$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/14306e65-abec-38c7-82a2-d648f1be5a9b.roa File: 14306e65-abec-38c7-82a2-d648f1be5a9b.roa (raw, json) Hash identifier: 336Qc5hyCLU+wiW3FjEvJRRrRFGSdOm3HYIZAHd6Ync= Subject key identifier: 72:5B:CC:ED:A0:25:7B:52:CB:95:72:3D:09:50:7E:72:6F:86:57:89 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E7A64DC5CD0BB3CB309408500 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/14306e65-abec-38c7-82a2-d648f1be5a9b.roa Signing time: Sun 12 Jul 2026 21:00:13 +0000 ROA not before: Sun 12 Jul 2026 21:00:13 +0000 ROA not after: Sat 10 Oct 2026 21:00:13 +0000 asID: 31898 IP address blocks: 192.22.168.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7a:64:dc:5c:d0:bb:3c:b3:09:40:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 12 21:00:13 2026 GMT Not After : Oct 10 21:00:13 2026 GMT Subject: CN=966abc08-3303-488c-a82d-7bbf8d7287fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:90:17:ca:95:f1:17:c7:2d:ea:72:f5:90:7f: 25:ab:9f:64:34:7d:e5:06:e6:7c:eb:a5:f0:3d:df: ff:fe:8f:73:4a:84:e9:51:ff:20:d5:9d:8f:6b:82: 47:0c:cb:42:c7:ed:82:ed:73:36:02:5b:f6:7e:ce: 44:dc:65:97:0a:11:8c:ff:a0:a6:75:55:a7:c1:c2: 73:f1:14:f9:50:32:15:ff:e1:03:4d:58:27:cd:8b: 09:eb:4a:cb:5c:86:a6:cd:7b:67:08:e7:f4:8c:0d: b2:3d:88:fe:3c:7d:16:2e:a3:03:e9:ce:50:cc:7b: d0:7f:11:06:a4:f1:32:a5:fe:7d:fa:ff:b7:86:b6: 6d:0d:ad:20:c4:56:f2:ac:72:35:a1:54:24:83:f9: 66:85:35:b1:e6:a2:ac:b3:a4:75:01:60:7e:d2:ea: b1:01:27:f5:56:f1:1e:c4:1b:73:8e:02:3a:a6:63: b2:f7:0a:e4:cd:3b:1b:16:80:33:f1:a6:23:94:66: 56:89:cd:94:70:bc:61:fd:f0:5d:71:c4:03:e5:2c: b7:a9:20:e2:ab:5c:92:d8:14:85:5e:52:cc:e4:4b: 7d:a4:d8:70:97:cc:2e:95:13:df:81:97:2d:b1:93: d5:73:bb:08:a4:47:c0:f7:dc:f3:2f:99:ad:f3:7b: f3:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:5B:CC:ED:A0:25:7B:52:CB:95:72:3D:09:50:7E:72:6F:86:57:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/14306e65-abec-38c7-82a2-d648f1be5a9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 192.22.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:95:f9:96:dc:f4:20:de:4e:29:70:64:31:01:ab:c5:b8:a8: c1:e5:be:a0:a7:40:c0:f3:8b:89:67:07:c5:13:77:d6:61:50: 61:7c:72:08:e5:57:97:54:ec:ed:82:74:03:1b:a4:46:e5:12: 1f:0b:cd:64:2f:49:a7:15:60:75:2a:28:96:98:e9:21:6f:08: cc:2a:8a:2f:37:e4:69:9d:5e:62:26:cd:83:d6:c2:f3:1b:d3: 00:f4:9e:e6:76:a9:b8:49:c3:5e:1e:6f:b1:70:a7:2a:49:4a: 0b:de:9b:63:e7:d6:14:8e:b2:b1:6d:71:92:25:45:28:9e:73: 42:eb:15:92:9e:c2:19:de:b5:08:bc:97:53:23:4e:f3:a6:1d: a6:c0:9b:86:f2:4d:11:d3:63:3a:85:e5:e1:d4:c8:4a:0f:33: 2c:50:03:30:3a:f6:f3:e2:21:50:29:eb:92:8a:e0:cc:be:bf: 07:56:74:df:9d:de:40:dd:e5:5a:07:83:a9:ae:f7:84:24:31: ff:ab:f9:77:96:e9:1b:bc:9e:c7:2b:52:ae:e6:43:2a:a2:c0: 1b:69:55:39:47:3b:6d:94:40:be:ad:ff:5f:9e:36:c3:ba:3e: 06:ea:d9:d5:3b:d6:e2:62:f4:5e:be:f5:08:cd:5e:25:cf:dd: 50:70:8c:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE56ZNxc0Ls8swlAhQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcxMjIxMDAxM1oXDTI2MTAxMDIxMDAxM1owLzEtMCsGA1UEAxMk OTY2YWJjMDgtMzMwMy00ODhjLWE4MmQtN2JiZjhkNzI4N2ZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZAXypXxF8ct6nL1kH8lq59kNH3lBuZ866Xw Pd///o9zSoTpUf8g1Z2Pa4JHDMtCx+2C7XM2Alv2fs5E3GWXChGM/6CmdVWnwcJz 8RT5UDIV/+EDTVgnzYsJ60rLXIamzXtnCOf0jA2yPYj+PH0WLqMD6c5QzHvQfxEG pPEypf59+v+3hrZtDa0gxFbyrHI1oVQkg/lmhTWx5qKss6R1AWB+0uqxASf1VvEe xBtzjgI6pmOy9wrkzTsbFoAz8aYjlGZWic2UcLxh/fBdccQD5Sy3qSDiq1yS2BSF XlLM5Et9pNhwl8wulRPfgZctsZPVc7sIpEfA99zzL5mt83vzmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHJbzO2gJXtSy5VyPQlQfnJvhleJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMTQzMDZlNjUtYWJlYy0z OGM3LTgyYTItZDY0OGYxYmU1YTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwBaoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKmV+Zbc9CDeTilwZDEBq8W4qMHlvqCnQMDzi4lnB8UTd9ZhUGF8cgjl V5dU7O2CdAMbpEblEh8LzWQvSacVYHUqKJaY6SFvCMwqii835GmdXmImzYPWwvMb 0wD0nuZ2qbhJw14eb7FwpypJSgvem2Pn1hSOsrFtcZIlRSiec0LrFZKewhnetQi8 l1MjTvOmHabAm4byTRHTYzqF5eHUyEoPMyxQAzA69vPiIVAp65KK4My+vwdWdN+d 3kDd5VoHg6mu94QkMf+r+XeW6Ru8nscrUq7mQyqiwBtpVTlHO22UQL6t/1+eNsO6 Pgbq2dU71uJi9F6+9QjNXiXP3VBwjIY= -----END CERTIFICATE-----Generated at Mon Jul 13 02:53:48 2026 by rpki-client