$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fac8b28c-b365-3f6b-8265-5625f4e423dc.roa File: fac8b28c-b365-3f6b-8265-5625f4e423dc.roa (raw, json) Hash identifier: ggiQpHGBxky+K3eHLtSFys8seNS1IUuWiYpavarUq7c= Subject key identifier: 4B:8C:FA:4B:76:92:E7:FF:F6:89:CD:55:59:D0:9D:22:4F:12:0E:08 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E5FDF723312711F9AD34E2300 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fac8b28c-b365-3f6b-8265-5625f4e423dc.roa Signing time: Fri 03 Jul 2026 09:00:12 +0000 ROA not before: Fri 03 Jul 2026 09:00:12 +0000 ROA not after: Thu 01 Oct 2026 09:00:12 +0000 asID: 31898 IP address blocks: 129.148.168.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5f:df:72:33:12:71:1f:9a:d3:4e:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 3 09:00:12 2026 GMT Not After : Oct 1 09:00:12 2026 GMT Subject: CN=35370c09-24da-494c-9d1e-8c4b135b69af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:49:0d:3b:66:b2:93:cb:c2:85:77:b9:20:03: 11:1e:b9:4c:b3:e3:49:49:f5:ee:30:26:05:b2:19: 36:f1:b4:5c:3f:19:25:c6:5d:f2:eb:1c:a3:0d:33: 94:21:92:b6:63:e4:c0:e9:a6:1d:f0:28:7b:05:18: cb:38:ee:3d:46:5c:1f:c3:ed:c6:d6:40:fc:01:b2: 37:07:c3:b6:a2:bc:f8:d0:76:aa:ab:85:49:8e:2c: e6:c4:65:2b:06:e7:12:40:f9:27:d3:94:79:55:64: 5b:92:d7:a0:79:59:ca:4c:cd:94:3a:fa:d4:25:61: 3d:81:8a:6a:76:b8:2a:2b:8f:c3:cf:3d:fd:aa:27: ba:26:78:66:e7:9e:b6:34:72:3c:c8:20:d2:6a:b8: 37:9a:d6:a2:b0:fa:64:ac:56:e7:c7:eb:bb:a7:ed: ca:c5:af:a8:84:ee:90:7b:fe:ad:8f:ae:ac:cc:ad: a5:7a:79:2b:e7:97:fa:04:47:2c:3a:dd:43:4a:ae: 77:0a:96:aa:c3:59:ef:7e:b8:14:23:70:bd:0e:d1: 80:29:5d:15:dd:f1:83:98:1a:62:e0:8a:2a:4f:c4: 26:ba:e6:21:b6:bb:8e:c1:b3:38:80:97:74:82:58: bc:0c:52:9c:92:95:5b:41:9e:bf:31:79:83:9a:db: 2e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:8C:FA:4B:76:92:E7:FF:F6:89:CD:55:59:D0:9D:22:4F:12:0E:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fac8b28c-b365-3f6b-8265-5625f4e423dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.148.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:bb:33:a9:16:40:51:d6:a5:2e:65:2c:0d:73:ee:98:5d:49: 3b:e9:bd:33:3d:d6:58:f2:03:19:8c:cb:36:86:54:33:25:ce: 0d:6f:59:c3:42:1f:39:38:83:fd:a9:db:22:4e:c4:a1:41:a2: 7b:70:4c:55:6d:aa:71:13:67:87:0d:65:99:37:46:95:0e:b6: c7:fb:d6:fa:38:2d:f0:4e:32:db:49:20:1a:32:74:8b:28:7c: fe:6a:92:f1:12:dd:e4:6f:84:51:d2:f7:e3:51:cd:cb:9c:87: b6:55:34:9d:cd:0a:a9:0b:dc:9f:c9:d6:6b:30:a7:e3:cc:fc: c2:85:6e:ef:3d:f4:49:88:9e:90:f5:03:0f:f7:df:95:66:d7: 58:64:5d:03:f2:90:73:03:c5:bf:46:99:b6:75:d8:5a:17:c9: 6a:ae:22:52:a0:e1:82:5c:63:80:9e:06:81:c9:e0:d8:21:1e: 7a:3e:14:4d:d7:0e:96:ee:b0:8c:ef:8a:37:6a:0e:d4:2f:8d: f4:cc:25:a8:96:ba:a1:68:1e:d5:90:86:4a:f7:7d:f1:f6:24: 14:22:75:2f:2b:dc:a0:2a:a0:f3:48:dc:cf:75:f0:0f:d3:0c: b1:17:bb:ec:97:2c:8d:14:20:d1:44:66:16:62:37:f2:49:9b: d4:68:90:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5f33IzEnEfmtNOIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcwMzA5MDAxMloXDTI2MTAwMTA5MDAxMlowLzEtMCsGA1UEAxMk MzUzNzBjMDktMjRkYS00OTRjLTlkMWUtOGM0YjEzNWI2OWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUkNO2ayk8vChXe5IAMRHrlMs+NJSfXuMCYF shk28bRcPxklxl3y6xyjDTOUIZK2Y+TA6aYd8Ch7BRjLOO49Rlwfw+3G1kD8AbI3 B8O2orz40Haqq4VJjizmxGUrBucSQPkn05R5VWRbktegeVnKTM2UOvrUJWE9gYpq drgqK4/Dzz39qie6Jnhm5562NHI8yCDSarg3mtaisPpkrFbnx+u7p+3Kxa+ohO6Q e/6tj66szK2lenkr55f6BEcsOt1DSq53Cpaqw1nvfrgUI3C9DtGAKV0V3fGDmBpi 4IoqT8QmuuYhtruOwbM4gJd0gli8DFKckpVbQZ6/MXmDmtsuxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEuM+kt2kuf/9onNVVnQnSJPEg4IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZmFjOGIyOGMtYjM2NS0z ZjZiLTgyNjUtNTYyNWY0ZTQyM2RjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgZSoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADa7M6kWQFHWpS5lLA1z7phdSTvpvTM91ljyAxmMyzaGVDMlzg1vWcNC Hzk4g/2p2yJOxKFBontwTFVtqnETZ4cNZZk3RpUOtsf71vo4LfBOMttJIBoydIso fP5qkvES3eRvhFHS9+NRzcuch7ZVNJ3NCqkL3J/J1mswp+PM/MKFbu899EmInpD1 Aw/335Vm11hkXQPykHMDxb9GmbZ12FoXyWquIlKg4YJcY4CeBoHJ4NghHno+FE3X DpbusIzvijdqDtQvjfTMJaiWuqFoHtWQhkr3ffH2JBQidS8r3KAqoPNI3M918A/T DLEXu+yXLI0UINFEZhZiN/JJm9RokKo= -----END CERTIFICATE-----Generated at Mon Jul 13 02:51:37 2026 by rpki-client