$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d261dd53-1dbf-31a0-9a52-37789dd7de5f.roa File: d261dd53-1dbf-31a0-9a52-37789dd7de5f.roa (raw, json) Hash identifier: WCBJkaVSfH3Qmqfu7tBey8nzhY7aV5iKNzCUmZOUjaE= Subject key identifier: AB:33:69:2E:FB:69:49:57:78:71:92:1F:EF:30:16:92:A9:E2:95:71 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E4AEF4606FF16E058D171CFC0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d261dd53-1dbf-31a0-9a52-37789dd7de5f.roa Signing time: Thu 25 Jun 2026 21:00:12 +0000 ROA not before: Thu 25 Jun 2026 21:00:12 +0000 ROA not after: Wed 23 Sep 2026 21:00:12 +0000 asID: 31898 IP address blocks: 129.146.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4a:ef:46:06:ff:16:e0:58:d1:71:cf:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jun 25 21:00:12 2026 GMT Not After : Sep 23 21:00:12 2026 GMT Subject: CN=b479d6e7-5cb4-403a-80a8-01b556d39baa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:13:ff:c7:38:18:f8:c8:7c:22:14:55:90:0b: 9a:ae:f2:60:76:50:17:40:2d:4e:97:6a:10:f1:b6: 3b:47:29:e4:aa:4e:b9:10:14:fa:8b:b9:63:14:cc: 51:ad:86:9b:d8:8e:31:02:d7:a7:90:d0:d8:86:84: 12:7a:02:d4:c8:03:63:d9:03:6a:d1:3d:18:55:86: 81:f0:26:46:77:76:ca:1a:0a:07:a8:5d:22:bb:8d: 22:06:7a:d3:83:94:9c:20:a1:72:ff:ce:76:45:65: 64:0b:db:81:4c:87:7a:e5:2a:46:84:dc:d1:0b:10: fe:ef:65:df:c2:49:5b:c3:c9:10:ab:9a:7d:9a:cd: 26:84:7d:0b:b2:8a:cf:a8:e8:36:ba:72:5e:fd:90: 6f:07:a8:de:00:57:d4:31:01:da:f4:36:0d:27:4c: d4:e1:2e:12:bc:77:db:bb:ec:f2:6e:06:71:b8:79: ae:9d:af:47:e2:d8:5e:ac:c1:b6:d8:9f:cc:34:27: 2b:de:fc:b8:a3:d4:5c:ca:0d:85:11:f5:01:8f:66: e8:26:be:db:cf:65:12:25:9c:83:4e:af:88:0d:bb: 65:a4:38:f6:89:d5:3f:6a:74:0a:cf:6f:09:e6:a5: bf:34:d2:56:7e:b0:12:e4:5c:72:9e:aa:dd:e1:df: a6:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:33:69:2E:FB:69:49:57:78:71:92:1F:EF:30:16:92:A9:E2:95:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d261dd53-1dbf-31a0-9a52-37789dd7de5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.146.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:b5:a1:68:8d:ec:e7:5b:28:7b:fb:ac:1e:1c:d6:4e:d0:3e: bf:50:7c:44:39:35:e1:6b:15:6e:3f:3d:10:ee:03:bb:d4:80: af:e1:61:25:51:f5:5f:b5:81:40:65:0e:cd:7f:66:c5:1a:7f: 0f:ef:dc:bf:71:71:ae:5d:0e:02:c8:74:4f:16:62:80:19:46: ec:47:ab:16:77:d5:c0:ab:fe:89:55:ba:08:da:77:61:a6:6a: 8b:35:95:25:34:09:a6:2a:25:7f:37:3f:91:fc:11:fd:b0:6f: dc:8f:fd:59:e8:4b:b7:d6:9b:7d:32:6c:94:11:90:10:0c:41: 9a:1c:7b:43:25:a3:bc:79:23:a6:16:d2:52:c8:2c:7d:cd:b0: da:ff:ca:b3:5e:84:ba:0f:c0:fc:e9:01:29:84:4d:a8:52:1f: 41:79:f9:4d:57:a0:0b:6e:d6:a1:94:f5:88:e9:52:92:9b:14: 85:24:ea:e0:a3:9f:ac:89:8e:0c:c2:c7:a4:01:15:c3:9b:e8: d0:0b:cb:5f:2e:52:fe:a8:2e:8d:31:83:90:01:82:03:da:0a: 52:98:18:70:57:42:6b:c0:7f:63:4c:4f:dc:46:3f:3b:0f:ca: fe:cc:45:77:82:aa:e2:31:09:ac:d5:36:4f:be:9c:33:56:e2: a2:64:89:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5K70YG/xbgWNFxz8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDYyNTIxMDAxMloXDTI2MDkyMzIxMDAxMlowLzEtMCsGA1UEAxMk YjQ3OWQ2ZTctNWNiNC00MDNhLTgwYTgtMDFiNTU2ZDM5YmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBP/xzgY+Mh8IhRVkAuarvJgdlAXQC1Ol2oQ 8bY7Rynkqk65EBT6i7ljFMxRrYab2I4xAtenkNDYhoQSegLUyANj2QNq0T0YVYaB 8CZGd3bKGgoHqF0iu40iBnrTg5ScIKFy/852RWVkC9uBTId65SpGhNzRCxD+72Xf wklbw8kQq5p9ms0mhH0LsorPqOg2unJe/ZBvB6jeAFfUMQHa9DYNJ0zU4S4SvHfb u+zybgZxuHmuna9H4therMG22J/MNCcr3vy4o9Rcyg2FEfUBj2boJr7bz2USJZyD Tq+IDbtlpDj2idU/anQKz28J5qW/NNJWfrAS5Fxynqrd4d+mxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKszaS77aUlXeHGSH+8wFpKp4pVxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZDI2MWRkNTMtMWRiZi0z MWEwLTlhNTItMzc3ODlkZDdkZTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgZIEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF21oWiN7OdbKHv7rB4c1k7QPr9QfEQ5NeFrFW4/PRDuA7vUgK/hYSVR 9V+1gUBlDs1/ZsUafw/v3L9xca5dDgLIdE8WYoAZRuxHqxZ31cCr/olVugjad2Gm aos1lSU0CaYqJX83P5H8Ef2wb9yP/VnoS7fWm30ybJQRkBAMQZoce0Mlo7x5I6YW 0lLILH3NsNr/yrNehLoPwPzpASmETahSH0F5+U1XoAtu1qGU9YjpUpKbFIUk6uCj n6yJjgzCx6QBFcOb6NALy18uUv6oLo0xg5ABggPaClKYGHBXQmvAf2NMT9xGPzsP yv7MRXeCquIxCazVNk++nDNW4qJkifw= -----END CERTIFICATE-----Generated at Mon Jul 13 02:49:02 2026 by rpki-client