$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7dd65e63-a2f2-307d-9565-1a245811fba8.roa File: 7dd65e63-a2f2-307d-9565-1a245811fba8.roa (raw, json) Hash identifier: dvgVnqf3lWPU3Xw6R96jKufRYcibG4/cQXamD8O9q20= Subject key identifier: 29:59:9F:35:27:24:5E:30:B7:5A:9A:10:96:51:02:05:36:7D:B0:81 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E7E94EEEA35181946BC1F1100 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7dd65e63-a2f2-307d-9565-1a245811fba8.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 31898 IP address blocks: 192.22.106.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:ee:ea:35:18:19:46:bc:1f:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=ed3bc94d-d79c-457c-a289-529ca4a74d97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:0b:18:f9:99:8e:fd:6a:fa:a1:dd:2a:a7:d5: d2:f7:2a:b3:a9:27:8d:20:17:88:06:99:78:e4:d1: 7f:44:5b:91:ac:9d:c7:b5:4b:ef:6d:6f:ae:a8:91: f9:68:c6:88:d0:32:08:1e:fd:6d:58:de:66:9f:26: 34:e8:cc:1b:82:04:9d:da:d2:3c:65:da:f8:2a:21: de:7f:4d:12:df:3e:fd:bd:58:fd:66:c3:e5:ad:98: cf:f0:bd:4d:39:73:fd:d9:9d:57:21:79:cf:5c:51: c5:2d:34:8b:94:25:c6:da:d2:bf:35:16:2a:69:e2: 1b:b6:cd:05:45:86:8a:e1:3d:0e:d9:b9:b6:f9:d5: 5d:55:b5:4b:33:de:64:86:42:7b:12:e4:90:c9:1f: 92:df:ed:ff:ec:18:23:48:2b:2c:6a:17:7f:7b:69: 7e:83:f3:db:66:6f:e8:b3:7a:4c:38:e2:3e:e5:ba: 49:90:fa:39:6b:07:2f:6c:9f:a8:5f:fd:71:db:76: f0:c7:3d:86:9b:c3:75:51:e6:9a:e9:e9:8a:fb:99: b7:81:96:ac:71:3d:a6:08:e8:5f:35:93:7c:01:23: 5d:2e:43:97:d5:25:e8:68:c1:24:51:ad:21:f0:34: 96:b3:79:c8:e1:6d:ed:e7:c7:d3:11:5f:f6:9e:52: 8b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:59:9F:35:27:24:5E:30:B7:5A:9A:10:96:51:02:05:36:7D:B0:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7dd65e63-a2f2-307d-9565-1a245811fba8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 192.22.106.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:69:87:46:16:41:f1:d3:52:01:19:82:9d:95:f4:4f:fe:3a: d1:8b:12:5e:b3:c1:7f:01:b3:6c:a7:0f:9d:b0:2b:69:e7:f6: 53:0f:26:47:64:94:66:42:8b:9c:d9:1b:b3:b3:66:9a:5a:4d: 60:1b:43:2e:b6:50:aa:e3:0e:a6:78:59:dd:06:0f:ed:07:7f: 68:c2:10:6a:f9:1e:92:50:11:bf:66:2b:57:07:ed:01:10:0b: c9:77:41:95:2a:a4:76:63:05:2f:b7:3d:3e:d6:d4:e1:dc:ff: d0:fd:d3:a4:8c:78:6b:42:5f:78:b9:2b:5a:d0:c2:c5:4e:89: 70:08:2d:ce:2c:75:d7:10:d9:10:6b:11:7b:f8:43:b5:a6:15: 86:a1:7e:e8:20:03:2e:31:1d:00:52:e5:21:73:e8:9c:4b:9b: 92:d3:f4:33:5a:63:f7:5a:ba:6d:ec:39:85:17:52:82:bc:9d: ae:26:e7:3f:0e:0f:ed:2f:b1:fb:21:fe:75:21:d3:cc:47:c1: 1f:23:48:41:fe:18:18:7d:af:b0:ad:46:78:90:01:5b:3c:6f: 84:40:ba:eb:60:4b:87:f2:1b:f0:17:73:27:38:37:f2:39:d0: 73:67:c0:6e:59:b9:95:95:ed:2b:ba:ff:ef:33:ec:c9:2e:55: 2a:e9:6c:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lO7qNRgZRrwfEQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk ZWQzYmM5NGQtZDc5Yy00NTdjLWEyODktNTI5Y2E0YTc0ZDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQsY+ZmO/Wr6od0qp9XS9yqzqSeNIBeIBpl4 5NF/RFuRrJ3HtUvvbW+uqJH5aMaI0DIIHv1tWN5mnyY06MwbggSd2tI8Zdr4KiHe f00S3z79vVj9ZsPlrZjP8L1NOXP92Z1XIXnPXFHFLTSLlCXG2tK/NRYqaeIbts0F RYaK4T0O2bm2+dVdVbVLM95khkJ7EuSQyR+S3+3/7BgjSCssahd/e2l+g/PbZm/o s3pMOOI+5bpJkPo5awcvbJ+oX/1x23bwxz2Gm8N1Ueaa6emK+5m3gZascT2mCOhf NZN8ASNdLkOX1SXoaMEkUa0h8DSWs3nI4W3t58fTEV/2nlKL/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFClZnzUnJF4wt1qaEJZRAgU2fbCBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvN2RkNjVlNjMtYTJmMi0z MDdkLTk1NjUtMWEyNDU4MTFmYmE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwBZqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhph0YWQfHTUgEZgp2V9E/+OtGLEl6zwX8Bs2ynD52wK2nn9lMPJkdk lGZCi5zZG7OzZppaTWAbQy62UKrjDqZ4Wd0GD+0Hf2jCEGr5HpJQEb9mK1cH7QEQ C8l3QZUqpHZjBS+3PT7W1OHc/9D906SMeGtCX3i5K1rQwsVOiXAILc4sddcQ2RBr EXv4Q7WmFYahfuggAy4xHQBS5SFz6JxLm5LT9DNaY/daum3sOYUXUoK8na4m5z8O D+0vsfsh/nUh08xHwR8jSEH+GBh9r7CtRniQAVs8b4RAuutgS4fyG/AXcyc4N/I5 0HNnwG5ZuZWV7Su6/+8z7MkuVSrpbHQ= -----END CERTIFICATE-----Generated at Fri Jul 24 03:54:41 2026 by rpki-client