$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2be2708d-f96f-31e9-b570-30cc2b48e949.roa File: 2be2708d-f96f-31e9-b570-30cc2b48e949.roa (raw, json) Hash identifier: DMDXr7TmJQUMVs3gNa763fUGO7BmuONsPAGGgUkZiFs= Subject key identifier: 20:E0:83:02:4D:DB:89:B7:E6:77:BF:F8:9E:9F:DA:27:25:21:4A:78 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E7FFA37D6286E8C1BB9200500 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2be2708d-f96f-31e9-b570-30cc2b48e949.roa Signing time: Tue 14 Jul 2026 21:00:12 +0000 ROA not before: Tue 14 Jul 2026 21:00:12 +0000 ROA not after: Mon 12 Oct 2026 21:00:12 +0000 asID: 31898 IP address blocks: 129.145.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7f:fa:37:d6:28:6e:8c:1b:b9:20:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 14 21:00:12 2026 GMT Not After : Oct 12 21:00:12 2026 GMT Subject: CN=2231a0b0-ca7a-4fee-9b42-e75cf33aa897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d0:ae:f5:ed:60:97:4a:23:f9:b1:ee:05:cb: 5f:96:24:0e:8e:5a:ae:26:5e:27:a1:30:d5:09:5d: 5a:ae:8a:35:c0:ba:b8:40:07:13:a5:b4:c9:94:d5: 83:a0:24:f1:05:bd:29:10:0f:9e:7d:42:7d:2f:a3: d7:60:45:90:9b:dc:72:26:a9:a9:31:b9:98:78:50: 15:2f:dd:79:49:2c:9e:e5:d0:b1:07:34:ef:3b:6d: d2:9e:f3:4e:b9:0f:3c:81:85:a8:47:da:fa:9d:3d: 3a:5a:3d:3a:c6:ff:7e:28:ad:96:a6:e8:38:3c:d8: e9:8f:6e:f2:f1:c0:1a:8d:2a:95:ff:e0:02:68:91: 1d:76:85:b9:4c:ae:e9:7e:e1:f0:0c:e6:63:73:50: fb:1d:33:66:40:e2:1b:a8:6e:72:e1:f2:60:56:b7: df:29:b3:93:b6:ee:cf:53:94:00:c6:51:62:d0:e6: a2:09:81:12:ab:5b:cc:b3:63:c6:a2:e8:fd:33:ed: 51:b3:ec:01:e1:5c:95:2f:25:6c:cd:bc:11:03:a9: 91:45:9c:91:33:44:2b:14:62:48:20:35:a3:5c:66: f5:08:06:ec:3d:82:42:ff:18:c3:8d:1d:96:99:ce: d8:70:09:29:04:2e:d2:04:13:84:ea:fe:2c:f8:13: 47:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:E0:83:02:4D:DB:89:B7:E6:77:BF:F8:9E:9F:DA:27:25:21:4A:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2be2708d-f96f-31e9-b570-30cc2b48e949.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.145.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:cd:fc:f3:f1:b6:08:07:cb:6b:e7:af:e8:0f:e5:4c:98:73: 10:80:11:53:ab:5a:35:f3:f1:db:75:01:9d:03:a2:4b:42:52: 06:f7:dd:e3:87:02:ee:d8:ba:9e:4d:c6:a3:4e:6e:ae:95:9f: dd:b7:28:60:db:7a:f7:79:a9:a8:a8:a8:8f:d2:75:77:64:a4: 3f:a5:1c:51:f7:ca:95:a1:92:d2:c8:e2:92:32:b8:e9:27:24: a8:d1:4a:23:8e:86:60:5d:94:c3:f1:09:8c:68:82:23:27:62: 5d:28:fa:15:6a:26:fe:d6:df:b6:48:ba:93:cd:72:23:3f:ce: d3:2b:23:ef:15:d8:9f:d6:dd:11:17:84:dc:f5:36:e4:ce:61: f2:ab:8c:ce:d0:73:dd:bc:82:9c:e6:b5:76:24:24:52:1f:67: 45:6b:4e:55:c4:08:d0:a8:26:68:25:f9:40:90:ce:81:a0:84: 5d:10:43:76:03:ed:92:63:ef:ae:12:b2:9e:40:55:0d:05:ae: 37:0a:6a:90:ba:a3:64:9f:40:df:69:94:04:ee:ba:76:a1:94: b4:b7:a5:b9:7e:62:ed:7d:6f:f1:a5:01:1a:7c:5c:8f:f8:04: ca:44:f2:22:f4:c9:f3:29:78:05:06:90:bb:05:d1:51:3a:a7: ed:f8:4b:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5/+jfWKG6MG7kgBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcxNDIxMDAxMloXDTI2MTAxMjIxMDAxMlowLzEtMCsGA1UEAxMk MjIzMWEwYjAtY2E3YS00ZmVlLTliNDItZTc1Y2YzM2FhODk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodCu9e1gl0oj+bHuBctfliQOjlquJl4noTDV CV1aroo1wLq4QAcTpbTJlNWDoCTxBb0pEA+efUJ9L6PXYEWQm9xyJqmpMbmYeFAV L915SSye5dCxBzTvO23SnvNOuQ88gYWoR9r6nT06Wj06xv9+KK2Wpug4PNjpj27y 8cAajSqV/+ACaJEddoW5TK7pfuHwDOZjc1D7HTNmQOIbqG5y4fJgVrffKbOTtu7P U5QAxlFi0OaiCYESq1vMs2PGouj9M+1Rs+wB4VyVLyVszbwRA6mRRZyRM0QrFGJI IDWjXGb1CAbsPYJC/xjDjR2Wmc7YcAkpBC7SBBOE6v4s+BNHrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCDggwJN24m35ne/+J6f2iclIUp4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMmJlMjcwOGQtZjk2Zi0z MWU5LWI1NzAtMzBjYzJiNDhlOTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgZFEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKrN/PPxtggHy2vnr+gP5UyYcxCAEVOrWjXz8dt1AZ0DoktCUgb33eOH Au7Yup5NxqNObq6Vn923KGDbevd5qaioqI/SdXdkpD+lHFH3ypWhktLI4pIyuOkn JKjRSiOOhmBdlMPxCYxogiMnYl0o+hVqJv7W37ZIupPNciM/ztMrI+8V2J/W3REX hNz1NuTOYfKrjM7Qc928gpzmtXYkJFIfZ0VrTlXECNCoJmgl+UCQzoGghF0QQ3YD 7ZJj764Ssp5AVQ0FrjcKapC6o2SfQN9plATuunahlLS3pbl+Yu19b/GlARp8XI/4 BMpE8iL0yfMpeAUGkLsF0VE6p+34S6w= -----END CERTIFICATE-----Generated at Fri Jul 24 02:12:24 2026 by rpki-client