$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f30a83fc-5753-4d94-85d1-26924afa8ea3/8d7db746-35fb-3952-a4fe-73fd27f04735.roa File: 8d7db746-35fb-3952-a4fe-73fd27f04735.roa (raw, json) Hash identifier: t+bB9HlRNaXwNnzulq3EAkSTI1/1lfWi5bcvrjuG/tI= Subject key identifier: 27:B8:8D:56:40:B2:8E:E7:E5:65:66:DB:FA:50:ED:67:7F:B7:07:82 Certificate issuer: /CN=f30a83fc-5753-4d94-85d1-26924afa8ea3 Certificate serial: 010D0C9F4328584E640F647C7BAB0C7C4160D180 Authority key identifier: F0:50:4C:16:74:72:8A:AD:BA:BF:BB:67:EA:1F:69:54:42:D9:5F:3E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f30a83fc-5753-4d94-85d1-26924afa8ea3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f30a83fc-5753-4d94-85d1-26924afa8ea3/8d7db746-35fb-3952-a4fe-73fd27f04735.roa Signing time: Sat 04 Jul 2026 21:00:12 +0000 ROA not before: Sat 04 Jul 2026 21:00:12 +0000 ROA not after: Fri 02 Oct 2026 21:00:12 +0000 asID: 16652 IP address blocks: 198.252.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f30a83fc-5753-4d94-85d1-26924afa8ea3/f30a83fc-5753-4d94-85d1-26924afa8ea3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f30a83fc-5753-4d94-85d1-26924afa8ea3/f30a83fc-5753-4d94-85d1-26924afa8ea3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f30a83fc-5753-4d94-85d1-26924afa8ea3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:64:0f:64:7c:7b:ab:0c:7c:41:60:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f30a83fc-5753-4d94-85d1-26924afa8ea3 Validity Not Before: Jul 4 21:00:12 2026 GMT Not After : Oct 2 21:00:12 2026 GMT Subject: CN=0afe7e0e-5690-4100-92f2-d353fc5059da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:48:e1:23:8b:96:32:e1:be:f4:d5:13:81:56: 3b:88:0d:02:1f:47:69:eb:16:ff:88:93:52:2e:82: 0f:0f:2a:bc:f6:53:27:59:27:3a:98:9a:60:3e:63: dc:0f:ca:19:26:32:79:88:28:8a:e7:7b:29:ef:57: 0e:05:e1:90:2d:f0:0b:fe:53:0e:86:7b:bb:88:26: 68:1f:f9:ed:21:59:39:bd:a4:0c:1f:84:37:98:94: 05:ac:40:a2:91:95:85:d7:70:75:66:44:ee:e4:9a: 5e:e2:e9:8a:15:71:94:4b:dc:d7:8e:2c:b4:1e:2c: d4:0d:3a:ee:5e:3b:c7:22:5c:79:47:25:e4:41:78: d9:18:b7:24:62:2d:bb:05:83:50:be:ed:bd:80:7b: fd:71:6f:2c:eb:13:c1:db:0b:93:9f:87:fc:ac:3f: a5:25:0b:20:f4:76:6f:8e:81:95:8e:8c:2b:7f:80: 09:39:85:e3:2e:c1:35:58:26:97:cd:c1:c1:e5:1c: b2:13:66:39:25:6d:f7:40:be:5b:df:56:1d:f5:78: 44:ff:46:71:bc:e1:84:a8:37:b6:43:c9:c2:ec:54: fe:df:7e:58:46:09:a5:54:82:70:e2:bd:c7:ec:12: a0:fd:62:30:c9:e4:9b:2d:95:f8:36:4b:be:a5:7d: e3:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:B8:8D:56:40:B2:8E:E7:E5:65:66:DB:FA:50:ED:67:7F:B7:07:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f30a83fc-5753-4d94-85d1-26924afa8ea3/8d7db746-35fb-3952-a4fe-73fd27f04735.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f30a83fc-5753-4d94-85d1-26924afa8ea3/f30a83fc-5753-4d94-85d1-26924afa8ea3.crl X509v3 Authority Key Identifier: keyid:F0:50:4C:16:74:72:8A:AD:BA:BF:BB:67:EA:1F:69:54:42:D9:5F:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f30a83fc-5753-4d94-85d1-26924afa8ea3.cer sbgp-ipAddrBlock: critical IPv4: 198.252.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:77:ea:3c:6d:76:cd:5b:80:53:43:60:d4:7b:71:54:89:69: 10:bc:f1:e2:ef:6a:64:67:e8:34:73:bd:92:92:d8:31:4c:1e: 5f:3a:39:a3:2b:80:73:8f:d7:a9:9c:d6:7b:4f:3e:29:66:cb: 1e:9c:d6:af:63:02:b1:6e:c1:34:5b:78:1c:b8:bd:77:87:4c: 9f:3f:44:07:a6:ff:43:37:56:fd:f8:1a:91:af:1a:5e:39:32: 41:21:9d:d9:7c:f1:91:f9:af:fc:ee:fb:42:7c:e1:13:8e:00: 89:e3:8f:ba:ef:8e:91:3c:e7:6d:3f:26:9b:95:97:7c:8b:15: 1e:a1:ee:a0:c9:5f:ef:44:ff:8a:22:5d:92:11:13:26:82:7c: 0a:41:4c:34:8b:44:a8:82:15:c3:c0:2f:26:95:d0:da:57:07: 19:f3:ed:db:ca:6a:75:07:2b:dc:b0:b2:8a:eb:fd:37:42:cc: 9e:b4:98:53:db:bc:ba:b1:8a:bb:89:7d:2a:aa:81:96:5a:e5: 34:df:4f:28:2a:3e:da:fb:2b:71:92:13:4b:5c:bf:7a:7e:df: 56:ca:0d:77:ef:75:13:b9:1d:10:f8:bf:de:be:ee:52:b3:d5: b5:53:46:07:1a:4d:10:cf:03:04:ab:2c:2f:81:88:45:5d:93: 45:8f:70:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5kD2R8e6sMfEFg0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjMwYTgzZmMtNTc1My00ZDk0LTg1ZDEtMjY5MjRhZmE4 ZWEzMB4XDTI2MDcwNDIxMDAxMloXDTI2MTAwMjIxMDAxMlowLzEtMCsGA1UEAxMk MGFmZTdlMGUtNTY5MC00MTAwLTkyZjItZDM1M2ZjNTA1OWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0jhI4uWMuG+9NUTgVY7iA0CH0dp6xb/iJNS LoIPDyq89lMnWSc6mJpgPmPcD8oZJjJ5iCiK53sp71cOBeGQLfAL/lMOhnu7iCZo H/ntIVk5vaQMH4Q3mJQFrECikZWF13B1ZkTu5Jpe4umKFXGUS9zXjiy0HizUDTru XjvHIlx5RyXkQXjZGLckYi27BYNQvu29gHv9cW8s6xPB2wuTn4f8rD+lJQsg9HZv joGVjowrf4AJOYXjLsE1WCaXzcHB5RyyE2Y5JW33QL5b31Yd9XhE/0ZxvOGEqDe2 Q8nC7FT+335YRgmlVIJw4r3H7BKg/WIwyeSbLZX4Nku+pX3jhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCe4jVZAso7n5WVm2/pQ7Wd/tweCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mMzBh ODNmYy01NzUzLTRkOTQtODVkMS0yNjkyNGFmYThlYTMvOGQ3ZGI3NDYtMzVmYi0z OTUyLWE0ZmUtNzNmZDI3ZjA0NzM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjMwYTgzZmMtNTc1My00ZDk0LTg1 ZDEtMjY5MjRhZmE4ZWEzL2YzMGE4M2ZjLTU3NTMtNGQ5NC04NWQxLTI2OTI0YWZh OGVhMy5jcmwwHwYDVR0jBBgwFoAU8FBMFnRyiq26v7tn6h9pVELZXz4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mMzBhODNmYy01NzUzLTRkOTQtODVkMS0yNjky NGFmYThlYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxvyZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGV36jxtds1bgFNDYNR7cVSJaRC88eLvamRn6DRzvZKS2DFMHl86OaMr gHOP16mc1ntPPilmyx6c1q9jArFuwTRbeBy4vXeHTJ8/RAem/0M3Vv34GpGvGl45 MkEhndl88ZH5r/zu+0J84ROOAInjj7rvjpE8520/JpuVl3yLFR6h7qDJX+9E/4oi XZIREyaCfApBTDSLRKiCFcPALyaV0NpXBxnz7dvKanUHK9ywsorr/TdCzJ60mFPb vLqxiruJfSqqgZZa5TTfTygqPtr7K3GSE0tcv3p+31bKDXfvdRO5HRD4v96+7lKz 1bVTRgcaTRDPAwSrLC+BiEVdk0WPcE0= -----END CERTIFICATE-----Generated at Fri Jul 24 10:58:14 2026 by rpki-client