$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a385dc39-92c7-3189-978c-00ed1170a358.roa File: a385dc39-92c7-3189-978c-00ed1170a358.roa (raw, json) Hash identifier: PHlTvPekKu0+89cD6yN9Kmx+IuGaGsE3fy4CLl3F52Q= Subject key identifier: A8:21:6E:54:4B:40:2F:63:5E:8B:BF:B8:58:F1:49:59:C5:A7:F8:15 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E7FFA53C6126F850AF0B34FC0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a385dc39-92c7-3189-978c-00ed1170a358.roa Signing time: Tue 14 Jul 2026 21:00:12 +0000 ROA not before: Tue 14 Jul 2026 21:00:12 +0000 ROA not after: Mon 12 Oct 2026 21:00:12 +0000 asID: 31898 IP address blocks: 192.9.196.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7f:fa:53:c6:12:6f:85:0a:f0:b3:4f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 14 21:00:12 2026 GMT Not After : Oct 12 21:00:12 2026 GMT Subject: CN=14949fb2-018a-4201-b97e-a021c3213f1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:1e:6e:57:d9:3d:61:82:3d:69:f6:f1:a8:89: 7b:d4:af:a4:ce:a3:54:4d:4c:c5:f2:6a:60:24:5e: 2e:aa:58:46:23:d7:ad:0f:90:28:22:24:3b:c1:16: 45:68:11:f4:ad:23:45:cb:70:9e:00:99:66:72:30: 11:1e:37:ed:a3:ea:04:cf:0e:97:65:2e:9f:a6:3c: b9:23:12:52:17:15:0b:f0:6e:8b:3c:2c:9d:b2:6f: b7:f7:e7:c1:fe:66:f8:9c:4c:51:be:eb:dd:36:f4: b7:65:d7:e3:42:04:50:c7:bb:ce:f5:f5:d1:1d:5e: c1:9e:15:56:f8:c1:dc:0b:e1:21:f9:85:ec:fd:ba: 63:ba:af:cc:6f:d0:3e:1d:1d:55:44:40:c1:aa:7a: da:e0:fa:e2:d6:44:29:6a:bd:99:33:53:4c:65:15: 66:7a:5b:1f:63:61:ef:c2:dd:9f:07:09:b4:30:db: d0:37:30:d5:cd:80:b7:a9:b7:07:b7:f6:2c:7f:9f: 9c:f0:4a:45:fb:a8:9f:37:4f:9a:c6:4a:2a:a4:21: 1b:da:32:2a:a1:3c:08:9d:96:59:be:1a:46:bf:64: d1:f8:0f:4a:18:21:09:2d:3f:19:d9:2e:06:f2:6c: d4:38:39:f6:56:18:4e:bf:d5:9f:2a:b1:88:c5:d8: 47:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:21:6E:54:4B:40:2F:63:5E:8B:BF:B8:58:F1:49:59:C5:A7:F8:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a385dc39-92c7-3189-978c-00ed1170a358.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 192.9.196.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:8d:c9:08:c5:5b:22:30:bc:57:73:6f:ad:ab:58:60:c0:85: 13:bf:25:37:1d:16:87:42:a2:63:10:6d:08:7a:7c:e7:79:f5: 1d:32:7c:4d:83:01:dc:87:cc:ca:96:38:20:6e:97:b7:f7:41: a9:36:9b:0e:28:9d:e5:fb:68:af:7e:1d:0a:c7:33:e1:44:46: df:29:1c:71:73:2e:29:18:7b:42:f1:6b:80:12:33:f0:ca:da: ae:25:7c:10:95:27:2c:7e:81:1c:68:be:e1:b2:11:f3:d1:04: d5:b4:c1:0a:61:e3:61:01:cf:eb:39:9b:67:c4:b0:03:43:83: bb:b7:ba:37:40:0e:f9:39:d2:f2:0c:cd:fb:4c:5f:42:41:78: 7e:89:e5:5e:37:1d:a4:33:f8:53:d5:9d:98:92:9d:9f:da:fd: 18:a0:b9:32:1b:96:e0:2a:97:9f:f5:88:a4:2c:a9:b7:53:3b: 49:5d:a3:74:16:56:cb:b8:73:8d:9a:43:d1:92:57:ae:25:db: a1:9f:97:50:6d:36:14:f1:fb:e3:d4:61:8f:8b:f9:3d:3d:9c: 5e:a7:40:6a:8f:12:ce:ba:3b:6f:99:59:71:7b:ff:f4:2e:8c: 70:07:f0:71:71:86:cc:5e:db:43:1f:c3:d4:2d:b7:9c:29:f4: 32:b2:d2:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5/+lPGEm+FCvCzT8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcxNDIxMDAxMloXDTI2MTAxMjIxMDAxMlowLzEtMCsGA1UEAxMk MTQ5NDlmYjItMDE4YS00MjAxLWI5N2UtYTAyMWMzMjEzZjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiR5uV9k9YYI9afbxqIl71K+kzqNUTUzF8mpg JF4uqlhGI9etD5AoIiQ7wRZFaBH0rSNFy3CeAJlmcjARHjfto+oEzw6XZS6fpjy5 IxJSFxUL8G6LPCydsm+39+fB/mb4nExRvuvdNvS3ZdfjQgRQx7vO9fXRHV7BnhVW +MHcC+Eh+YXs/bpjuq/Mb9A+HR1VREDBqnra4Pri1kQpar2ZM1NMZRVmelsfY2Hv wt2fBwm0MNvQNzDVzYC3qbcHt/Ysf5+c8EpF+6ifN0+axkoqpCEb2jIqoTwInZZZ vhpGv2TR+A9KGCEJLT8Z2S4G8mzUODn2VhhOv9WfKrGIxdhHhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKghblRLQC9jXou/uFjxSVnFp/gVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYTM4NWRjMzktOTJjNy0z MTg5LTk3OGMtMDBlZDExNzBhMzU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwAnEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGKNyQjFWyIwvFdzb62rWGDAhRO/JTcdFodComMQbQh6fOd59R0yfE2D AdyHzMqWOCBul7f3Qak2mw4oneX7aK9+HQrHM+FERt8pHHFzLikYe0Lxa4ASM/DK 2q4lfBCVJyx+gRxovuGyEfPRBNW0wQph42EBz+s5m2fEsANDg7u3ujdADvk50vIM zftMX0JBeH6J5V43HaQz+FPVnZiSnZ/a/RiguTIbluAql5/1iKQsqbdTO0ldo3QW Vsu4c42aQ9GSV64l26Gfl1BtNhTx++PUYY+L+T09nF6nQGqPEs66O2+ZWXF7//Qu jHAH8HFxhsxe20Mfw9Qtt5wp9DKy0hA= -----END CERTIFICATE-----Generated at Fri Jul 24 12:21:43 2026 by rpki-client