$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8a644b8f-56f7-315d-98d4-f0efaae82a84.roa File: 8a644b8f-56f7-315d-98d4-f0efaae82a84.roa (raw, json) Hash identifier: MMbtifVZ31lp+uWrsUhEjlSPxso/vIDQqkxdaXw7Uw4= Subject key identifier: 8C:68:1B:31:E5:2B:D4:F9:6A:3A:7B:6E:26:E9:5E:DD:32:55:86:4F Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E7E95035EE256832B4B567B78 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8a644b8f-56f7-315d-98d4-f0efaae82a84.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 31898 IP address blocks: 129.145.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:95:03:5e:e2:56:83:2b:4b:56:7b:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=4826b4ab-5ca5-46df-b0e3-82de2285e12e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b8:1a:9a:ea:c4:13:95:eb:77:b8:81:54:36: 75:0f:df:1e:ac:24:74:7d:55:68:fd:e1:fa:56:52: dc:58:d6:c6:79:6a:8b:b0:e0:be:ff:aa:b7:b4:fd: 1a:5f:1e:09:dd:ca:f3:e7:28:ff:04:7f:ca:f2:87: 7b:41:8c:ba:2f:11:bd:fb:4f:d1:f1:ee:3c:79:2a: 75:13:fa:a5:fa:18:1c:a9:89:c7:a4:1e:a6:4b:2d: 29:2f:ea:bd:2a:30:dc:22:e5:cc:95:b2:13:87:0b: f6:dd:d5:1d:34:35:d7:c1:59:5a:d1:75:97:f4:12: 9c:d0:d2:25:60:08:e3:8c:6e:93:88:1c:16:15:45: 5d:55:fb:c8:17:71:aa:5c:23:e1:37:89:11:11:0f: 8b:9d:33:5c:d9:ed:ee:5f:fd:45:33:d5:16:02:10: 4f:c1:c8:71:2d:06:15:03:38:36:fb:41:36:84:8a: 6c:ff:27:8f:7e:ea:6f:4a:13:3e:2f:0a:fe:ab:e4: cd:99:86:fe:ad:c4:05:6b:4d:2e:02:0c:4a:35:de: 42:16:4c:df:c2:28:ac:98:c3:5d:dc:b8:10:d0:29: fe:9b:83:f5:83:89:4d:2b:53:85:6b:8b:60:d4:cb: 20:2a:7e:a2:98:c6:5a:7d:d7:9b:d8:b0:d6:6b:b2: 34:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:68:1B:31:E5:2B:D4:F9:6A:3A:7B:6E:26:E9:5E:DD:32:55:86:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8a644b8f-56f7-315d-98d4-f0efaae82a84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.145.50.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:32:5d:a8:94:a1:f5:c2:57:d8:1c:05:df:d0:b1:a0:5d:e8: 7a:9c:3e:ec:6b:fe:58:72:30:d6:5f:c1:20:f3:71:ff:00:1f: b8:0d:21:78:e9:8c:6a:a5:ea:4a:26:dc:44:6e:d8:6b:b3:e2: 17:44:6e:78:23:6a:76:c8:3a:d7:9b:de:e4:ff:83:41:62:a6: e9:36:f3:7a:15:a9:a4:d2:f2:9e:3c:ea:9b:42:e8:be:d4:4c: 3b:a5:a3:68:76:52:2c:af:1a:3c:c0:c9:15:e5:2b:ee:6d:e3: 5c:12:7b:ea:6f:2b:4f:b8:a6:9e:79:b4:5a:a3:57:54:c8:03: 2d:2d:1a:a8:15:e5:c9:5e:43:3b:90:b5:cf:f5:d9:ff:40:23: c7:dd:1d:0c:08:fa:cc:79:09:82:05:b7:49:08:8e:00:8c:f7: 4c:6d:e0:1a:9c:3f:a9:7e:76:7d:ec:50:c0:a9:fa:33:d1:f1: 62:78:5c:f0:8f:98:2e:88:dc:ba:24:87:eb:51:f8:78:28:80: 78:96:46:a5:c3:4d:f0:cd:05:71:45:06:0f:f0:0a:45:77:4d: c6:08:ba:fe:c0:f9:0f:d5:d5:0c:52:7b:53:67:b1:fb:8c:99: f9:7d:4e:50:ab:78:cd:9d:b0:b0:3c:5b:9a:c6:2c:4a:21:92: 71:3c:27:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lQNe4laDK0tWe3gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk NDgyNmI0YWItNWNhNS00NmRmLWIwZTMtODJkZTIyODVlMTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLgamurEE5Xrd7iBVDZ1D98erCR0fVVo/eH6 VlLcWNbGeWqLsOC+/6q3tP0aXx4J3crz5yj/BH/K8od7QYy6LxG9+0/R8e48eSp1 E/ql+hgcqYnHpB6mSy0pL+q9KjDcIuXMlbIThwv23dUdNDXXwVla0XWX9BKc0NIl YAjjjG6TiBwWFUVdVfvIF3GqXCPhN4kREQ+LnTNc2e3uX/1FM9UWAhBPwchxLQYV Azg2+0E2hIps/yePfupvShM+Lwr+q+TNmYb+rcQFa00uAgxKNd5CFkzfwiismMNd 3LgQ0Cn+m4P1g4lNK1OFa4tg1MsgKn6imMZafdeb2LDWa7I0fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIxoGzHlK9T5ajp7bibpXt0yVYZPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOGE2NDRiOGYtNTZmNy0z MTVkLTk4ZDQtZjBlZmFhZTgyYTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgZEyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIAyXaiUofXCV9gcBd/QsaBd6HqcPuxr/lhyMNZfwSDzcf8AH7gNIXjp jGql6kom3ERu2Guz4hdEbngjanbIOteb3uT/g0Fipuk283oVqaTS8p486ptC6L7U TDulo2h2UiyvGjzAyRXlK+5t41wSe+pvK0+4pp55tFqjV1TIAy0tGqgV5cleQzuQ tc/12f9AI8fdHQwI+sx5CYIFt0kIjgCM90xt4BqcP6l+dn3sUMCp+jPR8WJ4XPCP mC6I3Lokh+tR+HgogHiWRqXDTfDNBXFFBg/wCkV3TcYIuv7A+Q/V1QxSe1NnsfuM mfl9TlCreM2dsLA8W5rGLEohknE8JxQ= -----END CERTIFICATE-----Generated at Fri Jul 24 18:04:01 2026 by rpki-client