$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a4817fd0-0f78-36e4-bbb7-b8fafc7a4879.roa File: a4817fd0-0f78-36e4-bbb7-b8fafc7a4879.roa (raw, json) Hash identifier: pVxfHXMwg0lu7kIR4i8Pq71H+aBte7j0w/nP+7nwcbg= Subject key identifier: F4:78:AF:53:7C:E1:38:99:D7:29:60:92:C0:58:4B:D2:18:F0:DC:A2 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E6F3EC00DF62C28D25F78AE80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a4817fd0-0f78-36e4-bbb7-b8fafc7a4879.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 31898 IP address blocks: 147.154.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3e:c0:0d:f6:2c:28:d2:5f:78:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=b26f592d-935e-40e0-b45b-45b0ae606544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b2:69:e0:3f:95:16:3d:3a:c8:f4:97:53:ff: 87:33:f5:2f:84:64:d6:13:9e:71:f3:ae:5d:95:26: 53:07:de:73:b5:a6:e2:e7:e6:4e:a4:76:ad:c7:89: ab:8a:29:71:1b:e6:97:a6:a1:40:7c:b8:46:18:d0: c1:f0:09:8c:6d:bf:cd:6a:9d:55:c8:50:e7:2d:9d: ff:8b:65:c0:0b:80:58:46:5d:97:08:0b:fa:49:36: 59:4e:f8:2c:ba:a6:af:60:d7:23:e9:3c:b0:10:dd: ce:67:bb:59:86:cb:ca:72:01:16:65:09:92:08:7a: 3b:0c:c1:a3:5f:d8:e0:60:87:16:2d:a7:ba:85:17: ff:59:8f:c0:28:33:48:72:bb:1d:92:19:ad:26:90: f1:7a:e5:02:a3:a3:78:7e:e8:15:35:34:35:0e:d3: 23:8c:ff:b0:ef:8b:b1:ab:72:25:63:3f:8e:e8:68: ca:f0:8c:0a:b3:31:8f:e4:fa:a4:36:58:b8:ec:ed: 55:c3:7a:ba:ab:03:23:fb:d2:16:f9:33:85:24:e5: 98:9d:35:c0:00:5b:4e:6b:6a:20:50:e0:32:27:14: 3e:63:93:a1:e1:16:91:09:cd:b5:86:73:9f:c9:6a: e5:a6:72:c7:ea:53:c3:84:5a:57:f9:5b:3b:e7:60: 3a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:78:AF:53:7C:E1:38:99:D7:29:60:92:C0:58:4B:D2:18:F0:DC:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a4817fd0-0f78-36e4-bbb7-b8fafc7a4879.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 147.154.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:b0:82:38:5c:8a:61:08:cf:e9:15:15:26:a3:59:b7:5c:2e: 02:d9:d8:35:8c:b3:5d:af:b3:f2:5b:43:fa:31:35:aa:49:e0: db:50:88:57:20:ac:82:59:75:3c:1a:a5:2c:59:2c:8b:84:a8: 1f:f9:10:59:7a:da:f5:7c:17:1a:b0:d2:c4:07:70:85:21:50: 63:36:49:e9:aa:cd:65:4e:58:c8:a9:0d:53:88:7e:e2:76:c8: ec:c9:9c:66:12:73:d5:ad:7d:32:c8:1b:26:08:a7:97:70:1d: 30:2d:80:1f:ea:11:5a:94:5c:b0:6a:02:12:32:23:ac:f5:6e: d1:41:ce:46:24:72:af:81:ba:20:da:33:2e:38:33:39:25:10: 66:0e:0b:d7:bc:2a:73:54:12:5d:79:9a:c4:93:b0:c0:e6:f8: aa:38:be:a3:73:d6:0c:65:b4:66:0b:0c:27:c4:dc:79:dd:b0: f2:a4:1e:c0:36:a2:0a:3a:1b:75:ea:88:fc:ee:9a:f4:4b:ee: f4:d1:5a:e0:64:7f:53:c0:f5:c3:08:bb:89:5a:e0:51:4a:9d: 3a:73:b7:1e:b5:c3:d1:c3:bd:03:be:fb:1e:bd:06:fb:38:87: ad:01:af:da:56:bd:a2:97:19:b9:2d:55:62:76:cd:d9:ea:7e: bb:c1:c5:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vPsAN9iwo0l94roAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk YjI2ZjU5MmQtOTM1ZS00MGUwLWI0NWItNDViMGFlNjA2NTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7Jp4D+VFj06yPSXU/+HM/UvhGTWE55x865d lSZTB95ztabi5+ZOpHatx4mriilxG+aXpqFAfLhGGNDB8AmMbb/Nap1VyFDnLZ3/ i2XAC4BYRl2XCAv6STZZTvgsuqavYNcj6TywEN3OZ7tZhsvKcgEWZQmSCHo7DMGj X9jgYIcWLae6hRf/WY/AKDNIcrsdkhmtJpDxeuUCo6N4fugVNTQ1DtMjjP+w74ux q3IlYz+O6GjK8IwKszGP5PqkNli47O1Vw3q6qwMj+9IW+TOFJOWYnTXAAFtOa2og UOAyJxQ+Y5Oh4RaRCc21hnOfyWrlpnLH6lPDhFpX+Vs752A6tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPR4r1N84TiZ1ylgksBYS9IY8NyiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYTQ4MTdmZDAtMGY3OC0z NmU0LWJiYjctYjhmYWZjN2E0ODc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEk5qQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABOwgjhcimEIz+kVFSajWbdcLgLZ2DWMs12vs/JbQ/oxNapJ4NtQiFcg rIJZdTwapSxZLIuEqB/5EFl62vV8Fxqw0sQHcIUhUGM2SemqzWVOWMipDVOIfuJ2 yOzJnGYSc9WtfTLIGyYIp5dwHTAtgB/qEVqUXLBqAhIyI6z1btFBzkYkcq+BuiDa My44MzklEGYOC9e8KnNUEl15msSTsMDm+Ko4vqNz1gxltGYLDCfE3HndsPKkHsA2 ogo6G3XqiPzumvRL7vTRWuBkf1PA9cMIu4la4FFKnTpztx61w9HDvQO++x69Bvs4 h60Br9pWvaKXGbktVWJ2zdnqfrvBxR0= -----END CERTIFICATE-----Generated at Mon Jul 13 02:51:39 2026 by rpki-client