$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bbd9a2c7-290e-3067-9670-5641ca897df3.roa File: bbd9a2c7-290e-3067-9670-5641ca897df3.roa (raw, json) Hash identifier: CA4p3EIBqppWrY0a97EozvZAnZ/fBHrtVeWx4f+ZM2A= Subject key identifier: D7:DC:FA:20:22:DE:FB:82:20:E5:BE:01:AF:B8:D6:18:52:A4:26:70 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E7A64DBADAFD1B8D7AF4924C0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bbd9a2c7-290e-3067-9670-5641ca897df3.roa Signing time: Sun 12 Jul 2026 21:00:13 +0000 ROA not before: Sun 12 Jul 2026 21:00:13 +0000 ROA not after: Sat 10 Oct 2026 21:00:13 +0000 asID: 31898 IP address blocks: 192.22.170.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7a:64:db:ad:af:d1:b8:d7:af:49:24:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 12 21:00:13 2026 GMT Not After : Oct 10 21:00:13 2026 GMT Subject: CN=0da97ce2-52fe-469c-9446-6acd8899d3c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ea:4d:e5:3f:df:67:93:d3:b6:95:18:7d:93: d0:de:78:64:72:c5:e9:60:53:02:af:fc:de:7f:d1: 5c:53:95:88:95:62:ce:2f:04:cd:de:cc:58:71:92: 3a:6b:80:53:30:a1:b6:ba:3e:84:6b:76:7e:39:b3: 14:90:df:fd:de:ed:ed:81:c1:e7:5e:c1:69:77:34: 0c:ca:8a:b6:c3:12:11:2c:9d:ff:ee:bf:93:fe:83: 79:a3:1e:47:47:cf:69:2d:3e:5e:40:fb:dc:7a:04: 77:b8:ef:35:31:5c:92:01:9a:f9:5e:7b:fe:ae:f4: 2d:17:a1:f4:49:30:d6:53:ec:d7:ca:c9:b0:73:00: f2:aa:48:de:6a:b3:71:a9:f3:f9:e1:03:11:59:6f: 64:fb:19:3d:de:a8:96:ab:7b:6d:09:ce:fe:0b:89: 73:9c:2a:b4:ee:b7:5f:fe:20:c2:ef:ec:99:b8:2d: f3:ad:80:11:7b:78:00:ac:07:05:9d:24:c5:7f:c9: f7:e3:8b:6a:0c:25:89:30:e9:20:8c:4f:61:2c:ec: 04:0f:7a:9d:cc:aa:43:87:88:6a:48:32:13:ce:d6: 7f:07:db:4b:4d:7a:8b:86:c5:b6:70:53:2b:3b:f3: 35:fd:81:f1:af:57:47:c8:76:a8:1c:20:42:1a:32: ce:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:DC:FA:20:22:DE:FB:82:20:E5:BE:01:AF:B8:D6:18:52:A4:26:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bbd9a2c7-290e-3067-9670-5641ca897df3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 192.22.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:a4:66:1c:53:6a:c7:fb:e9:a1:9a:a2:a1:ee:66:2a:a1:f6: 03:2f:58:5e:f0:d8:77:96:67:4a:30:7e:15:ab:80:26:b1:8a: cd:d9:b8:bf:77:2f:22:76:44:1d:38:77:af:86:94:a4:34:d2: bc:bf:bc:27:7b:4b:e3:19:d6:d5:fd:98:0a:83:91:7f:d2:bb: 95:99:79:ea:a2:65:07:9e:86:7f:fc:2c:63:3c:65:a0:9d:6b: 3d:9e:99:9a:f8:9e:0e:b4:9c:64:fa:48:99:fd:9e:d9:e7:c0: 61:1a:5b:c6:17:2c:c6:c5:7b:f6:d3:fd:7f:c3:8e:b3:fc:7f: ed:c9:7e:a1:e6:1e:74:b6:5f:2d:13:5f:50:71:5a:87:19:5e: b9:87:49:a4:96:68:94:23:4b:98:ee:cc:76:c5:8a:d9:70:5e: 3e:25:1c:05:21:88:d9:a7:84:e5:7e:5b:14:75:7a:19:bc:72: ce:69:f8:46:65:b5:10:2a:85:ff:31:2c:a1:3d:df:e6:8d:fb: cb:cf:ef:bb:1e:93:d0:97:97:df:d8:ff:ab:8b:02:5f:a2:d0: 3b:cc:9b:62:85:12:de:f4:15:51:f3:26:37:3d:df:37:30:1d: ca:b0:0b:3d:11:90:28:6f:7a:42:7d:30:85:6f:ec:42:b8:b6: 90:88:4a:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE56ZNutr9G4169JJMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcxMjIxMDAxM1oXDTI2MTAxMDIxMDAxM1owLzEtMCsGA1UEAxMk MGRhOTdjZTItNTJmZS00NjljLTk0NDYtNmFjZDg4OTlkM2M1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+pN5T/fZ5PTtpUYfZPQ3nhkcsXpYFMCr/ze f9FcU5WIlWLOLwTN3sxYcZI6a4BTMKG2uj6Ea3Z+ObMUkN/93u3tgcHnXsFpdzQM yoq2wxIRLJ3/7r+T/oN5ox5HR89pLT5eQPvcegR3uO81MVySAZr5Xnv+rvQtF6H0 STDWU+zXysmwcwDyqkjearNxqfP54QMRWW9k+xk93qiWq3ttCc7+C4lznCq07rdf /iDC7+yZuC3zrYARe3gArAcFnSTFf8n344tqDCWJMOkgjE9hLOwED3qdzKpDh4hq SDITztZ/B9tLTXqLhsW2cFMrO/M1/YHxr1dHyHaoHCBCGjLONQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNfc+iAi3vuCIOW+Aa+41hhSpCZwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYmJkOWEyYzctMjkwZS0z MDY3LTk2NzAtNTY0MWNhODk3ZGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwBaqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACekZhxTasf76aGaoqHuZiqh9gMvWF7w2HeWZ0owfhWrgCaxis3ZuL93 LyJ2RB04d6+GlKQ00ry/vCd7S+MZ1tX9mAqDkX/Su5WZeeqiZQeehn/8LGM8ZaCd az2emZr4ng60nGT6SJn9ntnnwGEaW8YXLMbFe/bT/X/DjrP8f+3JfqHmHnS2Xy0T X1BxWocZXrmHSaSWaJQjS5juzHbFitlwXj4lHAUhiNmnhOV+WxR1ehm8cs5p+EZl tRAqhf8xLKE93+aN+8vP77sek9CXl9/Y/6uLAl+i0DvMm2KFEt70FVHzJjc93zcw HcqwCz0RkChvekJ9MIVv7EK4tpCISps= -----END CERTIFICATE-----Generated at Mon Jul 13 02:47:45 2026 by rpki-client