$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9650cd9b-0494-3747-95bd-45298bbbc6ca.roa File: 9650cd9b-0494-3747-95bd-45298bbbc6ca.roa (raw, json) Hash identifier: tQ15sgfDvwZ12dcOrjUE/HPJkcoMNwCHsj2e6umSXKg= Subject key identifier: 01:0D:20:8E:B7:E5:E1:30:E4:50:B5:0B:44:76:CA:20:85:BF:F6:F3 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E5FDF4CE8A37B7EC6888992C0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9650cd9b-0494-3747-95bd-45298bbbc6ca.roa Signing time: Fri 03 Jul 2026 09:00:12 +0000 ROA not before: Fri 03 Jul 2026 09:00:12 +0000 ROA not after: Thu 01 Oct 2026 09:00:12 +0000 asID: 31898 IP address blocks: 129.149.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5f:df:4c:e8:a3:7b:7e:c6:88:89:92:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 3 09:00:12 2026 GMT Not After : Oct 1 09:00:12 2026 GMT Subject: CN=f3a3d3ae-d576-4b1e-93ff-67a3bb5ed4dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:40:0a:47:2e:7c:af:d4:74:8e:3b:e6:77:00: bf:2f:41:fb:41:e7:d9:41:c4:10:c7:3d:66:3b:46: eb:e2:ba:f5:2f:3d:74:b4:b1:f7:39:86:f1:58:58: 95:c9:54:08:77:6a:ef:e1:18:53:9f:66:f1:50:00: ea:3a:0e:e9:9e:8b:c0:d4:c9:49:7f:28:3a:2c:c4: bc:5e:8c:59:f1:16:4e:25:0d:e8:a2:d9:c6:ae:6d: 8a:01:5d:7e:e9:1a:01:c0:f7:4e:9c:88:86:ed:90: cb:41:4b:38:4c:7c:a9:b8:62:8b:fe:84:0b:4d:44: 92:6d:46:a4:0d:86:3a:fc:c7:14:7e:2b:30:7c:a9: cd:82:64:ef:9c:d1:00:59:4a:e1:2c:75:84:66:45: 86:8e:dc:53:03:bd:67:89:a8:9a:f5:23:4e:18:c0: 69:d0:10:84:88:0d:00:c2:f8:e4:94:08:ea:c5:b1: ce:7b:1e:28:c5:79:73:a6:57:62:92:4d:64:e3:5b: 34:8b:d9:78:c0:1f:54:8f:10:19:11:7f:36:a5:49: 76:5a:e5:07:b1:2a:d5:69:e3:37:50:06:06:01:59: 90:0b:ed:2b:25:00:90:87:2f:9c:a3:0d:1e:1e:c6: cc:be:10:00:c9:46:26:4c:97:01:ea:bc:ff:d0:3f: 82:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:0D:20:8E:B7:E5:E1:30:E4:50:B5:0B:44:76:CA:20:85:BF:F6:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9650cd9b-0494-3747-95bd-45298bbbc6ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.149.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:5a:e9:93:51:34:a6:93:fa:71:80:0c:ed:a5:34:d7:d5:19: f8:a3:30:00:a6:61:42:39:41:ba:d7:2e:44:e5:e1:24:58:be: 72:0a:ac:89:c3:d6:2a:2e:eb:5f:8c:3a:0f:06:e8:a1:d8:a7: d5:3b:60:fc:f2:2c:58:eb:34:fd:a8:c4:b1:c8:2a:58:39:3e: 7c:01:2a:97:64:31:ea:a7:0e:81:c2:9d:5a:25:9d:8d:d4:76: eb:a8:ea:fd:27:5d:a9:49:dc:71:52:4c:7e:2c:df:a1:c5:7f: f0:8a:21:31:b2:66:58:57:19:93:88:7e:8b:58:1d:12:bb:2c: b5:f4:95:8b:55:38:62:54:d8:49:2d:10:c6:67:5a:1c:6c:50: 67:9b:87:7c:9b:90:7a:74:65:78:89:30:87:39:ec:cd:f2:ef: 6b:3b:23:2e:b1:84:5f:34:89:1f:ec:75:0b:b7:a3:41:b9:e6: 8f:3e:a1:b9:ed:08:6c:a4:e6:81:1b:3f:66:7a:1b:1b:16:e9: 39:23:89:49:a7:49:75:e8:3a:be:9e:9b:5b:2d:e6:04:23:86: 9f:c7:18:eb:07:36:7e:db:49:5e:f3:97:91:e0:0d:ff:de:c6: c0:d3:66:a8:c4:37:48:2c:d1:e3:dd:56:2e:dd:63:e1:fc:55: da:77:ef:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5f30zoo3t+xoiJksAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcwMzA5MDAxMloXDTI2MTAwMTA5MDAxMlowLzEtMCsGA1UEAxMk ZjNhM2QzYWUtZDU3Ni00YjFlLTkzZmYtNjdhM2JiNWVkNGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0EAKRy58r9R0jjvmdwC/L0H7QefZQcQQxz1m O0br4rr1Lz10tLH3OYbxWFiVyVQId2rv4RhTn2bxUADqOg7pnovA1MlJfyg6LMS8 XoxZ8RZOJQ3ootnGrm2KAV1+6RoBwPdOnIiG7ZDLQUs4THypuGKL/oQLTUSSbUak DYY6/McUfiswfKnNgmTvnNEAWUrhLHWEZkWGjtxTA71niaia9SNOGMBp0BCEiA0A wvjklAjqxbHOex4oxXlzpldikk1k41s0i9l4wB9UjxAZEX82pUl2WuUHsSrVaeM3 UAYGAVmQC+0rJQCQhy+cow0eHsbMvhAAyUYmTJcB6rz/0D+CJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAENII635eEw5FC1C0R2yiCFv/bzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOTY1MGNkOWItMDQ5NC0z NzQ3LTk1YmQtNDUyOThiYmJjNmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgZVwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACda6ZNRNKaT+nGADO2lNNfVGfijMACmYUI5QbrXLkTl4SRYvnIKrInD 1iou61+MOg8G6KHYp9U7YPzyLFjrNP2oxLHIKlg5PnwBKpdkMeqnDoHCnVolnY3U duuo6v0nXalJ3HFSTH4s36HFf/CKITGyZlhXGZOIfotYHRK7LLX0lYtVOGJU2Ekt EMZnWhxsUGebh3ybkHp0ZXiJMIc57M3y72s7Iy6xhF80iR/sdQu3o0G55o8+obnt CGyk5oEbP2Z6GxsW6TkjiUmnSXXoOr6em1st5gQjhp/HGOsHNn7bSV7zl5HgDf/e xsDTZqjEN0gs0ePdVi7dY+H8Vdp37w8= -----END CERTIFICATE-----Generated at Mon Jul 13 02:49:00 2026 by rpki-client