$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fd166ead-6588-3c1b-9779-c167a7e2d9aa.roa File: fd166ead-6588-3c1b-9779-c167a7e2d9aa.roa (raw, json) Hash identifier: OizfNSD5z4enMtvBuVCFFz/ZAqA/icgHF9rwtJz/Q34= Subject key identifier: 17:82:DE:99:96:F0:F7:05:09:8D:18:83:29:D7:B3:F0:88:45:BB:61 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E7E94EAD7C6C215FECC4B8500 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fd166ead-6588-3c1b-9779-c167a7e2d9aa.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 31898 IP address blocks: 192.22.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:ea:d7:c6:c2:15:fe:cc:4b:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=7080a9f1-8b1f-4b1b-a183-cb2776565e0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:13:87:09:b0:e4:2d:1b:c6:18:7a:8a:bb:34: 7e:03:af:cf:84:01:09:15:fa:5d:04:f7:3d:e0:d7: 0c:47:92:0f:c7:f2:16:e3:3a:72:28:95:d3:31:af: 76:b8:b2:b0:a8:1a:3d:f6:1a:ac:86:86:d6:a9:08: 3e:1d:b8:5f:8a:c7:ab:d4:9c:00:30:76:f2:17:37: dd:db:a1:ee:b7:9d:04:0b:6c:cb:a8:2e:8f:20:26: 2a:ea:21:3c:0a:df:57:27:55:29:0c:ef:b8:57:82: ca:52:29:d0:d3:28:9d:c2:53:d6:90:07:6d:55:dd: 0c:9f:35:cd:ac:d7:6a:f9:1f:8f:79:68:6a:f0:af: c2:f5:4d:0f:fe:47:74:4f:40:9d:22:bc:d6:5a:b7: 1b:8f:d6:6d:bc:f7:7e:9f:69:59:54:33:59:dc:6f: 2d:ab:aa:a0:ee:60:bd:68:8e:00:ee:f4:20:ee:42: 6c:cd:1b:6c:5f:33:fb:45:85:0c:a9:58:a0:01:8d: 57:ad:c9:b1:c0:26:84:dd:ad:74:bf:fa:31:3c:f4: 66:b2:97:1f:d7:e1:79:65:10:34:b7:9a:8c:df:79: 17:21:5f:f1:20:5f:ea:cb:8b:39:ce:f5:50:a3:98: 9c:54:c7:0e:63:61:ac:11:31:da:6d:9c:b1:0d:1c: bd:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:82:DE:99:96:F0:F7:05:09:8D:18:83:29:D7:B3:F0:88:45:BB:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fd166ead-6588-3c1b-9779-c167a7e2d9aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 192.22.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:cc:07:6a:4c:13:57:d1:3e:c1:45:59:08:61:e8:de:57:07: 21:e7:25:1f:b8:73:d0:5a:91:ea:07:1d:ac:e6:72:f6:ea:f1: dc:dc:b4:25:53:28:6d:e6:a9:b5:70:90:b4:f4:e1:d0:c5:ff: 8f:73:7b:d9:7b:91:3e:3a:4e:f9:a1:9c:cf:f4:aa:c9:0a:dc: 6b:4e:39:be:bc:74:e0:c1:66:da:2e:0b:4f:a6:d3:7b:63:46: 5f:18:81:df:4e:eb:ab:be:f4:3a:f4:3c:9a:3a:7c:52:1f:53: eb:b2:18:f2:fa:4b:91:8f:f4:04:bb:5b:f1:6b:be:96:66:d9: 4b:9b:3a:e3:f9:33:2a:c6:d4:bc:00:98:04:41:e1:a0:92:c5: 60:5a:d3:79:72:0d:4c:00:30:25:09:cb:82:2f:6b:85:0c:eb: 3a:1d:52:1f:ab:b7:1e:98:5a:80:04:63:73:1e:23:33:d8:30: b9:93:46:74:e0:2f:f4:25:dd:84:a0:7b:72:5b:6e:38:5f:99: 21:53:a1:98:79:ca:f4:26:22:6b:5c:2b:8f:f7:a5:ea:68:29: ca:f1:d0:c3:46:bc:ef:2a:b0:93:b7:2e:78:61:bf:f2:c1:79: 9d:97:7d:2a:a7:3e:d9:2c:c6:5a:a7:05:24:ee:a1:29:bf:95: 12:91:71:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lOrXxsIV/sxLhQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk NzA4MGE5ZjEtOGIxZi00YjFiLWExODMtY2IyNzc2NTY1ZTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhOHCbDkLRvGGHqKuzR+A6/PhAEJFfpdBPc9 4NcMR5IPx/IW4zpyKJXTMa92uLKwqBo99hqshobWqQg+Hbhfiser1JwAMHbyFzfd 26Hut50EC2zLqC6PICYq6iE8Ct9XJ1UpDO+4V4LKUinQ0yidwlPWkAdtVd0MnzXN rNdq+R+PeWhq8K/C9U0P/kd0T0CdIrzWWrcbj9ZtvPd+n2lZVDNZ3G8tq6qg7mC9 aI4A7vQg7kJszRtsXzP7RYUMqVigAY1XrcmxwCaE3a10v/oxPPRmspcf1+F5ZRA0 t5qM33kXIV/xIF/qy4s5zvVQo5icVMcOY2GsETHabZyxDRy93QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBeC3pmW8PcFCY0YgynXs/CIRbthMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZmQxNjZlYWQtNjU4OC0z YzFiLTk3NzktYzE2N2E3ZTJkOWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwBZgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGrMB2pME1fRPsFFWQhh6N5XByHnJR+4c9BakeoHHazmcvbq8dzctCVT KG3mqbVwkLT04dDF/49ze9l7kT46TvmhnM/0qskK3GtOOb68dODBZtouC0+m03tj Rl8Ygd9O66u+9Dr0PJo6fFIfU+uyGPL6S5GP9AS7W/FrvpZm2UubOuP5MyrG1LwA mARB4aCSxWBa03lyDUwAMCUJy4Iva4UM6zodUh+rtx6YWoAEY3MeIzPYMLmTRnTg L/Ql3YSge3JbbjhfmSFToZh5yvQmImtcK4/3pepoKcrx0MNGvO8qsJO3Lnhhv/LB eZ2XfSqnPtksxlqnBSTuoSm/lRKRcUc= -----END CERTIFICATE-----Generated at Fri Jul 24 01:43:36 2026 by rpki-client