$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1db86590-5b3b-3de4-a07d-7fd149d4ac20.roa File: 1db86590-5b3b-3de4-a07d-7fd149d4ac20.roa (raw, json) Hash identifier: xy9zX04zzbsZdYVJO6fqitTIINiuw9eatglhY1VoC9Y= Subject key identifier: 2F:28:D9:F2:F5:C6:4D:EA:CA:02:3C:46:F8:1F:1D:A3:3B:EA:BD:85 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E7A64F4C622319460FD97A880 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1db86590-5b3b-3de4-a07d-7fd149d4ac20.roa Signing time: Sun 12 Jul 2026 21:00:13 +0000 ROA not before: Sun 12 Jul 2026 21:00:13 +0000 ROA not after: Sat 10 Oct 2026 21:00:13 +0000 asID: 31898 IP address blocks: 192.22.174.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7a:64:f4:c6:22:31:94:60:fd:97:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 12 21:00:13 2026 GMT Not After : Oct 10 21:00:13 2026 GMT Subject: CN=aff62f9d-bbe9-4674-b60b-2978d84a14c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:67:77:ff:c7:85:c5:53:43:83:a6:2c:48:28: 48:7c:50:58:ae:bd:28:dd:4a:ad:37:79:d6:ad:cd: 71:25:db:1f:0c:ff:79:a5:67:df:bb:c2:b8:a8:50: 49:10:f6:09:c0:4d:bc:04:c4:3a:3c:2b:8a:29:10: 7e:e4:68:05:cf:1e:1d:ad:a7:bc:e1:d0:68:ab:9a: 24:2c:dd:8f:2c:5e:b0:2f:3d:8d:16:1b:10:bf:f5: db:e3:a7:ed:d5:b8:3f:56:f0:12:0f:6d:55:c3:ee: 2c:ab:54:c3:20:9f:d1:d5:73:b2:4c:07:73:f8:19: f2:60:12:18:9f:e4:60:3d:83:ce:79:2e:16:c7:74: 0e:95:3c:2f:be:ba:d4:28:f0:56:e8:13:4c:35:d8: c9:8a:a7:c9:57:af:e3:00:57:13:79:fc:b2:d3:61: f8:ce:11:a0:92:db:45:89:70:ae:63:60:1f:18:80: d4:a5:f0:99:9a:46:de:0f:b6:9a:54:81:ee:99:5f: 97:07:3b:db:0f:42:07:2e:56:d6:9e:03:4b:27:21: 37:4b:f5:c8:44:2b:2d:b7:27:f2:37:d4:f6:f8:0c: 37:30:b7:aa:11:37:65:b6:11:29:68:ba:89:3b:12: 7a:79:c7:06:3c:b7:59:05:3a:75:4c:d9:d7:3d:11: 8a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:28:D9:F2:F5:C6:4D:EA:CA:02:3C:46:F8:1F:1D:A3:3B:EA:BD:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1db86590-5b3b-3de4-a07d-7fd149d4ac20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 192.22.174.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:d3:b1:74:f6:fa:cc:04:88:04:ee:14:88:4b:fe:10:d0:2d: 13:11:cc:9c:69:53:61:33:4e:ae:65:8c:7b:64:11:0f:ae:f7: 70:ad:d7:5b:72:a2:5f:f2:14:81:f3:d1:d6:d4:69:e0:13:10: c4:dd:2c:f8:3d:49:bd:97:65:3f:9b:ee:ff:99:e8:b9:9f:86: ed:d0:7d:d2:6e:a8:5f:6f:1f:17:1c:dd:15:0a:23:d2:17:2e: 0c:f9:d9:8d:64:79:ab:5b:88:fe:21:d9:80:ee:d6:c6:fa:2e: 1a:7a:7f:6e:d5:ed:b5:42:c3:39:d9:6e:62:38:e1:d1:4a:3f: 32:99:13:1d:12:ef:78:8d:7c:ea:85:b0:d3:37:c8:00:ac:93: 57:b1:02:d8:0f:fa:37:01:64:4d:f9:74:62:e2:d6:3c:b7:97: 40:fc:c9:d4:63:98:6a:41:e2:31:ee:1d:7f:ac:2d:d6:9c:3f: 41:fc:84:e5:0a:f0:2a:af:6d:17:68:b6:a6:e6:c9:bc:cf:e3: 3c:12:63:b0:df:b6:ba:b9:03:da:68:05:2e:79:9d:d8:4e:89: ee:c4:cb:35:3a:b7:fb:63:c8:be:2a:ae:f0:b4:fa:f1:b8:21: 5d:6c:e0:29:dd:82:a9:00:5b:27:e3:75:fc:95:30:48:36:5f: 60:20:ce:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE56ZPTGIjGUYP2XqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcxMjIxMDAxM1oXDTI2MTAxMDIxMDAxM1owLzEtMCsGA1UEAxMk YWZmNjJmOWQtYmJlOS00Njc0LWI2MGItMjk3OGQ4NGExNGM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2md3/8eFxVNDg6YsSChIfFBYrr0o3UqtN3nW rc1xJdsfDP95pWffu8K4qFBJEPYJwE28BMQ6PCuKKRB+5GgFzx4drae84dBoq5ok LN2PLF6wLz2NFhsQv/Xb46ft1bg/VvASD21Vw+4sq1TDIJ/R1XOyTAdz+BnyYBIY n+RgPYPOeS4Wx3QOlTwvvrrUKPBW6BNMNdjJiqfJV6/jAFcTefyy02H4zhGgkttF iXCuY2AfGIDUpfCZmkbeD7aaVIHumV+XBzvbD0IHLlbWngNLJyE3S/XIRCsttyfy N9T2+Aw3MLeqETdlthEpaLqJOxJ6eccGPLdZBTp1TNnXPRGKIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC8o2fL1xk3qygI8RvgfHaM76r2FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMWRiODY1OTAtNWIzYi0z ZGU0LWEwN2QtN2ZkMTQ5ZDRhYzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwBauMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHzTsXT2+swEiATuFIhL/hDQLRMRzJxpU2EzTq5ljHtkEQ+u93Ct11ty ol/yFIHz0dbUaeATEMTdLPg9Sb2XZT+b7v+Z6Lmfhu3QfdJuqF9vHxcc3RUKI9IX Lgz52Y1keatbiP4h2YDu1sb6Lhp6f27V7bVCwznZbmI44dFKPzKZEx0S73iNfOqF sNM3yACsk1exAtgP+jcBZE35dGLi1jy3l0D8ydRjmGpB4jHuHX+sLdacP0H8hOUK 8CqvbRdotqbmybzP4zwSY7Dftrq5A9poBS55ndhOie7EyzU6t/tjyL4qrvC0+vG4 IV1s4CndgqkAWyfjdfyVMEg2X2AgzhI= -----END CERTIFICATE-----Generated at Mon Jul 13 02:52:04 2026 by rpki-client