$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/db729622-f239-3542-a3b9-b05be8216524.roa File: db729622-f239-3542-a3b9-b05be8216524.roa (raw, json) Hash identifier: y9TbWE+8IFb+pRA6Gg6kuiNLzu5HNZQsgErsOj2W3t8= Subject key identifier: 1D:2E:36:F2:27:87:35:70:AA:5A:3C:D2:E0:60:53:11:54:E4:C3:E8 Certificate issuer: /CN=6528c9ac-3735-430d-99f2-7ac01944d688 Certificate serial: 010D0C9F4328584E736A2693C8B09DCB574E9B40 Authority key identifier: 64:79:50:96:C9:A4:0D:34:86:46:BD:1D:64:20:0D:DB:7C:9D:BA:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/db729622-f239-3542-a3b9-b05be8216524.roa Signing time: Fri 10 Jul 2026 09:00:12 +0000 ROA not before: Fri 10 Jul 2026 09:00:12 +0000 ROA not after: Thu 08 Oct 2026 09:00:12 +0000 asID: 54696 IP address blocks: 23.148.153.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/6528c9ac-3735-430d-99f2-7ac01944d688.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/6528c9ac-3735-430d-99f2-7ac01944d688.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:73:6a:26:93:c8:b0:9d:cb:57:4e:9b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6528c9ac-3735-430d-99f2-7ac01944d688 Validity Not Before: Jul 10 09:00:12 2026 GMT Not After : Oct 8 09:00:12 2026 GMT Subject: CN=d622d516-16e3-49e8-8c53-5b8091ec24c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:5e:a2:7e:39:e1:f7:67:c2:75:f7:51:5c:47: 8f:ae:06:e7:21:9f:4d:df:08:cd:fc:5a:79:ef:5f: 56:87:92:24:93:78:c6:5b:68:34:90:93:9d:5c:dd: 59:df:7c:a6:46:b3:da:75:d2:72:0b:fc:f4:32:05: 68:4a:19:f6:6e:23:15:8f:70:b8:0d:6a:f3:32:6e: 54:e8:cc:f3:b8:d2:55:73:43:f7:ce:b7:68:70:c9: 0a:b8:e0:03:52:ec:7e:20:ed:b9:1d:97:ea:f2:59: c3:8e:8b:72:65:c8:81:05:0b:ba:c0:d5:48:6f:db: 8a:26:b7:f3:18:3f:e6:c8:a3:9f:05:3d:55:65:06: 57:43:f8:8f:c5:d0:b3:72:89:75:6e:c5:eb:91:71: e8:51:9f:0c:43:d1:bd:94:1d:46:12:eb:e1:2e:e5: ea:02:2e:5c:12:29:24:6b:6f:eb:12:7f:46:af:a0: e2:5f:76:a9:5a:e5:fe:45:4d:8a:ce:be:31:e0:13: 39:19:64:f6:39:4a:95:6d:b6:c0:0a:04:db:54:f6: e7:27:2e:3c:86:d1:13:4c:1f:67:5d:ce:1b:28:d0: 5c:70:e8:ff:78:eb:d3:96:06:86:13:4d:8f:1d:e8: 95:5f:73:18:13:e1:0d:e2:27:9b:d4:5b:f3:d8:e1: bb:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:2E:36:F2:27:87:35:70:AA:5A:3C:D2:E0:60:53:11:54:E4:C3:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/db729622-f239-3542-a3b9-b05be8216524.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/6528c9ac-3735-430d-99f2-7ac01944d688.crl X509v3 Authority Key Identifier: keyid:64:79:50:96:C9:A4:0D:34:86:46:BD:1D:64:20:0D:DB:7C:9D:BA:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688.cer sbgp-ipAddrBlock: critical IPv4: 23.148.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:ab:6a:43:e0:92:f8:f8:ff:6e:a8:4e:74:4d:1b:33:95:54: 7d:82:0e:c7:8c:27:46:cb:6e:ea:e3:b0:45:1e:87:8a:36:43: 22:47:f2:a6:e2:11:a5:9b:09:5b:21:c5:9b:04:ba:52:19:87: 7b:aa:c0:80:b6:d8:8f:fc:1d:5f:0e:6f:9d:23:35:cc:42:c4: d0:99:af:ba:47:6b:e0:d0:ba:bc:48:f6:32:fd:f3:24:84:c0: 2d:e2:3a:51:27:32:e4:de:9a:ed:ac:c8:79:65:73:e0:3a:8e: 5f:a2:6e:70:ba:49:66:dd:5c:93:4f:06:3f:c1:42:dc:8c:9e: d5:98:07:03:54:2d:7c:4c:13:02:8b:35:0f:fb:d8:e6:39:fe: 70:52:c2:05:4e:87:c3:00:58:c9:82:cc:fc:14:2c:49:cd:b0: a2:38:f9:58:4e:a8:9d:b5:3c:1f:2b:e1:5b:4a:1f:49:87:c4: 8e:17:4c:77:20:b5:36:92:ee:ff:be:71:0b:a1:24:73:c0:55: 99:0b:30:78:50:c4:f5:69:ae:c1:52:ea:70:aa:76:2f:0d:64: a0:dd:37:82:bb:47:ab:6f:d7:a8:2f:ab:8c:1a:0a:ea:fd:86: e3:cb:b3:36:0f:e5:78:01:ce:08:80:5e:a7:a7:0b:f3:e9:46: 7b:12:2b:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5zaiaTyLCdy1dOm0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjUyOGM5YWMtMzczNS00MzBkLTk5ZjItN2FjMDE5NDRk Njg4MB4XDTI2MDcxMDA5MDAxMloXDTI2MTAwODA5MDAxMlowLzEtMCsGA1UEAxMk ZDYyMmQ1MTYtMTZlMy00OWU4LThjNTMtNWI4MDkxZWMyNGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjl6ifjnh92fCdfdRXEePrgbnIZ9N3wjN/Fp5 719Wh5Ikk3jGW2g0kJOdXN1Z33ymRrPaddJyC/z0MgVoShn2biMVj3C4DWrzMm5U 6MzzuNJVc0P3zrdocMkKuOADUux+IO25HZfq8lnDjotyZciBBQu6wNVIb9uKJrfz GD/myKOfBT1VZQZXQ/iPxdCzcol1bsXrkXHoUZ8MQ9G9lB1GEuvhLuXqAi5cEikk a2/rEn9Gr6DiX3apWuX+RU2Kzr4x4BM5GWT2OUqVbbbACgTbVPbnJy48htETTB9n Xc4bKNBccOj/eOvTlgaGE02PHeiVX3MYE+EN4ieb1Fvz2OG7eQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB0uNvInhzVwqlo80uBgUxFU5MPoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82NTI4 YzlhYy0zNzM1LTQzMGQtOTlmMi03YWMwMTk0NGQ2ODgvZGI3Mjk2MjItZjIzOS0z NTQyLWEzYjktYjA1YmU4MjE2NTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjUyOGM5YWMtMzczNS00MzBkLTk5 ZjItN2FjMDE5NDRkNjg4LzY1MjhjOWFjLTM3MzUtNDMwZC05OWYyLTdhYzAxOTQ0 ZDY4OC5jcmwwHwYDVR0jBBgwFoAUZHlQlsmkDTSGRr0dZCAN23yduvgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82NTI4YzlhYy0zNzM1LTQzMGQtOTlmMi03YWMw MTk0NGQ2ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5SZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEOrakPgkvj4/26oTnRNGzOVVH2CDseMJ0bLburjsEUeh4o2QyJH8qbi EaWbCVshxZsEulIZh3uqwIC22I/8HV8Ob50jNcxCxNCZr7pHa+DQurxI9jL98ySE wC3iOlEnMuTemu2syHllc+A6jl+ibnC6SWbdXJNPBj/BQtyMntWYBwNULXxMEwKL NQ/72OY5/nBSwgVOh8MAWMmCzPwULEnNsKI4+VhOqJ21PB8r4VtKH0mHxI4XTHcg tTaS7v++cQuhJHPAVZkLMHhQxPVprsFS6nCqdi8NZKDdN4K7R6tv16gvq4waCur9 huPLszYP5XgBzgiAXqenC/PpRnsSK4w= -----END CERTIFICATE-----Generated at Thu Jul 23 23:36:45 2026 by rpki-client