$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/98efd88e-3af2-3b23-a3ce-7ea94468e7ac.roa File: 98efd88e-3af2-3b23-a3ce-7ea94468e7ac.roa (raw, json) Hash identifier: 7f5ZXb72shAKaNoEmd0Oha0cWz4fOdD4wkYZ7raW3ao= Subject key identifier: 7F:AA:50:00:32:0A:BB:2C:5D:F6:7F:9C:BD:03:6C:74:A1:49:8B:0A Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F119CE8332F9198CE5CB4F000 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/98efd88e-3af2-3b23-a3ce-7ea94468e7ac.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 192.29.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9c:e8:33:2f:91:98:ce:5c:b4:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=d2065a6b-a0cb-4d28-85c1-a7f4510ca9d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:cc:b9:9e:39:67:d9:0b:7f:25:49:5b:0c:4f: b8:fb:87:97:27:1d:9e:f6:cb:5a:71:b2:3c:ca:46: d7:84:ae:33:17:87:0c:d8:c4:12:a1:1e:d1:8a:61: e2:6a:f9:e9:08:c4:3f:ee:26:30:29:22:e4:65:18: 81:34:f9:e8:2b:a5:39:b5:da:16:61:ba:74:b2:41: be:17:1c:84:e5:81:36:2f:ab:3e:4f:9b:cd:d1:6f: bd:87:db:a5:3e:e8:7d:e7:c9:1e:ee:eb:46:ef:3c: a5:21:8b:ee:a2:e4:26:b2:ff:7b:24:da:34:2f:7a: 25:5d:ee:79:3c:ff:15:57:4a:30:1e:41:8e:5b:77: 5f:03:53:c6:82:a0:3a:d0:23:6d:42:92:a4:44:1f: d6:9b:8d:84:b2:02:35:de:cf:12:b5:2c:11:4e:c6: 2c:37:18:0f:ee:3b:e6:d5:79:ef:e9:59:44:18:36: 85:8c:69:72:fe:01:9a:5b:a6:27:25:cf:ea:4f:66: 98:d5:6e:57:5d:81:83:0e:7d:c8:bd:36:98:e5:8d: a7:23:3d:b6:99:24:dd:28:92:f0:52:1b:09:17:b7: 7e:68:bb:95:a4:74:9e:d8:28:c3:75:da:69:8a:12: d5:ba:0a:88:04:8f:76:fa:69:81:ce:c1:c8:e2:32: c9:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:AA:50:00:32:0A:BB:2C:5D:F6:7F:9C:BD:03:6C:74:A1:49:8B:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/98efd88e-3af2-3b23-a3ce-7ea94468e7ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 192.29.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:53:d5:44:d1:26:07:5b:c9:04:63:d8:cc:7e:44:d0:9a:60: ee:e5:9a:67:6c:a4:cc:2a:f6:86:26:e3:31:63:12:84:76:67: ae:47:69:9e:91:fc:6a:e2:3d:d5:2f:57:93:c2:48:fc:07:82: 0f:75:63:06:d0:d5:78:f1:46:66:e8:12:8a:fc:11:7a:2b:57: 51:b4:a4:95:dd:94:08:87:2a:d8:24:73:c6:f9:76:39:6d:74: 41:da:c3:a6:d2:c8:1a:5b:6b:5f:f4:01:bc:43:83:12:dc:c7: 1b:e7:a6:79:9b:63:fe:ef:52:9b:5e:b2:36:d4:a6:67:f3:b3: c6:1c:e8:51:96:b7:d1:15:ba:2c:57:12:4d:cf:7e:09:08:24: 01:12:f7:55:ce:6a:00:1a:78:f1:54:19:f4:0c:6e:0a:0e:56: 4a:c9:5b:e5:98:e8:c0:42:af:0f:24:5d:fb:09:12:72:bc:a8: 20:16:35:e7:e0:e4:93:b1:99:07:d5:4e:cd:2c:e2:a3:72:d4: 72:22:70:21:ee:87:48:92:b3:5a:49:63:0d:8e:b3:7d:d3:77: 96:68:73:4a:31:e8:86:50:72:e9:90:d2:2e:f6:37:4b:ed:45: 77:1d:3e:58:ae:0f:9c:c1:83:60:00:0e:ad:ed:e1:0d:42:c1: 66:d5:30:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnOgzL5GYzly08AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDIwNjVhNmItYTBjYi00ZDI4LTg1YzEtYTdmNDUxMGNhOWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMy5njln2Qt/JUlbDE+4+4eXJx2e9stacbI8 ykbXhK4zF4cM2MQSoR7RimHiavnpCMQ/7iYwKSLkZRiBNPnoK6U5tdoWYbp0skG+ FxyE5YE2L6s+T5vN0W+9h9ulPuh958ke7utG7zylIYvuouQmsv97JNo0L3olXe55 PP8VV0owHkGOW3dfA1PGgqA60CNtQpKkRB/Wm42EsgI13s8StSwRTsYsNxgP7jvm 1Xnv6VlEGDaFjGly/gGaW6YnJc/qT2aY1W5XXYGDDn3IvTaY5Y2nIz22mSTdKJLw UhsJF7d+aLuVpHSe2CjDddppihLVugqIBI92+mmBzsHI4jLJHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH+qUAAyCrssXfZ/nL0DbHShSYsKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOThlZmQ4OGUtM2FmMi0z YjIzLWEzY2UtN2VhOTQ0NjhlN2FjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwB0MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHxT1UTRJgdbyQRj2Mx+RNCaYO7lmmdspMwq9oYm4zFjEoR2Z65HaZ6R /GriPdUvV5PCSPwHgg91YwbQ1XjxRmboEor8EXorV1G0pJXdlAiHKtgkc8b5djlt dEHaw6bSyBpba1/0AbxDgxLcxxvnpnmbY/7vUptesjbUpmfzs8Yc6FGWt9EVuixX Ek3PfgkIJAES91XOagAaePFUGfQMbgoOVkrJW+WY6MBCrw8kXfsJEnK8qCAWNefg 5JOxmQfVTs0s4qNy1HIicCHuh0iSs1pJYw2Os33Td5Zoc0ox6IZQcumQ0i72N0vt RXcdPliuD5zBg2AADq3t4Q1CwWbVMAk= -----END CERTIFICATE-----Generated at Thu Sep 24 06:33:26 2026 by rpki-client