$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0c52c9d5-0892-3bb8-b3f1-8c443da8f926.roa File: 0c52c9d5-0892-3bb8-b3f1-8c443da8f926.roa (raw, json) Hash identifier: 0XGziYV1+87Toj2vXVmUTz8vV17EpZL00mGU+M2LkDY= Subject key identifier: 0E:8A:A1:4B:D6:8A:BB:BC:C5:FA:ED:B3:C1:8F:AF:F8:E7:EC:B2:2C Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E66DA3ABFA5A7592D80D82080 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0c52c9d5-0892-3bb8-b3f1-8c443da8f926.roa Signing time: Sun 05 Jul 2026 21:00:11 +0000 ROA not before: Sun 05 Jul 2026 21:00:11 +0000 ROA not after: Sat 03 Oct 2026 21:00:11 +0000 asID: 31898 IP address blocks: 192.29.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:66:da:3a:bf:a5:a7:59:2d:80:d8:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 5 21:00:11 2026 GMT Not After : Oct 3 21:00:11 2026 GMT Subject: CN=020121e6-011f-4657-8c5f-0e373ca770a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ac:23:bb:93:78:a7:f1:df:e7:26:32:6e:7b: 15:f2:33:a1:ae:b2:1e:76:a3:b7:bc:55:bd:16:4b: 08:0a:65:b2:e7:10:a6:1b:05:e9:d8:ff:64:94:36: 4c:2e:5a:31:e7:da:70:84:c1:5f:e3:ae:71:af:1a: 12:9c:d3:ff:f1:4e:d7:a7:38:78:57:0a:32:00:87: 91:a6:38:a5:18:c0:5f:13:7c:0c:34:6d:23:79:96: 7e:4f:07:e5:0b:33:b0:01:d9:b1:4c:49:92:4e:91: 00:54:bc:b6:02:e2:ed:81:c8:05:46:8e:97:cb:01: 83:66:a8:31:c8:30:60:1c:d7:6a:51:63:e7:36:88: a1:48:2b:f2:7b:5a:8a:9d:af:de:18:81:c1:eb:72: 2a:03:c6:87:46:1c:3f:3a:11:ec:04:13:df:d3:f1: de:dd:09:f9:6f:ce:ad:4f:0d:b1:47:7d:3e:29:02: 25:9b:69:50:e0:51:8e:b5:ea:05:a2:01:9e:7a:d2: 57:49:0b:4a:38:8d:6f:09:da:12:43:2a:dc:ca:3c: 0a:2b:e1:47:91:35:10:50:6f:71:59:22:99:3d:c3: f6:71:8a:9d:82:70:32:26:1c:f3:5a:8e:f5:00:2a: cd:40:f3:7d:a8:e2:f3:ba:bf:99:8e:07:19:78:24: f3:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:8A:A1:4B:D6:8A:BB:BC:C5:FA:ED:B3:C1:8F:AF:F8:E7:EC:B2:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0c52c9d5-0892-3bb8-b3f1-8c443da8f926.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 192.29.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:52:52:bf:da:f2:16:52:9c:a7:87:e2:8c:2f:98:ca:53:25: 4e:57:bf:57:34:bf:24:2f:d0:0c:4a:15:a9:d4:70:10:23:a4: 99:4a:41:bb:7e:06:e3:b3:10:5d:a2:ba:05:f1:8f:eb:6f:c6: 1e:f1:46:5c:00:e2:1c:42:1c:e4:2e:bf:dc:81:a4:0c:9b:ac: 90:20:e8:08:5a:f1:0d:6a:56:93:b3:ff:a0:fd:8c:31:1a:95: 33:c8:00:68:da:78:30:50:18:a1:62:f6:45:18:8e:7a:28:57: 77:fb:b9:23:29:ed:7b:85:60:94:80:cd:ef:33:2d:88:a5:e0: ab:e5:7f:c8:42:e8:c2:3b:f1:19:eb:5c:5c:84:02:09:13:4f: c9:1b:38:5f:76:78:ca:7d:61:c3:96:4a:0f:0f:6d:0b:fb:88: db:b8:0f:be:e7:03:54:7c:fd:79:cd:6e:c6:b5:0d:e1:e4:3d: eb:41:e4:47:c1:d4:a5:29:90:d6:e9:ca:3c:67:f7:11:ce:f8: c5:f3:6a:72:ff:86:8b:57:c6:11:67:61:b2:dc:49:3b:73:db: a6:a5:70:9f:68:42:59:c0:12:64:27:f8:d1:fe:5b:88:6b:79: 2f:e1:51:50:26:24:b6:45:db:08:b9:89:be:34:2f:79:4e:57: fa:be:e9:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5m2jq/padZLYDYIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcwNTIxMDAxMVoXDTI2MTAwMzIxMDAxMVowLzEtMCsGA1UEAxMk MDIwMTIxZTYtMDExZi00NjU3LThjNWYtMGUzNzNjYTc3MGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKwju5N4p/Hf5yYybnsV8jOhrrIedqO3vFW9 FksICmWy5xCmGwXp2P9klDZMLlox59pwhMFf465xrxoSnNP/8U7Xpzh4VwoyAIeR pjilGMBfE3wMNG0jeZZ+TwflCzOwAdmxTEmSTpEAVLy2AuLtgcgFRo6XywGDZqgx yDBgHNdqUWPnNoihSCvye1qKna/eGIHB63IqA8aHRhw/OhHsBBPf0/He3Qn5b86t Tw2xR30+KQIlm2lQ4FGOteoFogGeetJXSQtKOI1vCdoSQyrcyjwKK+FHkTUQUG9x WSKZPcP2cYqdgnAyJhzzWo71ACrNQPN9qOLzur+ZjgcZeCTzowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA6KoUvWiru8xfrts8GPr/jn7LIsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMGM1MmM5ZDUtMDg5Mi0z YmI4LWIzZjEtOGM0NDNkYThmOTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwB0gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJhSUr/a8hZSnKeH4owvmMpTJU5Xv1c0vyQv0AxKFanUcBAjpJlKQbt+ BuOzEF2iugXxj+tvxh7xRlwA4hxCHOQuv9yBpAybrJAg6Aha8Q1qVpOz/6D9jDEa lTPIAGjaeDBQGKFi9kUYjnooV3f7uSMp7XuFYJSAze8zLYil4Kvlf8hC6MI78Rnr XFyEAgkTT8kbOF92eMp9YcOWSg8PbQv7iNu4D77nA1R8/XnNbsa1DeHkPetB5EfB 1KUpkNbpyjxn9xHO+MXzanL/hotXxhFnYbLcSTtz26alcJ9oQlnAEmQn+NH+W4hr eS/hUVAmJLZF2wi5ib40L3lOV/q+6ek= -----END CERTIFICATE-----Generated at Mon Jul 13 02:54:45 2026 by rpki-client