$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f2014323-deb1-36cf-bef2-39124ace9056.roa File: f2014323-deb1-36cf-bef2-39124ace9056.roa (raw, json) Hash identifier: LZPe5JZP/V0AiyB8R+6RTJcp942UcmsJ7MORsJWIVWk= Subject key identifier: 8F:A4:E6:58:4A:09:9B:3B:A4:3F:BC:A2:B5:C2:F7:EA:DF:14:F1:57 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E6B0A0B700EB0865DE3171860 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f2014323-deb1-36cf-bef2-39124ace9056.roa Signing time: Tue 07 Jul 2026 09:00:12 +0000 ROA not before: Tue 07 Jul 2026 09:00:12 +0000 ROA not after: Mon 05 Oct 2026 09:00:12 +0000 asID: 31898 IP address blocks: 192.29.176.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6b:0a:0b:70:0e:b0:86:5d:e3:17:18:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 7 09:00:12 2026 GMT Not After : Oct 5 09:00:12 2026 GMT Subject: CN=f099c304-6edf-4aa2-8d5c-85e9628a072e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:04:91:42:1e:6f:a6:20:93:83:14:35:c4:cc: 3e:d1:f6:2e:2d:07:09:1e:01:ca:04:e1:ab:8f:ca: ce:cc:eb:d1:05:ed:58:f9:76:8b:89:ad:97:6a:5a: 12:66:22:d7:ad:1b:ff:c1:ab:65:19:85:40:65:46: 9c:5c:5d:94:3e:58:67:fd:0d:af:68:f6:e4:0d:0f: 81:06:cd:e4:84:39:c3:12:50:85:46:c6:4a:9b:13: 82:77:d7:c7:32:03:8e:aa:57:22:f6:3b:dd:9a:e4: 80:92:c2:19:a2:57:87:0c:e9:55:39:34:14:2c:43: 97:42:52:7a:85:14:cc:3c:c5:b7:b7:79:2d:5a:38: e1:ad:28:dd:c6:1e:a3:4b:23:36:d3:5e:01:69:91: b8:05:e9:8c:e3:08:d1:2f:16:32:6f:fd:30:a1:87: 46:31:59:f1:23:18:fa:87:a8:9e:2e:7c:0c:ea:f0: 12:bf:45:88:d7:d9:6d:c9:ab:3d:d2:d3:b7:27:d0: bb:29:70:5c:0e:9f:72:41:c5:c6:f8:ce:00:b3:f8: 7d:68:e5:14:04:24:5c:0c:c3:b7:17:fe:6a:ce:69: 85:d4:59:01:38:18:82:61:6f:7e:ee:cb:72:35:fe: e2:b2:04:db:bc:c8:f1:ca:ea:7c:44:40:b3:b8:41: 12:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:A4:E6:58:4A:09:9B:3B:A4:3F:BC:A2:B5:C2:F7:EA:DF:14:F1:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f2014323-deb1-36cf-bef2-39124ace9056.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 192.29.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:18:16:a7:d1:a3:9f:d8:55:85:18:cd:f1:a9:4a:dc:3d:7a: 95:65:96:4b:24:e8:4b:61:d7:ef:dc:0d:8e:d0:68:f4:42:07: 08:dc:5b:67:19:70:5e:44:c8:1b:09:45:8c:1a:79:49:ab:cc: 63:0a:d2:56:07:99:7f:d3:57:bc:3e:6f:57:d7:bc:ff:bc:71: 2a:88:6c:16:dd:99:bc:7a:3a:35:11:04:e8:2b:1c:65:75:c4: 0d:cd:47:55:28:6f:4e:61:7f:70:8e:cc:52:26:85:87:3e:76: 8d:bb:3f:11:69:b7:0c:ef:e1:a1:e8:42:34:88:9b:5a:60:ea: 30:39:11:c6:a7:57:e2:6d:6b:0e:4e:2f:4e:c8:b3:6a:42:ef: 1d:e2:f2:91:ed:7c:79:86:58:36:50:2f:c6:8a:9f:ec:be:cb: 9d:ad:cb:12:f6:33:0c:46:4d:8a:99:de:60:4a:13:7d:37:19: e0:44:ce:9c:6c:23:16:13:b1:d1:b1:e2:31:49:0e:7e:c4:23: 0f:4e:a5:09:b8:5a:8e:28:1d:9c:33:a9:b8:23:b9:31:25:7d: 17:7a:e1:ab:80:42:c3:d9:81:e3:22:c7:e7:5e:92:ff:0e:2f: a9:b7:cc:ae:3c:60:f9:7c:5c:f2:a5:b9:35:2a:2c:e1:50:e4: f9:9d:73:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5rCgtwDrCGXeMXGGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcwNzA5MDAxMloXDTI2MTAwNTA5MDAxMlowLzEtMCsGA1UEAxMk ZjA5OWMzMDQtNmVkZi00YWEyLThkNWMtODVlOTYyOGEwNzJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQSRQh5vpiCTgxQ1xMw+0fYuLQcJHgHKBOGr j8rOzOvRBe1Y+XaLia2XaloSZiLXrRv/watlGYVAZUacXF2UPlhn/Q2vaPbkDQ+B Bs3khDnDElCFRsZKmxOCd9fHMgOOqlci9jvdmuSAksIZoleHDOlVOTQULEOXQlJ6 hRTMPMW3t3ktWjjhrSjdxh6jSyM2014BaZG4BemM4wjRLxYyb/0woYdGMVnxIxj6 h6ieLnwM6vASv0WI19ltyas90tO3J9C7KXBcDp9yQcXG+M4As/h9aOUUBCRcDMO3 F/5qzmmF1FkBOBiCYW9+7styNf7isgTbvMjxyup8RECzuEESlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI+k5lhKCZs7pD+8orXC9+rfFPFXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZjIwMTQzMjMtZGViMS0z NmNmLWJlZjItMzkxMjRhY2U5MDU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwB2wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACoYFqfRo5/YVYUYzfGpStw9epVllksk6Eth1+/cDY7QaPRCBwjcW2cZ cF5EyBsJRYwaeUmrzGMK0lYHmX/TV7w+b1fXvP+8cSqIbBbdmbx6OjURBOgrHGV1 xA3NR1Uob05hf3COzFImhYc+do27PxFptwzv4aHoQjSIm1pg6jA5EcanV+Jtaw5O L07Is2pC7x3i8pHtfHmGWDZQL8aKn+y+y52tyxL2MwxGTYqZ3mBKE303GeBEzpxs IxYTsdGx4jFJDn7EIw9OpQm4Wo4oHZwzqbgjuTElfRd64auAQsPZgeMix+dekv8O L6m3zK48YPl8XPKluTUqLOFQ5PmdcxQ= -----END CERTIFICATE-----Generated at Mon Jul 13 02:49:37 2026 by rpki-client