$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7f2143-6131-414b-81ad-be960f2a78c1/d1ce1a33-08c7-3209-8312-de68c758aa76.roa File: d1ce1a33-08c7-3209-8312-de68c758aa76.roa (raw, json) Hash identifier: AWcoCDvwdWAXBVDo0jBW5IVHzI9YIbdw+GksXqXMf9g= Subject key identifier: B5:78:60:84:C3:DC:AE:A6:CC:13:92:E0:ED:B5:80:42:E5:16:AC:77 Certificate issuer: /CN=4a7f2143-6131-414b-81ad-be960f2a78c1 Certificate serial: 010D0C9F4328584E815F9739C1DC8D354E2E7D00 Authority key identifier: 6A:C8:C5:11:64:5E:EC:E9:6E:D6:6C:DC:9C:EA:8F:DF:1E:04:F4:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7f2143-6131-414b-81ad-be960f2a78c1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7f2143-6131-414b-81ad-be960f2a78c1/d1ce1a33-08c7-3209-8312-de68c758aa76.roa Signing time: Wed 15 Jul 2026 09:00:13 +0000 ROA not before: Wed 15 Jul 2026 09:00:13 +0000 ROA not after: Tue 13 Oct 2026 09:00:13 +0000 asID: 398335 IP address blocks: 45.42.156.0/22 maxlen: 22 64.32.52.0/22 maxlen: 22 209.172.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7f2143-6131-414b-81ad-be960f2a78c1/4a7f2143-6131-414b-81ad-be960f2a78c1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7f2143-6131-414b-81ad-be960f2a78c1/4a7f2143-6131-414b-81ad-be960f2a78c1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7f2143-6131-414b-81ad-be960f2a78c1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:81:5f:97:39:c1:dc:8d:35:4e:2e:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a7f2143-6131-414b-81ad-be960f2a78c1 Validity Not Before: Jul 15 09:00:13 2026 GMT Not After : Oct 13 09:00:13 2026 GMT Subject: CN=40e9c774-c660-46f1-b799-38cb11029b05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:34:70:96:45:bf:d0:4d:27:2f:8e:e3:be:35: f1:c5:d6:02:cb:66:c4:c7:c1:03:98:df:54:94:a4: 77:07:a4:3c:1a:4a:35:a1:a5:33:a2:9d:91:26:03: 09:94:62:f7:b1:1e:e6:ff:65:e1:e1:5b:38:d4:53: 6d:75:49:68:91:09:1e:81:18:36:9b:a3:79:93:c0: 0c:8f:16:cb:e1:94:59:09:b6:7e:d1:56:fc:06:3a: 0e:5d:80:26:6e:e5:e7:af:36:c5:d6:b8:35:da:a5: 52:5a:73:15:59:a8:5b:d8:48:39:06:cc:94:91:c9: a9:87:1e:13:c2:a3:1a:74:e2:d5:0a:1c:70:18:3d: 98:6f:f0:68:c9:fe:37:5b:38:ae:58:1c:7c:3f:19: 27:0d:ce:9f:d4:92:8f:2b:ff:75:fe:43:4a:37:e6: 18:98:09:61:3e:9d:f0:93:48:c3:03:41:98:78:ef: e2:41:19:d0:d7:ac:1f:5e:9b:87:b7:5e:ee:f2:15: a5:63:88:3a:5b:06:79:ff:b8:20:76:0f:9c:a6:01: 60:8e:7c:2c:69:18:1e:fb:a8:75:4f:39:2d:2c:fd: 7f:04:cb:41:8e:ad:13:2b:8e:3b:6a:fa:74:1a:50: 0e:60:55:68:c6:21:d5:0b:c2:e7:1b:ce:da:32:7d: b6:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:78:60:84:C3:DC:AE:A6:CC:13:92:E0:ED:B5:80:42:E5:16:AC:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7f2143-6131-414b-81ad-be960f2a78c1/d1ce1a33-08c7-3209-8312-de68c758aa76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7f2143-6131-414b-81ad-be960f2a78c1/4a7f2143-6131-414b-81ad-be960f2a78c1.crl X509v3 Authority Key Identifier: keyid:6A:C8:C5:11:64:5E:EC:E9:6E:D6:6C:DC:9C:EA:8F:DF:1E:04:F4:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7f2143-6131-414b-81ad-be960f2a78c1.cer sbgp-ipAddrBlock: critical IPv4: 45.42.156.0/22 64.32.52.0/22 209.172.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:aa:f2:53:89:4c:17:49:d0:ed:ce:4f:3c:c9:07:5d:cc:ff: c1:4f:a1:9e:d3:50:78:37:28:a4:31:13:f0:af:de:ac:76:85: d9:ab:2b:18:60:32:e4:73:d2:78:5c:47:43:17:9a:3d:a2:8a: f3:f2:c5:96:5f:4e:54:a4:8b:90:f7:0f:23:f9:41:ec:27:9f: c0:76:2b:d7:c7:3d:87:ac:9a:c4:cb:51:2d:b6:87:67:dc:6c: 90:83:f7:a7:83:c3:ed:28:47:05:76:fc:39:9e:6a:42:e5:8f: cd:bd:33:cb:70:5e:58:3a:7f:e9:86:91:d5:c2:60:18:5e:6d: 91:27:9d:92:f7:59:a9:86:9d:db:4d:c8:66:4f:4f:42:d9:9a: af:fc:00:f6:a9:03:0a:e4:4a:7b:f7:de:e0:eb:55:f9:a6:0a: 8b:9c:5e:d1:7e:70:49:0e:b2:5c:ca:ab:40:ae:f8:ba:60:d4: 4a:f3:b6:42:4c:57:c2:fa:f8:bd:da:67:33:17:88:55:48:bf: 26:c7:7b:3d:c8:8d:25:d3:8c:fa:05:45:0d:21:c4:e9:8b:47: d8:ff:60:5c:73:48:dc:2a:1e:12:eb:ef:29:72:1e:91:6a:31: bf:1b:2c:71:e6:5d:1a:f5:62:50:8e:ea:64:95:70:00:19:cc: 50:c1:9a:bd -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE6BX5c5wdyNNU4ufQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGE3ZjIxNDMtNjEzMS00MTRiLTgxYWQtYmU5NjBmMmE3 OGMxMB4XDTI2MDcxNTA5MDAxM1oXDTI2MTAxMzA5MDAxM1owLzEtMCsGA1UEAxMk NDBlOWM3NzQtYzY2MC00NmYxLWI3OTktMzhjYjExMDI5YjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjRwlkW/0E0nL47jvjXxxdYCy2bEx8EDmN9U lKR3B6Q8Gko1oaUzop2RJgMJlGL3sR7m/2Xh4Vs41FNtdUlokQkegRg2m6N5k8AM jxbL4ZRZCbZ+0Vb8BjoOXYAmbuXnrzbF1rg12qVSWnMVWahb2Eg5BsyUkcmphx4T wqMadOLVChxwGD2Yb/Boyf43WziuWBx8PxknDc6f1JKPK/91/kNKN+YYmAlhPp3w k0jDA0GYeO/iQRnQ16wfXpuHt17u8hWlY4g6WwZ5/7ggdg+cpgFgjnwsaRge+6h1 TzktLP1/BMtBjq0TK447avp0GlAOYFVoxiHVC8LnG87aMn22fwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFLV4YITD3K6mzBOS4O21gELlFqx3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YTdm MjE0My02MTMxLTQxNGItODFhZC1iZTk2MGYyYTc4YzEvZDFjZTFhMzMtMDhjNy0z MjA5LTgzMTItZGU2OGM3NThhYTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNGE3ZjIxNDMtNjEzMS00MTRiLTgx YWQtYmU5NjBmMmE3OGMxLzRhN2YyMTQzLTYxMzEtNDE0Yi04MWFkLWJlOTYwZjJh NzhjMS5jcmwwHwYDVR0jBBgwFoAUasjFEWRe7Olu1mzcnOqP3x4E9OYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80YTdmMjE0My02MTMxLTQxNGItODFhZC1iZTk2 MGYyYTc4YzEuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCLSqcAwQC QCA0AwQD0awYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAFaq8lOJTBdJ0O3OTzzJB13M/8FPoZ7TUHg3KKQx E/Cv3qx2hdmrKxhgMuRz0nhcR0MXmj2iivPyxZZfTlSki5D3DyP5Qewnn8B2K9fH PYesmsTLUS22h2fcbJCD96eDw+0oRwV2/DmeakLlj829M8twXlg6f+mGkdXCYBhe bZEnnZL3WamGndtNyGZPT0LZmq/8APapAwrkSnv33uDrVfmmCoucXtF+cEkOslzK q0Cu+Lpg1ErztkJMV8L6+L3aZzMXiFVIvybHez3IjSXTjPoFRQ0hxOmLR9j/YFxz SNwqHhLr7ylyHpFqMb8bLHHmXRr1YlCO6mSVcAAZzFDBmr0= -----END CERTIFICATE-----Generated at Fri Jul 24 19:50:09 2026 by rpki-client