$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ca414a24-2cf9-355c-b83f-5c043bd7f053.roa File: ca414a24-2cf9-355c-b83f-5c043bd7f053.roa (raw, json) Hash identifier: XjDOjQDSnUczGStvFLXYrBkSB87ZazgAKHomSOVIVN8= Subject key identifier: 83:8D:61:AB:D0:6D:32:43:AF:65:51:BB:DA:F0:CD:85:A2:2E:83:62 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E709F77FA32C65E87CCB0B220 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ca414a24-2cf9-355c-b83f-5c043bd7f053.roa Signing time: Thu 09 Jul 2026 09:00:13 +0000 ROA not before: Thu 09 Jul 2026 09:00:13 +0000 ROA not after: Wed 07 Oct 2026 09:00:13 +0000 asID: 31898 IP address blocks: 129.153.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:70:9f:77:fa:32:c6:5e:87:cc:b0:b2:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 9 09:00:13 2026 GMT Not After : Oct 7 09:00:13 2026 GMT Subject: CN=4d301d9f-8986-4273-98fe-3c8f14c5a0ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:c5:60:bb:66:ea:11:9c:5b:f8:9e:28:2e:24: 2d:d7:ab:11:44:a7:d1:fa:dd:35:e0:14:c2:bc:35: 80:0f:5f:a7:c1:ac:1f:ff:04:9c:99:b5:16:67:2a: 7e:c9:0e:ca:f9:74:cc:2d:02:27:b7:eb:7f:b9:88: 6e:d0:24:ff:fb:7b:24:2f:01:28:cc:e8:88:00:4c: ed:b2:92:10:d4:d2:f0:d4:11:ac:1b:d0:b5:c6:ab: 3f:ed:d4:07:d4:15:8c:e4:a8:ff:9e:10:4c:99:fe: 1b:6d:24:c6:2f:b0:24:10:bb:4c:37:c9:ff:30:55: 3a:e6:a2:2d:93:55:2f:12:22:fc:18:4b:07:27:21: 33:16:33:73:51:2f:86:50:e2:95:51:c0:01:5b:09: c2:c4:d0:59:5f:3b:d9:e1:09:7d:43:2d:ab:de:87: df:4c:80:b2:89:1d:6d:21:b6:c7:2a:1e:bc:0b:6f: 22:3f:5d:4a:4a:8f:e1:4e:0e:d3:fa:7f:2b:c4:f7: 59:76:60:fa:1a:58:0e:6b:cd:8b:59:df:dc:e4:c0: db:ad:de:44:ab:ea:e2:53:a8:59:4e:26:19:36:33: 4f:dd:31:53:cf:0e:fc:62:c0:bd:9e:02:9d:34:77: 14:77:cf:4a:d2:eb:be:6e:eb:e7:73:17:85:ed:79: 34:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:8D:61:AB:D0:6D:32:43:AF:65:51:BB:DA:F0:CD:85:A2:2E:83:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ca414a24-2cf9-355c-b83f-5c043bd7f053.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.153.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:2f:c5:47:ab:85:09:c6:84:0b:53:6e:6a:55:80:12:21:be: 8f:1e:ec:d7:b8:4b:e5:95:40:90:55:e3:ed:96:6e:5a:4f:9f: 99:88:ba:b8:06:4c:aa:6b:b2:b2:6c:9d:e1:56:a4:7e:37:4a: 5a:24:6a:fd:30:71:b5:4f:e9:2d:8c:9c:5f:48:87:29:e3:0e: 85:e6:78:4e:d1:63:eb:5f:ec:53:36:93:3e:23:6c:43:da:84: 3b:a1:49:69:7f:5a:d1:71:0b:4f:6a:f1:7e:cb:b1:36:04:76: b6:3c:58:7e:93:16:47:f2:e0:2f:8d:5c:52:10:6d:36:c5:3b: c2:0b:fb:51:d2:7d:b9:89:d8:8f:ee:73:cb:7c:f1:9f:04:dc: dc:60:b4:06:05:8e:6e:61:25:d0:c6:48:88:85:67:e1:3e:d2: 74:3c:15:3e:64:52:58:cf:ad:8c:97:1d:47:8c:cc:73:d9:80: 70:14:90:bc:f2:c0:46:01:f5:e2:f4:aa:b9:33:26:1b:e3:51: cb:b1:dd:12:b7:73:0e:46:58:f1:fb:dd:a0:3b:21:e9:0e:83: 0f:37:9b:e8:c7:aa:40:83:f9:6a:85:e4:42:95:bf:5d:fe:bf: 20:95:ba:24:af:1b:27:b4:c1:4b:61:bd:fe:f3:d6:05:60:23: a3:aa:4d:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5wn3f6MsZeh8ywsiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcwOTA5MDAxM1oXDTI2MTAwNzA5MDAxM1owLzEtMCsGA1UEAxMk NGQzMDFkOWYtODk4Ni00MjczLTk4ZmUtM2M4ZjE0YzVhMGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsVgu2bqEZxb+J4oLiQt16sRRKfR+t014BTC vDWAD1+nwawf/wScmbUWZyp+yQ7K+XTMLQInt+t/uYhu0CT/+3skLwEozOiIAEzt spIQ1NLw1BGsG9C1xqs/7dQH1BWM5Kj/nhBMmf4bbSTGL7AkELtMN8n/MFU65qIt k1UvEiL8GEsHJyEzFjNzUS+GUOKVUcABWwnCxNBZXzvZ4Ql9Qy2r3offTICyiR1t IbbHKh68C28iP11KSo/hTg7T+n8rxPdZdmD6GlgOa82LWd/c5MDbrd5Eq+riU6hZ TiYZNjNP3TFTzw78YsC9ngKdNHcUd89K0uu+buvncxeF7Xk0kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIONYavQbTJDr2VRu9rwzYWiLoNiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvY2E0MTRhMjQtMmNmOS0z NTVjLWI4M2YtNWMwNDNiZDdmMDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgZn0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHAvxUerhQnGhAtTbmpVgBIhvo8e7Ne4S+WVQJBV4+2WblpPn5mIurgG TKprsrJsneFWpH43Slokav0wcbVP6S2MnF9IhynjDoXmeE7RY+tf7FM2kz4jbEPa hDuhSWl/WtFxC09q8X7LsTYEdrY8WH6TFkfy4C+NXFIQbTbFO8IL+1HSfbmJ2I/u c8t88Z8E3NxgtAYFjm5hJdDGSIiFZ+E+0nQ8FT5kUljPrYyXHUeMzHPZgHAUkLzy wEYB9eL0qrkzJhvjUcux3RK3cw5GWPH73aA7IekOgw83m+jHqkCD+WqF5EKVv13+ vyCVuiSvGye0wUthvf7z1gVgI6OqTTA= -----END CERTIFICATE-----Generated at Mon Jul 13 02:47:36 2026 by rpki-client