$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/58d7d3e7-900c-398c-8a5d-4d499aaa3433.roa File: 58d7d3e7-900c-398c-8a5d-4d499aaa3433.roa (raw, json) Hash identifier: QxB//kSDTylj//H12Xij7lku40x8Pw2WZ3esUIc1F7k= Subject key identifier: 2C:1D:90:38:61:D4:78:D9:BD:8A:82:D6:6D:7B:75:29:B3:6A:15:F0 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E7E94DE31CA0ADDFF980FAB80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/58d7d3e7-900c-398c-8a5d-4d499aaa3433.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 31898 IP address blocks: 192.33.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:de:31:ca:0a:dd:ff:98:0f:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=e4eed996-8edb-4758-81bf-b8f44d45e692 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:24:9f:da:72:3e:4c:8a:45:3b:95:f9:2f:d4: 55:64:d5:d7:01:2e:b6:64:b1:e7:87:2a:1c:c5:7a: 46:bb:c8:67:5e:c5:90:a4:51:58:ea:a1:b5:02:c7: 79:47:93:63:5a:b6:4e:7c:f4:7b:2b:f4:fe:31:72: 98:91:b5:35:1f:c0:d5:00:0d:38:04:d0:9e:18:d2: 41:f4:89:50:65:8c:65:ee:98:0d:1d:6f:62:27:56: e9:01:0f:ae:26:c0:ce:11:3c:4e:5f:db:c4:48:ff: f2:f7:53:1e:18:5b:29:3d:ed:99:82:ec:5f:06:7c: e4:00:97:50:f7:b8:3d:fc:01:01:c7:2a:85:c5:02: f3:24:2e:85:ad:38:ab:d4:5a:1e:80:3c:a7:64:fc: d5:e9:6a:24:f1:e1:b0:48:e6:de:5d:bd:24:82:53: 5a:6a:88:77:af:21:26:70:12:99:11:de:8b:39:80: 4f:4b:da:75:b9:0d:cc:43:52:a9:f7:b8:dc:09:db: 0f:c8:8c:b6:23:3d:1d:14:90:38:47:2b:9b:b8:29: 14:60:5d:e5:e3:0b:48:ab:b5:14:b6:81:5f:29:4b: 9f:cf:a3:cb:53:90:f8:04:91:1a:dd:d2:01:35:84: 1e:6b:f1:75:c7:19:9e:4a:fe:fc:79:e0:93:24:67: 39:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:1D:90:38:61:D4:78:D9:BD:8A:82:D6:6D:7B:75:29:B3:6A:15:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/58d7d3e7-900c-398c-8a5d-4d499aaa3433.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 192.33.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:4d:4e:b9:38:4b:22:fa:20:f1:2c:30:24:3f:a0:bf:ff:b4: fa:47:b6:d6:cd:e1:12:ce:58:bf:d0:27:af:82:5e:e8:1f:65: 2d:89:59:71:ba:97:69:b9:f6:81:c5:71:80:9c:ca:01:d4:5f: 97:74:73:c6:f4:7c:e5:92:fb:36:5e:c4:15:3e:2c:3b:20:61: f6:1e:05:41:c7:79:fe:63:16:b5:fb:0e:68:44:15:5e:8e:48: 0a:5c:e5:0d:b3:5a:2c:ca:30:bc:e4:97:bb:42:41:10:76:13: 54:08:0b:f8:79:1e:c5:a2:cd:86:a7:78:bf:54:56:6b:49:a2: 67:e9:75:36:65:ae:ad:b9:05:20:4e:f9:c0:59:c9:7f:94:7c: 7b:0b:62:2e:2a:73:0f:eb:fa:4a:fa:65:98:89:d7:00:51:9e: 69:b3:7a:0e:9c:64:b7:ce:93:a6:58:ec:1f:ce:d3:06:73:81: d1:a7:e5:b5:eb:f1:7e:af:5c:78:91:16:88:8c:29:17:98:0d: a3:d0:f6:6a:2c:82:84:16:bc:c3:4e:78:ff:25:c7:5f:89:e2: 12:0f:d3:8a:73:e5:8c:5a:ae:0e:a5:c0:0d:57:32:4a:87:73: 48:0e:a6:36:d2:03:24:f5:e7:82:82:06:a2:c9:1e:9b:7d:11: 6d:f6:7d:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lN4xygrd/5gPq4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk ZTRlZWQ5OTYtOGVkYi00NzU4LTgxYmYtYjhmNDRkNDVlNjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSSf2nI+TIpFO5X5L9RVZNXXAS62ZLHnhyoc xXpGu8hnXsWQpFFY6qG1Asd5R5NjWrZOfPR7K/T+MXKYkbU1H8DVAA04BNCeGNJB 9IlQZYxl7pgNHW9iJ1bpAQ+uJsDOETxOX9vESP/y91MeGFspPe2ZguxfBnzkAJdQ 97g9/AEBxyqFxQLzJC6FrTir1FoegDynZPzV6Wok8eGwSObeXb0kglNaaoh3ryEm cBKZEd6LOYBPS9p1uQ3MQ1Kp97jcCdsPyIy2Iz0dFJA4RyubuCkUYF3l4wtIq7UU toFfKUufz6PLU5D4BJEa3dIBNYQea/F1xxmeSv78eeCTJGc5jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCwdkDhh1HjZvYqC1m17dSmzahXwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNThkN2QzZTctOTAwYy0z OThjLThhNWQtNGQ0OTlhYWEzNDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCH2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAdNTrk4SyL6IPEsMCQ/oL//tPpHttbN4RLOWL/QJ6+CXugfZS2JWXG6 l2m59oHFcYCcygHUX5d0c8b0fOWS+zZexBU+LDsgYfYeBUHHef5jFrX7DmhEFV6O SApc5Q2zWizKMLzkl7tCQRB2E1QIC/h5HsWizYaneL9UVmtJomfpdTZlrq25BSBO +cBZyX+UfHsLYi4qcw/r+kr6ZZiJ1wBRnmmzeg6cZLfOk6ZY7B/O0wZzgdGn5bXr 8X6vXHiRFoiMKReYDaPQ9mosgoQWvMNOeP8lx1+J4hIP04pz5Yxarg6lwA1XMkqH c0gOpjbSAyT154KCBqLJHpt9EW32fQk= -----END CERTIFICATE-----Generated at Fri Jul 24 00:25:06 2026 by rpki-client