$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a7afddd3-4488-3a04-aa1d-3c0331112320.roa File: a7afddd3-4488-3a04-aa1d-3c0331112320.roa (raw, json) Hash identifier: bt5xmB6QhkaYyjBAz/sYDEVVffOZCUicUhMYfPCQOek= Subject key identifier: 17:B8:33:BE:D3:C6:75:D1:A2:86:97:60:B5:A6:91:D2:0D:DE:40:89 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E6B0A31498FDEF8C8A1273A58 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a7afddd3-4488-3a04-aa1d-3c0331112320.roa Signing time: Tue 07 Jul 2026 09:00:12 +0000 ROA not before: Tue 07 Jul 2026 09:00:12 +0000 ROA not after: Mon 05 Oct 2026 09:00:12 +0000 asID: 31898 IP address blocks: 192.29.184.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6b:0a:31:49:8f:de:f8:c8:a1:27:3a:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 7 09:00:12 2026 GMT Not After : Oct 5 09:00:12 2026 GMT Subject: CN=2d46d198-112b-4bdc-b9e1-22db20597356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:3c:92:ee:09:38:db:7d:d2:8f:ab:e1:b4:28: ce:52:02:4e:3d:e9:32:dd:b4:90:30:b7:2e:34:51: 32:6d:ba:45:e3:42:3b:b3:16:1d:95:0c:83:5e:f9: 85:7c:56:cc:fb:e7:0a:ac:51:37:61:0c:16:63:35: b0:22:f4:1d:ee:07:40:01:78:0a:c5:4b:f1:eb:5c: 48:8f:2f:36:c2:06:2d:b5:3a:46:fb:49:e5:dd:d1: a2:c1:2a:f6:fc:2f:36:4e:78:c9:64:46:3e:92:93: ee:a8:c6:ef:10:b0:2b:f4:6a:14:87:26:ec:4a:45: c2:9d:9e:e6:9f:05:0b:7b:bc:34:a9:b4:c2:a8:bb: 41:9c:fa:58:fc:5a:81:d1:01:80:4d:07:22:ce:61: 0f:70:89:c4:0c:f7:53:56:da:19:74:a5:d6:de:e0: 66:19:87:49:cd:4f:ca:87:1c:4a:25:f7:49:16:a1: 0a:ab:02:0c:22:a3:2e:9d:12:21:8b:5d:73:05:90: f9:4a:a2:38:4b:c1:3f:df:90:7b:51:b1:f7:69:b9: 98:4c:f6:43:07:b9:5b:b4:6b:21:5b:95:18:ea:c7: 16:a7:9f:29:33:ea:b4:83:30:43:a6:40:1d:9c:9c: eb:50:05:38:80:d7:66:31:c2:ef:ca:2b:95:da:15: 3c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:B8:33:BE:D3:C6:75:D1:A2:86:97:60:B5:A6:91:D2:0D:DE:40:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a7afddd3-4488-3a04-aa1d-3c0331112320.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 192.29.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:21:d7:25:d2:44:78:e8:1e:78:f1:60:3c:0d:37:8d:32:66: 7f:5b:72:8a:25:85:69:45:24:d2:87:7c:1a:8e:2c:61:ff:20: 58:4a:82:8c:00:c3:ac:ce:fa:f0:e0:5c:2c:b9:f6:ef:9f:b0: d3:19:71:51:9e:5c:28:3e:b3:0e:69:8c:96:63:ef:4a:3d:22: 74:26:c8:d7:69:3f:bd:ad:35:4b:0c:47:9f:6f:ce:5a:39:d2: a2:61:03:35:90:04:b4:09:01:ae:5a:f0:ca:e6:3e:3b:9e:8f: e2:8b:a1:29:7f:b3:19:62:f8:37:37:b5:4a:75:ac:2d:a0:53: 06:7b:eb:60:60:4c:b8:8e:d8:62:77:76:4a:4c:1c:8c:79:ac: 37:02:f7:80:57:9f:f4:18:d7:c9:c8:ff:48:18:2b:f0:11:83: 5c:a5:c5:7f:8a:39:2b:98:56:bb:89:1f:8c:7f:86:31:09:9d: 02:52:01:1b:21:07:52:93:3d:2e:39:48:c0:01:b7:5a:29:48: 91:26:01:05:64:0f:63:f6:69:d2:f9:dc:b7:ae:74:70:98:87: 8e:f5:79:7a:95:16:8c:9c:ea:ca:18:fc:aa:9e:5c:f1:22:43: 4d:4c:f4:08:c3:6e:47:43:67:be:c3:e6:cd:d4:22:df:19:bc: 7f:56:4f:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5rCjFJj974yKEnOlgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcwNzA5MDAxMloXDTI2MTAwNTA5MDAxMlowLzEtMCsGA1UEAxMk MmQ0NmQxOTgtMTEyYi00YmRjLWI5ZTEtMjJkYjIwNTk3MzU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzyS7gk4233Sj6vhtCjOUgJOPeky3bSQMLcu NFEybbpF40I7sxYdlQyDXvmFfFbM++cKrFE3YQwWYzWwIvQd7gdAAXgKxUvx61xI jy82wgYttTpG+0nl3dGiwSr2/C82TnjJZEY+kpPuqMbvELAr9GoUhybsSkXCnZ7m nwULe7w0qbTCqLtBnPpY/FqB0QGATQcizmEPcInEDPdTVtoZdKXW3uBmGYdJzU/K hxxKJfdJFqEKqwIMIqMunRIhi11zBZD5SqI4S8E/35B7UbH3abmYTPZDB7lbtGsh W5UY6scWp58pM+q0gzBDpkAdnJzrUAU4gNdmMcLvyiuV2hU8rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBe4M77TxnXRooaXYLWmkdIN3kCJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYTdhZmRkZDMtNDQ4OC0z YTA0LWFhMWQtM2MwMzMxMTEyMzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwB24MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGYh1yXSRHjoHnjxYDwNN40yZn9bcoolhWlFJNKHfBqOLGH/IFhKgowA w6zO+vDgXCy59u+fsNMZcVGeXCg+sw5pjJZj70o9InQmyNdpP72tNUsMR59vzlo5 0qJhAzWQBLQJAa5a8MrmPjuej+KLoSl/sxli+Dc3tUp1rC2gUwZ762BgTLiO2GJ3 dkpMHIx5rDcC94BXn/QY18nI/0gYK/ARg1ylxX+KOSuYVruJH4x/hjEJnQJSARsh B1KTPS45SMABt1opSJEmAQVkD2P2adL53LeudHCYh471eXqVFoyc6soY/KqeXPEi Q01M9AjDbkdDZ77D5s3UIt8ZvH9WT44= -----END CERTIFICATE-----Generated at Mon Jul 13 02:49:15 2026 by rpki-client