$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/42054cda-212d-33df-8dc9-e1e9747eddb1.roa File: 42054cda-212d-33df-8dc9-e1e9747eddb1.roa (raw, json) Hash identifier: 6ZHw8FojYxg9zsorGKGO7nLsfgWzedX7jkBvNgY5FSg= Subject key identifier: 4C:6F:E4:9E:EA:99:1A:3D:C0:27:F4:01:30:8C:03:05:51:FF:C2:34 Certificate issuer: /CN=d7df35c8-e79b-433a-a950-6df11849bfd3 Certificate serial: 010D0C9F4328584E736A1DD938F2F4566773B300 Authority key identifier: C6:2F:F5:A6:3B:E3:92:B4:96:2B:EE:B3:C6:AE:46:3E:A1:3B:2F:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/42054cda-212d-33df-8dc9-e1e9747eddb1.roa Signing time: Fri 10 Jul 2026 09:00:12 +0000 ROA not before: Fri 10 Jul 2026 09:00:12 +0000 ROA not after: Thu 08 Oct 2026 09:00:12 +0000 asID: 88 IP address blocks: 204.153.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:73:6a:1d:d9:38:f2:f4:56:67:73:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7df35c8-e79b-433a-a950-6df11849bfd3 Validity Not Before: Jul 10 09:00:12 2026 GMT Not After : Oct 8 09:00:12 2026 GMT Subject: CN=15be54a5-07c2-4732-bf10-f20125654ce3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c4:7a:7e:9e:27:45:49:2e:93:7a:3f:bf:7f: df:e6:19:fd:8f:e3:52:6e:ad:6d:40:da:6e:17:45: d5:af:23:1e:7b:f5:3b:d8:fc:c8:e6:a7:ce:38:ae: e3:7c:c7:ee:b4:91:c8:a7:07:f9:dc:89:5c:cf:da: 59:6d:a1:2b:a1:94:62:f3:d3:63:3a:dc:8d:4b:23: cb:00:16:83:f7:86:36:96:fa:bb:25:97:06:21:db: 1f:46:3d:79:91:8c:b3:30:e0:78:21:74:e7:2a:b0: a3:67:b3:63:36:fb:de:0f:1c:7b:0d:8e:80:80:f5: c7:f6:1d:6d:d3:38:f5:ef:19:ba:af:3e:6e:04:42: a6:72:c0:5b:fb:6d:9a:ac:8f:aa:34:06:2e:28:ba: f6:78:ed:a1:79:4d:16:b6:52:c6:ac:4c:b5:c2:08: 01:d8:9d:2d:c9:bb:e7:b5:f8:49:94:88:4c:71:39: e1:c6:ae:eb:e0:13:6e:c8:31:b3:ce:3a:02:68:34: bb:6c:19:80:3f:f3:e5:9a:f5:b1:38:53:0b:f3:c7: f6:d7:d9:8e:61:5e:d2:d1:44:56:13:af:9c:34:fe: d2:99:52:c1:fe:db:8a:d1:be:e1:42:c2:c9:ce:23: a1:02:68:cd:b5:f5:95:bc:29:75:36:f9:8f:e4:12: 26:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:6F:E4:9E:EA:99:1A:3D:C0:27:F4:01:30:8C:03:05:51:FF:C2:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/42054cda-212d-33df-8dc9-e1e9747eddb1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.crl X509v3 Authority Key Identifier: keyid:C6:2F:F5:A6:3B:E3:92:B4:96:2B:EE:B3:C6:AE:46:3E:A1:3B:2F:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer sbgp-ipAddrBlock: critical IPv4: 204.153.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:aa:de:24:e2:91:4a:5c:67:1c:1b:86:d3:3b:8b:57:7d:fd: 18:a0:b7:ff:37:25:43:c4:6f:c1:fa:17:cd:45:0e:95:e6:96: 32:21:4f:ba:43:24:5d:a3:92:65:ee:8c:d3:f8:d7:5e:cf:e8: da:92:db:54:9e:e9:69:0e:1a:bd:44:39:01:5d:af:b4:5b:fc: ef:b8:fc:fe:df:8e:c3:88:f3:0d:01:31:15:81:1a:c7:c3:3b: bc:9b:9b:ed:c6:f4:ab:e5:0a:29:29:37:d4:5b:fc:cd:3a:b2: b9:64:f6:47:ff:50:80:75:ba:fc:02:79:63:75:21:f1:a8:7a: 44:71:8a:f9:f3:fe:8e:49:ad:04:f3:81:e9:1a:a1:67:5b:15: 47:82:a8:d5:73:d5:e0:43:04:2f:e9:11:c6:3c:72:ea:08:b9: 73:6c:7d:5f:f3:e0:77:a5:db:77:08:47:3c:26:83:3c:fd:1f: e8:c4:e9:80:10:0e:c1:7c:3a:36:f4:75:0f:7f:4b:0e:5c:c5: 7b:90:09:59:da:38:15:5b:a5:d0:71:62:66:2c:48:b2:7d:46: 57:55:35:46:d4:91:7d:7b:13:a9:eb:ca:05:3b:fc:e4:ef:d3: 36:7d:08:2e:71:fa:ab:ab:b2:31:46:32:a6:9f:c5:ea:e3:04: b6:82:d7:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5zah3ZOPL0VmdzswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdkZjM1YzgtZTc5Yi00MzNhLWE5NTAtNmRmMTE4NDli ZmQzMB4XDTI2MDcxMDA5MDAxMloXDTI2MTAwODA5MDAxMlowLzEtMCsGA1UEAxMk MTViZTU0YTUtMDdjMi00NzMyLWJmMTAtZjIwMTI1NjU0Y2UzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8R6fp4nRUkuk3o/v3/f5hn9j+NSbq1tQNpu F0XVryMee/U72PzI5qfOOK7jfMfutJHIpwf53Ilcz9pZbaEroZRi89NjOtyNSyPL ABaD94Y2lvq7JZcGIdsfRj15kYyzMOB4IXTnKrCjZ7NjNvveDxx7DY6AgPXH9h1t 0zj17xm6rz5uBEKmcsBb+22arI+qNAYuKLr2eO2heU0WtlLGrEy1wggB2J0tybvn tfhJlIhMcTnhxq7r4BNuyDGzzjoCaDS7bBmAP/PlmvWxOFML88f219mOYV7S0URW E6+cNP7SmVLB/tuK0b7hQsLJziOhAmjNtfWVvCl1NvmP5BImPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFExv5J7qmRo9wCf0ATCMAwVR/8I0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kN2Rm MzVjOC1lNzliLTQzM2EtYTk1MC02ZGYxMTg0OWJmZDMvNDIwNTRjZGEtMjEyZC0z M2RmLThkYzktZTFlOTc0N2VkZGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDdkZjM1YzgtZTc5Yi00MzNhLWE5 NTAtNmRmMTE4NDliZmQzL2Q3ZGYzNWM4LWU3OWItNDMzYS1hOTUwLTZkZjExODQ5 YmZkMy5jcmwwHwYDVR0jBBgwFoAUxi/1pjvjkrSWK+6zxq5GPqE7L1cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kN2RmMzVjOC1lNzliLTQzM2EtYTk1MC02ZGYx MTg0OWJmZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzJkwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGaq3iTikUpcZxwbhtM7i1d9/Rigt/83JUPEb8H6F81FDpXmljIhT7pD JF2jkmXujNP4117P6NqS21Se6WkOGr1EOQFdr7Rb/O+4/P7fjsOI8w0BMRWBGsfD O7ybm+3G9KvlCikpN9Rb/M06srlk9kf/UIB1uvwCeWN1IfGoekRxivnz/o5JrQTz gekaoWdbFUeCqNVz1eBDBC/pEcY8cuoIuXNsfV/z4Hel23cIRzwmgzz9H+jE6YAQ DsF8Ojb0dQ9/Sw5cxXuQCVnaOBVbpdBxYmYsSLJ9RldVNUbUkX17E6nrygU7/OTv 0zZ9CC5x+qursjFGMqafxerjBLaC1+E= -----END CERTIFICATE-----Generated at Fri Jul 24 02:45:10 2026 by rpki-client