$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/90d42c44-2252-3c5b-9e91-21259b33cf7c.roa File: 90d42c44-2252-3c5b-9e91-21259b33cf7c.roa (raw, json) Hash identifier: z+8y1+4EXgPmN6LxR07arsY/KRX74tdnz2Lm9nNBSzM= Subject key identifier: 2D:13:26:CA:73:A6:28:39:42:ED:ED:2F:34:02:41:A2:42:FD:64:07 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584E5A4A1F2FEF52CA7E56084F20 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/90d42c44-2252-3c5b-9e91-21259b33cf7c.roa Signing time: Wed 01 Jul 2026 09:00:12 +0000 ROA not before: Wed 01 Jul 2026 09:00:12 +0000 ROA not after: Tue 29 Sep 2026 09:00:12 +0000 asID: 202623 IP address blocks: 198.41.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5a:4a:1f:2f:ef:52:ca:7e:56:08:4f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jul 1 09:00:12 2026 GMT Not After : Sep 29 09:00:12 2026 GMT Subject: CN=4f5599ad-c47c-4012-856b-16ad502dbe8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:39:20:0e:bd:07:88:a7:6d:92:26:87:59:c8: db:55:37:2a:be:d6:b8:83:1c:c2:a6:de:92:60:11: 9d:2f:79:21:4c:58:97:af:5c:d0:a0:8a:df:a9:8a: 3a:9f:e9:ab:e0:f7:ef:d0:0c:e7:44:6d:00:42:0f: 50:dc:d7:ae:7d:7b:de:4d:96:07:3c:10:23:eb:3e: de:04:d5:fd:bb:e2:7c:44:9b:5a:a6:a4:00:85:2f: cd:33:c9:a3:e2:bf:8f:62:2d:f8:62:43:3e:8e:22: 5a:05:34:ac:ee:4b:a2:d9:dc:27:54:45:1d:bb:bd: 04:7a:47:81:ef:ea:be:5c:a9:69:3a:05:6a:7a:ac: 3d:a2:77:21:24:c5:15:16:84:1b:30:8a:fa:36:8e: 7e:69:c0:58:5b:dc:ac:81:00:c6:ac:68:90:ed:7f: 6d:c3:44:31:bf:9d:f1:84:fc:a8:65:67:b1:e9:4f: ae:d3:14:df:db:7d:cd:52:61:5d:cd:15:b6:3f:66: d2:6a:45:27:df:22:33:58:91:f5:1c:22:de:7d:23: 89:3a:98:1b:7d:8f:9d:6a:71:0a:7d:07:c0:2b:fa: f4:e7:b8:bc:c7:4a:3d:14:27:f4:f7:b7:92:0c:0a: 27:a5:91:f2:53:43:5c:10:e8:9f:29:59:e5:1c:c9: ff:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:13:26:CA:73:A6:28:39:42:ED:ED:2F:34:02:41:A2:42:FD:64:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/90d42c44-2252-3c5b-9e91-21259b33cf7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 198.41.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:42:7a:c6:94:3d:68:cc:eb:14:e0:be:f2:81:d9:9c:dd:c2: a4:2c:ea:3b:53:f8:9b:3b:4d:9b:cf:cc:6e:7b:02:36:28:18: 2b:7e:fa:22:43:80:4f:af:c5:14:2c:6c:d1:39:58:f4:3f:ba: e3:6f:39:67:f5:1b:fb:fb:77:d0:af:9a:08:4c:75:5b:28:75: d8:e4:44:ae:31:5d:f4:de:b2:d7:b6:f6:08:fb:c3:4b:e1:f1: 73:25:b1:ad:fe:67:90:b0:5e:9f:b0:a7:0a:b2:b4:af:d2:ca: 70:4a:eb:e3:34:a9:49:af:99:6a:f8:07:d2:a6:52:ec:97:b8: 0c:f4:b4:e2:ec:11:72:c8:2e:80:a7:5a:b9:df:dd:ea:f0:bb: 6c:19:8c:38:45:4f:d4:9a:0b:99:fd:7a:f9:39:16:33:d9:a7: 48:51:ba:9a:39:87:51:fc:ae:4d:92:68:8e:04:6d:b3:79:ef: 92:6b:0b:25:8e:8d:ac:b3:52:c2:a1:ed:08:9a:a0:e0:31:75: 4e:1f:7b:a2:20:1e:75:ba:62:8c:a9:e6:38:0f:26:02:82:e6: f2:76:ad:ca:1b:f1:54:41:5f:c1:21:5d:8a:15:8c:a2:2b:05: b1:98:7a:15:8b:7c:60:da:2b:54:75:f5:04:58:a6:0b:ef:0c: 26:a4:23:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5aSh8v71LKflYITyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDcwMTA5MDAxMloXDTI2MDkyOTA5MDAxMlowLzEtMCsGA1UEAxMk NGY1NTk5YWQtYzQ3Yy00MDEyLTg1NmItMTZhZDUwMmRiZThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTkgDr0HiKdtkiaHWcjbVTcqvta4gxzCpt6S YBGdL3khTFiXr1zQoIrfqYo6n+mr4Pfv0AznRG0AQg9Q3NeufXveTZYHPBAj6z7e BNX9u+J8RJtapqQAhS/NM8mj4r+PYi34YkM+jiJaBTSs7kui2dwnVEUdu70EekeB 7+q+XKlpOgVqeqw9onchJMUVFoQbMIr6No5+acBYW9ysgQDGrGiQ7X9tw0Qxv53x hPyoZWex6U+u0xTf233NUmFdzRW2P2bSakUn3yIzWJH1HCLefSOJOpgbfY+danEK fQfAK/r057i8x0o9FCf097eSDAonpZHyU0NcEOifKVnlHMn/jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC0TJspzpig5Qu3tLzQCQaJC/WQHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTBkNDJjNDQtMjI1Mi0z YzViLTllOTEtMjEyNTliMzNjZjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCximYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABpCesaUPWjM6xTgvvKB2ZzdwqQs6jtT+Js7TZvPzG57AjYoGCt++iJD gE+vxRQsbNE5WPQ/uuNvOWf1G/v7d9CvmghMdVsoddjkRK4xXfTeste29gj7w0vh 8XMlsa3+Z5CwXp+wpwqytK/SynBK6+M0qUmvmWr4B9KmUuyXuAz0tOLsEXLILoCn Wrnf3erwu2wZjDhFT9SaC5n9evk5FjPZp0hRupo5h1H8rk2SaI4EbbN575JrCyWO jayzUsKh7QiaoOAxdU4fe6IgHnW6Yoyp5jgPJgKC5vJ2rcob8VRBX8EhXYoVjKIr BbGYehWLfGDaK1R19QRYpgvvDCakI3Y= -----END CERTIFICATE-----Generated at Thu Jul 23 20:28:46 2026 by rpki-client