$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b934c68b-61a0-38be-8908-0126dfe03f5d.roa File: b934c68b-61a0-38be-8908-0126dfe03f5d.roa (raw, json) Hash identifier: oMpJsaS0wkfuuV4i66mmzuNRlmpF7SnpAn+xZ82DRUE= Subject key identifier: CB:E4:CC:47:70:20:23:10:68:17:C3:58:B4:70:67:E3:0D:DB:4F:E5 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E7A64DC457588994307726DC0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b934c68b-61a0-38be-8908-0126dfe03f5d.roa Signing time: Sun 12 Jul 2026 21:00:13 +0000 ROA not before: Sun 12 Jul 2026 21:00:13 +0000 ROA not after: Sat 10 Oct 2026 21:00:13 +0000 asID: 31898 IP address blocks: 144.33.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7a:64:dc:45:75:88:99:43:07:72:6d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 12 21:00:13 2026 GMT Not After : Oct 10 21:00:13 2026 GMT Subject: CN=f24bd6a2-7430-4ae9-a5ef-ef4a4284e27b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:95:c8:fe:d9:39:0d:9b:98:a2:51:87:95:b0: 27:35:be:21:fa:62:f7:80:db:0c:02:f1:66:b2:13: 28:11:98:2c:82:c7:74:ed:7c:f3:bf:da:8f:df:40: 39:52:2b:04:83:2b:f5:a0:89:60:5a:77:f9:5d:d1: cd:46:75:dd:22:28:b0:6d:05:e2:41:fd:fc:c4:4d: e0:ab:9c:e3:20:f8:99:41:3f:15:10:26:0f:3f:12: d8:3e:56:d2:f4:92:69:58:c0:ef:90:c0:59:42:b5: 39:55:54:b6:98:9d:23:a4:13:79:75:eb:2e:e6:df: ef:4f:64:bd:89:e9:f0:3a:21:74:ad:7f:bd:33:44: d7:65:bb:6a:9d:f3:62:70:9b:ce:2f:56:67:0d:17: 5a:33:a8:52:e5:9c:9a:b4:6f:17:ab:c5:15:c3:d6: 36:b8:28:c6:45:f5:ba:68:46:96:f3:f7:e1:92:e1: 89:9d:60:10:d1:b3:d3:08:fe:eb:83:0d:42:99:66: b4:94:33:ee:13:a5:d2:0c:a7:cd:f2:47:14:2d:95: dc:50:88:6c:33:6d:ef:2a:66:2b:94:ea:49:6f:61: 83:52:44:44:1b:98:66:1b:81:4f:e5:14:00:63:91: 00:8b:c8:47:46:e7:20:06:1c:1b:b8:26:87:40:f5: 97:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:E4:CC:47:70:20:23:10:68:17:C3:58:B4:70:67:E3:0D:DB:4F:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b934c68b-61a0-38be-8908-0126dfe03f5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 144.33.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:db:9d:7e:b8:6c:5a:d8:2e:a7:31:ac:15:2d:d9:f0:2f:d0: 11:69:2d:2e:e4:5b:05:87:4b:79:c8:09:dd:2e:33:18:e9:47: fa:95:ef:b7:65:8e:da:6c:d7:59:27:4c:60:a7:4d:c4:d6:5b: 7f:d9:da:30:ab:fc:df:ff:78:e3:54:bf:5c:6a:58:b3:d1:c0: 12:98:a7:9a:62:77:0c:43:71:cf:15:38:e8:84:8a:52:bc:a1: 95:6c:25:7e:b9:cd:52:9b:5d:2f:05:95:35:0d:22:05:43:67: 3a:da:85:0e:d8:4e:19:56:20:38:40:30:2e:c4:ac:06:d0:4b: 40:ad:7c:90:a4:84:03:c9:60:79:ee:98:14:2d:75:ad:a5:f8: 4f:d6:35:9d:0d:43:61:f3:a5:8c:ed:8d:cf:3d:65:16:c4:a7: 08:9a:33:37:7d:d7:55:39:83:27:17:9e:9b:8e:17:a8:f7:08: dc:5a:e4:22:d1:92:71:fc:22:93:72:e5:d4:f7:55:27:55:f2: 77:c7:79:b2:e8:8a:39:14:03:41:86:1d:b5:96:af:74:ba:7b: 04:79:54:92:f4:44:e3:1c:a3:99:c9:7d:84:ca:3a:c8:75:8f: f3:0f:01:92:88:61:80:cd:b7:5f:a4:11:5f:92:07:f6:06:c7: 36:b2:80:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE56ZNxFdYiZQwdybcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcxMjIxMDAxM1oXDTI2MTAxMDIxMDAxM1owLzEtMCsGA1UEAxMk ZjI0YmQ2YTItNzQzMC00YWU5LWE1ZWYtZWY0YTQyODRlMjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpXI/tk5DZuYolGHlbAnNb4h+mL3gNsMAvFm shMoEZgsgsd07Xzzv9qP30A5UisEgyv1oIlgWnf5XdHNRnXdIiiwbQXiQf38xE3g q5zjIPiZQT8VECYPPxLYPlbS9JJpWMDvkMBZQrU5VVS2mJ0jpBN5desu5t/vT2S9 ienwOiF0rX+9M0TXZbtqnfNicJvOL1ZnDRdaM6hS5ZyatG8Xq8UVw9Y2uCjGRfW6 aEaW8/fhkuGJnWAQ0bPTCP7rgw1CmWa0lDPuE6XSDKfN8kcULZXcUIhsM23vKmYr lOpJb2GDUkREG5hmG4FP5RQAY5EAi8hHRucgBhwbuCaHQPWX+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMvkzEdwICMQaBfDWLRwZ+MN20/lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYjkzNGM2OGItNjFhMC0z OGJlLTg5MDgtMDEyNmRmZTAzZjVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFkCGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH/bnX64bFrYLqcxrBUt2fAv0BFpLS7kWwWHS3nICd0uMxjpR/qV77dl jtps11knTGCnTcTWW3/Z2jCr/N//eONUv1xqWLPRwBKYp5pidwxDcc8VOOiEilK8 oZVsJX65zVKbXS8FlTUNIgVDZzrahQ7YThlWIDhAMC7ErAbQS0CtfJCkhAPJYHnu mBQtda2l+E/WNZ0NQ2HzpYztjc89ZRbEpwiaMzd911U5gycXnpuOF6j3CNxa5CLR knH8IpNy5dT3VSdV8nfHebLoijkUA0GGHbWWr3S6ewR5VJL0ROMco5nJfYTKOsh1 j/MPAZKIYYDNt1+kEV+SB/YGxzaygIw= -----END CERTIFICATE-----Generated at Mon Jul 13 02:53:09 2026 by rpki-client