$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f2014323-deb1-36cf-bef2-39124ace9056.roa File: f2014323-deb1-36cf-bef2-39124ace9056.roa (raw, json) Hash identifier: Zj9ZkdhTKVqVMSl0liTLFiz1ngMd2f57+bOpgOSEFkE= Subject key identifier: D6:34:23:51:EC:76:45:AE:E1:A5:9F:E0:FB:E2:82:49:DA:7A:E6:E8 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F0D6CD5F606A8BC6DBB055C80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f2014323-deb1-36cf-bef2-39124ace9056.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 192.29.176.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:d5:f6:06:a8:bc:6d:bb:05:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=e07bc669-364c-4cf3-bdec-2de145956ebc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:2e:2c:b4:4c:78:29:94:fc:53:a4:16:4c:64: c2:0d:fe:4a:48:45:80:15:5c:f2:42:e1:8c:c0:18: 13:df:a8:80:e1:a6:08:a2:a5:35:96:47:66:1c:1f: 84:56:ac:ad:fc:9a:7f:5e:e2:52:2c:cf:97:54:2c: fc:9f:d0:48:f5:7a:31:35:11:de:9b:88:97:c9:1a: 9a:2a:7b:b0:07:63:37:cb:60:cd:b5:8f:5e:cb:5b: 5e:29:8b:04:ec:a0:51:1a:d4:5e:be:68:05:82:14: 8d:76:87:c8:04:8d:16:0b:9e:2c:89:a8:3d:cf:e1: e1:47:8f:88:eb:4d:cd:43:05:39:65:b1:e6:09:2b: af:0d:8b:38:86:20:02:bc:7a:d6:bc:0a:43:75:9b: d2:17:50:1a:27:37:ca:22:b6:43:16:97:e4:0c:90: 26:4b:06:ce:83:3f:ce:c0:ef:84:ac:48:a2:ff:cc: f1:3f:2a:b0:f6:b7:4b:09:96:5c:1f:0b:81:3b:be: e2:7e:5b:6c:f7:0f:94:c0:a4:6d:9c:b7:39:f1:fd: cc:b2:8d:2b:cc:65:62:b1:5c:14:c9:37:b7:c9:6f: 65:5f:bf:1d:58:ea:be:d7:f8:68:64:82:85:ac:e8: f6:0f:f0:ea:05:88:8f:17:96:56:1b:8d:ed:03:e3: 38:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:34:23:51:EC:76:45:AE:E1:A5:9F:E0:FB:E2:82:49:DA:7A:E6:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f2014323-deb1-36cf-bef2-39124ace9056.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 192.29.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:63:c7:57:a0:24:24:97:41:04:37:4b:87:2b:a9:44:50:58: 0c:7f:20:53:2e:bc:e6:d0:59:4c:59:fe:33:b6:7e:9f:79:bc: 20:a6:2f:c7:7f:13:2b:d7:07:fd:55:d1:99:d1:b7:06:da:93: bc:47:ac:ac:53:94:6c:f8:55:44:9d:06:24:1a:0d:f7:91:d5: fe:13:c5:cc:c0:7f:a9:66:f1:10:17:bc:a1:df:b3:31:16:3b: d1:6d:ca:a3:de:d5:74:80:ff:3f:4a:8d:29:7d:d8:a1:a8:0e: 31:4f:67:99:e4:9b:db:7f:cb:ae:d4:e6:70:d3:aa:55:e7:e8: 46:c2:02:43:f9:df:9f:db:84:07:bf:be:a2:39:ab:19:2a:79: 10:c1:c3:bb:29:c2:b7:f8:87:b1:e3:46:89:f1:4b:0f:8e:90: 42:35:79:4c:0a:90:5f:7f:a5:aa:9d:4e:0c:d0:c3:46:46:65: 0a:db:1f:49:f8:a7:a1:75:ad:b6:11:0b:fb:37:3a:e1:5a:e4: e4:34:c1:e6:b6:34:b8:6c:9d:20:98:66:45:e3:4c:8c:9e:ee: a7:c9:b5:03:b2:aa:e2:30:96:6e:19:fa:2d:45:fe:21:28:2d: a3:2c:b5:05:b5:97:f8:19:10:63:b1:d8:6b:45:a3:6a:a9:b9: b0:90:15:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbNX2Bqi8bbsFXIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk ZTA3YmM2NjktMzY0Yy00Y2YzLWJkZWMtMmRlMTQ1OTU2ZWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmi4stEx4KZT8U6QWTGTCDf5KSEWAFVzyQuGM wBgT36iA4aYIoqU1lkdmHB+EVqyt/Jp/XuJSLM+XVCz8n9BI9XoxNRHem4iXyRqa KnuwB2M3y2DNtY9ey1teKYsE7KBRGtRevmgFghSNdofIBI0WC54siag9z+HhR4+I 603NQwU5ZbHmCSuvDYs4hiACvHrWvApDdZvSF1AaJzfKIrZDFpfkDJAmSwbOgz/O wO+ErEii/8zxPyqw9rdLCZZcHwuBO77iflts9w+UwKRtnLc58f3Mso0rzGVisVwU yTe3yW9lX78dWOq+1/hoZIKFrOj2D/DqBYiPF5ZWG43tA+M4rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNY0I1HsdkWu4aWf4PvigknaeuboMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZjIwMTQzMjMtZGViMS0z NmNmLWJlZjItMzkxMjRhY2U5MDU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwB2wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIpjx1egJCSXQQQ3S4crqURQWAx/IFMuvObQWUxZ/jO2fp95vCCmL8d/ EyvXB/1V0ZnRtwbak7xHrKxTlGz4VUSdBiQaDfeR1f4TxczAf6lm8RAXvKHfszEW O9FtyqPe1XSA/z9KjSl92KGoDjFPZ5nkm9t/y67U5nDTqlXn6EbCAkP535/bhAe/ vqI5qxkqeRDBw7spwrf4h7HjRonxSw+OkEI1eUwKkF9/paqdTgzQw0ZGZQrbH0n4 p6F1rbYRC/s3OuFa5OQ0wea2NLhsnSCYZkXjTIye7qfJtQOyquIwlm4Z+i1F/iEo LaMstQW1l/gZEGOx2GtFo2qpubCQFTI= -----END CERTIFICATE-----Generated at Tue Sep 22 02:08:50 2026 by rpki-client