$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1db86590-5b3b-3de4-a07d-7fd149d4ac20.roa File: 1db86590-5b3b-3de4-a07d-7fd149d4ac20.roa (raw, json) Hash identifier: BVuVOzF10HNWb8jAuxpJPkTKBLACmItF6NQu1jTaAwU= Subject key identifier: DC:2C:25:80:96:9C:A5:F1:DB:BB:5A:D7:94:C9:2F:6C:DC:C1:3B:2D Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D9A202F239DD0C4EA2C9CE280 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1db86590-5b3b-3de4-a07d-7fd149d4ac20.roa Signing time: Thu 23 Apr 2026 13:00:32 +0000 ROA not before: Thu 23 Apr 2026 13:00:32 +0000 ROA not after: Wed 22 Jul 2026 13:00:32 +0000 asID: 31898 IP address blocks: 192.22.174.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9a:20:2f:23:9d:d0:c4:ea:2c:9c:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 23 13:00:32 2026 GMT Not After : Jul 22 13:00:32 2026 GMT Subject: CN=bc963fa2-e457-4d42-8b72-b76b00c755cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:6c:c3:8f:c5:f1:6d:4d:7b:27:04:22:6a:44: 58:a9:9d:18:31:23:e0:62:4c:cf:5e:b1:48:b4:76: 40:9f:5d:99:71:a0:f1:63:78:a6:0e:e6:66:17:ed: 6c:3a:ac:ac:11:fc:b2:74:c1:80:ee:19:b4:89:83: 0e:f5:16:ce:55:e7:44:dd:ab:35:f7:5e:e5:7f:a6: 33:79:1d:14:5d:56:30:d7:42:1c:74:9a:20:08:9f: 79:a4:35:b8:9c:17:0e:11:04:25:b1:29:26:29:b5: b5:5b:7b:c8:be:80:51:1a:0d:10:0b:84:12:87:5c: 6f:14:0c:ba:06:d2:67:b4:d9:0e:60:5f:4d:20:9f: 43:cf:66:46:19:29:fa:49:b0:e7:21:1f:de:7a:64: f8:47:51:40:06:fb:29:e9:1b:6b:fb:17:bb:72:21: 1f:4a:b5:c1:f8:9a:db:7f:3a:f0:97:a4:a1:d2:17: 8d:e3:ec:69:e1:5f:f7:17:b1:5a:b3:5a:f1:ce:3f: 80:44:1a:21:62:e4:b5:13:10:d8:66:e6:f1:09:00: ea:27:03:1b:b8:2a:db:7c:81:62:b3:3d:66:94:f9: 28:b1:a0:91:9c:04:a4:c6:92:a7:24:1a:4c:df:fc: 5c:47:05:16:ae:13:0d:7a:69:ae:ec:72:61:87:d4: 6d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:2C:25:80:96:9C:A5:F1:DB:BB:5A:D7:94:C9:2F:6C:DC:C1:3B:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1db86590-5b3b-3de4-a07d-7fd149d4ac20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 192.22.174.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:50:d4:e3:dd:12:30:6a:3d:db:59:08:f1:8d:3b:87:1a:81: 25:ec:5e:6c:e9:d0:db:e4:1a:03:43:7b:d7:19:89:de:bf:02: 1f:30:24:97:c6:c5:7c:6b:af:46:b2:47:98:46:3c:bf:df:2a: 04:52:a8:5a:e3:92:0b:77:d2:b6:09:f0:1d:d5:19:9a:76:51: 06:6f:f2:e7:0c:09:06:a9:4f:a7:80:19:87:2e:4b:a1:2f:26: 2c:33:09:c0:69:02:f1:0c:fa:8e:41:0a:e4:7c:60:d5:95:86: 7b:34:4b:de:cd:53:c3:7a:de:38:69:59:36:3b:0e:4e:c9:e3: 2a:74:49:ba:70:c0:86:ab:a5:c7:41:0a:e8:df:ec:c0:cc:c9: b9:d9:60:8d:8f:e0:de:35:da:eb:2a:35:84:0c:2d:6a:50:53: be:94:a2:9e:df:9e:05:ca:70:c9:92:1c:1d:be:bc:37:dd:c8: 15:ef:d8:89:e5:6f:d9:37:6f:da:fa:95:a4:18:f0:bd:33:a0: ee:0d:4d:16:ae:23:5b:1b:31:62:99:68:d1:67:b6:a9:76:2c: 7f:3d:f6:b7:0f:68:2a:bd:ea:85:7b:e1:53:48:67:5b:30:22: 26:b4:ad:93:1f:d3:c3:76:53:d5:c5:38:0e:0f:91:fa:2c:5e: 14:4e:d0:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2aIC8jndDE6iyc4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQyMzEzMDAzMloXDTI2MDcyMjEzMDAzMlowLzEtMCsGA1UEAxMk YmM5NjNmYTItZTQ1Ny00ZDQyLThiNzItYjc2YjAwYzc1NWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGzDj8XxbU17JwQiakRYqZ0YMSPgYkzPXrFI tHZAn12ZcaDxY3imDuZmF+1sOqysEfyydMGA7hm0iYMO9RbOVedE3as1917lf6Yz eR0UXVYw10IcdJogCJ95pDW4nBcOEQQlsSkmKbW1W3vIvoBRGg0QC4QSh1xvFAy6 BtJntNkOYF9NIJ9Dz2ZGGSn6SbDnIR/eemT4R1FABvsp6Rtr+xe7ciEfSrXB+Jrb fzrwl6Sh0heN4+xp4V/3F7Fas1rxzj+ARBohYuS1ExDYZubxCQDqJwMbuCrbfIFi sz1mlPkosaCRnASkxpKnJBpM3/xcRwUWrhMNemmu7HJhh9Rt6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNwsJYCWnKXx27ta15TJL2zcwTstMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMWRiODY1OTAtNWIzYi0z ZGU0LWEwN2QtN2ZkMTQ5ZDRhYzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwBauMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHhQ1OPdEjBqPdtZCPGNO4cagSXsXmzp0NvkGgNDe9cZid6/Ah8wJJfG xXxrr0ayR5hGPL/fKgRSqFrjkgt30rYJ8B3VGZp2UQZv8ucMCQapT6eAGYcuS6Ev JiwzCcBpAvEM+o5BCuR8YNWVhns0S97NU8N63jhpWTY7Dk7J4yp0SbpwwIarpcdB Cujf7MDMybnZYI2P4N412usqNYQMLWpQU76Uop7fngXKcMmSHB2+vDfdyBXv2Inl b9k3b9r6laQY8L0zoO4NTRauI1sbMWKZaNFntql2LH899rcPaCq96oV74VNIZ1sw Iia0rZMf08N2U9XFOA4PkfosXhRO0OE= -----END CERTIFICATE-----Generated at Wed May 13 06:23:26 2026 by rpki-client