$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b39dffdd-e7b6-33de-8788-9e9b5a3d8065.roa File: b39dffdd-e7b6-33de-8788-9e9b5a3d8065.roa (raw, json) Hash identifier: iWqaUW4xhM52C4QGEZNDm4dFv3UDhZ5/zLXKp/KP9gY= Subject key identifier: B2:91:AF:AF:DC:DF:D6:E9:37:D9:19:EA:1F:96:2F:CB:B2:F8:0D:1C Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584EA786E78EE95D5E303D64CC00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b39dffdd-e7b6-33de-8788-9e9b5a3d8065.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 54253 IP address blocks: 159.13.20.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:86:e7:8e:e9:5d:5e:30:3d:64:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=e740c3db-955c-49fc-9595-b2093c29d65c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c1:f6:f4:e0:7c:ff:a6:bf:4c:06:de:26:8b: 80:ef:9a:51:bd:94:4e:26:3b:f9:33:85:43:99:7c: 5c:38:42:8e:07:d8:fc:a5:75:fe:91:ca:0d:d6:ca: 76:b2:19:ec:c2:29:5d:55:7d:fb:94:b6:97:03:0a: 3b:4c:f6:bf:4b:fc:99:bb:90:05:b3:a3:ac:57:00: 8b:b7:98:65:20:38:40:f7:f1:58:dd:d6:10:4a:d5: 6c:0d:8a:a9:a2:78:42:89:a5:0d:b5:68:74:36:fa: 5b:e9:b2:90:27:26:74:3a:ca:78:5b:7d:13:49:33: b2:70:e0:6f:ba:35:a0:21:75:22:26:79:01:97:cf: 2d:c1:e2:72:8c:7d:45:a1:2d:77:48:db:5e:d9:74: 7a:e0:5d:76:31:1c:3f:b1:77:58:4a:d6:54:ba:1c: b6:14:d1:51:32:a2:d6:ae:cb:84:6e:4c:48:35:9e: 60:e5:6c:8c:e7:23:47:f7:44:6b:1a:1d:5a:47:12: 7d:ab:6e:35:e3:9e:24:1c:29:e1:c5:8a:7a:32:99: 3c:76:d8:fa:35:1f:34:f3:8d:27:30:14:e9:64:b1: 03:a2:1c:fc:5c:31:1a:e6:67:c6:85:e5:18:30:4d: 6f:5b:59:8c:16:37:09:2d:97:e1:bc:d7:c2:bc:57: b2:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:91:AF:AF:DC:DF:D6:E9:37:D9:19:EA:1F:96:2F:CB:B2:F8:0D:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b39dffdd-e7b6-33de-8788-9e9b5a3d8065.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 159.13.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:66:0c:e9:06:81:7e:0d:44:e2:ff:68:5b:36:3a:d8:93:b5: 34:16:ce:93:04:ba:bd:85:28:28:cf:05:e6:43:85:a6:96:1f: e0:7a:a8:95:3c:d6:33:ac:62:0b:30:61:fe:b4:43:cc:c5:85: b0:cb:27:cd:48:e6:d7:17:fb:1f:6e:43:49:17:4e:51:14:f4: 37:63:c7:4e:da:74:18:8d:8c:f6:af:2c:5d:02:94:a3:cf:de: 4e:97:22:c0:79:be:59:cb:02:b5:38:e3:66:b4:85:6c:fa:f2: 54:01:b1:5c:3a:af:de:59:14:7f:66:94:5b:9b:f5:d2:55:3f: 99:7f:6c:be:8a:ae:87:50:50:16:fd:18:89:a6:1d:b9:fd:69: 5b:51:e0:48:4f:82:75:5d:9b:c6:f2:b6:51:34:e5:9f:98:00: 05:25:11:65:60:8f:e8:7f:f6:0f:eb:15:25:94:c5:15:d1:8a: 53:af:e7:d1:5a:9f:34:20:19:b6:b0:8f:53:b2:b7:ee:38:7b: d1:dc:df:7d:e0:a9:c8:c5:33:eb:fe:b8:fd:81:7b:2c:eb:81: cd:aa:53:c7:2b:01:6f:0d:cd:d6:46:b5:fe:52:27:e5:16:3b: 87:34:c7:2e:5c:0e:4e:eb:0d:e3:82:b0:13:ba:31:5b:76:ed: 93:65:bb:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nhueO6V1eMD1kzAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZTc0MGMzZGItOTU1Yy00OWZjLTk1OTUtYjIwOTNjMjlkNjVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcH29OB8/6a/TAbeJouA75pRvZROJjv5M4VD mXxcOEKOB9j8pXX+kcoN1sp2shnswildVX37lLaXAwo7TPa/S/yZu5AFs6OsVwCL t5hlIDhA9/FY3dYQStVsDYqponhCiaUNtWh0Nvpb6bKQJyZ0Osp4W30TSTOycOBv ujWgIXUiJnkBl88tweJyjH1FoS13SNte2XR64F12MRw/sXdYStZUuhy2FNFRMqLW rsuEbkxINZ5g5WyM5yNH90RrGh1aRxJ9q241454kHCnhxYp6Mpk8dtj6NR80840n MBTpZLEDohz8XDEa5mfGheUYME1vW1mMFjcJLZfhvNfCvFeyIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLKRr6/c39bpN9kZ6h+WL8uy+A0cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYjM5ZGZmZGQtZTdiNi0z M2RlLTg3ODgtOWU5YjVhM2Q4MDY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnw0UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBmDOkGgX4NROL/aFs2OtiTtTQWzpMEur2FKCjPBeZDhaaWH+B6qJU8 1jOsYgswYf60Q8zFhbDLJ81I5tcX+x9uQ0kXTlEU9Ddjx07adBiNjPavLF0ClKPP 3k6XIsB5vlnLArU442a0hWz68lQBsVw6r95ZFH9mlFub9dJVP5l/bL6KrodQUBb9 GImmHbn9aVtR4EhPgnVdm8bytlE05Z+YAAUlEWVgj+h/9g/rFSWUxRXRilOv59Fa nzQgGbawj1Oyt+44e9Hc333gqcjFM+v+uP2Beyzrgc2qU8crAW8NzdZGtf5SJ+UW O4c0xy5cDk7rDeOCsBO6MVt27ZNluxA= -----END CERTIFICATE-----Generated at Thu Aug 27 10:28:03 2026 by rpki-client