$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/5b896e6e-578e-3e6a-a229-c85a29386919.roa File: 5b896e6e-578e-3e6a-a229-c85a29386919.roa (raw, json) Hash identifier: KCr7ND1iznMR2UMRwfLoFo1cKgF3/g0iXC2GotYbwVQ= Subject key identifier: 16:FE:A0:DE:F9:8E:9C:17:A1:F0:D7:10:69:22:7B:42:5F:5E:5C:24 Certificate issuer: /CN=156d6bac-1a16-4b0c-b578-992ff1b945c4 Certificate serial: 010D0C9F4328584E6B0A137C988CD192F1D59FC0 Authority key identifier: E7:78:EA:AD:CE:0A:9A:37:E8:36:01:C3:DA:2A:FB:6D:7B:1A:60:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/5b896e6e-578e-3e6a-a229-c85a29386919.roa Signing time: Tue 07 Jul 2026 09:00:12 +0000 ROA not before: Tue 07 Jul 2026 09:00:12 +0000 ROA not after: Mon 05 Oct 2026 09:00:12 +0000 asID: 14618 IP address blocks: 192.131.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/156d6bac-1a16-4b0c-b578-992ff1b945c4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/156d6bac-1a16-4b0c-b578-992ff1b945c4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6b:0a:13:7c:98:8c:d1:92:f1:d5:9f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=156d6bac-1a16-4b0c-b578-992ff1b945c4 Validity Not Before: Jul 7 09:00:12 2026 GMT Not After : Oct 5 09:00:12 2026 GMT Subject: CN=268f09e4-b3a0-4066-8383-8a6f2c52d439 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:00:f2:44:4d:55:47:43:bf:c5:0a:aa:83:82: a5:0d:48:4a:36:7a:ff:dd:ed:f2:a1:a3:5e:cb:da: d7:99:b8:99:82:21:b0:ba:38:2c:b7:d7:61:4b:6b: 09:bc:c0:2d:7a:d6:9b:41:5b:04:3e:ab:1c:e5:24: cb:41:13:ac:30:81:25:77:44:98:45:51:92:8b:d9: 8b:8c:5d:13:09:31:18:29:b8:05:b5:d5:af:b3:5b: e7:bd:42:fa:be:a6:74:06:bc:78:a0:73:1a:12:84: b0:81:66:89:2c:9e:26:98:0a:9c:55:26:a0:65:b7: 1e:8a:fe:9b:a8:f1:de:0a:26:cd:ae:31:96:91:cd: 5b:55:66:91:7f:3f:d3:3f:2a:04:3a:32:6b:90:3b: 76:da:3c:1a:32:46:76:12:6f:9c:8e:aa:b6:30:01: 81:b7:3b:0e:8d:32:c6:bc:66:a1:51:ff:32:53:8d: ae:37:1f:72:9e:da:05:c1:1a:d0:85:a0:e9:58:d4: 7e:66:a1:6a:27:d2:08:9c:45:a5:0b:76:b8:73:56: f5:cb:0d:5a:63:7a:59:0c:23:33:3a:db:1b:65:26: d6:11:b6:80:81:ad:2e:66:0d:a2:f1:bf:f9:d8:38: b3:97:7d:23:7f:e6:eb:d5:15:fc:a7:7e:ba:73:ae: 1e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:FE:A0:DE:F9:8E:9C:17:A1:F0:D7:10:69:22:7B:42:5F:5E:5C:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/5b896e6e-578e-3e6a-a229-c85a29386919.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/156d6bac-1a16-4b0c-b578-992ff1b945c4.crl X509v3 Authority Key Identifier: keyid:E7:78:EA:AD:CE:0A:9A:37:E8:36:01:C3:DA:2A:FB:6D:7B:1A:60:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4.cer sbgp-ipAddrBlock: critical IPv4: 192.131.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:a1:fb:b0:a1:29:17:ad:49:77:00:fd:46:a8:37:77:a4:55: 50:70:d1:05:3b:5e:f4:5c:19:3b:0c:bf:af:ee:61:44:29:54: 55:5b:60:07:b4:5c:33:df:65:a8:20:15:2d:12:43:08:d2:5b: 05:6f:9f:c9:2b:96:6a:a6:47:90:e3:d8:e3:e4:89:e8:7d:5b: 7c:52:c9:88:82:e0:af:03:e9:e7:57:bd:2f:e0:bb:2c:a8:e6: 89:bd:3d:c1:29:9c:69:d2:0a:78:5a:9a:11:7a:5d:28:9b:94: f5:cc:7d:9c:fa:88:ec:3d:c0:d2:89:98:d1:f3:e0:f9:aa:e7: c7:3c:39:6d:ef:5f:bf:fa:79:7e:fb:08:43:d7:25:00:26:07: 76:21:e2:70:f7:a6:03:be:d8:0b:28:c5:2b:99:bf:61:00:14: d0:8d:1d:26:1c:a6:29:f0:82:46:46:1c:41:a5:af:30:11:57: 6b:d2:ae:ee:20:53:6e:7b:94:bf:16:19:b2:eb:75:e4:82:5f: 47:2f:fc:f1:c0:15:d4:1a:fb:79:98:ed:ad:ff:b2:88:9f:76: 0b:1f:40:63:72:d3:f9:61:d5:26:29:89:8c:58:45:3c:07:f2: df:ad:e9:f0:1b:39:c7:18:78:2f:d1:75:7a:ed:22:c3:c0:31: 65:92:2b:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5rChN8mIzRkvHVn8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTU2ZDZiYWMtMWExNi00YjBjLWI1NzgtOTkyZmYxYjk0 NWM0MB4XDTI2MDcwNzA5MDAxMloXDTI2MTAwNTA5MDAxMlowLzEtMCsGA1UEAxMk MjY4ZjA5ZTQtYjNhMC00MDY2LTgzODMtOGE2ZjJjNTJkNDM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQDyRE1VR0O/xQqqg4KlDUhKNnr/3e3yoaNe y9rXmbiZgiGwujgst9dhS2sJvMAtetabQVsEPqsc5STLQROsMIEld0SYRVGSi9mL jF0TCTEYKbgFtdWvs1vnvUL6vqZ0Brx4oHMaEoSwgWaJLJ4mmAqcVSagZbceiv6b qPHeCibNrjGWkc1bVWaRfz/TPyoEOjJrkDt22jwaMkZ2Em+cjqq2MAGBtzsOjTLG vGahUf8yU42uNx9yntoFwRrQhaDpWNR+ZqFqJ9IInEWlC3a4c1b1yw1aY3pZDCMz OtsbZSbWEbaAga0uZg2i8b/52Dizl30jf+br1RX8p366c64e0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBb+oN75jpwXofDXEGkie0JfXlwkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xNTZk NmJhYy0xYTE2LTRiMGMtYjU3OC05OTJmZjFiOTQ1YzQvNWI4OTZlNmUtNTc4ZS0z ZTZhLWEyMjktYzg1YTI5Mzg2OTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTU2ZDZiYWMtMWExNi00YjBjLWI1 NzgtOTkyZmYxYjk0NWM0LzE1NmQ2YmFjLTFhMTYtNGIwYy1iNTc4LTk5MmZmMWI5 NDVjNC5jcmwwHwYDVR0jBBgwFoAU53jqrc4KmjfoNgHD2ir7bXsaYFUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xNTZkNmJhYy0xYTE2LTRiMGMtYjU3OC05OTJm ZjFiOTQ1YzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwINYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEah+7ChKRetSXcA/UaoN3ekVVBw0QU7XvRcGTsMv6/uYUQpVFVbYAe0 XDPfZaggFS0SQwjSWwVvn8krlmqmR5Dj2OPkieh9W3xSyYiC4K8D6edXvS/guyyo 5om9PcEpnGnSCnhamhF6XSiblPXMfZz6iOw9wNKJmNHz4Pmq58c8OW3vX7/6eX77 CEPXJQAmB3Yh4nD3pgO+2AsoxSuZv2EAFNCNHSYcpinwgkZGHEGlrzARV2vSru4g U257lL8WGbLrdeSCX0cv/PHAFdQa+3mY7a3/soifdgsfQGNy0/lh1SYpiYxYRTwH 8t+t6fAbOccYeC/RdXrtIsPAMWWSKwM= -----END CERTIFICATE-----Generated at Fri Jul 24 14:26:04 2026 by rpki-client