$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7cf3189a-1651-32ac-987c-253702b7ced8.roa File: 7cf3189a-1651-32ac-987c-253702b7ced8.roa (raw, json) Hash identifier: iC5426OEiVN8ARViVw8eAmKjM1ZvzP6JtxSkvh2NnqQ= Subject key identifier: 59:CC:92:25:A2:E1:97:FE:BA:EC:6E:89:10:62:52:88:46:76:7E:59 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E7A64CF6E2F2C18AF4BA3E100 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7cf3189a-1651-32ac-987c-253702b7ced8.roa Signing time: Sun 12 Jul 2026 21:00:13 +0000 ROA not before: Sun 12 Jul 2026 21:00:13 +0000 ROA not after: Sat 10 Oct 2026 21:00:13 +0000 asID: 31898 IP address blocks: 192.22.176.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7a:64:cf:6e:2f:2c:18:af:4b:a3:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 12 21:00:13 2026 GMT Not After : Oct 10 21:00:13 2026 GMT Subject: CN=a20bc890-1c4e-483c-ae8b-a870f39d3222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:8e:ce:77:3e:ec:af:f7:e1:35:82:6d:be:79: 19:20:8e:57:ab:6b:d8:d1:0e:57:05:e2:06:cc:df: 32:2e:6b:c5:da:74:c1:d7:3d:fd:b5:35:53:33:8b: 9b:6b:8c:a6:7d:7c:33:17:ca:7e:03:b3:c4:68:6e: 82:97:39:a1:b1:6b:d1:cf:61:48:fb:1f:a2:bc:aa: fe:85:58:09:a4:d7:54:f0:b6:1c:2a:22:a8:60:f5: 0a:b6:9c:a3:45:f1:04:9c:51:7e:7e:bb:52:69:c0: 33:a2:f3:43:7d:68:e5:9b:15:30:63:9c:1e:11:2d: f3:c0:fd:de:ec:3b:c0:47:64:e8:0d:16:6e:9f:5c: 1d:d1:57:d5:59:ad:bb:d1:0d:a9:11:f0:20:d1:83: bc:e7:bd:7a:15:51:25:41:88:b0:3c:70:9b:91:93: 95:2d:dd:28:cd:9b:62:2e:47:44:12:2b:81:41:15: b7:c3:48:38:98:d7:d9:82:4a:c4:76:e9:d8:f1:98: 08:c4:2b:ec:75:96:a1:f6:ed:36:6a:7a:58:42:81: 68:59:2f:7a:0d:2d:97:b5:01:24:af:26:07:15:b1: a8:e9:96:37:a5:2a:87:b5:1a:3e:34:65:32:85:06: 47:75:2b:80:ff:bd:9f:2e:9b:46:14:55:34:11:75: da:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:CC:92:25:A2:E1:97:FE:BA:EC:6E:89:10:62:52:88:46:76:7E:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7cf3189a-1651-32ac-987c-253702b7ced8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 192.22.176.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:2f:14:4d:6a:f4:6d:bd:e5:43:7b:0a:58:2a:53:dc:2b:96: ce:7e:90:f6:c6:78:c5:7e:12:99:eb:bd:1a:36:cc:a8:96:40: f2:93:a0:89:0e:75:87:45:5f:d9:dc:33:f1:6b:cb:d7:24:b7: b6:97:8e:0e:04:24:4b:8c:45:c1:a0:8e:5c:06:b1:25:68:90: 14:25:93:e0:a7:1d:da:cb:3d:b0:72:a0:ee:e4:8a:4d:7b:4a: 2d:5a:51:bd:cf:13:60:de:c1:73:52:df:49:2b:30:56:9d:9e: 43:ce:90:a7:a1:9a:a5:58:14:cd:fc:57:f7:7c:3d:3f:a3:51: 14:4d:12:b7:d0:a4:68:27:71:be:3f:0f:fa:6e:2b:13:73:1b: 3e:05:e4:94:c9:5a:84:5d:5a:dd:51:21:09:43:98:49:54:85: b0:c3:a9:c8:72:a8:67:89:79:07:ec:8d:52:c4:ac:62:7b:de: 59:a8:1b:94:a0:ce:ee:82:67:a8:c9:9d:3c:13:ed:ac:dc:27: 17:73:a2:c3:a9:15:1e:61:05:dd:0f:0e:52:b0:9d:e1:9f:53: 78:48:21:fa:09:28:9e:e7:1c:3b:cc:44:cb:7a:0b:3b:5d:39: 5f:45:09:11:f7:01:25:61:a9:88:2d:46:ac:f8:61:15:d2:5f: 7d:f5:ad:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE56ZM9uLywYr0uj4QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcxMjIxMDAxM1oXDTI2MTAxMDIxMDAxM1owLzEtMCsGA1UEAxMk YTIwYmM4OTAtMWM0ZS00ODNjLWFlOGItYTg3MGYzOWQzMjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl47Odz7sr/fhNYJtvnkZII5Xq2vY0Q5XBeIG zN8yLmvF2nTB1z39tTVTM4uba4ymfXwzF8p+A7PEaG6ClzmhsWvRz2FI+x+ivKr+ hVgJpNdU8LYcKiKoYPUKtpyjRfEEnFF+frtSacAzovNDfWjlmxUwY5weES3zwP3e 7DvAR2ToDRZun1wd0VfVWa270Q2pEfAg0YO85716FVElQYiwPHCbkZOVLd0ozZti LkdEEiuBQRW3w0g4mNfZgkrEdunY8ZgIxCvsdZah9u02anpYQoFoWS96DS2XtQEk ryYHFbGo6ZY3pSqHtRo+NGUyhQZHdSuA/72fLptGFFU0EXXawwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFnMkiWi4Zf+uuxuiRBiUohGdn5ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvN2NmMzE4OWEtMTY1MS0z MmFjLTk4N2MtMjUzNzAyYjdjZWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwBawMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJwvFE1q9G295UN7ClgqU9wrls5+kPbGeMV+EpnrvRo2zKiWQPKToIkO dYdFX9ncM/Fry9ckt7aXjg4EJEuMRcGgjlwGsSVokBQlk+CnHdrLPbByoO7kik17 Si1aUb3PE2DewXNS30krMFadnkPOkKehmqVYFM38V/d8PT+jURRNErfQpGgncb4/ D/puKxNzGz4F5JTJWoRdWt1RIQlDmElUhbDDqchyqGeJeQfsjVLErGJ73lmoG5Sg zu6CZ6jJnTwT7azcJxdzosOpFR5hBd0PDlKwneGfU3hIIfoJKJ7nHDvMRMt6Cztd OV9FCRH3ASVhqYgtRqz4YRXSX331rXM= -----END CERTIFICATE-----Generated at Mon Jul 13 02:50:38 2026 by rpki-client