$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/77ce02b0-966a-3653-a9cc-0eba28c7c8e5.roa File: 77ce02b0-966a-3653-a9cc-0eba28c7c8e5.roa (raw, json) Hash identifier: AMSlcPDFKgvSN9eXA53WFFdF5C8r6cAmJ1ATckMw28c= Subject key identifier: B9:A3:B4:77:4E:11:6D:9B:C6:15:50:96:BE:ED:68:B8:5E:0B:89:DC Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D8AC531584B39B3E813689A20 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/77ce02b0-966a-3653-a9cc-0eba28c7c8e5.roa Signing time: Sat 18 Apr 2026 01:00:24 +0000 ROA not before: Sat 18 Apr 2026 01:00:24 +0000 ROA not after: Fri 17 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 192.29.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8a:c5:31:58:4b:39:b3:e8:13:68:9a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 18 01:00:24 2026 GMT Not After : Jul 17 01:00:24 2026 GMT Subject: CN=fe58ecd1-8a5c-4360-9495-12078c2fb6c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:15:fa:95:f4:52:e7:4f:76:84:c5:af:cc:81: 7a:11:b2:55:16:b5:29:dd:4e:8b:95:39:9b:b9:f5: ce:35:36:66:5f:12:33:c9:b3:26:95:bb:f0:dd:a5: a9:ac:02:2b:2b:35:19:86:8f:b6:23:ba:a0:49:c7: 56:d4:6c:2d:97:8a:02:18:68:01:e0:53:09:a5:d9: 52:28:be:88:cf:fe:03:68:6e:46:93:79:ed:65:19: 4f:03:4f:a9:63:92:8b:3f:15:08:28:8c:00:f2:5b: 03:c6:55:fe:c9:8b:c5:91:13:1a:eb:18:34:e3:d8: 20:8f:d4:b3:46:31:23:7b:f8:6f:d8:67:42:04:ec: 38:60:45:ae:f4:eb:96:ba:7d:98:81:23:20:ac:f3: 10:63:28:fa:7d:b4:d2:19:f4:1f:d2:b0:12:a8:9a: 11:ee:d4:f1:5e:dd:14:67:26:41:8d:92:19:f3:03: 8a:a0:1c:4a:43:78:06:d4:1e:7f:8f:a2:56:ad:d9: fc:9a:60:f6:3b:7b:08:84:74:07:89:73:26:3f:45: f3:f6:9a:3a:76:d2:ab:92:ea:eb:f1:a6:0d:80:19: dd:87:61:79:f4:e1:22:2a:73:b9:18:38:b3:c4:bf: 9a:5c:ab:5b:66:71:e4:ba:55:97:38:19:dc:80:9a: 86:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:A3:B4:77:4E:11:6D:9B:C6:15:50:96:BE:ED:68:B8:5E:0B:89:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/77ce02b0-966a-3653-a9cc-0eba28c7c8e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 192.29.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:09:54:56:43:f9:7c:5e:96:9e:47:20:91:24:fd:25:a0:0e: 79:52:af:d7:c9:22:5f:dd:1d:7c:62:85:d5:3e:3f:f6:d8:5d: 09:e6:c0:ca:85:01:6c:54:63:fa:86:24:01:cb:0e:5f:18:19: ef:86:ee:b4:3d:f6:9d:40:d3:89:ed:b6:9c:aa:12:f9:75:7c: 59:cf:1d:33:1a:7a:9f:0d:1d:3f:29:1a:41:85:d9:c1:95:2d: 31:ab:a5:fa:8c:2f:37:25:53:53:2d:7d:20:ef:dc:77:41:9d: 21:02:19:34:d7:f2:ca:b9:27:f4:65:de:23:6c:43:d8:19:61: 75:3c:e0:f6:da:3e:df:95:8e:5f:33:15:7b:30:3d:e6:87:6e: 5c:31:fc:d2:53:28:6f:ef:d1:da:29:c2:05:25:3a:b4:4d:33: 83:22:a3:19:2d:fd:7d:de:41:3f:09:8d:66:e7:6f:cd:73:7e: dc:74:bc:c6:5e:02:74:53:51:81:23:9d:b6:28:73:9e:16:b9: ca:bf:15:7a:47:a9:57:95:54:c6:d4:d7:80:95:2e:35:98:f3: 92:e8:69:71:96:ad:f8:51:d1:ca:6d:fc:b5:09:7a:9f:6f:04: 3d:a7:28:dd:d1:81:f4:a6:14:28:f7:f0:cc:df:74:3e:ab:31: 9a:33:cb:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2KxTFYSzmz6BNomiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxODAxMDAyNFoXDTI2MDcxNzAxMDAyNFowLzEtMCsGA1UEAxMk ZmU1OGVjZDEtOGE1Yy00MzYwLTk0OTUtMTIwNzhjMmZiNmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhX6lfRS5092hMWvzIF6EbJVFrUp3U6LlTmb ufXONTZmXxIzybMmlbvw3aWprAIrKzUZho+2I7qgScdW1Gwtl4oCGGgB4FMJpdlS KL6Iz/4DaG5Gk3ntZRlPA0+pY5KLPxUIKIwA8lsDxlX+yYvFkRMa6xg049ggj9Sz RjEje/hv2GdCBOw4YEWu9OuWun2YgSMgrPMQYyj6fbTSGfQf0rASqJoR7tTxXt0U ZyZBjZIZ8wOKoBxKQ3gG1B5/j6JWrdn8mmD2O3sIhHQHiXMmP0Xz9po6dtKrkurr 8aYNgBndh2F59OEiKnO5GDizxL+aXKtbZnHkulWXOBncgJqGswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLmjtHdOEW2bxhVQlr7taLheC4ncMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNzdjZTAyYjAtOTY2YS0z NjUzLWE5Y2MtMGViYTI4YzdjOGU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwB04MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHcJVFZD+Xxelp5HIJEk/SWgDnlSr9fJIl/dHXxihdU+P/bYXQnmwMqF AWxUY/qGJAHLDl8YGe+G7rQ99p1A04nttpyqEvl1fFnPHTMaep8NHT8pGkGF2cGV LTGrpfqMLzclU1MtfSDv3HdBnSECGTTX8sq5J/Rl3iNsQ9gZYXU84PbaPt+Vjl8z FXswPeaHblwx/NJTKG/v0dopwgUlOrRNM4Mioxkt/X3eQT8JjWbnb81zftx0vMZe AnRTUYEjnbYoc54Wucq/FXpHqVeVVMbU14CVLjWY85LoaXGWrfhR0cpt/LUJep9v BD2nKN3RgfSmFCj38MzfdD6rMZozyz0= -----END CERTIFICATE-----Generated at Sat Apr 18 03:59:38 2026 by rpki-client