$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1/21d57f9e-a771-3212-acb3-bda6cd0589e4.roa File: 21d57f9e-a771-3212-acb3-bda6cd0589e4.roa (raw, json) Hash identifier: zI/5Tjo5l/WakoXgOh5L2p3KmTtea0lzxvo0jslCrTs= Subject key identifier: 94:01:9C:84:0F:93:E9:23:E5:C2:71:EC:6D:80:A0:4A:AD:25:3D:76 Certificate issuer: /CN=2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1 Certificate serial: 010D0C9F4328584E940915A304D809B758B51200 Authority key identifier: 08:D9:B1:28:83:75:D1:68:E2:43:7F:44:AD:9B:A9:76:06:4E:AD:FD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1/21d57f9e-a771-3212-acb3-bda6cd0589e4.roa Signing time: Wed 22 Jul 2026 01:26:27 +0000 ROA not before: Wed 22 Jul 2026 01:26:27 +0000 ROA not after: Tue 20 Oct 2026 01:26:27 +0000 asID: 33651 IP address blocks: 169.128.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:94:09:15:a3:04:d8:09:b7:58:b5:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1 Validity Not Before: Jul 22 01:26:27 2026 GMT Not After : Oct 20 01:26:27 2026 GMT Subject: CN=b80361e3-7473-40f2-a93c-6966a725724b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:75:c4:0f:78:e8:be:b1:d5:13:0e:e7:55:aa: 04:94:57:ab:97:78:c1:4f:59:00:9f:04:72:f8:df: f1:c3:36:dc:90:ea:7f:31:2f:8c:70:db:55:13:65: 43:1e:50:01:51:80:d7:f5:c1:97:95:d4:d1:cf:33: fe:62:e7:25:fd:31:5c:6f:6e:f2:b2:6f:79:65:99: ce:e1:f7:c7:4b:13:5e:b9:5a:1a:b1:6b:f7:5c:62: c4:58:44:77:a8:06:b0:e2:5d:1c:f0:c2:fb:75:5f: a8:77:d4:48:80:ec:13:a8:29:62:8e:d8:16:16:04: 24:b7:62:ca:f7:5c:ac:97:f2:85:a5:7e:62:b2:71: 1f:82:57:0a:a8:f0:70:68:b1:4f:94:a2:92:f8:fc: ed:bc:94:bf:f5:51:cb:56:61:35:bd:9a:1a:9b:9d: 4e:a7:12:0b:ed:82:4e:eb:3f:7f:ee:3a:5b:b8:a4: 3d:e9:10:fd:32:40:8e:c5:df:41:97:61:88:2c:c2: 85:47:03:24:79:e1:aa:ff:fa:e8:08:64:9a:9d:01: 5f:45:25:f2:1f:ed:a4:f8:8c:6d:0b:5b:11:cd:50: d4:52:13:19:27:dc:bd:43:11:31:2e:87:49:8c:db: eb:b3:2a:bb:83:db:6d:d9:e3:0a:33:55:a0:b2:25: 23:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:01:9C:84:0F:93:E9:23:E5:C2:71:EC:6D:80:A0:4A:AD:25:3D:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1/21d57f9e-a771-3212-acb3-bda6cd0589e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1.crl X509v3 Authority Key Identifier: keyid:08:D9:B1:28:83:75:D1:68:E2:43:7F:44:AD:9B:A9:76:06:4E:AD:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1.cer sbgp-ipAddrBlock: critical IPv4: 169.128.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:01:9b:a4:01:2b:47:96:c9:72:cf:6a:3e:c5:fa:a3:59:27: c2:44:73:74:70:54:cd:af:37:4a:fc:7e:dc:7c:09:4d:41:f8: 84:d8:35:1a:51:49:38:51:37:e9:81:a1:cc:da:bf:af:fe:0a: 22:1a:d2:a8:f9:74:8b:21:e8:a7:84:4e:ff:72:de:28:46:9d: e8:1c:a1:60:01:2b:d6:04:37:52:f4:29:1b:39:25:b7:73:09: ac:ca:83:29:df:c3:b9:a5:af:04:fe:6e:cb:1d:b2:a5:f8:04: d7:ee:6c:e6:b3:06:8c:b6:57:39:da:93:f7:c0:8e:fc:99:ac: 67:65:44:4f:5b:cc:a3:ad:92:56:90:be:74:b5:b3:05:ab:86: 79:91:5f:8b:fa:4a:dd:d7:01:88:d2:a4:6b:49:0b:ad:7b:99: 62:36:47:2f:39:0a:41:49:ce:92:20:bc:67:8a:10:c7:69:13: 33:ba:d1:35:e3:6e:bb:bb:57:79:ed:04:df:fd:e7:92:74:7c: 3e:b7:25:fb:86:30:c2:b0:00:26:2a:db:a3:cd:7e:7d:b1:af: 32:36:c1:f7:6e:c0:97:1a:40:d2:43:51:02:f7:01:51:73:a9: c1:af:3c:a0:6c:dc:0c:c5:46:0e:1e:2a:fc:b0:f3:2a:f8:59: a5:6b:5f:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6UCRWjBNgJt1i1EgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJmOGM3NGEtZjhmMC00MmQzLTg0ZWUtZDlhMWUxYjQ2 ZmIxMB4XDTI2MDcyMjAxMjYyN1oXDTI2MTAyMDAxMjYyN1owLzEtMCsGA1UEAxMk YjgwMzYxZTMtNzQ3My00MGYyLWE5M2MtNjk2NmE3MjU3MjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHXED3jovrHVEw7nVaoElFerl3jBT1kAnwRy +N/xwzbckOp/MS+McNtVE2VDHlABUYDX9cGXldTRzzP+Yucl/TFcb27ysm95ZZnO 4ffHSxNeuVoasWv3XGLEWER3qAaw4l0c8ML7dV+od9RIgOwTqClijtgWFgQkt2LK 91ysl/KFpX5isnEfglcKqPBwaLFPlKKS+PztvJS/9VHLVmE1vZoam51OpxIL7YJO 6z9/7jpbuKQ96RD9MkCOxd9Bl2GILMKFRwMkeeGq//roCGSanQFfRSXyH+2k+Ixt C1sRzVDUUhMZJ9y9QxExLodJjNvrsyq7g9tt2eMKM1WgsiUjAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJQBnIQPk+kj5cJx7G2AoEqtJT12MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yYmY4 Yzc0YS1mOGYwLTQyZDMtODRlZS1kOWExZTFiNDZmYjEvMjFkNTdmOWUtYTc3MS0z MjEyLWFjYjMtYmRhNmNkMDU4OWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMmJmOGM3NGEtZjhmMC00MmQzLTg0 ZWUtZDlhMWUxYjQ2ZmIxLzJiZjhjNzRhLWY4ZjAtNDJkMy04NGVlLWQ5YTFlMWI0 NmZiMS5jcmwwHwYDVR0jBBgwFoAUCNmxKIN10WjiQ39ErZupdgZOrf0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yYmY4Yzc0YS1mOGYwLTQyZDMtODRlZS1kOWEx ZTFiNDZmYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqYB8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABABm6QBK0eWyXLPaj7F+qNZJ8JEc3RwVM2vN0r8ftx8CU1B+ITYNRpR SThRN+mBoczav6/+CiIa0qj5dIsh6KeETv9y3ihGnegcoWABK9YEN1L0KRs5Jbdz CazKgynfw7mlrwT+bssdsqX4BNfubOazBoy2Vznak/fAjvyZrGdlRE9bzKOtklaQ vnS1swWrhnmRX4v6St3XAYjSpGtJC617mWI2Ry85CkFJzpIgvGeKEMdpEzO60TXj bru7V3ntBN/955J0fD63JfuGMMKwACYq26PNfn2xrzI2wfduwJcaQNJDUQL3AVFz qcGvPKBs3AzFRg4eKvyw8yr4WaVrX5k= -----END CERTIFICATE-----Generated at Fri Jul 24 09:38:01 2026 by rpki-client