$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ded1d1c7-eb6a-3651-8ada-ff38787f209c.roa File: ded1d1c7-eb6a-3651-8ada-ff38787f209c.roa (raw, json) Hash identifier: Ue0LAjyX0i8tZqcc3wq54pDu2/IGj0f4T1BKfkmKafM= Subject key identifier: 23:23:10:6F:42:3D:BB:48:4A:B7:B9:2B:24:5D:0D:4D:D8:B5:1F:B0 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E6F3A16BC3C088CDF9FFF9570 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ded1d1c7-eb6a-3651-8ada-ff38787f209c.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 31898 IP address blocks: 129.149.32.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3a:16:bc:3c:08:8c:df:9f:ff:95:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=6fc14c87-df11-4ca4-b9f6-e8c9cf689fc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:28:8c:d8:74:14:56:6c:1f:e2:46:73:38:0b: e6:a1:15:23:01:8a:81:48:40:f9:ff:a3:a2:73:ea: 4f:98:78:95:7c:91:c8:c8:e7:22:d4:97:2a:cc:ba: cc:49:20:b4:5a:16:59:d5:9a:82:de:ff:d6:ca:53: 58:50:40:f7:5e:a9:bf:de:98:86:46:e6:59:60:2c: ef:ca:16:bc:2d:01:4d:e7:a6:95:e7:96:10:de:11: f3:9b:49:53:cb:1b:a5:b4:0f:14:1a:57:96:86:77: 42:75:c2:44:ee:54:66:e1:3e:ba:7b:5a:55:13:e7: e6:51:c2:cd:c6:9e:a3:2d:ad:1c:7e:47:bc:ab:4b: c2:f4:18:79:2a:5e:6d:1d:69:d8:6c:e9:73:c7:1d: 9c:69:ff:c7:6d:cc:2a:1f:cb:60:43:7e:1b:12:57: 0b:1b:b5:f2:02:ab:61:5d:35:be:d5:1d:1f:80:dd: 2b:a1:77:d0:c6:7d:b6:6a:37:e9:e1:5c:00:3a:12: e6:83:0b:35:2e:a5:7d:ac:90:49:27:15:30:54:c4: a9:3b:ea:c8:6c:69:94:9d:a3:d3:c7:17:8d:b2:d5: 1b:88:7f:dd:25:ef:7c:6d:84:1c:06:a0:03:de:c9: d1:8b:5e:7c:9c:b0:85:92:4b:77:d3:f8:19:16:13: 09:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:23:10:6F:42:3D:BB:48:4A:B7:B9:2B:24:5D:0D:4D:D8:B5:1F:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ded1d1c7-eb6a-3651-8ada-ff38787f209c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.149.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:54:35:0b:fb:af:b7:ad:1b:df:f7:1a:41:57:c4:42:cb:1b: 05:2c:e9:76:11:5b:ca:66:ce:b2:ba:3a:5e:7b:2b:fc:de:3e: 4c:89:5f:c7:d2:3f:d4:25:76:29:26:f6:14:4c:1f:77:f4:ff: 3a:39:dd:6b:44:f0:e2:cb:05:43:ee:00:60:f4:2f:ef:58:53: ad:f7:24:c1:a6:dc:87:2c:e4:a0:7b:68:15:27:a6:76:72:8b: e7:11:88:ab:ac:b9:41:c5:70:e7:b8:68:50:3d:51:42:75:07: d9:d3:d5:9e:6f:4f:0e:a6:b0:48:9f:24:c3:bf:ba:dc:d0:fa: 7c:a0:7a:57:36:72:e3:e4:64:49:5f:a4:25:66:99:94:2b:cb: 67:c6:b1:70:84:b1:e3:34:37:ac:b6:40:30:a7:3e:91:22:25: c8:31:d8:34:42:7d:ec:bb:af:d1:ae:f1:24:91:ec:41:15:26: 9a:bc:16:4a:a3:50:da:bc:96:2c:72:ca:2f:55:0a:29:04:67: 47:27:ec:d0:28:09:2d:78:f9:99:e1:9a:3c:af:5a:2e:ab:ba: 22:c5:ea:6e:d4:42:18:02:f6:07:4c:57:66:a2:0d:cb:62:e3: 47:1f:45:8f:d2:06:75:49:a0:40:22:33:9a:8c:4b:f2:09:2a: e7:57:8f:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vOha8PAiM35//lXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk NmZjMTRjODctZGYxMS00Y2E0LWI5ZjYtZThjOWNmNjg5ZmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyiM2HQUVmwf4kZzOAvmoRUjAYqBSED5/6Oi c+pPmHiVfJHIyOci1JcqzLrMSSC0WhZZ1ZqC3v/WylNYUED3Xqm/3piGRuZZYCzv yha8LQFN56aV55YQ3hHzm0lTyxultA8UGleWhndCdcJE7lRm4T66e1pVE+fmUcLN xp6jLa0cfke8q0vC9Bh5Kl5tHWnYbOlzxx2caf/HbcwqH8tgQ34bElcLG7XyAqth XTW+1R0fgN0roXfQxn22ajfp4VwAOhLmgws1LqV9rJBJJxUwVMSpO+rIbGmUnaPT xxeNstUbiH/dJe98bYQcBqAD3snRi158nLCFkkt30/gZFhMJnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCMjEG9CPbtISre5KyRdDU3YtR+wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZGVkMWQxYzctZWI2YS0z NjUxLThhZGEtZmYzODc4N2YyMDljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgZUgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJUNQv7r7etG9/3GkFXxELLGwUs6XYRW8pmzrK6Ol57K/zePkyJX8fS P9Qldikm9hRMH3f0/zo53WtE8OLLBUPuAGD0L+9YU633JMGm3Ics5KB7aBUnpnZy i+cRiKusuUHFcOe4aFA9UUJ1B9nT1Z5vTw6msEifJMO/utzQ+nygelc2cuPkZElf pCVmmZQry2fGsXCEseM0N6y2QDCnPpEiJcgx2DRCfey7r9Gu8SSR7EEVJpq8Fkqj UNq8lixyyi9VCikEZ0cn7NAoCS14+ZnhmjyvWi6ruiLF6m7UQhgC9gdMV2aiDcti 40cfRY/SBnVJoEAiM5qMS/IJKudXj1o= -----END CERTIFICATE-----Generated at Mon Jul 13 02:51:33 2026 by rpki-client