$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d58ab4c9-6933-49bf-b6b4-e4d3935eda22/65fb3fb6-02c2-3151-852d-620955d225f4.roa File: 65fb3fb6-02c2-3151-852d-620955d225f4.roa (raw, json) Hash identifier: z/cPo4ShqQyLjoGM0pEZyxVcYCTUID/e7KMwO5Fv91g= Subject key identifier: AF:33:94:48:47:C1:11:FC:EE:90:5F:B4:2D:80:44:0C:3A:C6:11:44 Certificate issuer: /CN=d58ab4c9-6933-49bf-b6b4-e4d3935eda22 Certificate serial: 010D0C9F4328584E885A60897BD25D0224347080 Authority key identifier: 2D:73:7F:53:E8:59:77:9D:04:98:F4:22:CD:FB:1A:73:64:84:6C:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d58ab4c9-6933-49bf-b6b4-e4d3935eda22.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d58ab4c9-6933-49bf-b6b4-e4d3935eda22/65fb3fb6-02c2-3151-852d-620955d225f4.roa Signing time: Fri 17 Jul 2026 21:00:12 +0000 ROA not before: Fri 17 Jul 2026 21:00:12 +0000 ROA not after: Thu 15 Oct 2026 21:00:12 +0000 asID: 393669 IP address blocks: 192.234.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d58ab4c9-6933-49bf-b6b4-e4d3935eda22/d58ab4c9-6933-49bf-b6b4-e4d3935eda22.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d58ab4c9-6933-49bf-b6b4-e4d3935eda22/d58ab4c9-6933-49bf-b6b4-e4d3935eda22.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d58ab4c9-6933-49bf-b6b4-e4d3935eda22.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:88:5a:60:89:7b:d2:5d:02:24:34:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58ab4c9-6933-49bf-b6b4-e4d3935eda22 Validity Not Before: Jul 17 21:00:12 2026 GMT Not After : Oct 15 21:00:12 2026 GMT Subject: CN=a2b3de98-857e-411a-9256-fe1e116787e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:22:59:b9:31:77:55:04:41:64:7f:3a:d5:ae: ff:90:45:10:59:13:a8:c2:2f:17:61:d2:30:39:82: e2:3a:09:50:73:92:53:4c:9f:95:0e:a9:61:1d:4d: 87:46:14:24:53:4f:ed:7c:48:a4:4c:a4:41:9d:ac: 8b:e5:18:6a:c7:10:fa:63:1c:b3:e0:bb:92:dd:2d: d2:b4:a6:dd:4f:d1:3e:20:5d:e5:00:3c:5d:1c:f4: a1:4a:82:0b:dc:52:a5:c5:24:89:d6:51:c2:f4:c6: 53:34:6b:19:96:b4:3e:bd:27:0d:44:15:cf:3a:34: 22:82:a8:5b:18:3a:ec:15:13:c5:8d:b6:0a:5a:fd: df:2b:f5:53:93:ac:96:f9:ab:56:06:c8:f0:47:bc: 4a:dd:b7:47:63:7c:c1:9b:3f:2a:5f:47:bc:bd:73: 79:57:66:f3:34:88:a4:83:9e:07:62:a6:3e:35:8e: 2b:47:99:38:a9:ce:58:e3:fb:28:2d:84:64:b3:66: 6d:b4:8f:7b:4a:16:ee:b6:98:be:86:1e:41:0e:d6: 91:36:7d:96:ab:56:31:7e:21:25:50:3f:f4:d7:44: a9:93:ee:96:8e:b7:30:b7:65:94:eb:70:e6:d5:fc: 0d:97:df:24:52:d2:04:c1:5d:e3:3c:b2:60:c3:81: 5f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:33:94:48:47:C1:11:FC:EE:90:5F:B4:2D:80:44:0C:3A:C6:11:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d58ab4c9-6933-49bf-b6b4-e4d3935eda22/65fb3fb6-02c2-3151-852d-620955d225f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d58ab4c9-6933-49bf-b6b4-e4d3935eda22/d58ab4c9-6933-49bf-b6b4-e4d3935eda22.crl X509v3 Authority Key Identifier: keyid:2D:73:7F:53:E8:59:77:9D:04:98:F4:22:CD:FB:1A:73:64:84:6C:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d58ab4c9-6933-49bf-b6b4-e4d3935eda22.cer sbgp-ipAddrBlock: critical IPv4: 192.234.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:37:92:09:86:34:e3:47:a4:dc:74:98:64:1e:f4:b4:fc:21: b8:1e:af:90:0f:85:34:ee:9f:6c:4e:1b:b7:b8:aa:16:15:05: f4:c4:2e:68:be:1c:4c:ab:74:e5:38:63:25:af:af:73:74:3d: b7:a6:a6:b0:4d:21:d6:10:1c:c1:6b:12:1a:37:17:43:49:88: 57:63:96:2a:4e:1f:e5:1a:0a:7f:f7:2a:a6:8f:dd:f0:b0:7a: 09:a9:91:b4:a3:01:59:39:bf:46:20:08:af:7d:b7:03:38:c4: 98:f6:e1:09:6b:d0:d9:36:18:95:fc:90:52:cb:07:f5:34:d5: 67:e5:71:57:ee:5e:45:0b:42:e7:d4:dd:a5:88:0f:01:79:89: 52:8b:73:1c:cd:e1:9a:e6:60:3a:33:4c:78:bd:9e:03:0a:99: 9e:3f:5a:79:8c:3c:e7:59:0b:f7:a3:20:e1:03:1f:47:09:41: 0b:d3:99:f2:19:b7:61:c8:93:02:b2:61:cd:9e:79:38:ee:a3: 5c:f4:4a:72:14:4c:ec:0e:43:4b:a9:39:3a:d4:a2:64:b8:a1: 6d:1e:48:b0:07:2d:a0:e6:21:93:09:14:1f:a5:f1:f0:04:28: 6c:71:48:bb:2b:c8:e1:e5:79:bc:e2:b8:13:35:fe:7b:39:e9: c0:f9:72:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6IWmCJe9JdAiQ0cIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDU4YWI0YzktNjkzMy00OWJmLWI2YjQtZTRkMzkzNWVk YTIyMB4XDTI2MDcxNzIxMDAxMloXDTI2MTAxNTIxMDAxMlowLzEtMCsGA1UEAxMk YTJiM2RlOTgtODU3ZS00MTFhLTkyNTYtZmUxZTExNjc4N2U3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySJZuTF3VQRBZH861a7/kEUQWROowi8XYdIw OYLiOglQc5JTTJ+VDqlhHU2HRhQkU0/tfEikTKRBnayL5RhqxxD6Yxyz4LuS3S3S tKbdT9E+IF3lADxdHPShSoIL3FKlxSSJ1lHC9MZTNGsZlrQ+vScNRBXPOjQigqhb GDrsFRPFjbYKWv3fK/VTk6yW+atWBsjwR7xK3bdHY3zBmz8qX0e8vXN5V2bzNIik g54HYqY+NY4rR5k4qc5Y4/soLYRks2ZttI97Shbutpi+hh5BDtaRNn2Wq1YxfiEl UD/010Spk+6Wjrcwt2WU63Dm1fwNl98kUtIEwV3jPLJgw4FfCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK8zlEhHwRH87pBftC2ARAw6xhFEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNThh YjRjOS02OTMzLTQ5YmYtYjZiNC1lNGQzOTM1ZWRhMjIvNjVmYjNmYjYtMDJjMi0z MTUxLTg1MmQtNjIwOTU1ZDIyNWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDU4YWI0YzktNjkzMy00OWJmLWI2 YjQtZTRkMzkzNWVkYTIyL2Q1OGFiNGM5LTY5MzMtNDliZi1iNmI0LWU0ZDM5MzVl ZGEyMi5jcmwwHwYDVR0jBBgwFoAULXN/U+hZd50EmPQizfsac2SEbJ8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNThhYjRjOS02OTMzLTQ5YmYtYjZiNC1lNGQz OTM1ZWRhMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwOqDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC83kgmGNONHpNx0mGQe9LT8Ibger5APhTTun2xOG7e4qhYVBfTELmi+ HEyrdOU4YyWvr3N0PbemprBNIdYQHMFrEho3F0NJiFdjlipOH+UaCn/3KqaP3fCw egmpkbSjAVk5v0YgCK99twM4xJj24Qlr0Nk2GJX8kFLLB/U01WflcVfuXkULQufU 3aWIDwF5iVKLcxzN4ZrmYDozTHi9ngMKmZ4/WnmMPOdZC/ejIOEDH0cJQQvTmfIZ t2HIkwKyYc2eeTjuo1z0SnIUTOwOQ0upOTrUomS4oW0eSLAHLaDmIZMJFB+l8fAE KGxxSLsryOHlebziuBM1/ns56cD5cmE= -----END CERTIFICATE-----Generated at Fri Jul 24 09:02:23 2026 by rpki-client