$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cea471d4-2e6f-3371-a0b9-77b0ba03876c.roa File: cea471d4-2e6f-3371-a0b9-77b0ba03876c.roa (raw, json) Hash identifier: DZpRRaWW/AxlDQeoSYjT0BuOIWIxMY9qK46jkATYMUc= Subject key identifier: 9B:75:D8:28:9D:09:9F:5D:F8:AF:A1:76:A3:62:DA:A5:13:69:A9:2D Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F093CE3A615D040D12AD29B00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cea471d4-2e6f-3371-a0b9-77b0ba03876c.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 192.29.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:e3:a6:15:d0:40:d1:2a:d2:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=164aec8d-bd8c-465c-b50f-918c7867a78d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:8f:dc:63:61:5d:51:7f:0c:2d:01:20:64:d9: 62:1f:65:c1:60:7f:4f:44:78:fd:f9:24:f8:d0:7d: 48:e2:99:8d:bb:fc:3e:ea:17:80:9a:68:96:cd:8b: f9:d1:e4:51:b9:6f:30:e1:e7:05:1d:bb:7c:84:40: 2f:11:67:65:98:68:b7:a2:ac:7a:1a:5f:96:45:47: b4:29:65:12:95:e6:d6:e3:ab:5f:50:60:ea:55:9d: 66:e0:5b:a4:b5:3a:bf:01:06:d2:96:87:ab:ab:d3: 2a:d9:ff:7c:ac:cf:85:b6:94:f2:9f:88:57:c9:1d: 48:12:a3:44:0f:eb:a9:ff:65:9b:df:39:39:41:a0: 9b:ae:d4:dd:f3:26:e4:0f:0e:2c:b0:20:4a:5a:16: 3f:47:33:d2:37:2f:3d:4b:56:26:70:0e:15:ef:02: 29:90:cd:64:c2:55:1f:41:7b:28:9e:f5:88:d4:33: 16:b8:6e:6b:89:7b:40:dc:a8:1c:2f:77:be:a3:7a: be:51:fe:87:e0:b7:bb:94:3d:76:03:a5:c3:41:a7: 86:4b:1f:c1:6e:1e:55:9c:d0:54:dd:52:91:8a:41: 1a:94:2a:b4:e4:d7:26:dd:db:b7:48:49:8e:36:1b: 86:55:16:19:10:a7:aa:ef:30:09:0c:79:c5:ec:10: b6:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:75:D8:28:9D:09:9F:5D:F8:AF:A1:76:A3:62:DA:A5:13:69:A9:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cea471d4-2e6f-3371-a0b9-77b0ba03876c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 192.29.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:3b:ac:f9:01:a7:2d:5b:81:56:f2:9b:78:88:e5:63:d0:c3: 68:89:af:71:c5:ff:7d:a5:79:43:24:22:38:44:c4:65:a2:09: a2:49:f7:a2:d6:7f:07:6a:47:49:fc:c4:24:b2:c2:a9:1d:a1: ca:b2:7d:32:1e:cb:31:97:54:61:ae:4c:c0:b3:3a:64:16:b1: 97:72:0d:67:bc:27:7d:b7:ab:9d:dc:59:54:29:fe:63:86:76: 6a:57:a1:3c:c3:b0:78:5f:b0:24:43:60:6b:a8:60:d6:04:42: bd:71:9c:01:6c:63:0c:58:5b:ea:bc:b7:60:cc:00:4f:dd:44: 74:ec:a2:36:a0:18:6c:45:d7:dc:58:36:44:f2:b2:0a:51:dd: 34:d8:a2:eb:54:14:56:4f:3a:8e:33:81:73:c9:3a:3a:25:16: 9a:e0:ab:b2:6e:85:03:17:fb:76:a7:26:5e:f3:56:73:25:71: c2:ed:a8:19:90:e7:e6:25:78:3b:d9:95:e3:75:e4:fe:10:b8: f2:76:17:02:6f:cc:80:a4:c7:5f:cb:e6:3e:e5:fc:60:9e:cf: b9:76:0a:71:ee:ec:c0:e3:63:79:0f:41:e3:63:3a:d3:12:4f: 33:55:6e:82:8f:50:48:c8:37:22:9d:f9:2f:37:62:af:96:43: 29:08:9f:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPOOmFdBA0SrSmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk MTY0YWVjOGQtYmQ4Yy00NjVjLWI1MGYtOTE4Yzc4NjdhNzhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4/cY2FdUX8MLQEgZNliH2XBYH9PRHj9+ST4 0H1I4pmNu/w+6heAmmiWzYv50eRRuW8w4ecFHbt8hEAvEWdlmGi3oqx6Gl+WRUe0 KWUSlebW46tfUGDqVZ1m4FuktTq/AQbSloerq9Mq2f98rM+FtpTyn4hXyR1IEqNE D+up/2Wb3zk5QaCbrtTd8ybkDw4ssCBKWhY/RzPSNy89S1YmcA4V7wIpkM1kwlUf QXsonvWI1DMWuG5riXtA3KgcL3e+o3q+Uf6H4Le7lD12A6XDQaeGSx/Bbh5VnNBU 3VKRikEalCq05Ncm3du3SEmONhuGVRYZEKeq7zAJDHnF7BC2CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJt12CidCZ9d+K+hdqNi2qUTaaktMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvY2VhNDcxZDQtMmU2Zi0z MzcxLWEwYjktNzdiMGJhMDM4NzZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwB1wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ07rPkBpy1bgVbym3iI5WPQw2iJr3HF/32leUMkIjhExGWiCaJJ96LW fwdqR0n8xCSywqkdocqyfTIeyzGXVGGuTMCzOmQWsZdyDWe8J323q53cWVQp/mOG dmpXoTzDsHhfsCRDYGuoYNYEQr1xnAFsYwxYW+q8t2DMAE/dRHTsojagGGxF19xY NkTysgpR3TTYoutUFFZPOo4zgXPJOjolFprgq7JuhQMX+3anJl7zVnMlccLtqBmQ 5+YleDvZleN15P4QuPJ2FwJvzICkx1/L5j7l/GCez7l2CnHu7MDjY3kPQeNjOtMS TzNVboKPUEjINyKd+S83Yq+WQykIn9c= -----END CERTIFICATE-----Generated at Tue Sep 22 23:25:03 2026 by rpki-client