$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bbd9a2c7-290e-3067-9670-5641ca897df3.roa File: bbd9a2c7-290e-3067-9670-5641ca897df3.roa (raw, json) Hash identifier: 8xingCKUcXKUu913zx+NDuiprzvL+lKPzJSU4szaq8I= Subject key identifier: 71:AD:F0:82:34:C0:47:99:C2:D9:B0:56:64:8A:AD:B4:C5:86:EB:B5 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D9A2015C7673B609887A0DB40 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bbd9a2c7-290e-3067-9670-5641ca897df3.roa Signing time: Thu 23 Apr 2026 13:00:32 +0000 ROA not before: Thu 23 Apr 2026 13:00:32 +0000 ROA not after: Wed 22 Jul 2026 13:00:32 +0000 asID: 31898 IP address blocks: 192.22.170.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9a:20:15:c7:67:3b:60:98:87:a0:db:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 23 13:00:32 2026 GMT Not After : Jul 22 13:00:32 2026 GMT Subject: CN=4d9d7185-9955-4a7e-bcfe-e8153545f66b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:4f:c5:dc:43:a9:71:f1:fc:57:3e:b8:f1:c4: 48:38:44:f4:3f:71:54:cd:ed:bc:ac:af:e4:9d:f7: 3a:08:ae:11:95:dc:0b:1d:2f:8d:3c:d1:22:07:b7: 01:2d:59:41:29:12:2a:48:49:22:d2:c2:6f:0f:41: 36:9a:2a:dc:af:1d:af:25:52:8b:b1:9a:e7:68:e2: 3d:1b:91:8a:ba:09:16:36:95:3f:c1:b2:c5:ea:58: b2:97:cf:35:ea:c1:44:d1:4b:24:76:ec:24:38:d4: 89:0f:16:26:63:04:ca:3c:69:2b:ce:f8:bb:61:7d: 53:b0:a5:a8:54:3d:44:d1:dc:b0:9f:69:8d:e4:88: 38:66:33:4e:5e:34:de:b4:27:e8:56:a0:53:2e:c4: dd:3c:78:d0:35:a4:0a:0f:2b:82:bc:ac:09:1c:39: e6:06:f3:99:a3:e0:e9:e4:59:f3:9d:85:08:97:09: cb:41:20:40:4b:88:34:ee:29:b6:92:81:5e:a8:a8: 7c:64:be:b9:39:98:20:23:c4:a6:cf:e5:0d:ff:83: 25:db:4a:6a:ab:84:33:8d:9a:a2:2c:d8:6a:03:a1: 0f:d3:1a:1d:cc:05:a0:da:01:6d:08:9c:33:1f:ca: 0c:9c:7a:90:13:58:f0:aa:d2:cb:18:30:0c:90:dd: 8e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:AD:F0:82:34:C0:47:99:C2:D9:B0:56:64:8A:AD:B4:C5:86:EB:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bbd9a2c7-290e-3067-9670-5641ca897df3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 192.22.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:34:3b:06:7a:34:be:ec:62:47:8f:70:b4:28:8b:ec:c7:ad: 73:f5:f3:12:fe:bf:b3:4f:b5:d2:f9:bc:d4:d4:ed:b2:4a:28: 67:2d:5e:29:30:1e:cd:a4:1a:bd:22:76:94:1d:76:e2:71:19: e8:75:b8:58:e9:b8:d8:8b:21:80:1c:1d:3e:89:3c:ca:62:d7: 62:ce:67:97:fa:7c:46:42:be:4d:bc:f0:73:8b:9e:d5:e8:ce: 3b:a1:b6:55:e0:4f:ef:3a:16:4f:e4:7b:21:1e:13:5f:58:bc: 32:3a:0f:ab:d3:85:91:1c:23:2e:31:68:58:85:6c:73:1c:ea: bc:5f:24:c6:53:ad:ed:b4:d2:87:b1:df:7d:a5:36:c3:71:ac: 17:c6:9f:3c:a0:4c:9a:83:9d:21:34:c1:5b:1d:da:2d:b5:88: d3:11:05:1c:5a:58:1b:7a:b4:73:fd:e7:f7:ff:54:e1:ae:82: b5:45:38:9e:b4:e1:37:8a:e6:07:43:9f:9c:e4:a7:13:fd:86: be:d6:08:bd:e4:34:91:85:1b:23:ed:9c:4b:44:65:75:cf:e3: 21:9c:53:12:39:14:94:4c:ea:06:2f:62:b8:99:83:a1:7e:44: fa:88:bd:ea:84:d9:a0:e9:40:7d:03:52:10:03:40:a2:ce:8b: 49:03:15:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2aIBXHZztgmIeg20AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQyMzEzMDAzMloXDTI2MDcyMjEzMDAzMlowLzEtMCsGA1UEAxMk NGQ5ZDcxODUtOTk1NS00YTdlLWJjZmUtZTgxNTM1NDVmNjZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0/F3EOpcfH8Vz648cRIOET0P3FUze28rK/k nfc6CK4RldwLHS+NPNEiB7cBLVlBKRIqSEki0sJvD0E2mircrx2vJVKLsZrnaOI9 G5GKugkWNpU/wbLF6liyl8816sFE0UskduwkONSJDxYmYwTKPGkrzvi7YX1TsKWo VD1E0dywn2mN5Ig4ZjNOXjTetCfoVqBTLsTdPHjQNaQKDyuCvKwJHDnmBvOZo+Dp 5FnznYUIlwnLQSBAS4g07im2koFeqKh8ZL65OZggI8Smz+UN/4Ml20pqq4QzjZqi LNhqA6EP0xodzAWg2gFtCJwzH8oMnHqQE1jwqtLLGDAMkN2OFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHGt8II0wEeZwtmwVmSKrbTFhuu1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYmJkOWEyYzctMjkwZS0z MDY3LTk2NzAtNTY0MWNhODk3ZGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwBaqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD00OwZ6NL7sYkePcLQoi+zHrXP18xL+v7NPtdL5vNTU7bJKKGctXikw Hs2kGr0idpQdduJxGeh1uFjpuNiLIYAcHT6JPMpi12LOZ5f6fEZCvk288HOLntXo zjuhtlXgT+86Fk/keyEeE19YvDI6D6vThZEcIy4xaFiFbHMc6rxfJMZTre200oex 332lNsNxrBfGnzygTJqDnSE0wVsd2i21iNMRBRxaWBt6tHP95/f/VOGugrVFOJ60 4TeK5gdDn5zkpxP9hr7WCL3kNJGFGyPtnEtEZXXP4yGcUxI5FJRM6gYvYriZg6F+ RPqIveqE2aDpQH0DUhADQKLOi0kDFSI= -----END CERTIFICATE-----Generated at Wed May 13 05:11:01 2026 by rpki-client