$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9ac1fe06-b036-34e5-b2dc-447340005f3b.roa File: 9ac1fe06-b036-34e5-b2dc-447340005f3b.roa (raw, json) Hash identifier: sRsxOs3K8Gqu+Ap42t6RyYzwlroBXaLiu4k3XdZgssY= Subject key identifier: 3E:2E:A2:A0:09:AE:23:E1:68:49:2E:56:BC:36:49:0C:65:91:19:15 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E7E94EE57DBA21D7A4632BD00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9ac1fe06-b036-34e5-b2dc-447340005f3b.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 31898 IP address blocks: 129.145.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:ee:57:db:a2:1d:7a:46:32:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=eb93244d-cffd-425d-b84e-a32a0f0b6761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:53:49:5b:73:15:72:f2:af:d6:7c:c9:cb:2d: b1:1f:54:3c:0d:e3:28:60:9e:ec:04:b9:36:8f:24: 14:21:08:27:9c:5b:e9:6f:f7:c5:b6:35:14:84:89: 62:a3:41:d3:5c:8a:c9:46:54:1b:2b:35:56:76:db: 16:97:11:54:da:45:b1:fa:db:a7:34:7b:7a:8f:2e: 14:8d:c0:f4:86:9a:a4:e7:dd:e0:40:48:e8:28:74: d0:06:3c:7b:40:1c:1c:c3:23:7a:90:9f:be:6f:1e: b1:ca:cf:29:09:94:23:94:5a:57:57:e6:82:6f:92: 4c:18:54:d6:b9:0c:6a:19:8b:ee:a9:a4:36:23:36: 00:00:45:19:09:31:3a:9d:3c:1b:cf:2b:46:3d:95: f6:b3:d2:de:81:32:0c:f3:99:f0:9a:a6:6e:cb:cf: bc:6b:0a:af:28:af:ca:48:40:6c:3e:21:9b:1f:e1: 16:30:4a:7f:e6:3d:a5:85:30:1c:ea:59:1d:6a:6e: c8:4d:72:9e:c8:99:8a:1b:b3:78:94:4b:21:37:34: eb:a3:01:bf:79:2e:0f:f7:16:11:f1:0f:b9:7d:3b: 1f:bd:15:28:26:dd:a6:14:e9:f9:ad:e2:b0:bc:84: f4:c5:6a:f1:a3:11:ba:3f:c6:b0:bc:b2:01:a3:52: f1:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:2E:A2:A0:09:AE:23:E1:68:49:2E:56:BC:36:49:0C:65:91:19:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9ac1fe06-b036-34e5-b2dc-447340005f3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.145.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:a3:07:b8:41:83:dd:a6:3c:6f:79:9f:ec:bd:2e:63:8d:07: 68:54:da:d2:e6:87:95:3a:3d:25:be:c4:a9:ad:fc:52:bf:9c: 80:d7:42:f4:12:d4:9a:d6:0c:46:ff:9d:dd:0a:c0:63:56:69: 6b:f3:8f:06:51:26:44:20:da:85:b4:b5:9a:90:3e:58:40:29: 46:79:57:12:6c:8a:b3:1d:06:9d:8c:af:6d:9b:03:f7:08:66: 72:fe:32:72:82:cd:ab:56:94:4c:a0:05:20:56:7b:89:ff:2d: 53:2d:48:e8:44:8f:b2:22:f4:f2:9c:9c:85:aa:55:84:65:13: 71:8d:50:f1:92:44:83:e1:db:17:30:63:22:ff:4b:85:2e:80: d3:9f:6a:14:c2:05:59:06:21:2d:cd:f3:ae:c8:ea:04:ab:87: eb:17:74:c5:bb:04:e0:21:22:5f:07:cb:17:7b:2f:97:f3:b5: cd:08:88:25:3f:5c:90:d6:fd:97:87:4c:87:91:d3:0c:ae:8f: 38:c3:e7:4a:98:bc:55:38:2c:84:10:c0:e7:ab:e1:86:a6:18: 98:d9:b9:86:6b:fb:4d:14:d6:97:b3:ca:93:96:bc:4e:f8:be: 47:98:15:70:43:f3:aa:80:a8:4a:b6:98:24:6a:19:9e:ba:2c: cf:9f:63:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lO5X26IdekYyvQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk ZWI5MzI0NGQtY2ZmZC00MjVkLWI4NGUtYTMyYTBmMGI2NzYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1NJW3MVcvKv1nzJyy2xH1Q8DeMoYJ7sBLk2 jyQUIQgnnFvpb/fFtjUUhIlio0HTXIrJRlQbKzVWdtsWlxFU2kWx+tunNHt6jy4U jcD0hpqk593gQEjoKHTQBjx7QBwcwyN6kJ++bx6xys8pCZQjlFpXV+aCb5JMGFTW uQxqGYvuqaQ2IzYAAEUZCTE6nTwbzytGPZX2s9LegTIM85nwmqZuy8+8awqvKK/K SEBsPiGbH+EWMEp/5j2lhTAc6lkdam7ITXKeyJmKG7N4lEshNzTrowG/eS4P9xYR 8Q+5fTsfvRUoJt2mFOn5reKwvIT0xWrxoxG6P8awvLIBo1LxHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD4uoqAJriPhaEkuVrw2SQxlkRkVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOWFjMWZlMDYtYjAzNi0z NGU1LWIyZGMtNDQ3MzQwMDA1ZjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgZE6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJajB7hBg92mPG95n+y9LmONB2hU2tLmh5U6PSW+xKmt/FK/nIDXQvQS 1JrWDEb/nd0KwGNWaWvzjwZRJkQg2oW0tZqQPlhAKUZ5VxJsirMdBp2Mr22bA/cI ZnL+MnKCzatWlEygBSBWe4n/LVMtSOhEj7Ii9PKcnIWqVYRlE3GNUPGSRIPh2xcw YyL/S4UugNOfahTCBVkGIS3N867I6gSrh+sXdMW7BOAhIl8Hyxd7L5fztc0IiCU/ XJDW/ZeHTIeR0wyujzjD50qYvFU4LIQQwOer4YamGJjZuYZr+00U1pezypOWvE74 vkeYFXBD86qAqEq2mCRqGZ66LM+fY3s= -----END CERTIFICATE-----Generated at Fri Jul 24 13:27:15 2026 by rpki-client