$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/712951d4-501e-451c-a20a-59b6aff3e2d4/ddf8a60d-859f-3b0b-9243-c725f1c33259.roa File: ddf8a60d-859f-3b0b-9243-c725f1c33259.roa (raw, json) Hash identifier: tSD4cSIGFQvbutYzUYHod29uQhl8lkKp+kkFRIV+6eg= Subject key identifier: 45:99:75:8C:93:29:44:0F:3E:3A:B0:0C:56:7D:F9:EE:CF:40:F5:22 Certificate issuer: /CN=712951d4-501e-451c-a20a-59b6aff3e2d4 Certificate serial: 010D0C9F4328584E8DEFB53848775CAAA5F14080 Authority key identifier: 52:7A:38:8E:28:41:32:8C:92:B2:70:AE:33:9C:BD:2C:75:A3:4E:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/712951d4-501e-451c-a20a-59b6aff3e2d4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/712951d4-501e-451c-a20a-59b6aff3e2d4/ddf8a60d-859f-3b0b-9243-c725f1c33259.roa Signing time: Sun 19 Jul 2026 21:00:12 +0000 ROA not before: Sun 19 Jul 2026 21:00:12 +0000 ROA not after: Sat 17 Oct 2026 21:00:12 +0000 asID: 133127 IP address blocks: 155.161.38.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/712951d4-501e-451c-a20a-59b6aff3e2d4/712951d4-501e-451c-a20a-59b6aff3e2d4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/712951d4-501e-451c-a20a-59b6aff3e2d4/712951d4-501e-451c-a20a-59b6aff3e2d4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/712951d4-501e-451c-a20a-59b6aff3e2d4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8d:ef:b5:38:48:77:5c:aa:a5:f1:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=712951d4-501e-451c-a20a-59b6aff3e2d4 Validity Not Before: Jul 19 21:00:12 2026 GMT Not After : Oct 17 21:00:12 2026 GMT Subject: CN=9c1d4b20-72be-456b-96d3-b9ff99a936f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:08:7f:b1:d7:90:02:cf:12:5d:5d:a5:d4:c3: f7:a0:e8:ee:9d:9e:4d:53:eb:4f:15:75:45:17:4c: 9a:dc:e1:ca:6b:69:e1:cc:94:28:d1:2b:a4:07:15: af:e3:d2:86:a1:98:1f:ef:2e:6f:7a:c5:b4:a9:0f: 8f:a7:b1:4f:b5:2f:2a:5c:9f:0b:bf:5d:0a:53:97: c5:25:5a:e8:60:cc:d3:c2:4a:48:5d:fc:33:8d:70: 74:c2:70:21:c7:08:4e:bd:f4:f4:eb:c4:1b:24:5c: fd:d7:ac:3a:f6:35:f1:dc:51:9b:11:74:28:ab:bd: 35:d5:c3:08:56:59:dc:0d:2e:41:15:d1:e8:93:07: 95:51:f1:08:8f:e0:ad:86:48:0e:8f:fe:28:87:ad: 56:ea:31:95:16:9b:0d:1e:bd:64:a4:28:ba:0d:f8: 13:a9:7c:8f:e4:e4:5c:79:59:58:a5:8d:97:d2:f1: 5b:be:42:e3:97:33:fa:a4:c6:85:90:5e:f3:02:73: 33:61:b3:e7:b7:0a:32:5a:4a:9e:03:4e:32:de:29: 8f:b0:c2:9e:37:f3:16:35:e8:8e:e4:cf:b8:e6:ff: 39:f6:f1:0a:b0:93:ad:33:bc:2c:c3:70:36:62:e2: a6:80:5f:e5:9a:11:62:96:94:26:f4:d9:34:6c:5f: 72:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:99:75:8C:93:29:44:0F:3E:3A:B0:0C:56:7D:F9:EE:CF:40:F5:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/712951d4-501e-451c-a20a-59b6aff3e2d4/ddf8a60d-859f-3b0b-9243-c725f1c33259.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/712951d4-501e-451c-a20a-59b6aff3e2d4/712951d4-501e-451c-a20a-59b6aff3e2d4.crl X509v3 Authority Key Identifier: keyid:52:7A:38:8E:28:41:32:8C:92:B2:70:AE:33:9C:BD:2C:75:A3:4E:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/712951d4-501e-451c-a20a-59b6aff3e2d4.cer sbgp-ipAddrBlock: critical IPv4: 155.161.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:7f:ff:41:49:ad:80:96:45:4d:9e:70:b0:c9:28:42:8a:1f: 0f:9b:e7:98:ca:73:ef:6d:c0:b8:2a:56:f2:71:a6:4f:bc:49: b7:ce:82:6c:cd:b0:2f:5f:20:ce:cb:9d:d2:61:aa:62:d9:fa: 44:f2:97:68:d8:e8:77:83:6c:ad:07:cf:cf:bb:01:57:14:82: 9e:27:12:27:78:db:6a:e8:a4:87:8e:22:b0:b4:81:df:5d:f6: 38:b4:91:83:36:6e:20:fd:7a:d5:a2:77:c6:56:44:2b:50:8e: 4c:ff:39:a6:52:1e:50:cd:8e:19:66:b8:f7:e5:95:87:ea:f4: 30:62:3a:6a:b4:bd:58:61:a8:ae:89:7f:88:5d:f5:d4:75:ca: 38:d9:71:21:c2:24:3c:72:ed:3c:fa:e8:82:9e:1e:07:a6:ba: ba:37:00:e5:5d:c3:a1:01:19:9b:0e:e8:cd:9f:c7:f7:38:0d: ae:b4:f6:0b:0c:23:de:c6:a0:1a:1d:02:60:1e:b5:9c:c5:f3: b6:77:1a:b1:d2:53:ef:da:f9:14:af:26:77:9c:c7:92:de:2d: 9c:83:ed:1e:a7:cd:77:47:17:0f:a9:a4:64:48:43:5a:59:25: 44:e8:c7:51:eb:23:f0:e8:e8:f1:89:29:fc:c7:ee:13:80:00: 04:d1:99:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6N77U4SHdcqqXxQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzEyOTUxZDQtNTAxZS00NTFjLWEyMGEtNTliNmFmZjNl MmQ0MB4XDTI2MDcxOTIxMDAxMloXDTI2MTAxNzIxMDAxMlowLzEtMCsGA1UEAxMk OWMxZDRiMjAtNzJiZS00NTZiLTk2ZDMtYjlmZjk5YTkzNmYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Ah/sdeQAs8SXV2l1MP3oOjunZ5NU+tPFXVF F0ya3OHKa2nhzJQo0SukBxWv49KGoZgf7y5vesW0qQ+Pp7FPtS8qXJ8Lv10KU5fF JVroYMzTwkpIXfwzjXB0wnAhxwhOvfT068QbJFz916w69jXx3FGbEXQoq7011cMI VlncDS5BFdHokweVUfEIj+CthkgOj/4oh61W6jGVFpsNHr1kpCi6DfgTqXyP5ORc eVlYpY2X0vFbvkLjlzP6pMaFkF7zAnMzYbPntwoyWkqeA04y3imPsMKeN/MWNeiO 5M+45v859vEKsJOtM7wsw3A2YuKmgF/lmhFilpQm9Nk0bF9yBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEWZdYyTKUQPPjqwDFZ9+e7PQPUiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83MTI5 NTFkNC01MDFlLTQ1MWMtYTIwYS01OWI2YWZmM2UyZDQvZGRmOGE2MGQtODU5Zi0z YjBiLTkyNDMtYzcyNWYxYzMzMjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzEyOTUxZDQtNTAxZS00NTFjLWEy MGEtNTliNmFmZjNlMmQ0LzcxMjk1MWQ0LTUwMWUtNDUxYy1hMjBhLTU5YjZhZmYz ZTJkNC5jcmwwHwYDVR0jBBgwFoAUUno4jihBMoySsnCuM5y9LHWjTnMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83MTI5NTFkNC01MDFlLTQ1MWMtYTIwYS01OWI2 YWZmM2UyZDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBm6EmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB5//0FJrYCWRU2ecLDJKEKKHw+b55jKc+9twLgqVvJxpk+8SbfOgmzN sC9fIM7LndJhqmLZ+kTyl2jY6HeDbK0Hz8+7AVcUgp4nEid422ropIeOIrC0gd9d 9ji0kYM2biD9etWid8ZWRCtQjkz/OaZSHlDNjhlmuPfllYfq9DBiOmq0vVhhqK6J f4hd9dR1yjjZcSHCJDxy7Tz66IKeHgemuro3AOVdw6EBGZsO6M2fx/c4Da609gsM I97GoBodAmAetZzF87Z3GrHSU+/a+RSvJnecx5LeLZyD7R6nzXdHFw+ppGRIQ1pZ JUTox1HrI/Do6PGJKfzH7hOAAATRmcU= -----END CERTIFICATE-----Generated at Fri Jul 24 15:17:03 2026 by rpki-client