$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/af9e12de-00c0-3faa-aa5a-1fcdda6e6df9.roa File: af9e12de-00c0-3faa-aa5a-1fcdda6e6df9.roa (raw, json) Hash identifier: fm0AokVEF7QVnphefv7rZTY6xJdEOIrq3GcbU59IAQc= Subject key identifier: 53:09:79:45:DC:BE:7C:FF:C9:6F:F1:98:A3:29:D8:D3:45:C4:01:81 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E6B0A0A52ECE171C287471F40 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/af9e12de-00c0-3faa-aa5a-1fcdda6e6df9.roa Signing time: Tue 07 Jul 2026 09:00:12 +0000 ROA not before: Tue 07 Jul 2026 09:00:12 +0000 ROA not after: Mon 05 Oct 2026 09:00:12 +0000 asID: 31898 IP address blocks: 192.29.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6b:0a:0a:52:ec:e1:71:c2:87:47:1f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 7 09:00:12 2026 GMT Not After : Oct 5 09:00:12 2026 GMT Subject: CN=703dce0b-f476-45dd-a92c-5a033c0763ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:34:18:e6:77:67:aa:fa:49:a8:e5:67:fa:87: 37:41:ae:d0:49:c2:b0:ce:9b:35:c4:15:0d:3d:1d: 82:28:29:ed:fd:34:99:aa:70:e3:19:1e:bc:b3:68: c2:aa:85:69:98:88:11:44:dd:28:08:e2:9b:90:6f: 90:df:87:b5:bc:d5:cb:39:5e:2a:a9:e4:c1:51:3a: d9:5d:c9:d6:51:ba:7d:22:f7:b6:9c:57:95:99:25: 18:e2:82:99:e7:bc:a9:82:e5:fa:da:67:a4:d3:f9: 6a:17:3e:a2:51:ae:f6:96:8d:ca:d5:53:d2:3b:21: a5:c9:6b:16:63:d5:62:c6:fb:0c:88:42:87:21:f9: 94:29:2c:a4:a3:51:44:ae:67:8b:d4:f4:27:36:d7: cb:d8:70:c0:10:ee:e6:73:69:22:db:c9:5f:47:4c: 59:8a:99:b0:4b:94:cb:f6:30:dc:c4:b6:d0:4c:c7: 4d:25:d2:bc:47:1a:71:97:65:cc:9e:a3:70:3c:db: 78:f5:a0:26:44:01:1b:f2:85:41:64:83:5c:48:fc: 0e:b2:5d:ea:8b:36:60:dd:cd:bd:50:55:21:cb:61: 84:d9:9c:3a:cb:ed:4d:d5:06:ef:ad:00:69:9c:3b: e1:3e:2a:42:c4:ba:a2:b1:c5:b5:ff:88:8d:b4:4d: 4b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:09:79:45:DC:BE:7C:FF:C9:6F:F1:98:A3:29:D8:D3:45:C4:01:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/af9e12de-00c0-3faa-aa5a-1fcdda6e6df9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 192.29.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:c5:e3:16:aa:a0:f1:c2:9a:f0:52:3f:a2:d8:88:dc:53:57: 10:d3:79:fe:b7:a9:8a:42:d5:a1:16:2d:cc:d9:0b:a3:50:22: 4b:5f:37:46:d4:c0:12:bd:b0:08:23:9c:db:e9:f3:e8:1d:2c: f4:87:9d:e2:62:18:88:b6:57:63:6a:03:03:8f:ce:81:e8:92: 42:ad:78:3e:f7:0c:e3:b3:e0:ca:ec:00:c0:c2:15:95:ff:92: c7:be:4c:55:18:51:bd:45:de:10:5b:7a:b0:d2:6a:c2:9a:79: 4c:72:8e:20:74:3c:f2:83:cf:d6:1b:60:45:3a:78:d8:a7:ff: f1:13:69:6d:57:41:78:e0:c1:2a:de:70:f8:f2:0f:0a:16:83: 37:11:ce:ef:1c:87:c2:34:04:c6:9b:fa:9d:73:82:d6:76:c1: 05:1c:5c:73:46:cc:de:5f:91:bc:f8:85:0a:8b:8f:82:79:db: 50:be:4a:c5:5e:8d:8b:ef:e5:60:c1:d2:13:19:71:c8:d1:ea: 8d:c4:5c:c0:b9:77:3b:b9:9d:20:1d:4d:c6:5a:78:70:fe:9b: b3:74:7b:82:bf:67:50:75:3b:4e:f8:5d:3c:a6:62:eb:a9:67: 7c:17:7e:98:ad:6c:7e:4f:9c:ec:f6:3f:67:11:9b:1d:36:06: 64:35:b0:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5rCgpS7OFxwodHH0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcwNzA5MDAxMloXDTI2MTAwNTA5MDAxMlowLzEtMCsGA1UEAxMk NzAzZGNlMGItZjQ3Ni00NWRkLWE5MmMtNWEwMzNjMDc2M2NlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+DQY5ndnqvpJqOVn+oc3Qa7QScKwzps1xBUN PR2CKCnt/TSZqnDjGR68s2jCqoVpmIgRRN0oCOKbkG+Q34e1vNXLOV4qqeTBUTrZ XcnWUbp9Ive2nFeVmSUY4oKZ57ypguX62mek0/lqFz6iUa72lo3K1VPSOyGlyWsW Y9VixvsMiEKHIfmUKSyko1FErmeL1PQnNtfL2HDAEO7mc2ki28lfR0xZipmwS5TL 9jDcxLbQTMdNJdK8Rxpxl2XMnqNwPNt49aAmRAEb8oVBZINcSPwOsl3qizZg3c29 UFUhy2GE2Zw6y+1N1QbvrQBpnDvhPipCxLqiscW1/4iNtE1LMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFMJeUXcvnz/yW/xmKMp2NNFxAGBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYWY5ZTEyZGUtMDBjMC0z ZmFhLWFhNWEtMWZjZGRhNmU2ZGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwB0QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACnF4xaqoPHCmvBSP6LYiNxTVxDTef63qYpC1aEWLczZC6NQIktfN0bU wBK9sAgjnNvp8+gdLPSHneJiGIi2V2NqAwOPzoHokkKteD73DOOz4MrsAMDCFZX/ kse+TFUYUb1F3hBberDSasKaeUxyjiB0PPKDz9YbYEU6eNin//ETaW1XQXjgwSre cPjyDwoWgzcRzu8ch8I0BMab+p1zgtZ2wQUcXHNGzN5fkbz4hQqLj4J521C+SsVe jYvv5WDB0hMZccjR6o3EXMC5dzu5nSAdTcZaeHD+m7N0e4K/Z1B1O074XTymYuup Z3wXfpitbH5PnOz2P2cRmx02BmQ1sO4= -----END CERTIFICATE-----Generated at Mon Jul 13 02:46:31 2026 by rpki-client