$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ae680b60-6565-3429-a4e9-f3b759a53631.roa File: ae680b60-6565-3429-a4e9-f3b759a53631.roa (raw, json) Hash identifier: GYRPWAq9/sRRoB+CWyVWs0ykwkxXpARYsMSuMkF2718= Subject key identifier: 99:88:52:3A:C9:00:BE:E0:C3:1F:14:2C:C3:71:B5:35:C4:AA:C9:F3 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E7E94ECBBE01E56557830E800 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ae680b60-6565-3429-a4e9-f3b759a53631.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 31898 IP address blocks: 129.157.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:ec:bb:e0:1e:56:55:78:30:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=d9e14d93-4e16-4bea-b9a3-a97fee7c7836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:27:ce:e4:3d:04:8d:d7:c1:99:dd:12:48:ad: cb:17:a1:50:77:e9:b9:50:53:78:99:9b:54:bd:75: e3:be:9a:d5:13:5e:f9:53:01:1c:c1:69:89:04:63: f9:28:df:37:ad:8b:ab:0e:7d:60:d8:f0:6a:35:3f: 63:38:b4:fa:e9:f8:2d:65:28:48:d9:ba:1e:49:22: 99:8e:43:a1:e4:3a:e3:01:ec:28:fa:b5:da:f3:08: 3a:d3:62:73:51:8f:29:fd:73:c6:54:0f:41:ea:7d: 1f:2c:11:b2:74:9e:2d:4b:32:be:4c:ad:94:09:12: 0c:d4:de:5d:21:31:94:0d:43:31:0d:3e:f2:9a:a5: bf:5a:31:3c:f0:33:6b:42:e4:f7:dc:d8:2e:a9:c2: 70:b8:a2:62:ee:52:be:a5:1b:71:1b:94:f6:71:0c: 51:a8:f7:79:0f:2b:08:39:ff:17:83:3e:6e:3c:c4: 5b:f9:50:72:b1:d0:21:48:0e:21:3c:d6:e8:67:e3: 6e:a6:91:ee:60:f2:62:3e:fe:95:b0:79:71:2b:65: 8a:b4:51:37:ec:6d:f1:52:60:37:6b:5b:9f:c5:d4: ea:b1:22:48:15:85:a2:12:e7:be:c6:98:85:d6:b5: 68:e0:09:3d:25:4a:de:28:c6:91:2a:8a:4d:71:8d: e5:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:88:52:3A:C9:00:BE:E0:C3:1F:14:2C:C3:71:B5:35:C4:AA:C9:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ae680b60-6565-3429-a4e9-f3b759a53631.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.157.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:42:da:6e:2b:1f:15:6b:22:84:b8:48:34:55:3f:4c:7a:1b: 9d:a1:58:6a:44:95:2f:9b:21:d4:ec:4f:5b:a6:2c:88:2d:2c: 02:a2:97:7d:b5:9d:94:be:b6:f7:1a:14:6a:d5:3f:3c:d5:95: 86:0d:72:18:cf:8c:d7:5c:91:ca:79:68:48:7d:06:66:3d:3f: bd:d1:f7:e9:b0:4d:32:3e:5e:ce:90:23:68:c1:3a:b1:8b:35: c6:72:28:7e:f6:b4:2d:f6:1d:f8:53:c7:fb:9d:64:94:3f:6a: 1d:2e:b1:2a:b0:63:f2:aa:36:da:17:a3:06:a4:8b:78:4d:77: 39:af:e0:af:f1:c9:3c:2d:36:a8:23:6c:da:b3:6f:26:d6:f2: fd:46:60:7f:94:f9:c4:e7:81:23:9e:e0:58:96:a0:cc:0a:6e: 63:06:0e:4f:29:95:bd:54:5c:de:2c:be:25:be:38:08:dd:cf: a6:ee:eb:0a:cb:14:e3:7c:d2:33:bf:b6:55:ff:a2:43:68:8a: 89:58:46:50:07:31:7b:12:ae:cc:ac:71:6e:8f:24:1f:c7:95: 92:03:32:db:d7:47:9e:08:69:01:ec:bb:4b:20:bd:91:db:e6: 38:a6:3c:6c:3b:aa:22:bb:fc:dd:3c:ee:3f:2a:04:54:1c:a1: f2:20:0d:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lOy74B5WVXgw6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk ZDllMTRkOTMtNGUxNi00YmVhLWI5YTMtYTk3ZmVlN2M3ODM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyfO5D0EjdfBmd0SSK3LF6FQd+m5UFN4mZtU vXXjvprVE175UwEcwWmJBGP5KN83rYurDn1g2PBqNT9jOLT66fgtZShI2boeSSKZ jkOh5DrjAewo+rXa8wg602JzUY8p/XPGVA9B6n0fLBGydJ4tSzK+TK2UCRIM1N5d ITGUDUMxDT7ymqW/WjE88DNrQuT33NguqcJwuKJi7lK+pRtxG5T2cQxRqPd5DysI Of8Xgz5uPMRb+VBysdAhSA4hPNboZ+NuppHuYPJiPv6VsHlxK2WKtFE37G3xUmA3 a1ufxdTqsSJIFYWiEue+xpiF1rVo4Ak9JUreKMaRKopNcY3l7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJmIUjrJAL7gwx8ULMNxtTXEqsnzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYWU2ODBiNjAtNjU2NS0z NDI5LWE0ZTktZjNiNzU5YTUzNjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgZ11MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHBC2m4rHxVrIoS4SDRVP0x6G52hWGpElS+bIdTsT1umLIgtLAKil321 nZS+tvcaFGrVPzzVlYYNchjPjNdckcp5aEh9BmY9P73R9+mwTTI+Xs6QI2jBOrGL NcZyKH72tC32HfhTx/udZJQ/ah0usSqwY/KqNtoXowaki3hNdzmv4K/xyTwtNqgj bNqzbybW8v1GYH+U+cTngSOe4FiWoMwKbmMGDk8plb1UXN4sviW+OAjdz6bu6wrL FON80jO/tlX/okNoiolYRlAHMXsSrsyscW6PJB/HlZIDMtvXR54IaQHsu0sgvZHb 5jimPGw7qiK7/N087j8qBFQcofIgDbM= -----END CERTIFICATE-----Generated at Fri Jul 24 00:44:55 2026 by rpki-client