$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fd166ead-6588-3c1b-9779-c167a7e2d9aa.roa File: fd166ead-6588-3c1b-9779-c167a7e2d9aa.roa (raw, json) Hash identifier: 4WTj6Wh8bJwJdPUbpOip/GJn4nlWLEeo13GBBjzQ3/U= Subject key identifier: 86:5E:B6:C5:16:BF:83:05:AB:22:F6:6B:DF:1E:97:5F:79:4B:82:43 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D9E500D758C3EE2DFD4A5AC80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fd166ead-6588-3c1b-9779-c167a7e2d9aa.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 192.22.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:0d:75:8c:3e:e2:df:d4:a5:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=288f0505-03e8-4481-9882-1cb4b7694e3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e2:b5:bc:74:a9:89:26:ab:5f:1f:b6:b4:f1: 67:c6:b8:eb:a1:38:98:bf:87:9c:f0:92:f2:10:fe: 23:5e:27:8c:c2:c2:01:a3:21:83:2c:1a:35:e8:96: 94:0f:c6:ac:56:31:b4:52:ce:16:be:77:59:70:70: e0:20:c2:ee:3a:30:95:dc:7e:52:04:fd:18:43:6b: d9:7c:b6:6c:96:d3:18:31:6e:9c:28:fa:a3:e0:0f: 9a:23:bc:53:68:6b:c9:a0:e2:2d:64:5e:9b:6b:25: ed:18:b8:4a:64:41:f2:3f:79:a7:f5:cd:4f:8c:f9: 73:b6:8a:44:e0:6f:e0:a4:d0:18:7b:f6:6c:4b:a8: 0a:ab:61:b1:05:57:49:80:92:aa:f5:5e:c8:6b:c5: 19:c9:8a:07:a5:49:39:ea:39:00:80:83:e7:9b:3b: 4f:df:b7:99:1f:23:fc:bd:c4:35:6e:e4:26:d9:a0: c0:b6:34:70:81:60:27:94:93:c7:5b:1b:80:68:d6: d2:ca:93:69:8e:56:2d:6b:98:05:e9:e9:0d:db:5a: 7e:07:35:b4:68:8e:cc:0a:b9:f5:a3:63:87:bf:96: d2:9e:3e:b8:6f:09:61:07:05:e9:e9:3f:7a:e7:07: 48:e6:b4:54:02:9d:9c:4e:49:f3:bb:b1:26:2e:c5: a5:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:5E:B6:C5:16:BF:83:05:AB:22:F6:6B:DF:1E:97:5F:79:4B:82:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fd166ead-6588-3c1b-9779-c167a7e2d9aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 192.22.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:34:0d:03:b1:17:4d:e6:b5:11:c7:c2:7f:e1:d8:0d:d3:94: 08:b1:25:a5:ac:f6:f5:22:7d:14:48:5b:b4:80:e2:f1:03:12: 5f:bb:05:c8:fb:82:f8:d1:5c:d5:74:5a:b9:28:2e:6b:07:f9: ab:95:76:0e:1b:12:b5:9f:f6:dc:94:08:b2:91:e0:32:90:66: ed:87:e0:e0:11:f6:e8:60:b3:46:fa:92:1a:41:a0:e8:f4:60: f3:aa:11:38:6a:f0:2b:c5:28:af:13:43:df:e1:0d:95:32:b5: 6a:bc:4f:7c:a5:ee:8a:a4:55:65:5b:19:74:a7:e9:ab:70:2f: 7b:ff:51:64:e0:0b:e4:b6:7c:44:53:d2:3f:ac:23:8d:25:29: 4f:c0:26:b9:bc:c9:17:8e:44:13:b6:65:a0:01:c7:19:1d:4a: 67:c8:74:ed:5d:c2:72:74:c5:d7:31:42:00:86:fb:86:17:89: 86:27:31:5c:ff:47:98:5c:37:0e:df:52:a1:3d:bb:11:f1:47: 30:34:a2:72:23:89:83:f7:4e:d5:60:8b:af:07:e1:a1:96:fa: a8:a6:d1:8b:b0:30:ab:3c:92:4c:e5:54:6e:81:38:3b:54:45: 01:63:bc:7a:99:34:ca:06:ea:6f:a6:2b:4d:0e:30:44:ec:c9: 7a:86:e9:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eUA11jD7i39SlrIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk Mjg4ZjA1MDUtMDNlOC00NDgxLTk4ODItMWNiNGI3Njk0ZTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+K1vHSpiSarXx+2tPFnxrjroTiYv4ec8JLy EP4jXieMwsIBoyGDLBo16JaUD8asVjG0Us4WvndZcHDgIMLuOjCV3H5SBP0YQ2vZ fLZsltMYMW6cKPqj4A+aI7xTaGvJoOItZF6bayXtGLhKZEHyP3mn9c1PjPlztopE 4G/gpNAYe/ZsS6gKq2GxBVdJgJKq9V7Ia8UZyYoHpUk56jkAgIPnmztP37eZHyP8 vcQ1buQm2aDAtjRwgWAnlJPHWxuAaNbSypNpjlYta5gF6ekN21p+BzW0aI7MCrn1 o2OHv5bSnj64bwlhBwXp6T965wdI5rRUAp2cTknzu7EmLsWl+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIZetsUWv4MFqyL2a98el195S4JDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZmQxNjZlYWQtNjU4OC0z YzFiLTk3NzktYzE2N2E3ZTJkOWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwBZgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIM0DQOxF03mtRHHwn/h2A3TlAixJaWs9vUifRRIW7SA4vEDEl+7Bcj7 gvjRXNV0WrkoLmsH+auVdg4bErWf9tyUCLKR4DKQZu2H4OAR9uhgs0b6khpBoOj0 YPOqEThq8CvFKK8TQ9/hDZUytWq8T3yl7oqkVWVbGXSn6atwL3v/UWTgC+S2fERT 0j+sI40lKU/AJrm8yReORBO2ZaABxxkdSmfIdO1dwnJ0xdcxQgCG+4YXiYYnMVz/ R5hcNw7fUqE9uxHxRzA0onIjiYP3TtVgi68H4aGW+qim0YuwMKs8kkzlVG6BODtU RQFjvHqZNMoG6m+mK00OMETsyXqG6QU= -----END CERTIFICATE-----Generated at Wed May 13 04:33:35 2026 by rpki-client