$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bfa453c8-7f9a-3e56-849f-d7cbef4d033c.roa File: bfa453c8-7f9a-3e56-849f-d7cbef4d033c.roa (raw, json) Hash identifier: 8lha/c4bFKZ1xNKHDjRuK2sQu+qTl/wzgKNkNceLXSo= Subject key identifier: E7:25:40:DF:0E:CE:94:E4:18:AE:89:B6:40:BF:F8:35:9F:4D:90:64 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E7A64F949E31309E5298FCD40 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bfa453c8-7f9a-3e56-849f-d7cbef4d033c.roa Signing time: Sun 12 Jul 2026 21:00:13 +0000 ROA not before: Sun 12 Jul 2026 21:00:13 +0000 ROA not after: Sat 10 Oct 2026 21:00:13 +0000 asID: 31898 IP address blocks: 129.149.16.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7a:64:f9:49:e3:13:09:e5:29:8f:cd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 12 21:00:13 2026 GMT Not After : Oct 10 21:00:13 2026 GMT Subject: CN=87b5431b-95ae-47e2-a5c6-5fe8c64208ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:4b:df:7f:a4:2e:50:2e:64:41:75:36:70:46: ef:18:b1:48:44:16:53:1d:7f:31:43:20:1f:4f:87: a1:84:71:0c:00:eb:8c:ec:97:f0:94:2a:ab:29:30: d0:c1:d8:e2:a4:74:b6:73:25:14:ea:36:aa:1b:e4: 13:aa:2c:cc:74:df:71:bb:1c:c6:97:79:03:c6:8a: d1:ac:a6:6e:59:a2:0f:a2:d0:ec:cb:c7:aa:fa:f5: 49:b5:8f:c3:0d:e9:bf:9d:b3:fc:ae:85:12:bd:3a: 9a:29:77:9a:fa:69:07:b2:cb:4b:5d:6d:dd:e5:35: 92:01:e3:06:4a:9f:2a:88:ca:d5:34:71:79:8b:34: 90:e3:7d:05:80:5c:8f:4b:a6:31:9d:32:96:8a:2e: 03:fa:de:29:9b:8c:0d:b1:86:93:07:38:96:84:ca: 81:81:92:57:ef:60:ad:f1:39:e5:be:67:a5:45:cb: 4c:c7:1c:4d:17:d0:75:06:be:b7:0e:3d:55:d4:46: 21:12:94:2e:a0:1d:99:7d:9a:77:1d:99:92:c1:24: 8a:06:96:7f:b8:fe:73:df:f6:08:e1:ad:81:67:98: 2f:c6:fb:3e:84:8b:9a:d3:d4:09:74:08:27:9d:21: c8:cc:d2:3f:6c:f7:11:5a:d1:1a:81:fd:25:fa:2b: 8e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:25:40:DF:0E:CE:94:E4:18:AE:89:B6:40:BF:F8:35:9F:4D:90:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bfa453c8-7f9a-3e56-849f-d7cbef4d033c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.149.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:d7:98:43:25:2d:d0:b7:24:d1:cc:25:b4:df:51:60:1e:1f: b4:f5:ef:1e:b4:eb:a3:25:e4:f4:44:f8:f3:40:c4:49:77:9b: 12:66:40:74:d9:36:b9:05:0f:98:34:40:9d:8e:fc:79:12:1f: 51:39:7c:01:4d:62:0c:b3:aa:15:7f:93:b9:d1:9a:2f:5f:bd: 4f:e1:0d:91:44:b2:68:30:f1:c6:a6:dd:c5:29:a0:6b:72:4d: e8:a2:3f:d7:46:64:75:49:73:d5:4e:e3:c6:df:51:3a:ae:ba: 5a:66:d7:1c:8c:50:2e:a2:cc:57:70:5d:ef:bd:f8:e3:3a:4b: 5a:5b:2c:30:23:a2:b4:02:10:b9:44:b5:70:98:1d:44:2c:5b: 2b:79:db:9a:43:a3:e3:52:dd:2b:4a:88:1f:c7:8d:4b:3b:34: 87:1c:80:5c:bb:be:02:ac:7f:e1:7f:cd:b3:82:7c:a0:62:f3: de:9c:7a:36:dc:2b:38:7a:d1:c0:01:88:fc:82:7b:5d:83:73: 81:cc:84:82:75:4b:94:06:bc:58:3b:31:f4:fc:46:4e:8a:e7: 32:29:c8:be:56:e3:db:f4:51:be:0a:85:79:19:39:24:d7:67: 7a:d6:96:48:1b:d0:fe:1b:ca:15:75:36:ea:0d:86:48:03:4f: 02:5e:9d:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE56ZPlJ4xMJ5SmPzUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcxMjIxMDAxM1oXDTI2MTAxMDIxMDAxM1owLzEtMCsGA1UEAxMk ODdiNTQzMWItOTVhZS00N2UyLWE1YzYtNWZlOGM2NDIwOGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEvff6QuUC5kQXU2cEbvGLFIRBZTHX8xQyAf T4ehhHEMAOuM7JfwlCqrKTDQwdjipHS2cyUU6jaqG+QTqizMdN9xuxzGl3kDxorR rKZuWaIPotDsy8eq+vVJtY/DDem/nbP8roUSvTqaKXea+mkHsstLXW3d5TWSAeMG Sp8qiMrVNHF5izSQ430FgFyPS6YxnTKWii4D+t4pm4wNsYaTBziWhMqBgZJX72Ct 8TnlvmelRctMxxxNF9B1Br63Dj1V1EYhEpQuoB2ZfZp3HZmSwSSKBpZ/uP5z3/YI 4a2BZ5gvxvs+hIua09QJdAgnnSHIzNI/bPcRWtEagf0l+iuOZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOclQN8OzpTkGK6JtkC/+DWfTZBkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYmZhNDUzYzgtN2Y5YS0z ZTU2LTg0OWYtZDdjYmVmNGQwMzNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgZUQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7XmEMlLdC3JNHMJbTfUWAeH7T17x6066Ml5PRE+PNAxEl3mxJmQHTZ NrkFD5g0QJ2O/HkSH1E5fAFNYgyzqhV/k7nRmi9fvU/hDZFEsmgw8cam3cUpoGty TeiiP9dGZHVJc9VO48bfUTquulpm1xyMUC6izFdwXe+9+OM6S1pbLDAjorQCELlE tXCYHUQsWyt525pDo+NS3StKiB/HjUs7NIccgFy7vgKsf+F/zbOCfKBi896cejbc Kzh60cABiPyCe12Dc4HMhIJ1S5QGvFg7MfT8Rk6K5zIpyL5W49v0Ub4KhXkZOSTX Z3rWlkgb0P4byhV1NuoNhkgDTwJencs= -----END CERTIFICATE-----Generated at Mon Jul 13 02:46:50 2026 by rpki-client