$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fcc6e632-afe0-368b-83ce-cbdc80c4a43a.roa File: fcc6e632-afe0-368b-83ce-cbdc80c4a43a.roa (raw, json) Hash identifier: ZbBv7OI/rkUMnmsg4y/FPB6s5LF5Ds/NH5Jbdqm30VQ= Subject key identifier: 4A:F7:5B:10:A6:8F:A7:28:DC:73:16:C4:01:C0:62:90:41:68:AC:90 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E78FF77617CFA11DEF878F740 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fcc6e632-afe0-368b-83ce-cbdc80c4a43a.roa Signing time: Sun 12 Jul 2026 09:00:11 +0000 ROA not before: Sun 12 Jul 2026 09:00:11 +0000 ROA not after: Sat 10 Oct 2026 09:00:11 +0000 asID: 31898 IP address blocks: 129.158.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:78:ff:77:61:7c:fa:11:de:f8:78:f7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 12 09:00:11 2026 GMT Not After : Oct 10 09:00:11 2026 GMT Subject: CN=979f02d4-0553-45dd-8e18-96c4c1bcb01a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:48:a9:11:33:04:48:55:e5:43:57:b6:dc:4d: ec:81:97:51:4b:2d:05:1b:fd:d9:b7:a4:56:0f:21: 89:00:67:72:ce:4a:0c:b2:0d:bd:aa:45:74:c0:86: fe:69:06:4f:2a:ad:46:5f:93:49:6b:fb:01:5a:30: f3:2f:b1:6a:ec:dd:cc:76:68:46:f2:be:b1:1a:f0: 67:ac:a0:4c:99:f6:27:1e:53:f1:69:89:49:39:82: 1e:30:b1:e1:50:e4:7a:11:85:66:55:7b:ae:16:da: 4c:81:b9:dc:32:15:c8:9d:f7:ce:c5:8d:d8:76:56: 13:51:21:9e:be:7e:b1:38:ec:27:16:c0:a4:2a:d4: 60:08:56:43:c9:cc:05:21:3b:46:5a:0b:8d:31:4c: ac:f5:43:73:61:e8:b5:a1:a7:fc:2d:a6:e4:01:ef: 14:71:0e:ec:9e:3e:09:35:be:cf:cf:7c:a3:51:0e: 45:11:fd:27:c8:a0:05:72:ca:9b:ce:79:87:53:42: 75:7b:0b:ec:5c:42:7b:74:43:80:ed:f7:f3:18:db: 84:32:08:07:8c:3c:fd:27:f2:7b:d0:14:f5:92:fd: 1e:cb:39:65:28:7f:ab:8e:44:ae:fe:61:c9:24:13: 18:36:ad:74:b7:be:fd:7c:9c:ea:c6:f7:e5:5c:d6: b7:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:F7:5B:10:A6:8F:A7:28:DC:73:16:C4:01:C0:62:90:41:68:AC:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fcc6e632-afe0-368b-83ce-cbdc80c4a43a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.158.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:a7:8e:da:6f:d7:27:42:d5:43:56:5c:85:67:85:51:1c:98: 0a:f0:55:e6:02:81:06:a4:c1:27:77:6a:c9:e5:65:d8:94:22: 59:c2:f5:6f:0f:6a:3d:b5:6e:a6:75:4e:05:9e:2a:93:56:bd: ec:2d:02:1a:5b:83:f4:33:04:37:93:3e:d6:49:26:3d:5f:3a: 24:48:22:5e:b7:99:c4:5f:5f:25:22:26:4d:00:08:56:80:38: cb:cf:d6:c0:e2:70:98:da:b7:78:02:09:91:45:7b:cd:21:e4: 48:b1:e7:a3:e9:86:53:b0:8e:ab:f4:a8:f7:3a:b1:47:e6:cb: 8f:d3:d5:15:8c:29:14:7b:d8:bc:bd:78:8e:15:2d:2f:ce:d2: 17:d1:b5:0d:8b:91:b5:e5:ab:cb:ae:b4:1c:bb:f0:cd:cb:55: 9c:e6:86:ce:cb:bd:46:6a:99:f7:34:5c:7d:aa:bc:49:4d:ef: de:db:28:fb:4e:cf:1f:81:1b:7b:29:55:35:81:8f:e9:59:fb: b4:42:5a:8a:54:fd:a4:86:76:d0:aa:b6:60:7d:8f:c4:5e:82: 6e:37:4d:92:12:ec:d6:55:6b:56:4b:6c:ce:77:12:5d:52:c9: 42:6d:35:03:33:a5:80:d4:41:32:48:0b:92:a1:8f:96:18:71: 84:b8:8c:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE54/3dhfPoR3vh490AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcxMjA5MDAxMVoXDTI2MTAxMDA5MDAxMVowLzEtMCsGA1UEAxMk OTc5ZjAyZDQtMDU1My00NWRkLThlMTgtOTZjNGMxYmNiMDFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEipETMESFXlQ1e23E3sgZdRSy0FG/3Zt6RW DyGJAGdyzkoMsg29qkV0wIb+aQZPKq1GX5NJa/sBWjDzL7Fq7N3MdmhG8r6xGvBn rKBMmfYnHlPxaYlJOYIeMLHhUOR6EYVmVXuuFtpMgbncMhXInffOxY3YdlYTUSGe vn6xOOwnFsCkKtRgCFZDycwFITtGWguNMUys9UNzYei1oaf8LabkAe8UcQ7snj4J Nb7Pz3yjUQ5FEf0nyKAFcsqbznmHU0J1ewvsXEJ7dEOA7ffzGNuEMggHjDz9J/J7 0BT1kv0eyzllKH+rjkSu/mHJJBMYNq10t779fJzqxvflXNa3uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEr3WxCmj6co3HMWxAHAYpBBaKyQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZmNjNmU2MzItYWZlMC0z NjhiLTgzY2UtY2JkYzgwYzRhNDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGgZ5AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqnjtpv1ydC1UNWXIVnhVEcmArwVeYCgQakwSd3asnlZdiUIlnC9W8P aj21bqZ1TgWeKpNWvewtAhpbg/QzBDeTPtZJJj1fOiRIIl63mcRfXyUiJk0ACFaA OMvP1sDicJjat3gCCZFFe80h5Eix56PphlOwjqv0qPc6sUfmy4/T1RWMKRR72Ly9 eI4VLS/O0hfRtQ2LkbXlq8uutBy78M3LVZzmhs7LvUZqmfc0XH2qvElN797bKPtO zx+BG3spVTWBj+lZ+7RCWopU/aSGdtCqtmB9j8Regm43TZIS7NZVa1ZLbM53El1S yUJtNQMzpYDUQTJIC5Khj5YYcYS4jHI= -----END CERTIFICATE-----Generated at Mon Jul 13 02:52:17 2026 by rpki-client