$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f42be3d9-7682-37f0-ad4a-ee6860799dae.roa File: f42be3d9-7682-37f0-ad4a-ee6860799dae.roa (raw, json) Hash identifier: N3lka6yVACf1w1LBTh+xXJojgvv3cKVQRjFNCOFu5n8= Subject key identifier: 8B:3A:94:E7:F3:CA:3C:6D:5F:84:B9:E4:45:3C:1A:3E:AB:17:FC:E8 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E7A64D293C3CD564F3D23A400 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f42be3d9-7682-37f0-ad4a-ee6860799dae.roa Signing time: Sun 12 Jul 2026 21:00:13 +0000 ROA not before: Sun 12 Jul 2026 21:00:13 +0000 ROA not after: Sat 10 Oct 2026 21:00:13 +0000 asID: 31898 IP address blocks: 167.126.48.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7a:64:d2:93:c3:cd:56:4f:3d:23:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 12 21:00:13 2026 GMT Not After : Oct 10 21:00:13 2026 GMT Subject: CN=4edc78bf-d184-4bf6-bd4c-65cf5142518c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:53:79:8c:e3:58:03:13:de:f6:d0:49:f0:ec: 0b:d6:cc:c4:6d:b5:c6:af:0d:9a:7e:ab:30:d6:c8: b7:eb:97:9c:10:31:eb:29:8a:de:32:86:ba:c9:01: 4b:00:5f:fa:a4:dd:88:36:bd:c5:6a:04:bc:ea:85: d3:5d:db:d5:b4:a0:ee:12:f5:7b:41:32:31:31:b7: 39:e0:83:c6:02:b8:5b:b9:b2:42:1d:24:d8:2b:60: a1:f4:7a:f6:60:61:6f:74:12:15:01:3a:7b:03:af: 70:db:4a:81:02:27:a1:2e:33:b4:ea:13:a1:02:90: 69:c5:17:80:8d:a6:3d:50:e4:5b:a3:23:8d:75:6d: 95:8e:c7:a9:e8:c1:62:ba:76:4f:55:df:fa:bc:fe: 6e:83:34:59:76:1b:6b:93:ab:7d:a9:0d:01:a7:f9: db:d4:0f:a2:6a:52:fb:8a:26:53:1e:aa:49:a4:1f: 5c:fe:57:f4:df:b1:97:3c:f5:d8:14:81:4f:c6:a2: a0:2a:ff:5f:aa:3e:82:1e:74:87:b5:d3:94:5a:2f: a6:81:26:64:e4:25:9f:af:5c:bb:a6:54:f6:83:b3: d2:70:f8:d7:d7:88:17:39:72:f2:51:0a:d5:23:2a: 73:97:8b:40:b8:7d:f7:b0:a4:ee:07:da:7a:ce:fd: 5b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:3A:94:E7:F3:CA:3C:6D:5F:84:B9:E4:45:3C:1A:3E:AB:17:FC:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f42be3d9-7682-37f0-ad4a-ee6860799dae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 167.126.48.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:37:23:27:e3:e7:63:7d:30:af:f2:2f:5d:89:21:77:04:8f: 70:19:7d:f7:04:89:9c:f6:69:b0:03:0b:99:3b:fb:1a:a5:f3: 36:07:f7:0b:eb:63:73:1a:89:0a:8a:dd:49:af:1a:31:e0:83: 41:73:a9:3e:86:72:50:f1:bb:f5:7c:7b:42:e9:0e:ac:a1:95: 61:6b:81:40:e2:03:9b:c0:2d:fd:d8:41:db:a8:80:74:5d:7b: a6:46:bd:21:01:f0:92:cd:5b:02:b4:3a:3c:ed:01:f0:a9:e9: 93:dd:b7:01:0f:32:18:f3:88:b3:25:a5:82:97:48:0d:a1:fd: 38:00:98:28:f5:da:b4:85:fd:18:10:88:6d:dc:2a:d0:5c:c7: 06:80:91:5d:70:74:1d:56:18:8d:18:8c:1b:a2:85:6c:72:65: 7e:c8:56:42:4b:77:53:3d:e4:c7:7c:fa:f5:36:68:91:55:a6: 68:5a:6b:67:10:b9:46:7a:00:48:9f:58:15:b2:11:51:57:b8: 4a:85:8c:80:1e:a0:e4:ba:41:92:e4:9f:ff:90:35:6a:46:4a: 04:0e:a8:be:f8:e2:2f:cf:25:2f:d2:bd:96:32:b5:89:b0:ac: 19:3f:35:7e:a2:31:49:d8:73:0c:29:18:3a:6a:f1:fc:43:0f: 25:d3:28:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE56ZNKTw81WTz0jpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcxMjIxMDAxM1oXDTI2MTAxMDIxMDAxM1owLzEtMCsGA1UEAxMk NGVkYzc4YmYtZDE4NC00YmY2LWJkNGMtNjVjZjUxNDI1MThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlN5jONYAxPe9tBJ8OwL1szEbbXGrw2afqsw 1si365ecEDHrKYreMoa6yQFLAF/6pN2INr3FagS86oXTXdvVtKDuEvV7QTIxMbc5 4IPGArhbubJCHSTYK2Ch9Hr2YGFvdBIVATp7A69w20qBAiehLjO06hOhApBpxReA jaY9UORboyONdW2Vjsep6MFiunZPVd/6vP5ugzRZdhtrk6t9qQ0Bp/nb1A+ialL7 iiZTHqpJpB9c/lf037GXPPXYFIFPxqKgKv9fqj6CHnSHtdOUWi+mgSZk5CWfr1y7 plT2g7PScPjX14gXOXLyUQrVIypzl4tAuH33sKTuB9p6zv1bZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIs6lOfzyjxtX4S55EU8Gj6rF/zoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZjQyYmUzZDktNzY4Mi0z N2YwLWFkNGEtZWU2ODYwNzk5ZGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBp34wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFw3Iyfj52N9MK/yL12JIXcEj3AZffcEiZz2abADC5k7+xql8zYH9wvr Y3MaiQqK3UmvGjHgg0FzqT6GclDxu/V8e0LpDqyhlWFrgUDiA5vALf3YQduogHRd e6ZGvSEB8JLNWwK0OjztAfCp6ZPdtwEPMhjziLMlpYKXSA2h/TgAmCj12rSF/RgQ iG3cKtBcxwaAkV1wdB1WGI0YjBuihWxyZX7IVkJLd1M95Md8+vU2aJFVpmhaa2cQ uUZ6AEifWBWyEVFXuEqFjIAeoOS6QZLkn/+QNWpGSgQOqL744i/PJS/SvZYytYmw rBk/NX6iMUnYcwwpGDpq8fxDDyXTKPw= -----END CERTIFICATE-----Generated at Mon Jul 13 02:53:48 2026 by rpki-client