$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/2a2d503d-6cb3-39a3-805e-a9f41d3f8ee8.roa File: 2a2d503d-6cb3-39a3-805e-a9f41d3f8ee8.roa (raw, json) Hash identifier: OC5hh4ikvvzqLFA7uzolfpOgSaEBCQNi1yTrmwWBKnU= Subject key identifier: B8:A5:E8:A0:7B:5F:8D:78:4C:91:76:8D:BF:5F:22:81:9A:90:4A:6B Certificate issuer: /CN=aa27be3e-5663-4196-bb8a-966e8a6bf571 Certificate serial: 010D0C9F4328584E97B510690DC1B97417E68300 Authority key identifier: 1B:90:85:AE:E9:17:7D:6D:3A:CD:63:21:A5:87:E5:B8:09:76:5F:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/2a2d503d-6cb3-39a3-805e-a9f41d3f8ee8.roa Signing time: Thu 23 Jul 2026 09:00:11 +0000 ROA not before: Thu 23 Jul 2026 09:00:11 +0000 ROA not after: Wed 21 Oct 2026 09:00:11 +0000 asID: 395516 IP address blocks: 153.65.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/aa27be3e-5663-4196-bb8a-966e8a6bf571.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/aa27be3e-5663-4196-bb8a-966e8a6bf571.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:97:b5:10:69:0d:c1:b9:74:17:e6:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa27be3e-5663-4196-bb8a-966e8a6bf571 Validity Not Before: Jul 23 09:00:11 2026 GMT Not After : Oct 21 09:00:11 2026 GMT Subject: CN=87b52079-155b-4bce-a7bc-d65f64fd1fb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:07:f0:46:db:97:a1:bc:21:0f:99:10:c6:1c: 59:0c:2e:ee:be:82:dc:14:bd:f7:b3:f4:a1:31:7a: 94:51:d7:ed:a8:19:2e:20:0d:8d:5a:20:c2:b8:23: a7:fe:bf:32:59:a6:94:23:b8:07:d1:40:1e:67:8c: 0b:d5:94:0e:aa:c6:47:63:f5:fa:e3:bd:6c:9d:68: e5:8c:9f:f8:88:c6:9a:8b:4d:53:fb:96:37:8c:45: 89:6f:f3:95:a9:49:85:59:cc:c7:05:40:4d:c6:c9: 33:a1:a4:d7:3b:01:76:cc:2f:32:b7:4d:c0:ca:34: b9:a0:0b:1e:3e:4a:90:84:93:14:78:ef:dc:fc:5c: 41:e0:2b:39:9e:c5:cf:3d:f3:c8:1e:78:10:36:dc: ca:d2:9f:0a:2b:64:47:34:53:58:0b:90:e9:a3:56: d4:0a:1e:dc:a6:e6:79:32:41:3b:35:b4:e1:ab:32: 53:c4:8f:06:4c:0c:0e:d6:d0:88:89:4d:ae:fd:e9: fe:3c:fc:df:3e:5f:d2:f0:26:1d:26:e0:a6:6a:b3: 41:a2:39:93:0f:b7:ea:04:f7:69:83:c2:89:f4:90: 75:3c:97:48:cb:c5:68:b1:92:fa:9e:6f:d0:fd:5a: 8d:68:c1:49:9d:1a:3c:c2:c7:c0:c7:aa:a5:94:ea: 5d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:A5:E8:A0:7B:5F:8D:78:4C:91:76:8D:BF:5F:22:81:9A:90:4A:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/2a2d503d-6cb3-39a3-805e-a9f41d3f8ee8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/aa27be3e-5663-4196-bb8a-966e8a6bf571.crl X509v3 Authority Key Identifier: keyid:1B:90:85:AE:E9:17:7D:6D:3A:CD:63:21:A5:87:E5:B8:09:76:5F:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571.cer sbgp-ipAddrBlock: critical IPv4: 153.65.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:e6:53:4c:96:a2:c0:e4:4b:bc:33:85:6a:21:4a:28:a0:50: 65:9d:43:af:1a:05:9c:2f:f1:c3:ae:cd:9e:cc:06:74:f7:f2: 61:99:a4:da:6f:de:f1:50:ed:a9:07:eb:44:f8:f5:fa:c0:47: c7:af:4e:d7:79:f9:40:8b:21:00:26:c7:ee:90:bb:42:10:5d: 36:53:58:a1:ea:35:fb:91:47:a7:d7:f0:e4:88:93:31:5c:e7: 41:3c:dd:91:06:f2:fa:ab:7f:e6:13:f8:33:94:a5:46:56:53: 64:74:b4:55:6e:a3:e5:d0:fe:18:98:85:2b:28:6e:77:ac:09: b8:ab:0a:b4:4a:3f:90:df:80:5f:cb:6b:36:ac:4f:61:ca:75: 48:12:37:da:5c:dd:8d:a8:6b:11:e7:f4:48:4a:22:2f:40:4d: b7:d5:b1:ce:9f:b1:99:4c:42:8e:69:53:63:c7:40:53:81:a5: 02:de:c1:12:ce:a5:72:78:f6:62:46:78:d9:f5:8a:75:d4:ff: 41:05:09:6d:bc:29:61:cf:a4:d9:b2:4b:46:fd:17:e7:5b:3d: 7c:0e:a2:fe:82:8c:a4:66:2a:e0:f5:4d:85:cd:f6:a8:55:c5: 59:c2:79:bd:28:40:c9:0f:a8:dc:16:56:a2:c5:9e:5b:39:6a: 7c:81:a8:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6XtRBpDcG5dBfmgwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEyN2JlM2UtNTY2My00MTk2LWJiOGEtOTY2ZThhNmJm NTcxMB4XDTI2MDcyMzA5MDAxMVoXDTI2MTAyMTA5MDAxMVowLzEtMCsGA1UEAxMk ODdiNTIwNzktMTU1Yi00YmNlLWE3YmMtZDY1ZjY0ZmQxZmI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAfwRtuXobwhD5kQxhxZDC7uvoLcFL33s/Sh MXqUUdftqBkuIA2NWiDCuCOn/r8yWaaUI7gH0UAeZ4wL1ZQOqsZHY/X6471snWjl jJ/4iMaai01T+5Y3jEWJb/OVqUmFWczHBUBNxskzoaTXOwF2zC8yt03AyjS5oAse PkqQhJMUeO/c/FxB4Cs5nsXPPfPIHngQNtzK0p8KK2RHNFNYC5Dpo1bUCh7cpuZ5 MkE7NbThqzJTxI8GTAwO1tCIiU2u/en+PPzfPl/S8CYdJuCmarNBojmTD7fqBPdp g8KJ9JB1PJdIy8VosZL6nm/Q/VqNaMFJnRo8wsfAx6qllOpdSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLil6KB7X414TJF2jb9fIoGakEprMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYTI3 YmUzZS01NjYzLTQxOTYtYmI4YS05NjZlOGE2YmY1NzEvMmEyZDUwM2QtNmNiMy0z OWEzLTgwNWUtYTlmNDFkM2Y4ZWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWEyN2JlM2UtNTY2My00MTk2LWJi OGEtOTY2ZThhNmJmNTcxL2FhMjdiZTNlLTU2NjMtNDE5Ni1iYjhhLTk2NmU4YTZi ZjU3MS5jcmwwHwYDVR0jBBgwFoAUG5CFrukXfW06zWMhpYfluAl2X+UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYTI3YmUzZS01NjYzLTQxOTYtYmI4YS05NjZl OGE2YmY1NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmUEUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACXmU0yWosDkS7wzhWohSiigUGWdQ68aBZwv8cOuzZ7MBnT38mGZpNpv 3vFQ7akH60T49frAR8evTtd5+UCLIQAmx+6Qu0IQXTZTWKHqNfuRR6fX8OSIkzFc 50E83ZEG8vqrf+YT+DOUpUZWU2R0tFVuo+XQ/hiYhSsobnesCbirCrRKP5DfgF/L azasT2HKdUgSN9pc3Y2oaxHn9EhKIi9ATbfVsc6fsZlMQo5pU2PHQFOBpQLewRLO pXJ49mJGeNn1inXU/0EFCW28KWHPpNmyS0b9F+dbPXwOov6CjKRmKuD1TYXN9qhV xVnCeb0oQMkPqNwWVqLFnls5anyBqKY= -----END CERTIFICATE-----Generated at Fri Jul 24 00:07:34 2026 by rpki-client