$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/bb9a6cc4-1d53-4f80-a2fb-d709923e5c82/57cf9096-c5cb-3e89-aba7-1d38df1c1809.roa File: 57cf9096-c5cb-3e89-aba7-1d38df1c1809.roa (raw, json) Hash identifier: LqtQqM/Rq4xm8vJCvNBDHZx6bGn8O0UlSCagWgnwN+Q= Subject key identifier: 8B:1D:B1:FD:01:6D:75:74:51:EF:23:B5:69:67:E0:01:08:A2:7F:9D Certificate issuer: /CN=bb9a6cc4-1d53-4f80-a2fb-d709923e5c82 Certificate serial: 010D0C9F4328584E931CE21760C36E201D640A80 Authority key identifier: 9E:E1:E1:2F:3D:99:F8:3D:43:7E:9A:F4:BE:38:9B:EA:FB:08:42:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/bb9a6cc4-1d53-4f80-a2fb-d709923e5c82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/bb9a6cc4-1d53-4f80-a2fb-d709923e5c82/57cf9096-c5cb-3e89-aba7-1d38df1c1809.roa Signing time: Tue 21 Jul 2026 17:30:32 +0000 ROA not before: Tue 21 Jul 2026 17:30:32 +0000 ROA not after: Mon 19 Oct 2026 17:30:32 +0000 asID: 23387 IP address blocks: 158.222.42.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/bb9a6cc4-1d53-4f80-a2fb-d709923e5c82/bb9a6cc4-1d53-4f80-a2fb-d709923e5c82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/bb9a6cc4-1d53-4f80-a2fb-d709923e5c82/bb9a6cc4-1d53-4f80-a2fb-d709923e5c82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/bb9a6cc4-1d53-4f80-a2fb-d709923e5c82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:93:1c:e2:17:60:c3:6e:20:1d:64:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb9a6cc4-1d53-4f80-a2fb-d709923e5c82 Validity Not Before: Jul 21 17:30:32 2026 GMT Not After : Oct 19 17:30:32 2026 GMT Subject: CN=52839eaf-4979-4f6d-a71a-dcdde9f43a12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:aa:51:ad:a3:63:0b:87:df:0e:7a:c1:01:3a: 16:1c:91:59:9c:d3:06:75:3e:c8:b2:05:40:36:78: 96:30:f4:cc:2e:91:43:21:f7:f8:9f:00:64:2f:f9: 53:ec:d9:63:53:b0:66:a2:e4:66:1b:2e:bc:90:47: 7c:05:21:46:b4:e2:82:3d:b5:c6:82:de:d8:52:3f: a8:6c:70:75:60:cd:a0:34:11:2a:d1:17:29:fd:97: 68:f8:41:8d:10:ff:08:88:f2:23:53:5d:28:f6:fe: e0:db:d0:19:0f:d9:16:70:62:09:0c:4b:a9:37:00: 39:75:d4:7b:d5:99:66:75:7a:31:4a:e5:d5:7f:5e: 04:ef:ff:e5:14:82:8e:99:17:9d:93:08:1b:8e:8c: d0:0e:7c:d8:45:01:19:d4:44:ca:d6:1a:92:51:f4: d2:13:b1:a3:30:7f:46:3f:03:55:67:93:a8:d5:37: 7b:cd:db:80:a5:f1:5f:e0:34:11:64:28:85:b1:82: df:f4:6f:78:3b:33:42:0a:74:bc:d0:c0:4d:9b:76: cb:6e:41:86:a5:dc:c9:51:95:00:70:f2:34:4b:4a: 21:67:a3:61:d9:ab:9a:0f:b0:dc:2c:9c:92:b8:ed: 2d:55:81:61:75:9f:8e:23:22:2f:b2:46:9c:43:77: 35:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:1D:B1:FD:01:6D:75:74:51:EF:23:B5:69:67:E0:01:08:A2:7F:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/bb9a6cc4-1d53-4f80-a2fb-d709923e5c82/57cf9096-c5cb-3e89-aba7-1d38df1c1809.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/bb9a6cc4-1d53-4f80-a2fb-d709923e5c82/bb9a6cc4-1d53-4f80-a2fb-d709923e5c82.crl X509v3 Authority Key Identifier: keyid:9E:E1:E1:2F:3D:99:F8:3D:43:7E:9A:F4:BE:38:9B:EA:FB:08:42:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/bb9a6cc4-1d53-4f80-a2fb-d709923e5c82.cer sbgp-ipAddrBlock: critical IPv4: 158.222.42.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:1a:9c:19:89:4a:74:d2:45:88:cc:b7:24:0f:d0:26:71:b1: 29:8d:f8:7f:76:62:97:14:e2:a4:79:14:3d:44:3a:45:11:17: 3c:58:78:78:ee:3a:e6:2f:b8:4f:24:a2:a0:9f:6b:24:d5:87: 90:54:a2:2f:f3:f6:53:3e:af:52:39:65:69:f8:60:5d:66:18: bc:61:94:ce:bd:3d:81:bc:8c:4a:84:04:a4:d0:a9:d4:31:68: 96:d8:83:a8:21:29:c5:5d:c5:1c:8d:9d:22:f7:98:b9:77:41: 00:dc:2a:42:b9:84:78:6b:fe:34:bf:be:f7:ac:d6:ac:83:d3: e1:c5:cf:3d:db:2d:17:d8:66:8d:f7:cf:a1:70:60:f9:f6:47: 4a:72:95:cf:6d:25:6d:8b:b5:64:49:2e:f7:6e:cb:14:27:5e: 9c:7e:31:1d:63:12:5e:da:94:3a:24:0a:49:ae:36:0d:5c:d3: ad:3b:c3:b1:b1:e4:84:bb:11:c1:6d:1e:5f:21:73:5d:48:18: a7:db:6e:0f:82:ee:8c:3b:2f:c6:ed:8e:06:3f:12:1a:a1:19: 8d:5b:d6:ce:8f:d9:7a:34:0b:2d:b4:ff:a0:4a:eb:93:fe:2f: a5:03:97:2c:7a:2b:56:a7:ef:5d:72:54:8b:3f:10:32:17:67: 9f:9e:15:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6THOIXYMNuIB1kCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmI5YTZjYzQtMWQ1My00ZjgwLWEyZmItZDcwOTkyM2U1 YzgyMB4XDTI2MDcyMTE3MzAzMloXDTI2MTAxOTE3MzAzMlowLzEtMCsGA1UEAxMk NTI4MzllYWYtNDk3OS00ZjZkLWE3MWEtZGNkZGU5ZjQzYTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqpRraNjC4ffDnrBAToWHJFZnNMGdT7IsgVA NniWMPTMLpFDIff4nwBkL/lT7NljU7BmouRmGy68kEd8BSFGtOKCPbXGgt7YUj+o bHB1YM2gNBEq0Rcp/Zdo+EGNEP8IiPIjU10o9v7g29AZD9kWcGIJDEupNwA5ddR7 1ZlmdXoxSuXVf14E7//lFIKOmRedkwgbjozQDnzYRQEZ1ETK1hqSUfTSE7GjMH9G PwNVZ5Oo1Td7zduApfFf4DQRZCiFsYLf9G94OzNCCnS80MBNm3bLbkGGpdzJUZUA cPI0S0ohZ6Nh2auaD7DcLJySuO0tVYFhdZ+OIyIvskacQ3c1SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIsdsf0BbXV0Ue8jtWln4AEIon+dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9iYjlh NmNjNC0xZDUzLTRmODAtYTJmYi1kNzA5OTIzZTVjODIvNTdjZjkwOTYtYzVjYi0z ZTg5LWFiYTctMWQzOGRmMWMxODA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvYmI5YTZjYzQtMWQ1My00ZjgwLWEy ZmItZDcwOTkyM2U1YzgyL2JiOWE2Y2M0LTFkNTMtNGY4MC1hMmZiLWQ3MDk5MjNl NWM4Mi5jcmwwHwYDVR0jBBgwFoAUnuHhLz2Z+D1Dfpr0vjib6vsIQhYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi9iYjlhNmNjNC0xZDUzLTRmODAtYTJmYi1kNzA5 OTIzZTVjODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnt4qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADcanBmJSnTSRYjMtyQP0CZxsSmN+H92YpcU4qR5FD1EOkURFzxYeHju OuYvuE8koqCfayTVh5BUoi/z9lM+r1I5ZWn4YF1mGLxhlM69PYG8jEqEBKTQqdQx aJbYg6ghKcVdxRyNnSL3mLl3QQDcKkK5hHhr/jS/vves1qyD0+HFzz3bLRfYZo33 z6FwYPn2R0pylc9tJW2LtWRJLvduyxQnXpx+MR1jEl7alDokCkmuNg1c0607w7Gx 5IS7EcFtHl8hc11IGKfbbg+C7ow7L8btjgY/EhqhGY1b1s6P2Xo0Cy20/6BK65P+ L6UDlyx6K1an711yVIs/EDIXZ5+eFWc= -----END CERTIFICATE-----Generated at Thu Jul 23 22:26:35 2026 by rpki-client