$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a8aeac39-c794-349e-bef6-fb3c8890d20d.roa File: a8aeac39-c794-349e-bef6-fb3c8890d20d.roa (raw, json) Hash identifier: RgZzkWZuGh5Hq3O7wAvBmtbJO88abdMnko8ArdXbVRs= Subject key identifier: E9:93:32:62:96:DF:34:16:58:10:36:32:3B:C1:B9:CB:BD:B6:2C:10 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E6F3EB05A495B777F48922E80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a8aeac39-c794-349e-bef6-fb3c8890d20d.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 31898 IP address blocks: 168.138.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3e:b0:5a:49:5b:77:7f:48:92:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=a6bc80de-0e7a-4a5d-8622-ecbabfed9153 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d4:4f:17:06:e4:f4:2b:b6:31:e7:d2:00:af: ab:1f:b4:1a:c2:91:0a:9b:e0:3e:58:bf:b3:d4:38: b8:0e:e4:d9:45:3a:ea:ef:09:94:5a:50:de:c1:9a: cb:6d:25:92:d6:ed:10:a1:52:ba:ab:b1:82:7f:34: 8f:70:75:48:e9:08:e1:2c:cb:be:8c:52:b0:ba:ce: 31:ab:76:92:9a:ab:0c:81:3e:14:49:f1:19:f0:5a: f9:be:87:a6:93:52:02:a4:45:27:e3:f8:e5:f2:f3: 5b:12:aa:a0:0c:14:37:57:e0:f5:ce:31:97:58:29: 3e:76:66:13:4c:1c:e2:ed:72:d0:a7:4f:ab:a3:72: 45:6d:73:3c:b3:36:f2:10:13:3c:d7:90:3e:d4:db: 57:e5:57:e3:3d:28:b8:56:40:1e:58:88:ae:9b:81: 15:75:85:41:15:21:a2:ee:a8:e8:f1:8b:90:b5:b0: 80:dc:03:2e:92:cd:a6:8c:8a:f8:b5:de:0c:7c:6c: 83:6a:aa:a7:5f:ba:c1:fc:c1:8a:22:fd:2d:fb:b5: 3a:55:a4:02:9f:b7:da:e7:61:f2:a1:7b:3d:8f:d3: 13:6e:6f:eb:43:2b:7a:72:08:20:0e:47:5e:18:2e: fa:51:d7:a0:ab:84:dd:73:b4:64:61:a9:c8:71:bb: 56:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:93:32:62:96:DF:34:16:58:10:36:32:3B:C1:B9:CB:BD:B6:2C:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a8aeac39-c794-349e-bef6-fb3c8890d20d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.138.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:b8:28:51:b8:4b:82:99:e2:9b:3e:eb:dd:cc:32:85:e1:81: 90:c9:1f:ba:7e:51:ff:38:0b:dd:1b:fa:40:85:19:c6:df:11: 37:69:55:9e:a8:8d:ef:e1:77:50:c7:88:49:7b:02:cc:9f:a1: 69:f5:46:f9:f8:b2:69:cd:b3:fe:f1:ff:1c:cd:f4:57:8e:64: 81:eb:6b:e6:d9:05:c3:01:1f:7a:6a:02:b4:16:d4:99:6b:6b: 60:6d:aa:34:5f:6d:96:eb:7d:f8:c1:31:a2:92:64:29:1d:75: 6b:59:4a:3a:9b:f5:45:ba:a4:d1:b2:59:94:70:81:d0:59:63: 21:6d:b2:da:64:4f:ae:dd:06:c3:49:6c:2d:b2:3f:29:4b:a0: 58:4b:ad:3e:c4:e0:cb:a6:73:59:af:99:ec:1f:c3:43:be:5f: 4f:dd:0e:af:2e:58:28:40:11:e5:64:74:6e:5a:5d:1c:90:eb: 74:9d:81:08:28:d5:c3:55:48:e3:0c:a1:ae:5b:77:d7:ff:e6: b9:72:bd:72:01:c3:81:68:9d:3f:9e:a2:1a:06:94:25:d1:33: 5c:d3:30:8c:2f:05:17:f4:da:de:04:5b:08:05:d5:a4:0c:da: b7:e0:c2:6a:24:1e:c2:4e:b3:89:9a:71:6e:23:7c:c3:fe:20: a5:8e:1f:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vPrBaSVt3f0iSLoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk YTZiYzgwZGUtMGU3YS00YTVkLTg2MjItZWNiYWJmZWQ5MTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNRPFwbk9Cu2MefSAK+rH7QawpEKm+A+WL+z 1Di4DuTZRTrq7wmUWlDewZrLbSWS1u0QoVK6q7GCfzSPcHVI6QjhLMu+jFKwus4x q3aSmqsMgT4USfEZ8Fr5voemk1ICpEUn4/jl8vNbEqqgDBQ3V+D1zjGXWCk+dmYT TBzi7XLQp0+ro3JFbXM8szbyEBM815A+1NtX5VfjPSi4VkAeWIium4EVdYVBFSGi 7qjo8YuQtbCA3AMuks2mjIr4td4MfGyDaqqnX7rB/MGKIv0t+7U6VaQCn7fa52Hy oXs9j9MTbm/rQyt6cgggDkdeGC76Udegq4Tdc7RkYanIcbtWQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOmTMmKW3zQWWBA2MjvBucu9tiwQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYThhZWFjMzktYzc5NC0z NDllLWJlZjYtZmIzYzg4OTBkMjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqIp8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFm4KFG4S4KZ4ps+693MMoXhgZDJH7p+Uf84C90b+kCFGcbfETdpVZ6o je/hd1DHiEl7AsyfoWn1Rvn4smnNs/7x/xzN9FeOZIHra+bZBcMBH3pqArQW1Jlr a2BtqjRfbZbrffjBMaKSZCkddWtZSjqb9UW6pNGyWZRwgdBZYyFtstpkT67dBsNJ bC2yPylLoFhLrT7E4Mumc1mvmewfw0O+X0/dDq8uWChAEeVkdG5aXRyQ63SdgQgo 1cNVSOMMoa5bd9f/5rlyvXIBw4FonT+eohoGlCXRM1zTMIwvBRf02t4EWwgF1aQM 2rfgwmokHsJOs4macW4jfMP+IKWOHzg= -----END CERTIFICATE-----Generated at Mon Jul 13 02:52:00 2026 by rpki-client