$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c9f38069-bbbc-3d65-89da-f1cfb84d4697.roa File: c9f38069-bbbc-3d65-89da-f1cfb84d4697.roa (raw, json) Hash identifier: kAjhKejfTm19g6uCpnqwBq2KC0AM//XEfgZG9r6UICA= Subject key identifier: 02:B7:5F:0A:86:C5:B9:0B:2F:89:04:2C:8D:3A:61:77:74:B2:A7:EA Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E6F3A2C4C74E453D4CF5931A0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c9f38069-bbbc-3d65-89da-f1cfb84d4697.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 31898 IP address blocks: 165.1.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3a:2c:4c:74:e4:53:d4:cf:59:31:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=2221ddf0-3d93-42ed-b505-659853388e1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:fc:92:ca:e7:83:88:19:54:27:ad:51:96:86: 68:11:92:cb:c1:67:3e:41:39:58:3d:7d:e7:82:3d: 7b:25:fb:6f:53:8b:bc:d0:17:1a:8d:da:3a:eb:60: ce:49:d3:c4:c0:28:5a:bb:e1:b4:57:f1:da:e3:7b: ce:7f:a5:5e:3e:3e:46:ce:9d:85:1c:ba:e6:2a:d3: f8:11:19:e5:3e:3a:fa:fb:fe:79:b3:93:f1:b4:a5: 25:0e:17:06:62:b3:6b:13:73:5e:2e:fb:86:c7:06: a5:d4:d0:34:a8:5f:48:c7:d7:9c:32:5a:0b:3d:b2: d7:78:33:76:d5:3f:53:86:01:62:9c:3f:54:c2:bb: 6b:66:a8:47:85:f4:09:1c:de:27:b3:d9:bf:1b:2b: 37:ab:06:38:de:14:ed:9e:be:94:15:b4:47:f2:69: 92:49:5a:e2:e6:f0:4e:db:af:da:76:34:d2:dd:56: ff:25:0d:d1:1d:49:bf:e2:c8:4d:a2:28:4e:90:6f: 4b:4e:dd:5c:0d:dc:44:c6:e3:16:0f:d5:b2:ec:00: 94:f2:37:1e:af:78:89:8e:10:51:f6:b0:36:1f:06: 9a:43:e9:1c:a1:c4:51:60:da:86:70:bf:51:33:37: 18:cb:a7:ea:bf:8d:36:40:34:21:4e:ab:c4:8d:23: 7b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:B7:5F:0A:86:C5:B9:0B:2F:89:04:2C:8D:3A:61:77:74:B2:A7:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c9f38069-bbbc-3d65-89da-f1cfb84d4697.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 165.1.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:72:e2:4d:55:f9:cb:29:cc:27:21:eb:6e:f1:49:cd:41:9f: 68:e2:db:cd:01:9c:54:0c:87:dc:97:55:3c:10:a8:6b:e0:b7: f1:2d:0c:80:62:84:aa:9e:1e:ac:fe:5b:4d:b5:b6:ec:fd:14: 1c:a1:94:c3:d4:73:8f:c9:34:93:6b:b2:00:2a:c9:af:b3:c4: 47:a6:6b:9b:22:a9:d0:f5:0a:28:b8:68:69:c6:28:d5:1a:a9: 08:64:40:1c:4f:b7:15:ed:fb:0a:f4:19:d7:07:21:6b:e3:ed: b6:2b:a1:bf:10:59:d9:8a:ad:73:72:ce:46:01:37:54:51:48: ab:63:07:09:c3:22:3e:6f:6c:71:1f:d6:3f:3b:ba:22:1f:9c: 66:82:0d:c5:72:89:3c:90:a5:4a:db:6d:27:2d:e2:65:67:c0: 63:47:6f:48:ae:34:f5:4b:39:ca:ed:b2:ee:b1:c0:cc:1b:d4: f6:ac:53:40:c1:58:f4:81:7c:cb:d6:35:94:24:29:51:d5:23: 34:f6:d9:cc:2e:44:df:1a:47:56:99:32:3f:dd:ca:b5:2e:b1: ab:4e:f5:bc:53:82:47:48:6d:2c:d5:7e:9b:d5:da:aa:1d:df: c6:75:79:f4:e3:19:16:f2:c1:98:6b:33:f3:e2:be:d6:28:08: 08:7a:35:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vOixMdORT1M9ZMaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk MjIyMWRkZjAtM2Q5My00MmVkLWI1MDUtNjU5ODUzMzg4ZTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/ySyueDiBlUJ61RloZoEZLLwWc+QTlYPX3n gj17JftvU4u80Bcajdo662DOSdPEwChau+G0V/Ha43vOf6VePj5Gzp2FHLrmKtP4 ERnlPjr6+/55s5PxtKUlDhcGYrNrE3NeLvuGxwal1NA0qF9Ix9ecMloLPbLXeDN2 1T9ThgFinD9UwrtrZqhHhfQJHN4ns9m/Gys3qwY43hTtnr6UFbRH8mmSSVri5vBO 26/adjTS3Vb/JQ3RHUm/4shNoihOkG9LTt1cDdxExuMWD9Wy7ACU8jcer3iJjhBR 9rA2HwaaQ+kcocRRYNqGcL9RMzcYy6fqv402QDQhTqvEjSN7tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAK3XwqGxbkLL4kELI06YXd0sqfqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYzlmMzgwNjktYmJiYy0z ZDY1LTg5ZGEtZjFjZmI4NGQ0Njk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDpQF4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGFy4k1V+cspzCch627xSc1Bn2ji280BnFQMh9yXVTwQqGvgt/EtDIBi hKqeHqz+W021tuz9FByhlMPUc4/JNJNrsgAqya+zxEema5siqdD1Cii4aGnGKNUa qQhkQBxPtxXt+wr0GdcHIWvj7bYrob8QWdmKrXNyzkYBN1RRSKtjBwnDIj5vbHEf 1j87uiIfnGaCDcVyiTyQpUrbbSct4mVnwGNHb0iuNPVLOcrtsu6xwMwb1PasU0DB WPSBfMvWNZQkKVHVIzT22cwuRN8aR1aZMj/dyrUusatO9bxTgkdIbSzVfpvV2qod 38Z1efTjGRbywZhrM/PivtYoCAh6NS0= -----END CERTIFICATE-----Generated at Mon Jul 13 02:50:37 2026 by rpki-client