$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f118373f-fb93-35dc-9237-3c8b49c7e456.roa File: f118373f-fb93-35dc-9237-3c8b49c7e456.roa (raw, json) Hash identifier: V8OtDtioRhg0GG5kG90EPVFqO4zn9R/S5MeKdSpPclI= Subject key identifier: 95:F4:8F:B6:AD:04:F6:91:EF:C4:D9:13:86:D6:B7:70:72:FD:0C:87 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E6F3EC484B25492821E0B0680 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f118373f-fb93-35dc-9237-3c8b49c7e456.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 31898 IP address blocks: 192.29.0.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3e:c4:84:b2:54:92:82:1e:0b:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=845430e4-de7f-4af8-9bce-968a5a49e60e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ea:06:88:f9:2b:07:1a:44:14:50:6d:ee:ed: fb:e3:77:72:11:7e:58:32:06:4a:9c:95:21:e0:13: bd:0e:f8:f1:ca:f8:5b:45:79:13:66:68:68:4e:69: 6b:22:04:f6:cc:4c:f7:cf:91:2f:4e:c7:f8:78:f6: 4b:a8:a5:84:e0:8d:42:e1:ac:96:20:a7:e6:84:91: 43:5f:ae:53:ac:b8:5c:30:95:d1:ca:f9:bf:1a:db: 71:fb:04:58:b2:9f:82:d2:c1:79:ea:d2:a9:d0:87: d9:ca:4e:18:20:a9:ed:f0:e4:6f:97:6a:4e:24:7b: 8e:fb:83:40:7b:1b:6c:4c:1f:e2:74:4a:8f:e1:a8: c7:d4:fe:04:99:99:a9:17:c6:63:a1:da:86:91:2c: 8e:3a:19:34:3d:06:f9:e3:2f:29:d3:47:30:71:05: 11:c1:01:a9:59:a9:11:ca:25:29:03:9f:be:4e:1c: 17:9c:14:1f:0d:ac:8e:57:61:fc:a1:63:0b:75:e4: 7e:fb:cd:a3:72:91:9e:23:4e:b9:11:07:c1:6b:06: 88:d7:79:ca:13:1b:55:75:94:96:c4:74:31:f2:15: b4:e0:ed:69:a0:c2:36:a4:58:56:eb:25:f5:bb:b8: c7:8b:69:0a:9a:a6:a3:8a:92:91:c1:c6:6c:60:ab: 2d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:F4:8F:B6:AD:04:F6:91:EF:C4:D9:13:86:D6:B7:70:72:FD:0C:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f118373f-fb93-35dc-9237-3c8b49c7e456.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 192.29.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:17:7b:d2:8d:24:4c:9e:1c:8f:88:ce:d0:ad:7c:d3:39:4f: 73:5d:c7:79:b8:7b:96:f6:b3:e8:82:24:da:28:74:89:a0:ed: 4a:e3:9a:bd:20:13:e2:b0:bb:b4:bc:75:ac:ae:61:44:59:28: f3:34:14:89:4d:46:48:34:cc:a9:b4:d4:43:63:d4:49:a0:9b: 1f:20:80:ea:ae:e3:3e:9d:92:e1:f8:83:4f:83:d7:b9:99:aa: 1e:c0:73:35:6a:d5:62:fe:18:cc:e0:53:a8:1a:05:d7:82:c7: e1:d2:d4:1c:77:02:f0:fb:98:c7:61:6a:18:dc:d5:64:bc:06: da:13:ce:d5:f3:e9:25:a6:e4:10:62:67:0f:7d:40:15:2f:74: 46:88:cd:b7:fa:76:ef:1b:88:84:72:d9:40:45:e0:89:74:e0: 59:08:08:35:63:fc:3a:af:78:57:c6:70:84:72:1d:6c:da:4a: bd:d8:3b:ec:4a:d3:73:4e:79:bf:85:8b:36:27:ed:a9:25:f1: 4d:25:68:83:73:a0:de:78:8a:d0:a3:9b:73:3f:71:2f:30:e9: 17:3e:28:52:dd:02:e6:0b:ae:76:ed:43:47:c1:2c:d9:41:2e: 1c:f7:a7:11:a4:79:fe:6a:00:0b:0b:41:e3:52:fc:d3:97:24: 72:99:3e:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vPsSEslSSgh4LBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk ODQ1NDMwZTQtZGU3Zi00YWY4LTliY2UtOTY4YTVhNDllNjBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuoGiPkrBxpEFFBt7u3743dyEX5YMgZKnJUh 4BO9DvjxyvhbRXkTZmhoTmlrIgT2zEz3z5EvTsf4ePZLqKWE4I1C4ayWIKfmhJFD X65TrLhcMJXRyvm/Gttx+wRYsp+C0sF56tKp0IfZyk4YIKnt8ORvl2pOJHuO+4NA extsTB/idEqP4ajH1P4EmZmpF8ZjodqGkSyOOhk0PQb54y8p00cwcQURwQGpWakR yiUpA5++ThwXnBQfDayOV2H8oWMLdeR++82jcpGeI065EQfBawaI13nKExtVdZSW xHQx8hW04O1poMI2pFhW6yX1u7jHi2kKmqajipKRwcZsYKstXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJX0j7atBPaR78TZE4bWt3By/QyHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZjExODM3M2YtZmI5My0z NWRjLTkyMzctM2M4YjQ5YzdlNDU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwB0AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF8Xe9KNJEyeHI+IztCtfNM5T3Ndx3m4e5b2s+iCJNoodImg7Urjmr0g E+Kwu7S8dayuYURZKPM0FIlNRkg0zKm01ENj1Emgmx8ggOqu4z6dkuH4g0+D17mZ qh7AczVq1WL+GMzgU6gaBdeCx+HS1Bx3AvD7mMdhahjc1WS8BtoTztXz6SWm5BBi Zw99QBUvdEaIzbf6du8biIRy2UBF4Il04FkICDVj/DqveFfGcIRyHWzaSr3YO+xK 03NOeb+FizYn7akl8U0laINzoN54itCjm3M/cS8w6Rc+KFLdAuYLrnbtQ0fBLNlB Lhz3pxGkef5qAAsLQeNS/NOXJHKZPjE= -----END CERTIFICATE-----Generated at Mon Jul 13 02:47:44 2026 by rpki-client