$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/3be6aaa2-e9f1-3ba6-a11b-e0f7b3f0691b.roa File: 3be6aaa2-e9f1-3ba6-a11b-e0f7b3f0691b.roa (raw, json) Hash identifier: /a4B68oVNKXXAVaXw5qKOu0yL6cDYa9Hnp0aho2CRtk= Subject key identifier: 76:25:9C:20:6E:10:74:AD:B1:21:17:B3:3B:0F:1A:D8:50:1C:B9:18 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584E97B508476A549514B4291380 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/3be6aaa2-e9f1-3ba6-a11b-e0f7b3f0691b.roa Signing time: Thu 23 Jul 2026 09:00:11 +0000 ROA not before: Thu 23 Jul 2026 09:00:11 +0000 ROA not after: Wed 21 Oct 2026 09:00:11 +0000 asID: 9009 IP address blocks: 158.115.242.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:97:b5:08:47:6a:54:95:14:b4:29:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Jul 23 09:00:11 2026 GMT Not After : Oct 21 09:00:11 2026 GMT Subject: CN=d1b0e35b-19d9-4283-8f10-541c1c64efa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:ab:f7:78:d8:22:f5:be:6c:cd:07:e9:ef:2f: 83:87:7a:cd:9c:2f:d9:6b:4d:49:21:df:71:15:bc: ca:34:ed:ca:d2:cd:ed:f3:bb:d1:4b:12:a0:69:fb: f0:73:09:7f:9d:89:ba:21:e5:2f:df:39:ac:cc:a5: dd:1e:0f:a6:72:3d:d5:3c:45:74:d0:6c:48:36:51: 81:1c:7a:68:f7:10:75:f8:19:01:3f:29:de:11:3d: 9a:a2:d6:c7:5c:ca:51:68:72:09:8e:6f:07:fe:c7: 4a:44:1d:08:c1:b9:eb:42:36:7a:f6:fa:8d:65:67: 59:36:1d:84:d7:a5:31:d6:3a:31:c0:2d:bc:56:68: 87:52:b4:ab:e7:53:83:2e:0d:67:f8:58:02:fb:d1: 4a:bd:27:76:68:f1:e4:ab:9d:db:99:d0:5e:f1:1c: ce:8c:fc:cc:59:fc:da:e5:e8:5b:46:6d:87:49:26: 83:85:ff:f5:04:d6:2c:d2:7e:9a:8a:f0:cc:72:4b: 68:bc:d0:f9:b2:ef:80:01:58:c6:bc:ea:4c:91:a4: d6:8b:bb:99:b3:07:96:04:ed:8c:df:9c:07:9f:17: eb:ba:c4:bd:c1:3c:22:0b:30:a3:1d:b9:36:a2:7c: 83:40:9a:21:c3:3a:07:07:c4:82:65:36:e8:aa:c4: d4:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:25:9C:20:6E:10:74:AD:B1:21:17:B3:3B:0F:1A:D8:50:1C:B9:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/3be6aaa2-e9f1-3ba6-a11b-e0f7b3f0691b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 158.115.242.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:6e:9d:e8:cb:75:93:4b:2d:75:95:92:39:25:c3:32:1f:70: 31:88:83:33:ce:a2:6b:6c:08:12:da:3e:8d:98:e3:e2:8d:8d: 80:ea:34:f0:7a:97:7c:7b:d2:87:ae:46:f4:4e:fc:79:d4:01: fe:a6:6c:04:72:92:37:cc:99:21:7d:42:47:7a:87:a5:7c:73: 8b:ab:02:93:bf:bd:65:cf:2a:94:7c:9f:fa:56:d9:3d:c2:11: 1a:1c:e3:d2:d7:8e:41:e4:ff:f1:2f:45:61:7d:8a:9d:00:97: 24:26:83:ef:f1:1b:49:84:2d:41:5c:aa:b7:61:64:ba:01:a2: 24:d6:e4:74:44:77:e5:1f:a1:95:da:d5:60:24:9c:07:55:4e: a9:16:59:cd:98:cb:ab:16:47:4b:77:a6:6d:15:c6:99:a4:0b: 3b:a9:71:bf:7a:91:46:86:e8:3b:ca:c6:77:51:f2:af:dc:e4: 9e:67:fe:f9:7b:a9:bf:e8:14:0b:4d:20:83:96:f5:c3:f9:20: 3b:4f:39:43:09:7a:9a:2f:f4:27:14:d1:38:84:3f:8a:72:3f: 5a:3a:74:ab:af:81:18:a7:55:e2:79:61:7f:9b:80:46:40:7d: 2d:04:8c:e3:6a:6f:77:3e:fa:ac:3e:27:09:b8:07:e3:c9:52: f2:f7:a4:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6XtQhHalSVFLQpE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI2MDcyMzA5MDAxMVoXDTI2MTAyMTA5MDAxMVowLzEtMCsGA1UEAxMk ZDFiMGUzNWItMTlkOS00MjgzLThmMTAtNTQxYzFjNjRlZmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Kv3eNgi9b5szQfp7y+Dh3rNnC/Za01JId9x FbzKNO3K0s3t87vRSxKgafvwcwl/nYm6IeUv3zmszKXdHg+mcj3VPEV00GxINlGB HHpo9xB1+BkBPyneET2aotbHXMpRaHIJjm8H/sdKRB0IwbnrQjZ69vqNZWdZNh2E 16Ux1joxwC28VmiHUrSr51ODLg1n+FgC+9FKvSd2aPHkq53bmdBe8RzOjPzMWfza 5ehbRm2HSSaDhf/1BNYs0n6aivDMcktovND5su+AAVjGvOpMkaTWi7uZsweWBO2M 35wHnxfrusS9wTwiCzCjHbk2onyDQJohwzoHB8SCZTboqsTUDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHYlnCBuEHStsSEXszsPGthQHLkYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvM2JlNmFhYTItZTlmMS0z YmE2LWExMWItZTBmN2IzZjA2OTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnnPyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5unejLdZNLLXWVkjklwzIfcDGIgzPOomtsCBLaPo2Y4+KNjYDqNPB6 l3x70oeuRvRO/HnUAf6mbARykjfMmSF9Qkd6h6V8c4urApO/vWXPKpR8n/pW2T3C ERoc49LXjkHk//EvRWF9ip0AlyQmg+/xG0mELUFcqrdhZLoBoiTW5HREd+UfoZXa 1WAknAdVTqkWWc2Yy6sWR0t3pm0VxpmkCzupcb96kUaG6DvKxndR8q/c5J5n/vl7 qb/oFAtNIIOW9cP5IDtPOUMJepov9CcU0TiEP4pyP1o6dKuvgRinVeJ5YX+bgEZA fS0EjONqb3c++qw+Jwm4B+PJUvL3pPU= -----END CERTIFICATE-----Generated at Fri Jul 24 01:40:44 2026 by rpki-client