$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9850f12d-eb76-3cdb-899b-4ad7ea0b5b56.roa File: 9850f12d-eb76-3cdb-899b-4ad7ea0b5b56.roa (raw, json) Hash identifier: vP0cjm4/wM4gB82IGUocvRNz35rMdJrqUfyQJ4pkrQw= Subject key identifier: C8:E9:22:FC:C5:41:F1:1E:B0:D4:B9:25:98:48:55:83:81:8E:39:BB Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E7E9503DDC654AB801B6C3300 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9850f12d-eb76-3cdb-899b-4ad7ea0b5b56.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 31898 IP address blocks: 192.33.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:95:03:dd:c6:54:ab:80:1b:6c:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=4f58e452-9834-4c79-aedc-fea133fad71d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:96:00:bc:bf:bc:1a:b4:b2:a8:4e:b4:31:d7: ab:4a:16:98:f0:cd:33:45:64:e3:d4:c3:56:9c:5b: 60:1b:1d:01:b0:5e:86:49:89:95:e2:5f:68:cf:66: eb:8a:b4:6a:99:ac:34:ca:08:a0:cf:66:0a:a3:d9: 6b:9e:68:d5:2e:4e:7a:96:b1:55:1b:ea:dd:fc:fb: 10:5b:86:b5:29:f3:c6:ac:00:2a:e3:b2:46:64:f0: 72:7d:b6:8e:9b:4c:47:c9:2c:c8:7e:cc:04:6b:fe: bd:fd:82:ed:65:b9:79:b7:be:36:0c:70:d4:43:bc: ff:b6:a5:15:3d:ed:54:57:35:de:d6:3a:e4:29:07: 66:6a:eb:c9:a3:df:18:73:6b:67:2f:a5:b8:b2:7d: f9:5f:bb:6a:fe:5f:35:06:be:7a:04:d0:b0:69:ee: b4:21:1d:75:6e:91:b6:29:71:1f:74:b1:05:ad:2d: 48:58:1d:c1:d9:65:b4:ec:7c:70:5b:8a:d3:01:19: ed:43:7e:1b:48:05:59:58:2c:bf:eb:9d:d6:50:5c: e8:76:b5:a5:9b:b2:af:4e:20:5d:27:cb:98:70:44: d6:a9:44:c5:5a:5e:1c:a2:ae:f0:58:12:37:a9:eb: 15:6b:b9:a8:a8:9c:3e:eb:5d:a4:06:ec:23:e9:c6: 7a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:E9:22:FC:C5:41:F1:1E:B0:D4:B9:25:98:48:55:83:81:8E:39:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9850f12d-eb76-3cdb-899b-4ad7ea0b5b56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 192.33.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:6b:c3:fb:1f:86:2c:b3:73:59:9a:a8:f4:b4:fc:78:38:ff: 38:87:69:10:e6:c4:c3:f8:05:32:a7:13:35:3c:b9:c7:ad:aa: bf:fb:95:78:4a:57:c9:81:83:dc:06:5a:50:ee:72:8f:6f:9f: aa:3a:5a:4a:8b:df:b7:78:a0:ef:e0:72:fa:9c:50:9a:c1:fa: c8:3e:98:19:86:40:04:35:40:19:db:b1:10:5a:3d:fd:f6:44: 50:2c:9f:74:ef:24:57:8f:d3:19:18:63:33:80:a5:27:7b:51: db:09:fe:e8:7b:b6:4e:e8:7d:4c:9a:64:a5:31:71:e6:6a:d2: e3:23:bb:42:8f:d9:85:15:2c:95:01:1d:86:bc:be:83:41:06: bb:f1:25:9e:ac:37:82:1d:42:5e:73:97:ff:82:91:83:54:1f: 6c:a7:ff:2f:1f:0d:e9:5e:be:36:c7:43:c8:db:19:3b:0f:d3: 7a:02:03:08:cb:e3:96:7a:aa:9a:1f:97:67:2f:54:c5:d0:a9: 89:dc:fc:2d:c8:75:b7:42:77:ba:79:3e:9d:62:34:02:d1:a1: 33:43:2f:22:7d:d7:3a:86:d9:54:f2:c0:e9:05:8f:95:b4:1a: 60:0b:63:6a:9f:7e:22:a0:94:50:ec:15:dc:fa:a3:be:be:ee: 94:b5:da:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lQPdxlSrgBtsMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk NGY1OGU0NTItOTgzNC00Yzc5LWFlZGMtZmVhMTMzZmFkNzFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJYAvL+8GrSyqE60MderShaY8M0zRWTj1MNW nFtgGx0BsF6GSYmV4l9oz2brirRqmaw0ygigz2YKo9lrnmjVLk56lrFVG+rd/PsQ W4a1KfPGrAAq47JGZPByfbaOm0xHySzIfswEa/69/YLtZbl5t742DHDUQ7z/tqUV Pe1UVzXe1jrkKQdmauvJo98Yc2tnL6W4sn35X7tq/l81Br56BNCwae60IR11bpG2 KXEfdLEFrS1IWB3B2WW07HxwW4rTARntQ34bSAVZWCy/653WUFzodrWlm7KvTiBd J8uYcETWqUTFWl4coq7wWBI3qesVa7moqJw+612kBuwj6cZ6kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMjpIvzFQfEesNS5JZhIVYOBjjm7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOTg1MGYxMmQtZWI3Ni0z Y2RiLTg5OWItNGFkN2VhMGI1YjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCH0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxrw/sfhiyzc1maqPS0/Hg4/ziHaRDmxMP4BTKnEzU8ucetqr/7lXhK V8mBg9wGWlDuco9vn6o6WkqL37d4oO/gcvqcUJrB+sg+mBmGQAQ1QBnbsRBaPf32 RFAsn3TvJFeP0xkYYzOApSd7UdsJ/uh7tk7ofUyaZKUxceZq0uMju0KP2YUVLJUB HYa8voNBBrvxJZ6sN4IdQl5zl/+CkYNUH2yn/y8fDelevjbHQ8jbGTsP03oCAwjL 45Z6qpofl2cvVMXQqYnc/C3IdbdCd7p5Pp1iNALRoTNDLyJ91zqG2VTywOkFj5W0 GmALY2qffiKglFDsFdz6o76+7pS12pg= -----END CERTIFICATE-----Generated at Fri Jul 24 01:47:06 2026 by rpki-client