$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8d7b4edb-094a-33a7-8fa4-6deac11f2b83.roa File: 8d7b4edb-094a-33a7-8fa4-6deac11f2b83.roa (raw, json) Hash identifier: 9/2DMlSbmmzuhRKRglN4TJco4h9vUInDTw86OI6YTg4= Subject key identifier: C1:C5:FA:63:4C:36:8E:4A:ED:97:CA:6E:9E:A9:21:79:27:8B:8D:0E Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584E3FC4895626C31D59162E9980 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8d7b4edb-094a-33a7-8fa4-6deac11f2b83.roa Signing time: Sun 21 Jun 2026 21:00:12 +0000 ROA not before: Sun 21 Jun 2026 21:00:12 +0000 ROA not after: Sat 19 Sep 2026 21:00:12 +0000 asID: 8013 IP address blocks: 153.68.184.0/22 maxlen: 22 153.68.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3f:c4:89:56:26:c3:1d:59:16:2e:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jun 21 21:00:12 2026 GMT Not After : Sep 19 21:00:12 2026 GMT Subject: CN=845d9f27-2ff8-4360-b1af-8a739a9f3f37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:33:83:92:b2:80:09:a6:51:ad:13:04:2e:a1: 8b:f8:8a:c2:5b:9f:e7:9b:33:35:c1:f7:89:98:91: 61:52:b8:76:bd:1a:e1:e5:be:53:43:49:b9:3e:ce: 4c:02:63:a6:ec:4e:ae:64:1c:ff:47:72:eb:70:0e: 66:84:dc:35:6a:be:ff:9c:a6:70:87:55:65:cd:33: b9:d7:37:ae:f8:11:ac:db:d6:7c:3e:df:ca:4a:e6: 31:15:42:e9:9f:df:eb:c5:fd:fc:50:e8:89:f7:5d: df:59:3c:e7:23:65:64:04:16:06:66:c7:c3:9a:c6: 75:f2:1c:88:0a:01:8d:c4:b0:86:3f:1a:fe:93:48: 79:22:67:b9:6e:cf:3f:bf:16:f1:c2:07:36:39:63: 68:4e:fd:b3:f4:7f:41:3a:ce:2e:94:b7:df:31:cf: da:39:e4:00:63:57:23:30:6b:c7:1d:ce:e9:b5:21: f8:c8:58:01:62:b2:39:d8:5c:7b:72:1f:4a:7c:bc: d7:60:db:2b:fb:30:51:b5:40:da:75:97:96:13:93: 2b:3b:0c:2b:30:d4:6d:2f:e8:ac:a6:b2:b6:93:e3: 10:84:7d:4e:16:73:f5:32:ff:16:d7:a8:84:ac:c8: d5:05:2d:1b:a6:38:50:66:f1:58:60:2b:02:92:d4: 3b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:C5:FA:63:4C:36:8E:4A:ED:97:CA:6E:9E:A9:21:79:27:8B:8D:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8d7b4edb-094a-33a7-8fa4-6deac11f2b83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 153.68.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:91:04:5b:0d:e5:59:d8:d8:5c:92:c7:7d:9a:81:1a:49:fd: 59:72:09:ec:5d:57:81:90:0b:c0:87:da:8c:44:f9:ae:90:56: f6:94:5f:d1:4c:22:81:af:38:5d:75:dc:1d:cd:b3:92:55:2b: 32:cd:a4:df:87:99:14:d1:dd:2a:23:65:c1:2f:18:78:ed:dd: 00:33:e2:95:91:b3:c4:f2:72:5e:ae:e9:19:8c:8f:7f:31:7d: cd:43:7c:11:52:44:b9:fc:ac:5c:ca:0f:f4:18:a3:5d:fc:e9: f5:c4:ff:73:d1:e0:de:03:00:4b:a1:ef:46:a8:71:93:37:c3: ed:80:f2:21:79:14:d2:db:b1:c4:00:18:03:63:6a:a3:18:e3: e9:8e:88:bc:6f:ad:c6:37:7e:a4:a7:5e:e5:b6:96:12:f4:68: 4d:e8:5a:f4:c3:f0:80:ee:e0:0b:57:13:24:f2:b7:af:53:40: 32:d8:d6:3a:37:fe:69:98:d4:5a:59:bb:c1:2e:b3:10:c1:c0: 5d:0f:a6:08:97:bb:bb:fa:35:b9:4c:16:74:83:c7:7d:07:73: 63:79:33:77:8b:53:0b:12:33:f3:18:68:20:0e:d0:4b:c5:4c: a3:5e:55:de:d3:1c:d0:04:67:68:db:3f:91:73:1e:5a:34:10: bb:46:3f:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4/xIlWJsMdWRYumYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDYyMTIxMDAxMloXDTI2MDkxOTIxMDAxMlowLzEtMCsGA1UEAxMk ODQ1ZDlmMjctMmZmOC00MzYwLWIxYWYtOGE3MzlhOWYzZjM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjODkrKACaZRrRMELqGL+IrCW5/nmzM1wfeJ mJFhUrh2vRrh5b5TQ0m5Ps5MAmOm7E6uZBz/R3LrcA5mhNw1ar7/nKZwh1VlzTO5 1zeu+BGs29Z8Pt/KSuYxFULpn9/rxf38UOiJ913fWTznI2VkBBYGZsfDmsZ18hyI CgGNxLCGPxr+k0h5Ime5bs8/vxbxwgc2OWNoTv2z9H9BOs4ulLffMc/aOeQAY1cj MGvHHc7ptSH4yFgBYrI52Fx7ch9KfLzXYNsr+zBRtUDadZeWE5MrOwwrMNRtL+is prK2k+MQhH1OFnP1Mv8W16iErMjVBS0bpjhQZvFYYCsCktQ7WQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMHF+mNMNo5K7ZfKbp6pIXkni40OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvOGQ3YjRlZGItMDk0YS0z M2E3LThmYTQtNmRlYWMxMWYyYjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmUS4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKmRBFsN5VnY2FySx32agRpJ/VlyCexdV4GQC8CH2oxE+a6QVvaUX9FM IoGvOF113B3Ns5JVKzLNpN+HmRTR3SojZcEvGHjt3QAz4pWRs8Tycl6u6RmMj38x fc1DfBFSRLn8rFzKD/QYo1386fXE/3PR4N4DAEuh70aocZM3w+2A8iF5FNLbscQA GANjaqMY4+mOiLxvrcY3fqSnXuW2lhL0aE3oWvTD8IDu4AtXEyTyt69TQDLY1jo3 /mmY1FpZu8EusxDBwF0PpgiXu7v6NblMFnSDx30Hc2N5M3eLUwsSM/MYaCAO0EvF TKNeVd7THNAEZ2jbP5FzHlo0ELtGPzA= -----END CERTIFICATE-----Generated at Fri Jul 24 00:44:01 2026 by rpki-client