$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f630e459-69dd-3a1f-8444-214c6afa0049.roa File: f630e459-69dd-3a1f-8444-214c6afa0049.roa (raw, json) Hash identifier: mbpKpX4A/ThFRb08fMSs3wHCuYq6tZHYx6yM3li+jCk= Subject key identifier: 8B:95:84:40:8A:7A:2B:74:10:5A:A2:8D:58:DB:32:7A:68:F8:92:10 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E66DA03C3711A8B9DC86E5F80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f630e459-69dd-3a1f-8444-214c6afa0049.roa Signing time: Sun 05 Jul 2026 21:00:11 +0000 ROA not before: Sun 05 Jul 2026 21:00:11 +0000 ROA not after: Sat 03 Oct 2026 21:00:11 +0000 asID: 31898 IP address blocks: 207.127.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:66:da:03:c3:71:1a:8b:9d:c8:6e:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 5 21:00:11 2026 GMT Not After : Oct 3 21:00:11 2026 GMT Subject: CN=b928de16-f9c3-4956-a5f8-15ac4f441852 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:25:4a:a8:c3:36:cc:8f:b8:13:79:20:06:40: d8:08:3b:c2:1d:4a:98:7c:99:a7:66:15:15:23:ce: 58:4a:44:a2:4e:28:f2:eb:af:35:8a:34:48:c1:c4: 45:1d:76:e6:35:06:cb:86:7e:e1:7a:f1:6b:6e:15: 15:61:0c:91:6f:71:f6:a9:19:4e:3c:58:d8:0e:18: d0:72:08:db:c4:d0:da:30:80:ac:c8:20:31:12:7e: 5f:17:24:bd:09:8f:36:95:29:01:ba:64:89:b6:1e: de:d2:06:02:59:6d:d7:fa:00:f1:86:14:e7:e8:5b: da:a0:8e:65:b6:f1:d9:cd:47:4d:5f:83:54:16:d1: 38:6d:bc:75:3c:67:b0:47:2d:42:58:4d:3d:71:f4: 12:25:e1:6e:14:eb:40:01:be:78:5f:be:ae:ad:9d: 40:d5:f3:fc:84:99:75:e2:9f:c0:3c:fb:2c:cb:54: c2:90:01:1d:2f:0c:3f:99:d9:6b:38:83:b5:9d:97: 53:af:7c:44:56:70:d8:24:4c:e4:74:c7:e7:8a:19: 05:1f:2a:e9:a4:c2:a0:65:9a:89:7f:44:36:bc:db: de:21:51:83:3d:ae:7c:92:a0:e5:7e:b5:bd:f4:da: b8:e6:25:d1:68:b0:c9:92:19:17:2b:ca:87:04:39: b8:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:95:84:40:8A:7A:2B:74:10:5A:A2:8D:58:DB:32:7A:68:F8:92:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f630e459-69dd-3a1f-8444-214c6afa0049.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 207.127.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:92:53:8d:70:06:b3:6a:f4:6a:d8:2d:01:35:51:00:34:35: 0c:9a:63:7b:e7:50:6a:3d:3d:1f:cb:0c:4e:27:a6:64:c2:d6: 85:7d:43:f1:20:a0:7d:c2:9c:df:c3:56:b1:0e:ce:77:b4:d0: 24:41:f4:4f:7c:a2:0d:78:5e:7e:a6:72:33:37:3b:6c:5c:9a: b4:a1:0a:a5:93:d1:2a:18:d3:6d:d9:ba:d6:fb:9c:42:19:f7: 8e:31:26:55:0f:70:c3:5b:cf:7d:15:77:96:23:9a:5f:d2:c5: 87:f3:e4:71:21:8e:cb:4c:bf:de:94:92:e3:93:78:34:25:d0: 61:cf:45:fc:ab:37:05:45:a7:85:80:a7:ba:e8:cb:27:ab:b2: 08:9e:c5:d4:17:3e:9c:fd:79:97:49:c7:6f:07:45:1a:87:85: 57:06:de:19:a8:c6:c5:66:53:86:65:3c:10:24:21:f3:e4:1e: e0:72:65:0c:f9:b2:77:f1:9b:5f:f0:d9:e1:8d:a5:84:5c:6a: ca:1d:0b:c1:b0:86:66:1f:8e:63:a1:2f:dc:87:89:db:eb:f7: 92:2e:4f:08:42:7e:8f:e2:0a:20:56:44:f8:a2:4d:90:46:9a: 1b:13:3b:d4:4f:d5:79:09:43:fa:9e:b7:9a:0c:55:87:08:d2: 98:79:b3:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5m2gPDcRqLnchuX4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcwNTIxMDAxMVoXDTI2MTAwMzIxMDAxMVowLzEtMCsGA1UEAxMk YjkyOGRlMTYtZjljMy00OTU2LWE1ZjgtMTVhYzRmNDQxODUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyVKqMM2zI+4E3kgBkDYCDvCHUqYfJmnZhUV I85YSkSiTijy6681ijRIwcRFHXbmNQbLhn7hevFrbhUVYQyRb3H2qRlOPFjYDhjQ cgjbxNDaMICsyCAxEn5fFyS9CY82lSkBumSJth7e0gYCWW3X+gDxhhTn6FvaoI5l tvHZzUdNX4NUFtE4bbx1PGewRy1CWE09cfQSJeFuFOtAAb54X76urZ1A1fP8hJl1 4p/APPssy1TCkAEdLww/mdlrOIO1nZdTr3xEVnDYJEzkdMfnihkFHyrppMKgZZqJ f0Q2vNveIVGDPa58kqDlfrW99Nq45iXRaLDJkhkXK8qHBDm4rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIuVhECKeit0EFqijVjbMnpo+JIQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZjYzMGU0NTktNjlkZC0z YTFmLTg0NDQtMjE0YzZhZmEwMDQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDz39gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKuSU41wBrNq9GrYLQE1UQA0NQyaY3vnUGo9PR/LDE4npmTC1oV9Q/Eg oH3CnN/DVrEOzne00CRB9E98og14Xn6mcjM3O2xcmrShCqWT0SoY023Zutb7nEIZ 944xJlUPcMNbz30Vd5Yjml/SxYfz5HEhjstMv96UkuOTeDQl0GHPRfyrNwVFp4WA p7royyersgiexdQXPpz9eZdJx28HRRqHhVcG3hmoxsVmU4ZlPBAkIfPkHuByZQz5 snfxm1/w2eGNpYRcasodC8GwhmYfjmOhL9yHidvr95IuTwhCfo/iCiBWRPiiTZBG mhsTO9RP1XkJQ/qet5oMVYcI0ph5s4E= -----END CERTIFICATE-----Generated at Mon Jul 13 02:50:47 2026 by rpki-client