$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/95214554-aa85-3bbc-abf0-3612bda2be04.roa File: 95214554-aa85-3bbc-abf0-3612bda2be04.roa (raw, json) Hash identifier: 4EvKSZV913FYxlj4U31mBeoDBzLZbPnWAI0IeciZyQY= Subject key identifier: 90:FE:C1:C0:F4:C2:99:81:55:B2:F0:01:83:23:F4:E4:70:FE:40:68 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E6F3EB9048B88F73617F8B580 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/95214554-aa85-3bbc-abf0-3612bda2be04.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 31898 IP address blocks: 137.131.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3e:b9:04:8b:88:f7:36:17:f8:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=5576d1d9-75cc-4be1-bb00-eb943735341d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:66:be:23:9d:c7:11:1d:74:30:65:a1:fc:68: d3:3f:32:18:72:8a:16:cb:09:76:16:e8:6c:34:c9: 59:44:c4:c9:4c:ed:9d:03:23:e0:f5:ad:cb:4a:a4: 8e:2f:33:cd:46:10:da:de:cb:b9:8a:ac:a0:a2:12: 0f:d6:aa:9c:b4:5d:c0:4b:cb:37:fb:c0:d1:ed:15: ee:9a:f8:b4:95:e9:b1:e9:67:cc:1e:9a:ec:8e:e0: 66:9e:37:83:66:6b:2c:90:07:bc:9c:43:d6:30:b2: e6:8b:eb:ba:07:54:44:5b:8b:a7:cf:ec:50:f7:99: 96:19:0e:51:4d:05:48:91:24:68:01:53:44:11:ce: 96:3e:a0:d9:9a:72:98:ce:28:24:eb:41:7e:92:4a: 88:01:2e:1f:0b:e0:7e:24:87:91:a6:9b:6e:83:73: f6:c6:78:86:8a:79:43:b6:7c:c4:f5:fd:2d:21:fa: 99:da:e6:22:85:81:49:90:98:83:04:e0:34:32:d6: ab:d7:c1:b6:3a:9f:c7:fa:e1:7d:2d:e1:0d:a3:98: 46:bb:34:b5:08:83:35:c8:d5:82:2e:97:ab:2f:2c: 3c:46:db:7e:4d:6c:06:90:f5:78:5c:8b:ff:72:49: 0a:12:26:16:9d:e1:f1:e8:e8:f3:84:3f:ad:e0:48: 86:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:FE:C1:C0:F4:C2:99:81:55:B2:F0:01:83:23:F4:E4:70:FE:40:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/95214554-aa85-3bbc-abf0-3612bda2be04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 137.131.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:73:a2:50:ae:02:22:15:a1:8c:7f:45:f5:be:2c:45:41:a8: 54:d7:20:82:5b:4f:b9:b9:25:8c:16:0f:55:fd:aa:c7:7d:f5: 30:16:24:a9:aa:43:22:fd:a5:fa:62:7c:af:25:36:a9:4d:ca: a0:e2:c1:2f:85:5f:51:e9:69:36:6f:8e:a2:b8:6a:73:65:dc: 17:53:21:ab:47:8c:9e:df:96:01:6b:47:4c:8c:f7:6b:7b:b9: 97:ed:13:b7:ef:90:f5:b5:92:b9:41:f9:1d:fd:a6:c8:a8:56: e4:7c:b6:1c:1a:32:77:10:2f:89:b5:31:15:4b:92:61:08:f1: 7b:d0:0c:28:81:62:10:f3:1a:16:ef:df:7d:15:26:0e:ee:15: d4:7b:6e:34:0e:66:b2:52:94:a3:ab:85:9c:2d:49:1f:0b:14: 58:32:51:23:83:b2:ad:3e:e7:32:99:89:bf:35:05:13:e3:2c: 5e:65:41:fb:63:17:fc:9c:56:bd:2a:6c:3c:05:0e:47:88:87: ad:ff:76:7b:22:87:1f:ff:81:36:86:5a:34:d8:cd:b3:7d:ee: 7b:d4:38:b0:f2:2d:8f:91:2e:6b:00:dd:5b:0c:9b:14:26:3a: 7d:2e:b7:20:d7:8d:7f:c7:5a:1e:34:3f:a9:5e:89:3e:1a:2c: 29:03:27:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vPrkEi4j3Nhf4tYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk NTU3NmQxZDktNzVjYy00YmUxLWJiMDAtZWI5NDM3MzUzNDFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ma+I53HER10MGWh/GjTPzIYcooWywl2Fuhs NMlZRMTJTO2dAyPg9a3LSqSOLzPNRhDa3su5iqygohIP1qqctF3AS8s3+8DR7RXu mvi0lemx6WfMHprsjuBmnjeDZmsskAe8nEPWMLLmi+u6B1REW4unz+xQ95mWGQ5R TQVIkSRoAVNEEc6WPqDZmnKYzigk60F+kkqIAS4fC+B+JIeRpptug3P2xniGinlD tnzE9f0tIfqZ2uYihYFJkJiDBOA0Mtar18G2Op/H+uF9LeENo5hGuzS1CIM1yNWC LperLyw8Rtt+TWwGkPV4XIv/ckkKEiYWneHx6OjzhD+t4EiGHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJD+wcD0wpmBVbLwAYMj9ORw/kBoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOTUyMTQ1NTQtYWE4NS0z YmJjLWFiZjAtMzYxMmJkYTJiZTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHiYOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHVzolCuAiIVoYx/RfW+LEVBqFTXIIJbT7m5JYwWD1X9qsd99TAWJKmq QyL9pfpifK8lNqlNyqDiwS+FX1HpaTZvjqK4anNl3BdTIatHjJ7flgFrR0yM92t7 uZftE7fvkPW1krlB+R39psioVuR8thwaMncQL4m1MRVLkmEI8XvQDCiBYhDzGhbv 330VJg7uFdR7bjQOZrJSlKOrhZwtSR8LFFgyUSODsq0+5zKZib81BRPjLF5lQftj F/ycVr0qbDwFDkeIh63/dnsihx//gTaGWjTYzbN97nvUOLDyLY+RLmsA3VsMmxQm On0utyDXjX/HWh40P6leiT4aLCkDJ/I= -----END CERTIFICATE-----Generated at Mon Jul 13 02:53:08 2026 by rpki-client