$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/b9bb34a8-3fb4-3229-af76-b084da323030.roa File: b9bb34a8-3fb4-3229-af76-b084da323030.roa (raw, json) Hash identifier: CtnkX+Lb87L3CnNNwp0DkUbYxoqRkm7EmYWjDmqEvWg= Subject key identifier: C3:64:5D:A4:31:93:D7:A1:19:8F:30:2A:BB:D9:59:DE:5B:6E:8F:75 Certificate issuer: /CN=88e058e6-ff68-4d5d-b7b8-04d1661ec235 Certificate serial: 010D0C9F4328584E89BF92A782EAAA2B0DBB5A00 Authority key identifier: 7F:1F:72:F4:8D:1D:D7:6F:87:2D:2D:EA:F2:15:9E:CA:D3:6A:2D:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/b9bb34a8-3fb4-3229-af76-b084da323030.roa Signing time: Sat 18 Jul 2026 09:00:12 +0000 ROA not before: Sat 18 Jul 2026 09:00:12 +0000 ROA not after: Fri 16 Oct 2026 09:00:12 +0000 asID: 20 IP address blocks: 128.151.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/88e058e6-ff68-4d5d-b7b8-04d1661ec235.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/88e058e6-ff68-4d5d-b7b8-04d1661ec235.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:89:bf:92:a7:82:ea:aa:2b:0d:bb:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88e058e6-ff68-4d5d-b7b8-04d1661ec235 Validity Not Before: Jul 18 09:00:12 2026 GMT Not After : Oct 16 09:00:12 2026 GMT Subject: CN=18f16b7e-4f98-4e78-92b1-62e7294e4c0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:db:30:28:71:40:25:29:99:95:0f:f8:d9:20: cd:25:54:c5:6d:26:3e:a5:d9:ae:5a:e9:e6:3a:35: 8d:5d:f7:47:a8:39:26:84:fe:ce:7b:48:8b:5f:ff: af:21:ae:55:b4:33:96:2c:0c:a0:a5:c4:3a:ce:42: dc:b7:3e:f6:c1:11:15:ad:b3:64:44:8b:3e:41:af: 0b:79:9c:e3:18:25:fd:ee:57:a3:0a:72:33:1d:27: c9:4e:03:2f:82:b6:66:cf:e7:b2:af:7d:82:fb:ef: bd:25:e9:02:f2:58:a1:14:4b:e2:4e:23:86:4b:40: b2:7d:01:99:b2:68:4a:ba:13:e8:c2:cb:72:06:00: 8b:ef:dd:70:fc:f5:31:b6:e1:71:2e:fa:76:09:13: 44:9c:9c:b7:d1:af:72:68:43:6d:5c:f9:bb:87:2a: 62:5e:e4:39:1b:c0:6f:b0:5a:53:02:ab:3a:72:d5: e3:da:cf:cc:61:a7:3a:71:39:53:86:67:69:b4:44: 9f:3e:3d:64:0f:db:05:59:b1:a1:17:57:ca:c1:1e: 65:74:26:e7:8e:60:33:95:42:5d:29:05:a4:5a:d8: e5:4e:32:79:91:64:85:d2:09:78:a6:76:81:b7:de: aa:3b:6d:16:f6:37:0c:88:55:e5:58:58:3c:09:f7: 67:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:64:5D:A4:31:93:D7:A1:19:8F:30:2A:BB:D9:59:DE:5B:6E:8F:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/b9bb34a8-3fb4-3229-af76-b084da323030.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/88e058e6-ff68-4d5d-b7b8-04d1661ec235.crl X509v3 Authority Key Identifier: keyid:7F:1F:72:F4:8D:1D:D7:6F:87:2D:2D:EA:F2:15:9E:CA:D3:6A:2D:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235.cer sbgp-ipAddrBlock: critical IPv4: 128.151.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:17:16:5f:06:2a:4c:7e:4e:d8:73:b8:c8:94:4e:d3:bb:f2: 3e:99:79:3f:db:d0:56:51:74:98:0b:00:c6:bb:cd:53:73:4b: 1c:61:bd:78:1a:1a:18:24:75:46:ed:ab:2e:44:46:e1:79:5d: 09:f7:6a:e0:5c:c2:e3:7b:eb:c0:00:70:b0:89:92:55:a4:dd: 2f:00:86:29:83:ab:e0:86:e6:85:60:97:0d:56:a5:25:15:c7: df:7c:6c:cd:e0:35:58:c3:c9:5d:02:f0:a5:41:26:d4:a5:ad: f8:8b:25:2f:8f:01:4e:7c:26:e1:27:26:a5:8f:85:8c:f6:4f: d0:6b:23:b4:fe:ff:d8:e0:34:89:1e:3d:93:b1:90:7c:7b:9f: 09:f9:e8:35:12:d2:96:de:b5:c7:96:07:2e:8a:0b:68:f9:0c: 93:6e:38:cd:8f:78:2f:0f:25:9b:0f:90:23:7f:96:c5:f3:e6: 99:54:c1:a5:cc:3e:19:4b:bd:2b:09:4a:d5:35:7d:c5:61:72: ca:bc:d6:8a:9d:f4:f1:c0:2b:44:21:f6:ee:d6:97:65:8b:a7: f6:ad:cd:99:b5:1b:36:0a:b3:24:28:1c:52:f2:94:d6:ca:e5: 1f:cb:42:be:01:dd:7d:23:a7:59:12:b9:61:ee:b5:7c:6d:f7: 06:96:4f:f5 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE6Jv5KnguqqKw27WgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODhlMDU4ZTYtZmY2OC00ZDVkLWI3YjgtMDRkMTY2MWVj MjM1MB4XDTI2MDcxODA5MDAxMloXDTI2MTAxNjA5MDAxMlowLzEtMCsGA1UEAxMk MThmMTZiN2UtNGY5OC00ZTc4LTkyYjEtNjJlNzI5NGU0YzBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtswKHFAJSmZlQ/42SDNJVTFbSY+pdmuWunm OjWNXfdHqDkmhP7Oe0iLX/+vIa5VtDOWLAygpcQ6zkLctz72wREVrbNkRIs+Qa8L eZzjGCX97lejCnIzHSfJTgMvgrZmz+eyr32C+++9JekC8lihFEviTiOGS0CyfQGZ smhKuhPowstyBgCL791w/PUxtuFxLvp2CRNEnJy30a9yaENtXPm7hypiXuQ5G8Bv sFpTAqs6ctXj2s/MYac6cTlThmdptESfPj1kD9sFWbGhF1fKwR5ldCbnjmAzlUJd KQWkWtjlTjJ5kWSF0gl4pnaBt96qO20W9jcMiFXlWFg8CfdncwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFMNkXaQxk9ehGY8wKrvZWd5bbo91MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84OGUw NThlNi1mZjY4LTRkNWQtYjdiOC0wNGQxNjYxZWMyMzUvYjliYjM0YTgtM2ZiNC0z MjI5LWFmNzYtYjA4NGRhMzIzMDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODhlMDU4ZTYtZmY2OC00ZDVkLWI3 YjgtMDRkMTY2MWVjMjM1Lzg4ZTA1OGU2LWZmNjgtNGQ1ZC1iN2I4LTA0ZDE2NjFl YzIzNS5jcmwwHwYDVR0jBBgwFoAUfx9y9I0d12+HLS3q8hWeytNqLUIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84OGUwNThlNi1mZjY4LTRkNWQtYjdiOC0wNGQx NjYxZWMyMzUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgJcwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAbhcWXwYqTH5O2HO4yJRO07vyPpl5P9vQVlF0mAsAxrvNU3NLHGG9eBoa GCR1Ru2rLkRG4XldCfdq4FzC43vrwABwsImSVaTdLwCGKYOr4IbmhWCXDValJRXH 33xszeA1WMPJXQLwpUEm1KWt+IslL48BTnwm4ScmpY+FjPZP0GsjtP7/2OA0iR49 k7GQfHufCfnoNRLSlt61x5YHLooLaPkMk244zY94Lw8lmw+QI3+WxfPmmVTBpcw+ GUu9KwlK1TV9xWFyyrzWip308cArRCH27taXZYun9q3NmbUbNgqzJCgcUvKU1srl H8tCvgHdfSOnWRK5Ye61fG33BpZP9Q== -----END CERTIFICATE-----Generated at Fri Jul 24 00:38:51 2026 by rpki-client