$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bbd9a2c7-290e-3067-9670-5641ca897df3.roa File: bbd9a2c7-290e-3067-9670-5641ca897df3.roa (raw, json) Hash identifier: K63z/5HAqYukGQUrZBolwWY7N7bne9o6pCcSqksCno8= Subject key identifier: 23:1C:84:69:F4:D4:C9:D3:3A:42:7C:08:45:DB:D3:C4:4E:FD:1B:58 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F1CC7A568DF43CD4C3C2A2EC0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bbd9a2c7-290e-3067-9670-5641ca897df3.roa Signing time: Wed 09 Sep 2026 01:00:11 +0000 ROA not before: Wed 09 Sep 2026 01:00:11 +0000 ROA not after: Tue 08 Dec 2026 02:00:11 +0000 asID: 31898 IP address blocks: 192.22.170.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1c:c7:a5:68:df:43:cd:4c:3c:2a:2e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 9 01:00:11 2026 GMT Not After : Dec 8 02:00:11 2026 GMT Subject: CN=50d7221d-e40c-4318-90b7-4461af84be3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:15:1e:d3:37:4c:da:12:aa:3e:62:cd:4d:c0: 74:85:7a:7f:af:aa:ef:51:fa:b9:73:ca:81:23:02: ff:5e:44:8b:8e:4d:e1:c8:85:df:0f:f5:f6:83:2e: a6:bc:a5:ee:1b:34:b1:44:84:01:4d:73:73:f1:74: e6:a4:3e:ba:7e:39:af:b5:1a:84:d3:08:06:ad:84: 69:80:10:7a:fd:72:a4:f4:00:d4:43:49:22:18:5f: 93:71:82:8e:bb:66:63:b2:d0:49:ff:af:45:12:dd: be:02:30:b4:46:c5:59:c5:69:ce:5f:03:16:d6:1f: 69:2c:29:b8:e9:e9:38:e2:02:1d:72:36:ae:bb:fa: d6:e9:c7:56:d7:92:67:92:1c:0b:56:ee:26:ad:b6: a7:27:b6:22:a2:3a:bf:c6:af:09:87:ff:e7:7d:d8: 5b:30:6f:33:ce:8a:fd:f6:58:89:42:93:a9:00:b3: 0a:26:36:7b:6a:8b:58:46:3f:9d:31:e5:fc:ef:96: ed:af:86:45:ad:ab:16:83:5d:18:10:42:c2:4b:98: dc:38:9d:ca:10:27:63:e2:8d:0c:73:46:63:9b:2b: 88:ec:05:ed:ef:a0:10:90:2a:d7:f4:22:c6:64:cb: dc:5b:f4:61:c0:c3:2f:b3:78:d0:dc:b3:f9:50:8c: 78:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:1C:84:69:F4:D4:C9:D3:3A:42:7C:08:45:DB:D3:C4:4E:FD:1B:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bbd9a2c7-290e-3067-9670-5641ca897df3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 192.22.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:c4:e7:fa:9b:34:c5:6b:1a:05:eb:b4:3e:8b:b9:dc:ad:26: 21:8f:7c:e3:35:32:dd:fc:fb:47:ef:b1:88:b8:72:fa:2a:ea: a2:f2:16:dd:29:6e:92:5e:32:9b:0f:65:86:72:97:f8:55:0b: ba:ea:c6:56:64:01:6e:56:66:f4:b6:dc:20:27:9d:4e:96:01: ad:90:26:05:f4:5f:d8:7b:3a:be:c4:88:d1:29:f9:74:e5:a8: 8d:72:c3:bb:18:54:31:03:9d:df:49:51:fd:54:af:d2:8b:9d: c2:73:b5:cb:b2:fa:b6:dc:10:99:d5:23:ae:aa:88:10:28:b5: 40:5c:3a:a1:99:55:4f:e0:96:63:40:31:f9:55:d6:fa:6d:f2: dd:15:bf:c2:a0:3f:8f:a8:e5:3a:30:4c:0a:05:d3:e8:b9:61: fb:96:1d:a2:62:4b:9c:85:98:c4:4f:10:ae:e6:93:58:23:b8: 75:cd:12:0a:69:40:b8:86:6d:3f:9c:d5:a0:51:d5:96:de:da: da:59:b9:80:e3:c6:72:6f:7d:54:c2:4d:0d:f6:05:d5:1f:3d: d0:28:fc:d5:dd:52:40:10:23:24:9e:2f:00:3e:25:71:b3:43: f6:b5:b1:bf:54:3e:53:7d:f6:90:13:2c:bb:b3:86:c2:c4:f4: d6:ad:36:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8cx6Vo30PNTDwqLsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwOTAxMDAxMVoXDTI2MTIwODAyMDAxMVowLzEtMCsGA1UEAxMk NTBkNzIyMWQtZTQwYy00MzE4LTkwYjctNDQ2MWFmODRiZTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9xUe0zdM2hKqPmLNTcB0hXp/r6rvUfq5c8qB IwL/XkSLjk3hyIXfD/X2gy6mvKXuGzSxRIQBTXNz8XTmpD66fjmvtRqE0wgGrYRp gBB6/XKk9ADUQ0kiGF+TcYKOu2ZjstBJ/69FEt2+AjC0RsVZxWnOXwMW1h9pLCm4 6ek44gIdcjauu/rW6cdW15JnkhwLVu4mrbanJ7Yiojq/xq8Jh//nfdhbMG8zzor9 9liJQpOpALMKJjZ7aotYRj+dMeX875btr4ZFrasWg10YEELCS5jcOJ3KECdj4o0M c0ZjmyuI7AXt76AQkCrX9CLGZMvcW/RhwMMvs3jQ3LP5UIx43QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCMchGn01MnTOkJ8CEXb08RO/RtYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYmJkOWEyYzctMjkwZS0z MDY3LTk2NzAtNTY0MWNhODk3ZGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwBaqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKLE5/qbNMVrGgXrtD6LudytJiGPfOM1Mt38+0fvsYi4cvoq6qLyFt0p bpJeMpsPZYZyl/hVC7rqxlZkAW5WZvS23CAnnU6WAa2QJgX0X9h7Or7EiNEp+XTl qI1yw7sYVDEDnd9JUf1Ur9KLncJztcuy+rbcEJnVI66qiBAotUBcOqGZVU/glmNA MflV1vpt8t0Vv8KgP4+o5TowTAoF0+i5YfuWHaJiS5yFmMRPEK7mk1gjuHXNEgpp QLiGbT+c1aBR1Zbe2tpZuYDjxnJvfVTCTQ32BdUfPdAo/NXdUkAQIySeLwA+JXGz Q/a1sb9UPlN99pATLLuzhsLE9NatNpM= -----END CERTIFICATE-----Generated at Mon Sep 21 20:16:41 2026 by rpki-client