$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5074b455-daae-37c1-ba58-05f44a21ae52.roa File: 5074b455-daae-37c1-ba58-05f44a21ae52.roa (raw, json) Hash identifier: yd2bTo5POr4FBwtDbbc2hOQmHsMSx/94LhTVixpfHv0= Subject key identifier: 6B:FF:A8:7E:2C:D4:D1:9D:8D:E9:39:DE:0C:A2:C0:70:69:FC:14:3E Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E7E94E00ED0A253CDC0F2BBA0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5074b455-daae-37c1-ba58-05f44a21ae52.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 31898 IP address blocks: 192.33.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:e0:0e:d0:a2:53:cd:c0:f2:bb:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=592ebcb4-e10f-44e5-978f-4b26c7889fc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:42:b5:08:2c:9a:21:dd:2c:0b:06:4d:37:48: 38:61:66:e4:5b:90:e0:b9:50:37:ab:a3:71:6f:98: 63:57:48:b5:7d:15:97:13:5f:98:81:d3:85:08:f9: 29:b2:22:9f:56:04:f5:d8:32:0e:37:78:6a:61:8c: 7b:75:a0:16:ac:86:0e:04:f7:7b:35:fe:53:be:a8: e0:6e:6b:86:24:2c:ae:11:9e:aa:7b:11:08:f0:75: 2f:8a:f8:d8:2b:35:e6:ae:97:e8:6a:2c:9e:b0:46: 40:5a:7a:9e:b2:26:4f:bb:cc:3f:8c:24:17:81:d3: 17:aa:0b:e2:95:7b:36:16:d2:60:7a:ba:5a:fd:cd: 5d:87:8c:7e:b9:cb:39:12:49:d0:8d:2e:36:27:39: 58:83:61:fe:5b:b0:86:43:6b:6f:9f:31:44:e2:d8: 77:d1:6e:bb:a0:87:6a:e0:e1:34:5f:53:7d:8d:eb: e5:01:e3:5d:fa:65:93:82:f5:36:54:f6:28:d2:f5: 49:bc:67:38:a5:2b:37:8a:48:74:4c:99:31:ec:2d: 37:a7:ce:5e:b1:8f:f3:d9:e8:11:01:83:eb:3c:8f: 68:57:b5:ea:9a:3d:04:e5:d1:04:d8:66:d1:2f:d1: 75:d4:ff:8f:85:d9:9c:ad:63:f1:cf:ae:ca:6a:de: eb:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:FF:A8:7E:2C:D4:D1:9D:8D:E9:39:DE:0C:A2:C0:70:69:FC:14:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5074b455-daae-37c1-ba58-05f44a21ae52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 192.33.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:00:13:f7:46:76:f4:bf:e5:ff:30:fa:0b:b9:74:ce:0c:05: a9:0e:95:ed:e0:68:f3:eb:eb:de:82:34:1a:0e:a0:8d:83:9d: b6:c8:81:86:71:db:f7:0b:9f:27:8f:95:f2:01:85:cb:2b:54: 71:df:03:2e:ed:77:18:22:e1:15:c6:5c:90:52:b8:ae:36:2f: 37:e7:c2:26:ea:cc:50:29:3a:f2:74:d5:0a:e1:a0:70:22:6d: 69:b6:01:0e:4b:07:10:a5:a4:33:66:81:c9:cf:de:c2:9f:3a: 51:4a:fb:89:d8:25:fa:9d:ea:2a:82:f3:df:44:5a:59:8c:0a: 04:46:e0:34:74:84:76:92:07:4c:3e:03:aa:52:ef:d7:c1:5d: dc:7b:89:7b:e3:26:8c:9b:28:7e:30:d1:1d:27:c4:92:d4:9c: cf:2c:89:d9:52:5d:84:ac:c9:f4:b0:63:5c:f8:bd:d5:1a:24: e2:ed:d7:44:df:02:60:aa:87:ac:4c:8a:ad:b7:f5:cb:03:d1: c9:5b:fc:13:40:a8:00:06:d4:8e:bc:ec:0b:0a:76:8d:e3:f0: ee:bc:10:f0:8e:c0:5c:ef:54:dd:dc:9d:3c:8e:d5:59:aa:8c: a9:bb:e7:d3:e4:73:9a:43:de:22:d1:aa:44:ab:7b:d3:48:1c: 4b:1f:5f:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lOAO0KJTzcDyu6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk NTkyZWJjYjQtZTEwZi00NGU1LTk3OGYtNGIyNmM3ODg5ZmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0K1CCyaId0sCwZNN0g4YWbkW5DguVA3q6Nx b5hjV0i1fRWXE1+YgdOFCPkpsiKfVgT12DION3hqYYx7daAWrIYOBPd7Nf5Tvqjg bmuGJCyuEZ6qexEI8HUvivjYKzXmrpfoaiyesEZAWnqesiZPu8w/jCQXgdMXqgvi lXs2FtJgerpa/c1dh4x+ucs5EknQjS42JzlYg2H+W7CGQ2tvnzFE4th30W67oIdq 4OE0X1N9jevlAeNd+mWTgvU2VPYo0vVJvGc4pSs3ikh0TJkx7C03p85esY/z2egR AYPrPI9oV7Xqmj0E5dEE2GbRL9F11P+PhdmcrWPxz67Kat7rUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGv/qH4s1NGdjek53gyiwHBp/BQ+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNTA3NGI0NTUtZGFhZS0z N2MxLWJhNTgtMDVmNDRhMjFhZTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCH1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFEAE/dGdvS/5f8w+gu5dM4MBakOle3gaPPr696CNBoOoI2DnbbIgYZx 2/cLnyePlfIBhcsrVHHfAy7tdxgi4RXGXJBSuK42LzfnwibqzFApOvJ01QrhoHAi bWm2AQ5LBxClpDNmgcnP3sKfOlFK+4nYJfqd6iqC899EWlmMCgRG4DR0hHaSB0w+ A6pS79fBXdx7iXvjJoybKH4w0R0nxJLUnM8sidlSXYSsyfSwY1z4vdUaJOLt10Tf AmCqh6xMiq239csD0clb/BNAqAAG1I687AsKdo3j8O68EPCOwFzvVN3cnTyO1Vmq jKm759Pkc5pD3iLRqkSre9NIHEsfX5o= -----END CERTIFICATE-----Generated at Fri Jul 24 09:47:09 2026 by rpki-client