$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/d0283847-bee4-35b0-b680-fdfa9b481b80.roa File: d0283847-bee4-35b0-b680-fdfa9b481b80.roa (raw, json) Hash identifier: tj6Bv0xv+rfrGTsK4mOdZWoLTFMPg0LsDr+Sh59SRuk= Subject key identifier: B7:BA:38:5E:44:1A:4A:F0:3E:95:F0:7F:16:80:39:7D:27:55:06:5E Certificate issuer: /CN=5da7d5c0-eec9-425c-a574-6eb9dd4ede61 Certificate serial: 010D0C9F4328584E921F9DF08279798BD7D34240 Authority key identifier: F1:05:9C:8E:EF:DA:59:41:FA:26:D3:A3:69:B6:85:FA:04:3C:76:1B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/d0283847-bee4-35b0-b680-fdfa9b481b80.roa Signing time: Tue 21 Jul 2026 09:00:12 +0000 ROA not before: Tue 21 Jul 2026 09:00:12 +0000 ROA not after: Mon 19 Oct 2026 09:00:12 +0000 asID: 14090 IP address blocks: 64.255.152.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:92:1f:9d:f0:82:79:79:8b:d7:d3:42:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da7d5c0-eec9-425c-a574-6eb9dd4ede61 Validity Not Before: Jul 21 09:00:12 2026 GMT Not After : Oct 19 09:00:12 2026 GMT Subject: CN=8b1fdfd3-531d-4edd-824c-a8db58a60021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:49:6a:1e:92:7e:3a:a4:40:68:08:5b:14:fe: 15:c6:5a:6e:0b:5c:db:f7:44:22:4a:a5:cb:60:bf: 70:80:ee:85:4a:9a:b7:d4:e7:97:ea:df:47:f5:58: 8e:3c:69:dc:3e:07:41:25:73:8f:67:ed:fd:b4:65: 86:c9:b5:92:44:49:49:95:b0:76:87:f9:7a:00:1b: 11:0f:55:b0:8a:47:4d:73:4f:19:7a:c9:a8:0b:16: a5:99:f5:a7:f0:b3:15:5e:73:25:ba:40:ea:03:d4: cc:5b:4a:91:e4:33:75:34:27:59:e3:0e:87:fb:ed: d0:5d:21:dd:46:55:72:1d:23:93:47:86:f7:6d:81: 1d:b7:87:ed:19:34:6c:47:a0:6b:0e:54:3a:1a:d5: ff:64:dc:f6:5f:e6:48:c5:5e:7b:3a:b0:7f:d6:9b: 80:b6:d4:9e:90:4b:89:90:05:ec:3f:d4:a0:07:23: 6d:c5:83:d1:28:9a:a5:ed:7a:c9:be:ef:97:92:f0: 93:db:fe:94:9e:16:e9:b9:9a:04:23:07:e3:d8:0e: 88:1d:8f:76:25:9f:fb:e3:44:2d:f7:73:46:31:ea: 44:5c:b9:bd:22:d6:24:80:69:be:b1:ab:9c:0a:04: fe:89:dd:08:c7:c0:c4:47:34:58:6c:cc:7f:41:de: 5d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:BA:38:5E:44:1A:4A:F0:3E:95:F0:7F:16:80:39:7D:27:55:06:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/d0283847-bee4-35b0-b680-fdfa9b481b80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.crl X509v3 Authority Key Identifier: keyid:F1:05:9C:8E:EF:DA:59:41:FA:26:D3:A3:69:B6:85:FA:04:3C:76:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer sbgp-ipAddrBlock: critical IPv4: 64.255.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:98:94:c1:56:be:52:1e:83:6a:d0:d4:aa:05:2d:e8:47:57: c9:1d:72:b4:ed:8e:87:29:44:2d:d6:ab:24:4c:21:d4:5b:3c: 46:0b:1b:3a:d4:cc:b3:a5:49:06:fe:4c:25:0d:2e:57:99:c8: e7:36:ed:78:e7:13:21:96:13:07:79:08:d5:d1:d9:3a:0c:76: 98:5d:68:04:d6:22:43:44:d9:31:28:2c:dc:5f:08:aa:f2:a1: 08:51:af:71:0d:1c:66:4a:83:ad:07:d7:92:2f:df:1c:8b:95: 98:ce:07:51:fc:e1:e6:62:5d:dd:0d:e0:7d:8e:99:a8:41:66: 46:16:da:cf:88:f7:03:99:be:a6:d9:97:d2:7e:45:6f:1f:9f: 6b:8d:9f:c2:05:88:2f:81:27:60:d9:49:48:83:d9:8d:89:7d: f8:3a:c5:5f:a0:c8:04:d3:6f:30:dc:04:fc:cb:88:d4:8c:8a: 9a:1b:ec:4f:58:74:de:6b:27:4b:f9:e1:1f:b7:49:19:e4:b4: 54:c2:31:f0:22:8c:80:ee:12:24:6f:02:3d:da:f4:44:08:20: 7c:2e:82:ef:34:e4:7b:45:31:e3:32:39:ad:46:ff:cc:59:38: e0:96:20:09:1f:25:62:a2:84:1a:33:5d:1d:9f:90:77:65:12: 20:ee:10:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6SH53wgnl5i9fTQkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRhN2Q1YzAtZWVjOS00MjVjLWE1NzQtNmViOWRkNGVk ZTYxMB4XDTI2MDcyMTA5MDAxMloXDTI2MTAxOTA5MDAxMlowLzEtMCsGA1UEAxMk OGIxZmRmZDMtNTMxZC00ZWRkLTgyNGMtYThkYjU4YTYwMDIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmElqHpJ+OqRAaAhbFP4VxlpuC1zb90QiSqXL YL9wgO6FSpq31OeX6t9H9ViOPGncPgdBJXOPZ+39tGWGybWSRElJlbB2h/l6ABsR D1WwikdNc08ZesmoCxalmfWn8LMVXnMlukDqA9TMW0qR5DN1NCdZ4w6H++3QXSHd RlVyHSOTR4b3bYEdt4ftGTRsR6BrDlQ6GtX/ZNz2X+ZIxV57OrB/1puAttSekEuJ kAXsP9SgByNtxYPRKJql7XrJvu+XkvCT2/6UnhbpuZoEIwfj2A6IHY92JZ/740Qt 93NGMepEXLm9ItYkgGm+saucCgT+id0Ix8DERzRYbMx/Qd5dWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLe6OF5EGkrwPpXwfxaAOX0nVQZeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81ZGE3 ZDVjMC1lZWM5LTQyNWMtYTU3NC02ZWI5ZGQ0ZWRlNjEvZDAyODM4NDctYmVlNC0z NWIwLWI2ODAtZmRmYTliNDgxYjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWRhN2Q1YzAtZWVjOS00MjVjLWE1 NzQtNmViOWRkNGVkZTYxLzVkYTdkNWMwLWVlYzktNDI1Yy1hNTc0LTZlYjlkZDRl ZGU2MS5jcmwwHwYDVR0jBBgwFoAU8QWcju/aWUH6JtOjabaF+gQ8dhswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81ZGE3ZDVjMC1lZWM5LTQyNWMtYTU3NC02ZWI5 ZGQ0ZWRlNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQP+YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGuYlMFWvlIeg2rQ1KoFLehHV8kdcrTtjocpRC3WqyRMIdRbPEYLGzrU zLOlSQb+TCUNLleZyOc27XjnEyGWEwd5CNXR2ToMdphdaATWIkNE2TEoLNxfCKry oQhRr3ENHGZKg60H15Iv3xyLlZjOB1H84eZiXd0N4H2OmahBZkYW2s+I9wOZvqbZ l9J+RW8fn2uNn8IFiC+BJ2DZSUiD2Y2Jffg6xV+gyATTbzDcBPzLiNSMipob7E9Y dN5rJ0v54R+3SRnktFTCMfAijIDuEiRvAj3a9EQIIHwugu805HtFMeMyOa1G/8xZ OOCWIAkfJWKihBozXR2fkHdlEiDuEP8= -----END CERTIFICATE-----Generated at Fri Jul 24 11:47:01 2026 by rpki-client