1F4zQo4/QAbw1T4S3RAoY9ArT9D3GN3rAmhwsYpDPB9Ri40vfOtpTmR1C2p87 peSH2sbZuAOJsOy1r/M+ar9kLRmiJZUmKuGmHMDbpb/fl1E/72KEZP3atmuYhdVE xjo8r+MaYAAFXAFnU9aeGPgJUrEL5BrYVC0jKJ/p8rNndUiDpAetNMEqqXJTeCLe OOxBe34r6s9JPf6Up3/REHmeOuFByR0jnw9O1g8Q0bmiffxWfsu4+u3etSkmgdEz zLX3naRmm35N9YKaEikD0HrkZCC64Zc= -----END CERTIFICATE-----Generated at Mon Jul 13 02:46:59 2026 by rpki-client