$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/14306e65-abec-38c7-82a2-d648f1be5a9b.roa File: 14306e65-abec-38c7-82a2-d648f1be5a9b.roa (raw, json) Hash identifier: Edn3NQpNw5yhy3gOrDUGd9PzAxb1L1zYbgVkZ1MVUmU= Subject key identifier: B0:3B:E2:02:FC:4E:9A:A3:14:E8:D7:36:36:06:33:67:27:BE:D7:BD Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D9A20167E9BA0E01FAF2C6AC8 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/14306e65-abec-38c7-82a2-d648f1be5a9b.roa Signing time: Thu 23 Apr 2026 13:00:32 +0000 ROA not before: Thu 23 Apr 2026 13:00:32 +0000 ROA not after: Wed 22 Jul 2026 13:00:32 +0000 asID: 31898 IP address blocks: 192.22.168.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9a:20:16:7e:9b:a0:e0:1f:af:2c:6a:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 23 13:00:32 2026 GMT Not After : Jul 22 13:00:32 2026 GMT Subject: CN=05055cbe-6979-4c5b-81d5-301372dbbe79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:af:0b:55:ac:72:d6:4c:0b:9f:ab:41:7d:0b: ac:a4:f5:57:ba:15:9f:52:77:a6:dd:96:1e:1c:21: 17:97:a6:bf:99:a1:1a:df:70:55:7c:d9:59:91:f7: d7:6f:ed:f9:0e:d8:b1:23:36:cc:82:fc:8f:59:eb: 08:49:13:63:1d:71:5b:e8:23:4e:8c:f9:34:95:f1: d9:32:1b:82:dc:13:5e:60:2d:08:b4:14:ae:ca:8d: 30:cf:16:95:94:fb:ff:37:98:47:0d:ae:91:67:8e: a6:ca:1a:6f:1d:77:d5:fb:85:0a:6d:0a:5c:e5:47: fc:9a:5f:cc:db:ad:ee:a4:4c:10:17:5b:97:c4:e6: 59:ec:b9:46:d0:2d:8c:80:4b:4f:9a:3a:98:4b:93: ec:90:56:2c:96:13:63:bd:a5:eb:10:ff:46:06:ba: da:81:b0:a2:0b:0c:8e:65:91:34:4d:fd:c5:44:a3: 51:cb:0a:21:10:6b:8d:af:7b:e7:75:5a:3e:66:db: 0b:b8:9e:dc:83:cb:98:a6:e9:8e:2e:fb:ee:5c:f2: 8a:a3:97:71:46:4d:0a:bf:d9:eb:55:13:a5:aa:9d: cd:e0:ab:50:04:8d:7d:a2:00:6b:99:3e:e3:a5:6d: 22:1c:72:66:93:ae:eb:a0:1c:cf:81:06:8b:a6:00: 9e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:3B:E2:02:FC:4E:9A:A3:14:E8:D7:36:36:06:33:67:27:BE:D7:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/14306e65-abec-38c7-82a2-d648f1be5a9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 192.22.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:dd:4f:9e:10:66:96:d0:bd:b2:ae:96:bd:e0:a6:8c:b2:ac: 65:bc:f9:24:00:45:92:1c:b0:b5:12:2b:56:74:7c:f4:de:94: 79:4b:fa:62:c6:ae:3c:91:5f:e7:50:a1:b0:87:c0:69:d3:7f: e6:34:bd:b2:38:cc:99:6e:41:38:39:e0:66:9c:40:e7:75:97: 92:06:91:01:50:94:bb:35:dc:f3:a7:74:53:86:c5:d6:bd:c0: 6c:6e:91:ec:93:ce:02:fc:75:ec:fa:70:68:99:c5:c5:72:0f: 19:57:4d:06:19:a8:b6:8b:da:0a:c4:06:0a:6d:f5:03:9e:ff: ae:1e:bb:37:6c:58:77:ea:d6:bf:fb:5a:01:0b:47:31:e3:f3: d9:52:4a:a2:41:90:cf:60:3c:6e:81:ad:60:07:a8:08:53:48: 4f:ad:ed:89:cd:5a:2d:25:f6:f4:08:0c:30:07:09:d5:88:75: 6e:ea:73:d4:b9:5b:01:f7:4b:80:a0:93:a8:ca:5a:55:b3:bb: e8:e3:13:65:b7:e8:c9:41:74:55:d5:3a:17:bd:f3:6e:8b:63: e7:fc:5f:3c:24:35:8a:73:b0:0a:11:17:4b:c1:1a:bd:77:8a: 73:50:8b:bb:e2:d0:95:6d:1f:36:a6:08:2c:a9:e7:79:ce:65: b0:3e:0f:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2aIBZ+m6DgH68sasgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQyMzEzMDAzMloXDTI2MDcyMjEzMDAzMlowLzEtMCsGA1UEAxMk MDUwNTVjYmUtNjk3OS00YzViLTgxZDUtMzAxMzcyZGJiZTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh68LVaxy1kwLn6tBfQuspPVXuhWfUnem3ZYe HCEXl6a/maEa33BVfNlZkffXb+35DtixIzbMgvyPWesISRNjHXFb6CNOjPk0lfHZ MhuC3BNeYC0ItBSuyo0wzxaVlPv/N5hHDa6RZ46myhpvHXfV+4UKbQpc5Uf8ml/M 263upEwQF1uXxOZZ7LlG0C2MgEtPmjqYS5PskFYslhNjvaXrEP9GBrragbCiCwyO ZZE0Tf3FRKNRywohEGuNr3vndVo+ZtsLuJ7cg8uYpumOLvvuXPKKo5dxRk0Kv9nr VROlqp3N4KtQBI19ogBrmT7jpW0iHHJmk67roBzPgQaLpgCezwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLA74gL8TpqjFOjXNjYGM2cnvte9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMTQzMDZlNjUtYWJlYy0z OGM3LTgyYTItZDY0OGYxYmU1YTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwBaoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEjdT54QZpbQvbKulr3gpoyyrGW8+SQARZIcsLUSK1Z0fPTelHlL+mLG rjyRX+dQobCHwGnTf+Y0vbI4zJluQTg54GacQOd1l5IGkQFQlLs13POndFOGxda9 wGxukeyTzgL8dez6cGiZxcVyDxlXTQYZqLaL2grEBgpt9QOe/64euzdsWHfq1r/7 WgELRzHj89lSSqJBkM9gPG6BrWAHqAhTSE+t7YnNWi0l9vQIDDAHCdWIdW7qc9S5 WwH3S4Cgk6jKWlWzu+jjE2W36MlBdFXVOhe9826LY+f8XzwkNYpzsAoRF0vBGr13 inNQi7vi0JVtHzamCCyp53nOZbA+D9k= -----END CERTIFICATE-----Generated at Wed May 13 06:51:38 2026 by rpki-client