$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/028e2d88-c8ea-3c9e-81c3-0200aae5b782.roa File: 028e2d88-c8ea-3c9e-81c3-0200aae5b782.roa (raw, json) Hash identifier: PMSu6B3cmiHplc4MXTWz67E2/DZe8SNHbJQVVyT9W9A= Subject key identifier: 69:EB:A5:94:4E:55:EE:D0:5A:65:41:8C:7E:0A:15:B5:BD:58:EE:7F Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584EA445235248D91CED90CE8680 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/028e2d88-c8ea-3c9e-81c3-0200aae5b782.roa Signing time: Mon 27 Jul 2026 21:00:11 +0000 ROA not before: Mon 27 Jul 2026 21:00:11 +0000 ROA not after: Sun 25 Oct 2026 21:00:11 +0000 asID: 54253 IP address blocks: 134.185.16.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a4:45:23:52:48:d9:1c:ed:90:ce:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 27 21:00:11 2026 GMT Not After : Oct 25 21:00:11 2026 GMT Subject: CN=f267f45d-a136-4661-8c18-87b99457f56c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:f4:b9:dd:23:1d:97:9c:43:67:7f:b8:80:e4: b5:be:50:3c:32:4b:28:df:ea:f3:bb:52:3a:8a:ea: 0b:a7:6f:9b:63:3d:fe:71:c3:ae:66:f5:eb:8e:78: 3f:56:9d:69:eb:61:8c:80:f4:28:07:0c:c3:bf:a8: ea:6f:43:25:64:68:4b:e4:e9:95:ef:4d:da:30:c8: 95:a5:53:26:aa:48:0d:3c:8e:75:af:c6:56:af:0d: a9:7a:0a:02:a0:57:94:34:41:be:49:25:c6:f1:16: 63:42:c9:97:d5:c1:57:fd:6e:12:7d:49:b6:a3:09: e0:88:cd:ed:d6:1c:14:89:80:53:0a:93:70:6f:ad: 24:70:a5:99:48:e9:76:bc:5b:1e:0e:bc:ce:16:50: 98:c2:e6:8a:c6:9e:e8:2b:d6:ee:a3:e6:47:ae:59: 78:f2:20:e0:11:4b:0b:e0:8c:10:de:0f:63:d7:41: 7c:73:a6:a7:85:13:a4:a9:08:af:22:ae:0f:e3:ce: 7d:bf:bf:77:f2:09:57:64:53:ba:cb:0c:b3:a1:83: 1d:2d:29:4b:6e:a3:e1:44:bd:23:42:83:0f:8a:0d: 14:e2:cd:53:0a:eb:18:6c:c3:92:44:11:ae:f8:43: 0b:8a:a5:70:79:78:8b:2f:54:ac:c1:06:80:c1:dc: b6:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:EB:A5:94:4E:55:EE:D0:5A:65:41:8C:7E:0A:15:B5:BD:58:EE:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/028e2d88-c8ea-3c9e-81c3-0200aae5b782.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.185.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:84:10:07:e1:43:66:37:63:8b:22:88:77:05:cb:14:67:61: bb:65:25:70:0c:55:44:ef:89:ea:1b:0f:84:ad:25:44:47:73: fe:dc:ba:4d:a4:07:02:88:be:07:8e:74:35:09:4e:a3:bf:a8: 30:52:cc:ab:5f:a2:69:9f:20:6b:bc:95:30:9b:aa:0f:a6:04: a7:03:d4:82:f6:9c:f9:13:0f:50:df:64:62:69:13:60:45:05: 0a:14:17:49:54:da:c8:7f:67:2e:87:08:ee:68:ce:07:69:b4: 07:f7:07:3a:5a:e0:ce:f9:a8:37:12:e4:33:1f:bd:35:39:69: 82:6c:b3:d8:54:b5:44:c8:c0:82:21:c9:78:ab:6e:89:af:e9: 22:bc:76:3e:af:9d:88:1c:03:8d:9d:7d:ea:83:27:26:f3:45: 22:c1:be:da:26:cf:af:9d:0e:f9:cd:9b:0d:78:41:23:d1:e6: 08:c9:b8:f1:2c:e7:10:6d:2d:dd:85:ac:44:f4:38:a9:57:d8: c0:c3:1f:d7:a5:fe:97:c8:ea:9e:d5:ad:df:46:04:2e:8e:2c: 88:e4:2d:80:c5:82:41:f1:ee:0d:c9:4b:c9:ce:f5:e3:15:b2: c9:aa:09:73:31:6a:09:e6:23:d8:db:d7:00:9f:3d:19:9b:db: 0c:33:0f:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6kRSNSSNkc7ZDOhoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcyNzIxMDAxMVoXDTI2MTAyNTIxMDAxMVowLzEtMCsGA1UEAxMk ZjI2N2Y0NWQtYTEzNi00NjYxLThjMTgtODdiOTk0NTdmNTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6PS53SMdl5xDZ3+4gOS1vlA8Mkso3+rzu1I6 iuoLp2+bYz3+ccOuZvXrjng/Vp1p62GMgPQoBwzDv6jqb0MlZGhL5OmV703aMMiV pVMmqkgNPI51r8ZWrw2pegoCoFeUNEG+SSXG8RZjQsmX1cFX/W4SfUm2owngiM3t 1hwUiYBTCpNwb60kcKWZSOl2vFseDrzOFlCYwuaKxp7oK9buo+ZHrll48iDgEUsL 4IwQ3g9j10F8c6anhROkqQivIq4P4859v7938glXZFO6ywyzoYMdLSlLbqPhRL0j QoMPig0U4s1TCusYbMOSRBGu+EMLiqVweXiLL1SswQaAwdy2fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGnrpZROVe7QWmVBjH4KFbW9WO5/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMDI4ZTJkODgtYzhlYS0z YzllLTgxYzMtMDIwMGFhZTViNzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDhrkQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKOEEAfhQ2Y3Y4siiHcFyxRnYbtlJXAMVUTvieobD4StJURHc/7cuk2k BwKIvgeOdDUJTqO/qDBSzKtfommfIGu8lTCbqg+mBKcD1IL2nPkTD1DfZGJpE2BF BQoUF0lU2sh/Zy6HCO5ozgdptAf3Bzpa4M75qDcS5DMfvTU5aYJss9hUtUTIwIIh yXirbomv6SK8dj6vnYgcA42dfeqDJybzRSLBvtomz6+dDvnNmw14QSPR5gjJuPEs 5xBtLd2FrET0OKlX2MDDH9el/pfI6p7Vrd9GBC6OLIjkLYDFgkHx7g3JS8nO9eMV ssmqCXMxagnmI9jb1wCfPRmb2wwzD4s= -----END CERTIFICATE-----Generated at Tue Jul 28 19:46:19 2026 by rpki-client