$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/df4a0f30-4592-38ec-8796-28a0bfedf387.roa File: df4a0f30-4592-38ec-8796-28a0bfedf387.roa (raw, json) Hash identifier: Zpz2fACILIrUeqhPNmUToE4VIEjwKo8X6P/Qm1SPCDQ= Subject key identifier: 7C:16:70:8C:A8:8C:A8:E3:5F:84:C4:CD:5F:FB:64:DD:C8:5D:D2:E2 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E7FFA5475333976BFF3F71D80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/df4a0f30-4592-38ec-8796-28a0bfedf387.roa Signing time: Tue 14 Jul 2026 21:00:12 +0000 ROA not before: Tue 14 Jul 2026 21:00:12 +0000 ROA not after: Mon 12 Oct 2026 21:00:12 +0000 asID: 31898 IP address blocks: 129.145.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7f:fa:54:75:33:39:76:bf:f3:f7:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 14 21:00:12 2026 GMT Not After : Oct 12 21:00:12 2026 GMT Subject: CN=8835de15-12dd-47ad-8263-50dfbd91a914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:bc:8a:b7:5b:ba:49:dc:df:0c:37:17:cc:52: 18:21:98:a0:4c:d7:91:fc:e7:eb:23:cb:39:4c:f7: 9a:d4:db:9e:90:ca:f9:81:0f:dc:3e:c1:f3:9f:1e: ba:7a:db:aa:d4:8f:ba:a7:91:63:fa:04:54:d5:5d: 17:a3:19:7e:3c:f0:4e:0e:40:ba:55:56:f8:af:52: 5f:5f:55:95:c3:db:c3:e1:de:8c:ae:54:d4:48:d8: 0b:a5:21:aa:6e:1a:db:02:19:09:b5:40:ed:1b:4e: d3:ae:ea:13:1b:6d:56:cb:a6:95:c0:37:c6:47:1d: 40:54:29:3c:26:22:ef:4c:6c:ed:a8:4a:d5:1f:3b: ba:52:af:27:17:ed:fd:54:9a:fb:6e:ec:da:77:3c: d1:3f:34:9f:0d:79:63:c5:1d:d5:50:aa:be:35:fc: 2b:7c:2f:79:36:7d:d7:b6:6f:d4:b8:1c:8d:9c:9a: d5:87:73:93:e1:a9:d2:0b:fc:67:94:7d:14:ba:5a: b4:43:5d:ad:ee:65:b1:79:32:f2:7d:cf:f5:bc:ed: 41:fa:49:6a:37:2e:cb:ad:78:39:2b:98:0c:3c:72: 69:7e:56:ef:13:c1:11:2b:c1:9d:e9:f3:4b:53:67: 96:8a:c4:b1:49:bf:1b:b2:c8:76:10:08:a2:33:43: 5e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:16:70:8C:A8:8C:A8:E3:5F:84:C4:CD:5F:FB:64:DD:C8:5D:D2:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/df4a0f30-4592-38ec-8796-28a0bfedf387.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.145.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:a4:98:8a:b6:30:dd:c2:d1:77:a0:68:40:4c:37:8f:79:8b: a8:d3:30:e7:55:3a:64:b7:63:35:48:81:28:c7:ec:26:70:b5: bd:0d:91:16:39:61:12:af:54:59:15:14:ba:2f:ab:e2:c0:a7: 23:80:10:c9:c0:53:44:75:18:a9:47:da:07:b0:a6:72:5b:8b: 40:77:db:e9:5d:1e:6f:64:08:cb:67:a5:39:5f:7c:17:6f:fb: a0:d5:7d:e9:60:11:db:99:7a:9e:43:92:b0:33:2a:f9:16:6a: 18:7e:fb:42:c1:9d:e8:97:c5:17:39:29:1e:83:2b:d1:f7:37: 6e:e2:92:b7:2a:c7:92:7c:93:0a:f5:55:74:52:a9:25:f3:0f: 29:fe:23:72:85:35:be:cc:5c:f4:86:9d:e1:11:2c:6d:48:25: 30:19:21:fd:05:a8:5b:50:3a:dd:4b:46:ef:ec:1f:30:91:3f: 66:65:3a:76:35:90:98:ed:4b:70:e6:e8:64:bd:06:5a:af:0c: 47:76:78:03:11:43:89:7e:e4:54:fb:0c:40:cc:83:5e:19:6f: c5:18:12:bc:74:22:7b:6d:9f:d5:7f:2f:4c:03:4f:65:00:77: 91:4c:23:ab:c6:32:96:4a:2a:bc:19:84:0d:0e:83:71:79:f7: 62:72:ff:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5/+lR1Mzl2v/P3HYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcxNDIxMDAxMloXDTI2MTAxMjIxMDAxMlowLzEtMCsGA1UEAxMk ODgzNWRlMTUtMTJkZC00N2FkLTgyNjMtNTBkZmJkOTFhOTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjryKt1u6SdzfDDcXzFIYIZigTNeR/OfrI8s5 TPea1NuekMr5gQ/cPsHznx66etuq1I+6p5Fj+gRU1V0Xoxl+PPBODkC6VVb4r1Jf X1WVw9vD4d6MrlTUSNgLpSGqbhrbAhkJtUDtG07TruoTG21Wy6aVwDfGRx1AVCk8 JiLvTGztqErVHzu6Uq8nF+39VJr7buzadzzRPzSfDXljxR3VUKq+NfwrfC95Nn3X tm/UuByNnJrVh3OT4anSC/xnlH0Uulq0Q12t7mWxeTLyfc/1vO1B+klqNy7LrXg5 K5gMPHJpflbvE8ERK8Gd6fNLU2eWisSxSb8bssh2EAiiM0NepQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHwWcIyojKjjX4TEzV/7ZN3IXdLiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZGY0YTBmMzAtNDU5Mi0z OGVjLTg3OTYtMjhhMGJmZWRmMzg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgZFDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGGkmIq2MN3C0XegaEBMN495i6jTMOdVOmS3YzVIgSjH7CZwtb0NkRY5 YRKvVFkVFLovq+LApyOAEMnAU0R1GKlH2gewpnJbi0B32+ldHm9kCMtnpTlffBdv +6DVfelgEduZep5DkrAzKvkWahh++0LBneiXxRc5KR6DK9H3N27ikrcqx5J8kwr1 VXRSqSXzDyn+I3KFNb7MXPSGneERLG1IJTAZIf0FqFtQOt1LRu/sHzCRP2ZlOnY1 kJjtS3Dm6GS9BlqvDEd2eAMRQ4l+5FT7DEDMg14Zb8UYErx0Inttn9V/L0wDT2UA d5FMI6vGMpZKKrwZhA0Og3F592Jy/1g= -----END CERTIFICATE-----Generated at Fri Jul 24 09:39:59 2026 by rpki-client