$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a521d914-604a-32f4-82a5-6f40ff6835a1.roa File: a521d914-604a-32f4-82a5-6f40ff6835a1.roa (raw, json) Hash identifier: Kie77kCBmmrBqf7n/8ncJpAcuOGctSsdb/LpA998pwU= Subject key identifier: 65:6B:76:2F:E7:EA:5B:F7:9C:D2:4A:46:F1:2B:72:93:62:65:12:9E Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E7E94E084FC92E8CF040BA780 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a521d914-604a-32f4-82a5-6f40ff6835a1.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 31898 IP address blocks: 192.33.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:e0:84:fc:92:e8:cf:04:0b:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=0e347acc-799b-4f42-989a-e15fa70b0eeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:cc:30:f7:3a:9d:e6:dc:d0:01:73:3c:e3:fb: 9a:6a:af:bc:4b:60:35:0a:af:fe:dd:b9:43:3f:26: e1:2c:21:09:1d:75:12:69:31:df:c2:be:98:82:3b: 94:cc:a4:ef:e9:af:89:22:9b:85:71:93:1b:d3:9a: c0:58:47:69:b1:d3:23:2c:77:58:01:95:fc:ac:24: 4d:45:e3:0f:eb:6d:d4:4a:ec:8a:ba:fc:a1:f0:60: 21:95:62:43:84:18:08:19:d9:42:7d:c9:d6:12:69: 01:c2:ac:84:15:c1:50:b0:f9:f2:f4:b1:bd:e7:ab: a6:a1:7f:4a:ab:fe:6d:ee:6c:81:c7:65:03:a0:de: 0c:29:40:73:7b:bd:55:f7:7c:93:cc:8d:9d:a6:cc: 0f:ab:1c:50:16:58:20:79:71:5c:4d:41:90:2a:d9: fc:21:7f:d9:49:0e:ba:fa:01:a5:8e:13:78:ce:d1: 2a:ea:d4:3f:88:d4:b5:83:86:05:f7:c5:ea:f2:2f: df:38:59:18:cd:71:ea:70:46:e9:6f:72:fc:7a:69: 60:3e:aa:dd:38:50:df:33:7d:a3:63:a4:b8:68:ec: eb:6d:e0:0c:0b:18:6e:83:92:56:0e:fb:43:a5:f5: b9:4d:9b:8b:7f:5f:21:57:bc:40:5c:b7:8d:7a:65: 42:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:6B:76:2F:E7:EA:5B:F7:9C:D2:4A:46:F1:2B:72:93:62:65:12:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a521d914-604a-32f4-82a5-6f40ff6835a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 192.33.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:71:06:ee:64:87:ae:d0:35:76:43:5b:8c:94:b4:e5:85:90: b7:ec:f9:89:43:e8:ac:3b:ce:73:c2:56:7e:2d:e0:a3:d6:23: 25:33:13:91:3b:4c:e1:b9:75:b9:47:6f:51:79:8c:35:49:3a: 23:c3:d1:bf:14:ee:81:a6:ec:67:bd:ea:5e:9e:8a:0b:0c:77: c1:77:9d:5c:c7:31:9d:58:a7:06:74:b5:29:e1:a1:44:c3:6a: 25:b2:f5:01:78:ee:d7:50:75:a1:af:b2:88:32:5f:a7:30:f8: f8:d3:3d:87:f5:6e:b1:ca:43:97:43:74:cb:58:60:72:92:2d: 69:6a:a7:3e:90:0b:31:98:eb:be:69:7a:54:d9:cf:d1:c5:c7: 42:91:2d:86:93:ad:d0:70:40:b1:9f:95:54:2e:fb:b0:5d:e7: 84:2f:a2:ea:6f:fb:11:55:ad:9f:42:c2:76:53:cb:8e:96:06: 94:f2:af:23:87:61:0e:c4:f7:87:87:0a:89:1a:9d:46:97:99: c1:d0:ff:00:d0:b9:82:3a:ff:07:45:61:87:68:b4:a0:f1:4d: 7b:52:37:5a:f4:7a:8b:35:0e:47:08:59:bd:ab:5a:5c:94:c1: e2:97:db:b8:18:2e:aa:53:43:12:a4:ea:44:a0:dd:57:de:d1: 59:11:6b:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lOCE/JLozwQLp4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk MGUzNDdhY2MtNzk5Yi00ZjQyLTk4OWEtZTE1ZmE3MGIwZWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8ww9zqd5tzQAXM84/uaaq+8S2A1Cq/+3blD PybhLCEJHXUSaTHfwr6YgjuUzKTv6a+JIpuFcZMb05rAWEdpsdMjLHdYAZX8rCRN ReMP623USuyKuvyh8GAhlWJDhBgIGdlCfcnWEmkBwqyEFcFQsPny9LG956umoX9K q/5t7myBx2UDoN4MKUBze71V93yTzI2dpswPqxxQFlggeXFcTUGQKtn8IX/ZSQ66 +gGljhN4ztEq6tQ/iNS1g4YF98Xq8i/fOFkYzXHqcEbpb3L8emlgPqrdOFDfM32j Y6S4aOzrbeAMCxhug5JWDvtDpfW5TZuLf18hV7xAXLeNemVCNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGVrdi/n6lv3nNJKRvErcpNiZRKeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYTUyMWQ5MTQtNjA0YS0z MmY0LTgyYTUtNmY0MGZmNjgzNWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCHzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ9xBu5kh67QNXZDW4yUtOWFkLfs+YlD6Kw7znPCVn4t4KPWIyUzE5E7 TOG5dblHb1F5jDVJOiPD0b8U7oGm7Ge96l6eigsMd8F3nVzHMZ1YpwZ0tSnhoUTD aiWy9QF47tdQdaGvsogyX6cw+PjTPYf1brHKQ5dDdMtYYHKSLWlqpz6QCzGY675p elTZz9HFx0KRLYaTrdBwQLGflVQu+7Bd54Qvoupv+xFVrZ9CwnZTy46WBpTyryOH YQ7E94eHCokanUaXmcHQ/wDQuYI6/wdFYYdotKDxTXtSN1r0eos1DkcIWb2rWlyU weKX27gYLqpTQxKk6kSg3Vfe0VkRa38= -----END CERTIFICATE-----Generated at Fri Jul 24 04:05:07 2026 by rpki-client