$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d19de443-0263-3cae-8927-8346e9fcc7e0.roa File: d19de443-0263-3cae-8927-8346e9fcc7e0.roa (raw, json) Hash identifier: 0ftPGPbkt0iFHABfG9Me1rOsQ7WQcas807YNqs8JVpY= Subject key identifier: 2C:25:59:46:55:57:8B:08:05:88:60:23:0D:E0:C3:49:6B:D1:A4:89 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E84B7F217C415C3D0F20D7580 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d19de443-0263-3cae-8927-8346e9fcc7e0.roa Signing time: Thu 16 Jul 2026 13:45:51 +0000 ROA not before: Thu 16 Jul 2026 13:45:51 +0000 ROA not after: Wed 14 Oct 2026 13:45:51 +0000 asID: 2763 IP address blocks: 160.34.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:84:b7:f2:17:c4:15:c3:d0:f2:0d:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 16 13:45:51 2026 GMT Not After : Oct 14 13:45:51 2026 GMT Subject: CN=1fb9526b-44a6-4f6a-90ac-49e2087c9b15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:4c:59:81:7b:74:04:44:c6:a0:fe:89:ce:76: 76:d8:47:fb:5f:8f:e9:79:24:a0:2e:bc:af:fb:be: 89:a2:f3:4f:13:30:6a:57:d6:6a:b3:e5:5c:00:24: 5b:59:43:9d:10:ea:3f:67:77:82:75:7b:0a:ca:72: 0e:94:16:bb:a9:12:ce:e9:e5:ef:3c:d5:6f:d9:a9: 27:95:e9:1d:f5:fb:4a:4c:4c:29:9e:ce:8b:87:0f: 39:5f:18:a5:a1:f6:60:aa:22:b3:a1:95:eb:5d:27: ed:17:bf:0f:3a:a2:81:51:37:1f:57:f6:ba:be:2b: c8:3a:8c:0d:b0:ec:a4:30:e1:29:04:97:69:26:ff: f2:c2:f1:52:37:57:83:05:d9:06:14:a5:e2:78:0e: a0:86:36:f7:b8:57:37:98:bb:50:04:ac:a1:fd:7a: 06:14:b1:a7:72:f2:c1:b2:95:f4:20:55:d8:8a:46: 8c:b2:cb:44:70:06:b3:65:07:3c:63:f6:04:24:81: c9:79:0b:59:c0:04:1c:5e:19:7e:a5:00:46:95:e9: 31:3d:59:30:76:cc:c6:e5:c0:21:ef:78:fe:ce:4b: 6c:61:a6:52:ca:a9:89:e3:31:de:5b:8b:7a:c9:c8: 19:fa:ae:5b:45:25:10:0c:ff:5f:05:25:bd:71:81: 1a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:25:59:46:55:57:8B:08:05:88:60:23:0D:E0:C3:49:6B:D1:A4:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d19de443-0263-3cae-8927-8346e9fcc7e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 160.34.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:22:22:c8:32:68:5d:4f:65:cf:0a:c9:5b:18:33:30:8a:32: 1b:2a:41:2f:55:6e:dc:73:d3:ad:88:7f:a4:4f:ce:93:97:d6: 13:ac:0e:72:9a:22:47:2f:b7:ea:2d:c6:90:62:75:cd:14:10: d8:ac:c9:c0:90:3c:a9:22:49:a7:50:08:a5:75:86:ef:11:b2: 27:5f:9f:b0:58:12:42:ad:33:13:d0:fb:0a:bb:88:44:79:e0: f7:88:f1:94:2b:ff:c5:fe:44:6c:3f:27:19:58:13:97:01:d6: b9:5f:66:53:fc:65:9d:73:56:1e:43:7c:3b:c2:7e:11:8a:69: 04:20:cf:03:4a:f5:bd:f0:ee:23:94:d7:bc:8a:d7:d5:80:8a: bb:24:8f:78:68:a8:5d:a4:f9:6e:a6:29:ce:8c:99:5b:07:8f: 45:36:e5:9a:cc:fb:53:40:5a:b7:34:ba:e3:a4:c7:7b:88:16: e6:b8:b7:84:6a:93:14:a9:02:52:7c:14:ab:27:05:39:46:db: 90:4a:6a:0f:03:9c:a3:1b:ad:4b:d8:59:72:de:60:c1:66:59: e2:09:36:88:37:c7:47:51:8c:ff:89:9c:11:b5:6d:5d:8e:b8: 7f:1e:77:d5:de:80:2d:7f:ad:30:2c:9f:7a:7b:1b:14:18:89: d5:e0:01:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6Et/IXxBXD0PINdYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcxNjEzNDU1MVoXDTI2MTAxNDEzNDU1MVowLzEtMCsGA1UEAxMk MWZiOTUyNmItNDRhNi00ZjZhLTkwYWMtNDllMjA4N2M5YjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUxZgXt0BETGoP6JznZ22Ef7X4/peSSgLryv +76JovNPEzBqV9Zqs+VcACRbWUOdEOo/Z3eCdXsKynIOlBa7qRLO6eXvPNVv2akn lekd9ftKTEwpns6Lhw85XxilofZgqiKzoZXrXSftF78POqKBUTcfV/a6vivIOowN sOykMOEpBJdpJv/ywvFSN1eDBdkGFKXieA6ghjb3uFc3mLtQBKyh/XoGFLGncvLB spX0IFXYikaMsstEcAazZQc8Y/YEJIHJeQtZwAQcXhl+pQBGlekxPVkwdszG5cAh 73j+zktsYaZSyqmJ4zHeW4t6ycgZ+q5bRSUQDP9fBSW9cYEawQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCwlWUZVV4sIBYhgIw3gw0lr0aSJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZDE5ZGU0NDMtMDI2My0z Y2FlLTg5MjctODM0NmU5ZmNjN2UwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoCJ6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGsiIsgyaF1PZc8KyVsYMzCKMhsqQS9Vbtxz062If6RPzpOX1hOsDnKa Ikcvt+otxpBidc0UENisycCQPKkiSadQCKV1hu8Rsidfn7BYEkKtMxPQ+wq7iER5 4PeI8ZQr/8X+RGw/JxlYE5cB1rlfZlP8ZZ1zVh5DfDvCfhGKaQQgzwNK9b3w7iOU 17yK19WAirskj3hoqF2k+W6mKc6MmVsHj0U25ZrM+1NAWrc0uuOkx3uIFua4t4Rq kxSpAlJ8FKsnBTlG25BKag8DnKMbrUvYWXLeYMFmWeIJNog3x0dRjP+JnBG1bV2O uH8ed9XegC1/rTAsn3p7GxQYidXgASc= -----END CERTIFICATE-----Generated at Wed Jul 22 02:32:36 2026 by rpki-client