$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/42c47900-5457-3149-beac-2366a6171933.roa File: 42c47900-5457-3149-beac-2366a6171933.roa (raw, json) Hash identifier: lJa3Wv7KguZuZOybYxQXUhrub1mxJSQpBkZvnrBmAjE= Subject key identifier: 4D:C7:69:E1:25:FA:6E:E5:2B:5C:56:80:58:65:72:69:FD:FE:E1:63 Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F4328584E8F54EEA85AD1C2863EDA94A0 Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/42c47900-5457-3149-beac-2366a6171933.roa Signing time: Mon 20 Jul 2026 09:00:11 +0000 ROA not before: Mon 20 Jul 2026 09:00:11 +0000 ROA not after: Sun 18 Oct 2026 09:00:11 +0000 asID: 9009 IP address blocks: 198.145.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8f:54:ee:a8:5a:d1:c2:86:3e:da:94:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: Jul 20 09:00:11 2026 GMT Not After : Oct 18 09:00:11 2026 GMT Subject: CN=d57ec912-80c8-44d7-a8fd-e209f5e17b24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ee:6c:ea:c1:19:22:16:ba:28:3c:67:d8:0e: 08:46:86:b2:3d:2b:ca:82:88:c5:c5:d4:b4:cf:15: 13:74:a1:82:bf:cd:9b:2a:49:52:33:54:b1:40:f8: ba:73:cf:3e:80:22:85:a6:73:db:cc:50:81:2b:e7: 71:9e:a9:a0:e0:30:8c:5c:3c:b7:05:4e:f5:06:80: 53:7e:b6:46:79:d7:eb:6a:8d:d6:72:e0:23:3f:07: 90:0e:7d:8a:da:ca:14:9b:63:05:f3:fc:4d:75:86: 66:f6:8b:a5:21:a2:9b:4c:b1:1a:1b:c5:d5:26:f7: d3:de:96:9c:d4:8c:47:ae:bf:12:71:24:ea:bd:74: 1a:68:78:32:29:78:c4:16:1c:e6:43:d1:e7:4c:af: 1b:9a:82:fa:2c:a8:2d:64:d3:d8:62:c1:f0:a5:97: c9:e1:cf:b7:2e:ca:81:62:93:27:e1:1a:b8:90:4e: cb:e6:e4:5a:46:dd:b9:d5:c3:73:9b:66:e6:18:f1: 65:fa:37:b1:15:de:d6:e2:0a:39:55:1b:2a:1c:40: 15:87:93:19:cc:cb:97:be:4e:d2:46:4e:53:f9:df: 12:ef:b8:a0:34:c4:1b:2f:5d:ac:8f:bd:80:75:a2: 0d:8b:84:97:d2:ba:32:b3:21:c8:9a:71:74:45:ad: 73:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:C7:69:E1:25:FA:6E:E5:2B:5C:56:80:58:65:72:69:FD:FE:E1:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/42c47900-5457-3149-beac-2366a6171933.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 198.145.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:8f:7a:1f:42:ed:e4:27:a3:00:fb:e8:60:68:04:8f:08:f9: 11:fc:27:82:38:87:c5:0d:bf:03:22:f9:11:9d:46:e2:2d:2c: 58:c1:f1:92:47:ff:e7:19:ae:9a:15:53:21:4f:ce:73:5f:84: 42:ce:cc:26:46:ea:49:78:e4:19:b0:92:d3:0d:0d:f8:d9:b6: 92:e8:fd:bd:e5:c6:36:8d:46:d1:b9:73:f1:c4:47:86:90:30: 14:84:0a:3c:6e:ce:49:78:81:19:be:03:f2:5a:7a:cb:b9:0f: 23:13:f0:f8:e6:0a:01:cd:3f:af:62:b7:02:19:e3:db:0d:92: c2:dc:33:97:3f:9c:ff:01:eb:a0:aa:28:e9:14:4d:7d:fc:31: 5b:8b:5f:c8:6e:c0:d4:d5:4b:61:98:75:df:f1:08:42:10:e7: a3:01:07:37:4d:70:ab:3a:50:00:80:6c:7c:e3:b5:fa:bb:d2: 71:ce:ee:95:ec:a5:51:20:13:79:76:59:41:69:f6:f7:39:e5: a4:3d:0a:ae:63:1e:ab:4b:6a:ab:bd:cb:8a:ba:12:a3:46:e9: 55:f0:92:82:eb:a2:1a:62:7a:9a:a3:5d:3c:70:da:37:63:b2: a8:bc:45:e9:ab:3b:4b:9b:21:7b:5d:bf:4e:75:37:37:a7:de: 31:2c:af:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6PVO6oWtHChj7alKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTI2MDcyMDA5MDAxMVoXDTI2MTAxODA5MDAxMVowLzEtMCsGA1UEAxMk ZDU3ZWM5MTItODBjOC00NGQ3LWE4ZmQtZTIwOWY1ZTE3YjI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzO5s6sEZIha6KDxn2A4IRoayPSvKgojFxdS0 zxUTdKGCv82bKklSM1SxQPi6c88+gCKFpnPbzFCBK+dxnqmg4DCMXDy3BU71BoBT frZGedfrao3WcuAjPweQDn2K2soUm2MF8/xNdYZm9oulIaKbTLEaG8XVJvfT3pac 1IxHrr8ScSTqvXQaaHgyKXjEFhzmQ9HnTK8bmoL6LKgtZNPYYsHwpZfJ4c+3LsqB YpMn4Rq4kE7L5uRaRt251cNzm2bmGPFl+jexFd7W4go5VRsqHEAVh5MZzMuXvk7S Rk5T+d8S77igNMQbL12sj72AdaINi4SX0roysyHImnF0Ra1z8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE3HaeEl+m7lK1xWgFhlcmn9/uFjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvNDJjNDc5MDAtNTQ1Ny0z MTQ5LWJlYWMtMjM2NmE2MTcxOTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpGVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+Peh9C7eQnowD76GBoBI8I+RH8J4I4h8UNvwMi+RGdRuItLFjB8ZJH /+cZrpoVUyFPznNfhELOzCZG6kl45BmwktMNDfjZtpLo/b3lxjaNRtG5c/HER4aQ MBSECjxuzkl4gRm+A/Jaesu5DyMT8PjmCgHNP69itwIZ49sNksLcM5c/nP8B66Cq KOkUTX38MVuLX8huwNTVS2GYdd/xCEIQ56MBBzdNcKs6UACAbHzjtfq70nHO7pXs pVEgE3l2WUFp9vc55aQ9Cq5jHqtLaqu9y4q6EqNG6VXwkoLrohpiepqjXTxw2jdj sqi8RemrO0ubIXtdv051Nzen3jEsrwc= -----END CERTIFICATE-----Generated at Thu Jul 23 22:05:49 2026 by rpki-client