$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cfa7fa22-536d-32e9-bf94-1a91729f09b6.roa File: cfa7fa22-536d-32e9-bf94-1a91729f09b6.roa (raw, json) Hash identifier: xb9ZWrdTlxreJc0ruVp/nVcgNihHBF9cRmiOksGJwaU= Subject key identifier: 9B:8B:DF:8B:9E:9A:99:52:6E:5B:47:89:65:51:5C:FD:40:88:33:61 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F20F7A0417B05CCAA0EC34E00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cfa7fa22-536d-32e9-bf94-1a91729f09b6.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 192.22.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:a0:41:7b:05:cc:aa:0e:c3:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=fccb0ce4-9f35-4ec1-8d2d-24cb15cfd57b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:84:4b:0c:c1:4f:b8:3e:f6:1b:cc:83:99:d7: 23:d3:03:5e:2b:04:97:21:7e:f2:c1:d0:bb:ab:6c: 37:26:54:07:c0:c4:a7:d7:cc:80:a6:53:ac:66:0a: 43:11:e8:8e:4b:47:8c:96:ab:08:81:f7:fc:9c:c7: 72:77:b8:c7:bc:17:8b:81:8e:05:54:61:09:e6:72: e9:70:42:92:aa:2c:f2:88:88:43:53:0c:76:cf:b7: 7f:9f:f3:9d:48:19:76:09:b7:84:c9:0f:92:39:6b: b7:f6:f9:50:30:a4:d6:71:d9:21:fe:54:db:22:e0: 89:e0:2b:11:ea:b6:cd:fe:d8:90:2f:75:24:c5:28: 0d:4a:61:db:86:18:4d:cd:cb:78:99:17:95:fa:2e: f1:4f:f9:39:af:41:8c:dd:2c:e9:a7:83:4e:02:fd: f8:a3:2f:09:f9:74:7b:78:d6:f1:0f:4e:6e:e9:c1: 83:a5:96:6b:dc:39:c3:7e:99:07:60:b1:1a:f3:2a: ef:cb:d2:be:de:fd:e7:95:e8:6b:79:c2:13:5c:1f: 3b:57:80:3b:2d:1b:a2:5e:4c:97:4a:1b:79:d6:b3: a8:a5:1e:81:d4:72:04:f0:99:e3:ee:35:4c:27:de: 51:50:9c:cc:83:20:41:5e:97:a3:2c:e7:07:e0:ba: 71:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:8B:DF:8B:9E:9A:99:52:6E:5B:47:89:65:51:5C:FD:40:88:33:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cfa7fa22-536d-32e9-bf94-1a91729f09b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 192.22.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:f0:41:d0:d8:58:d1:43:e7:05:80:23:1c:d5:31:e9:f0:31: bb:2d:e5:61:b4:d3:3a:37:13:d8:63:81:4c:55:42:eb:31:c9: 86:7a:89:6f:64:27:be:99:34:cd:3f:f5:dc:48:ee:6c:f8:76: 59:06:41:59:75:e1:29:8e:9f:d1:06:0c:79:a8:ad:6e:91:2f: 1c:7f:0d:48:6c:d0:65:11:5f:df:1b:c9:46:7c:13:77:05:e7: 05:e6:77:bd:ac:ae:79:ba:20:a4:d8:41:63:82:a2:fd:af:a7: 93:07:18:10:8a:8b:42:5f:fd:1f:94:9c:b1:24:b5:e2:30:5d: 53:df:8c:2c:a9:87:a9:e8:92:23:c6:85:4f:6e:ad:26:da:ac: 99:bd:d0:ad:6b:1d:1d:52:9f:a8:d9:1a:3f:3d:2d:05:72:4e: 6a:30:57:f8:db:09:27:51:6b:35:e1:8f:34:71:05:c4:d8:7b: 80:b1:36:b2:86:7b:4d:07:cf:e2:6f:b2:8b:e4:ab:53:ec:7f: fb:ea:7a:32:0b:2e:a6:43:72:94:2d:ec:0a:b6:06:a7:70:34: 04:3c:21:74:da:5b:fe:8e:5b:ed:d5:33:f6:be:67:a7:83:72: 52:cf:d5:ee:94:93:66:c9:e1:30:76:c6:07:e8:a5:84:22:78: f5:70:44:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g96BBewXMqg7DTgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk ZmNjYjBjZTQtOWYzNS00ZWMxLThkMmQtMjRjYjE1Y2ZkNTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4RLDMFPuD72G8yDmdcj0wNeKwSXIX7ywdC7 q2w3JlQHwMSn18yAplOsZgpDEeiOS0eMlqsIgff8nMdyd7jHvBeLgY4FVGEJ5nLp cEKSqizyiIhDUwx2z7d/n/OdSBl2CbeEyQ+SOWu39vlQMKTWcdkh/lTbIuCJ4CsR 6rbN/tiQL3UkxSgNSmHbhhhNzct4mReV+i7xT/k5r0GM3Szpp4NOAv34oy8J+XR7 eNbxD05u6cGDpZZr3DnDfpkHYLEa8yrvy9K+3v3nlehrecITXB87V4A7LRuiXkyX Sht51rOopR6B1HIE8Jnj7jVMJ95RUJzMgyBBXpejLOcH4LpxNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJuL34uemplSbltHiWVRXP1AiDNhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvY2ZhN2ZhMjItNTM2ZC0z MmU5LWJmOTQtMWE5MTcyOWYwOWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFwBYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELwQdDYWNFD5wWAIxzVMenwMbst5WG00zo3E9hjgUxVQusxyYZ6iW9k J76ZNM0/9dxI7mz4dlkGQVl14SmOn9EGDHmorW6RLxx/DUhs0GURX98byUZ8E3cF 5wXmd72srnm6IKTYQWOCov2vp5MHGBCKi0Jf/R+UnLEkteIwXVPfjCyph6nokiPG hU9urSbarJm90K1rHR1Sn6jZGj89LQVyTmowV/jbCSdRazXhjzRxBcTYe4CxNrKG e00Hz+Jvsovkq1Psf/vqejILLqZDcpQt7Aq2BqdwNAQ8IXTaW/6OW+3VM/a+Z6eD clLP1e6Uk2bJ4TB2xgfopYQiePVwRAk= -----END CERTIFICATE-----Generated at Mon Sep 21 09:43:18 2026 by rpki-client