$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/131ba7b9-70a5-4e7e-bba4-1a5c20488c71/dc04b1c3-67b4-3531-afdf-7c1d39073812.roa File: dc04b1c3-67b4-3531-afdf-7c1d39073812.roa (raw, json) Hash identifier: yzUjb/ExzbB5ZewXKufMy5MjOZYhxRKbpXQmRp3PO68= Subject key identifier: D2:49:59:3F:6D:E2:54:2F:B2:AD:73:77:E0:A0:68:67:DA:21:1A:79 Certificate issuer: /CN=131ba7b9-70a5-4e7e-bba4-1a5c20488c71 Certificate serial: 010D0C9F4328584E7204D5A268EF0111F1AA6280 Authority key identifier: 6B:06:10:68:E1:5D:E0:00:FD:69:81:15:1C:7C:43:C4:F9:46:A0:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/131ba7b9-70a5-4e7e-bba4-1a5c20488c71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/131ba7b9-70a5-4e7e-bba4-1a5c20488c71/dc04b1c3-67b4-3531-afdf-7c1d39073812.roa Signing time: Thu 09 Jul 2026 21:00:11 +0000 ROA not before: Thu 09 Jul 2026 21:00:11 +0000 ROA not after: Wed 07 Oct 2026 21:00:11 +0000 asID: 10490 IP address blocks: 128.61.0.0/16 maxlen: 24 130.207.0.0/16 maxlen: 24 143.215.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/131ba7b9-70a5-4e7e-bba4-1a5c20488c71/131ba7b9-70a5-4e7e-bba4-1a5c20488c71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/131ba7b9-70a5-4e7e-bba4-1a5c20488c71/131ba7b9-70a5-4e7e-bba4-1a5c20488c71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/131ba7b9-70a5-4e7e-bba4-1a5c20488c71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:72:04:d5:a2:68:ef:01:11:f1:aa:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=131ba7b9-70a5-4e7e-bba4-1a5c20488c71 Validity Not Before: Jul 9 21:00:11 2026 GMT Not After : Oct 7 21:00:11 2026 GMT Subject: CN=ddc7c5ab-b1ad-4a84-b325-85bc82a75694 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:8b:d0:de:5c:f1:d7:23:e0:09:9c:71:05:39: b6:d6:b7:11:16:17:d1:5a:f2:e2:03:08:80:60:51: 93:e0:16:0c:94:ea:ca:c5:61:e7:30:d0:76:49:56: 4d:e3:94:09:81:74:62:a4:d0:cc:38:d6:46:36:fa: 91:64:9f:c6:33:e6:53:6e:46:b0:0e:a1:13:45:57: 1b:e6:60:69:73:78:24:6e:8d:b5:f2:44:4f:c8:79: a6:88:f4:86:8f:e0:e4:73:9a:ca:d9:99:de:e2:c4: e0:c7:98:4d:01:8b:bc:1a:c8:0a:a2:45:9d:ff:a6: b0:1e:58:d9:92:bb:8d:49:ab:28:d9:e4:ed:74:b4: dd:94:04:e7:30:da:e3:a1:89:b1:ba:99:7b:16:c7: 23:0e:4a:50:8c:47:31:5f:79:e0:5a:00:87:7e:f2: 8e:11:85:d6:42:63:66:a2:1a:80:0f:e9:39:22:ba: 17:ae:65:d6:f5:5c:5c:62:0d:98:3a:d6:ee:b3:97: 6a:55:4e:29:68:84:ce:ae:25:7a:4c:f1:49:b5:d3: 3d:ce:cd:74:76:7e:f8:b6:c1:63:3f:6e:9b:f5:b1: a8:b5:a3:c2:5e:7a:31:e9:cf:2e:2f:66:68:fd:76: 9b:d9:7b:8a:99:ec:ca:30:97:31:f8:b3:16:79:bc: be:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:49:59:3F:6D:E2:54:2F:B2:AD:73:77:E0:A0:68:67:DA:21:1A:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/131ba7b9-70a5-4e7e-bba4-1a5c20488c71/dc04b1c3-67b4-3531-afdf-7c1d39073812.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/131ba7b9-70a5-4e7e-bba4-1a5c20488c71/131ba7b9-70a5-4e7e-bba4-1a5c20488c71.crl X509v3 Authority Key Identifier: keyid:6B:06:10:68:E1:5D:E0:00:FD:69:81:15:1C:7C:43:C4:F9:46:A0:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/131ba7b9-70a5-4e7e-bba4-1a5c20488c71.cer sbgp-ipAddrBlock: critical IPv4: 128.61.0.0/16 130.207.0.0/16 143.215.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:1e:87:e4:a3:dc:2e:44:20:41:d1:3e:53:d2:1a:67:a7:f4: 5c:a8:27:de:76:38:63:16:5e:67:dc:84:38:89:35:e1:76:d2: e7:04:d1:87:b9:48:80:2c:dc:0d:1b:f7:dd:e7:e1:58:43:e2: da:94:7f:82:f4:c7:28:fa:8b:d5:56:4d:76:b9:fa:a2:89:00: 2f:8b:6b:61:bc:2e:fd:45:12:7a:fc:14:3b:ac:db:15:5f:df: 74:b9:18:b1:50:cc:45:9a:4b:d1:52:23:d7:d8:3b:d5:f1:3d: aa:1b:71:bd:f0:ed:7b:f4:78:b4:2b:a2:2c:8f:7e:b1:12:59: 27:e8:0d:93:fc:07:5c:79:a1:2b:76:e9:cd:6e:69:5b:c9:69: 68:56:7f:69:eb:1d:fb:13:9b:93:03:30:39:dc:c1:8e:7d:d4: 61:18:c9:b8:f0:d3:52:21:3e:ef:0a:41:cc:4e:cd:b1:0b:dc: 59:fc:61:7f:07:3f:27:82:c4:a0:f8:60:12:06:6a:32:66:ca: 86:61:79:ac:1b:e0:aa:fa:07:e2:35:bf:5d:9f:2a:9b:ca:30: d0:23:86:8b:d2:99:17:7f:99:c3:93:fb:1d:c9:1d:72:81:d9: 36:8a:d3:72:8a:98:e0:47:12:b2:15:a1:e6:57:15:c0:cd:61: 8f:17:03:a5 -----BEGIN CERTIFICATE----- MIIGTDCCBTSgAwIBAgIUAQ0Mn0MoWE5yBNWiaO8BEfGqYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTMxYmE3YjktNzBhNS00ZTdlLWJiYTQtMWE1YzIwNDg4 YzcxMB4XDTI2MDcwOTIxMDAxMVoXDTI2MTAwNzIxMDAxMVowLzEtMCsGA1UEAxMk ZGRjN2M1YWItYjFhZC00YTg0LWIzMjUtODViYzgyYTc1Njk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYvQ3lzx1yPgCZxxBTm21rcRFhfRWvLiAwiA YFGT4BYMlOrKxWHnMNB2SVZN45QJgXRipNDMONZGNvqRZJ/GM+ZTbkawDqETRVcb 5mBpc3gkbo218kRPyHmmiPSGj+Dkc5rK2Zne4sTgx5hNAYu8GsgKokWd/6awHljZ kruNSaso2eTtdLTdlATnMNrjoYmxupl7FscjDkpQjEcxX3ngWgCHfvKOEYXWQmNm ohqAD+k5IroXrmXW9VxcYg2YOtbus5dqVU4paITOriV6TPFJtdM9zs10dn74tsFj P26b9bGotaPCXnox6c8uL2Zo/Xab2XuKmezKMJcx+LMWeby+SwIDAQABo4IDXjCC A1owHQYDVR0OBBYEFNJJWT9t4lQvsq1zd+CgaGfaIRp5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xMzFi YTdiOS03MGE1LTRlN2UtYmJhNC0xYTVjMjA0ODhjNzEvZGMwNGIxYzMtNjdiNC0z NTMxLWFmZGYtN2MxZDM5MDczODEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTMxYmE3YjktNzBhNS00ZTdlLWJi YTQtMWE1YzIwNDg4YzcxLzEzMWJhN2I5LTcwYTUtNGU3ZS1iYmE0LTFhNWMyMDQ4 OGM3MS5jcmwwHwYDVR0jBBgwFoAUawYQaOFd4AD9aYEVHHxDxPlGoJIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xMzFiYTdiOS03MGE1LTRlN2UtYmJhNC0xYTVj MjA0ODhjNzEuY2VyMCgGCCsGAQUFBwEHAQH/BBkwFzAVBAIAATAPAwMAgD0DAwCC zwMDAI/XMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ KoZIhvcNAQELBQADggEBAG0eh+Sj3C5EIEHRPlPSGmen9FyoJ952OGMWXmfchDiJ NeF20ucE0Ye5SIAs3A0b993n4VhD4tqUf4L0xyj6i9VWTXa5+qKJAC+La2G8Lv1F Enr8FDus2xVf33S5GLFQzEWaS9FSI9fYO9XxPaobcb3w7Xv0eLQroiyPfrESWSfo DZP8B1x5oSt26c1uaVvJaWhWf2nrHfsTm5MDMDncwY591GEYybjw01IhPu8KQcxO zbEL3Fn8YX8HPyeCxKD4YBIGajJmyoZheawb4Kr6B+I1v12fKpvKMNAjhovSmRd/ mcOT+x3JHXKB2TaK03KKmOBHErIVoeZXFcDNYY8XA6U= -----END CERTIFICATE-----Generated at Fri Jul 24 10:22:36 2026 by rpki-client