$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/48a9e343-3956-34bd-9048-412486df0413.roa File: 48a9e343-3956-34bd-9048-412486df0413.roa (raw, json) Hash identifier: z8t3wiy1RT5X9WS1azkrMZHSsQP8fk3+Evqw4oeAWsw= Subject key identifier: 53:B5:2B:77:CE:0B:46:54:FC:5D:60:90:02:60:05:4E:47:2D:B9:D6 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E7E950A2858EFC3072D170E80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/48a9e343-3956-34bd-9048-412486df0413.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 31898 IP address blocks: 144.33.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:95:0a:28:58:ef:c3:07:2d:17:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=7e729d12-ef70-471c-bcb1-1c321075e718 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:d0:95:d3:c6:11:b1:7a:92:6a:e7:52:9f:cc: 11:50:82:e4:5e:fd:8a:43:9f:98:93:bc:cc:86:76: 42:3d:a1:f2:8b:ac:01:18:bf:ff:18:52:21:08:cc: f9:8d:c0:0c:0b:0e:7d:d4:0e:13:e3:af:2c:7d:ad: 4a:00:0f:85:6e:9d:6a:98:fa:3b:aa:ed:dc:1f:53: b4:1a:e0:5f:35:d3:f3:d3:6c:7e:34:a6:64:ce:da: cb:a2:0a:01:3f:96:fe:bd:f0:a5:e7:4f:88:6e:2b: ba:3b:7d:0a:8b:88:b8:e4:44:d7:6f:68:c4:e3:e4: 8d:83:cf:ec:ee:87:b8:48:38:e1:98:ce:a0:04:76: 56:79:c5:e1:70:e9:0b:62:f3:24:d9:2b:d8:a8:81: 8f:9e:8a:9b:56:4a:5f:ae:89:5d:5f:bb:9a:15:91: a4:f7:ec:df:89:6d:7e:16:fe:36:70:3b:12:10:32: 9c:f1:24:41:35:f6:b7:1e:6b:c9:83:14:a3:37:92: 7e:7f:3b:de:01:ad:33:e4:60:80:39:a9:c6:c4:a9: 84:09:a4:14:46:05:d4:11:85:04:87:57:84:e5:b4: 0a:ed:78:fa:24:e8:12:bb:d5:51:b1:5e:79:fc:6d: 02:ec:f3:ee:20:84:90:6f:85:eb:5c:5e:41:a1:79: db:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:B5:2B:77:CE:0B:46:54:FC:5D:60:90:02:60:05:4E:47:2D:B9:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/48a9e343-3956-34bd-9048-412486df0413.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 144.33.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:7c:1d:4d:0c:2c:9f:b7:e4:62:ba:f1:36:54:0c:a5:d6:39: 20:88:c8:31:36:d0:21:fc:4d:5a:00:b6:45:0b:46:f9:45:23: 4b:b0:90:9d:17:bf:6f:21:7a:75:c7:ce:a3:70:88:82:df:c0: 66:7a:ff:fd:66:dc:3c:f4:38:89:a3:18:bc:94:1b:96:b7:08: ba:45:29:e6:40:5f:ed:da:fa:99:53:86:15:23:50:8a:74:8f: 1c:dd:b8:80:0d:85:e4:f5:02:1a:22:8b:2f:56:0c:d7:ab:2f: 7c:27:b2:69:e3:15:cb:3d:14:7c:06:19:bf:df:0b:7a:2f:13: e4:ca:0d:af:02:d4:60:26:28:46:04:ab:83:22:ad:00:92:ba: 5b:2f:30:4d:a5:c9:7e:4f:19:d1:71:ee:d1:59:77:78:11:31: eb:07:01:65:24:f6:48:31:88:f4:67:ee:1f:a4:eb:1d:69:0b: 43:73:dd:48:39:54:32:87:64:9a:1b:86:7e:ac:78:80:1e:17: 9b:42:3e:21:6a:f2:80:e4:f4:34:c1:29:5b:25:52:d3:66:bc: e9:f6:29:9e:52:df:b8:00:57:f4:aa:e8:30:da:d6:bf:a4:47: 34:21:d8:47:ec:05:16:3c:a2:39:d9:0b:ff:28:d0:cc:e9:7b: f7:b8:0e:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lQooWO/DBy0XDoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk N2U3MjlkMTItZWY3MC00NzFjLWJjYjEtMWMzMjEwNzVlNzE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9NCV08YRsXqSaudSn8wRUILkXv2KQ5+Yk7zM hnZCPaHyi6wBGL//GFIhCMz5jcAMCw591A4T468sfa1KAA+Fbp1qmPo7qu3cH1O0 GuBfNdPz02x+NKZkztrLogoBP5b+vfCl50+Ibiu6O30Ki4i45ETXb2jE4+SNg8/s 7oe4SDjhmM6gBHZWecXhcOkLYvMk2SvYqIGPnoqbVkpfroldX7uaFZGk9+zfiW1+ Fv42cDsSEDKc8SRBNfa3HmvJgxSjN5J+fzveAa0z5GCAOanGxKmECaQURgXUEYUE h1eE5bQK7Xj6JOgSu9VRsV55/G0C7PPuIISQb4XrXF5BoXnbCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFO1K3fOC0ZU/F1gkAJgBU5HLbnWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNDhhOWUzNDMtMzk1Ni0z NGJkLTkwNDgtNDEyNDg2ZGYwNDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkCEqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHB8HU0MLJ+35GK68TZUDKXWOSCIyDE20CH8TVoAtkULRvlFI0uwkJ0X v28henXHzqNwiILfwGZ6//1m3Dz0OImjGLyUG5a3CLpFKeZAX+3a+plThhUjUIp0 jxzduIANheT1Ahoiiy9WDNerL3wnsmnjFcs9FHwGGb/fC3ovE+TKDa8C1GAmKEYE q4MirQCSulsvME2lyX5PGdFx7tFZd3gRMesHAWUk9kgxiPRn7h+k6x1pC0Nz3Ug5 VDKHZJobhn6seIAeF5tCPiFq8oDk9DTBKVslUtNmvOn2KZ5S37gAV/Sq6DDa1r+k RzQh2EfsBRY8ojnZC/8o0Mzpe/e4Dnk= -----END CERTIFICATE-----Generated at Fri Jul 24 10:40:43 2026 by rpki-client