$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/9d6a98a8-c579-38f2-9fa0-eb90a2842b0e.roa File: 9d6a98a8-c579-38f2-9fa0-eb90a2842b0e.roa (raw, json) Hash identifier: 7bkL7zrLCTi8AeuqraanrabkQZtLdXuWt8w1MsBbKtc= Subject key identifier: 29:20:20:49:16:E9:DA:9D:3E:6C:D7:C0:53:F0:48:DA:63:8B:44:76 Certificate issuer: /CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Certificate serial: 010D0C9F4328584E858F8955A48053D08E75E680 Authority key identifier: 73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/9d6a98a8-c579-38f2-9fa0-eb90a2842b0e.roa Signing time: Thu 16 Jul 2026 21:00:12 +0000 ROA not before: Thu 16 Jul 2026 21:00:12 +0000 ROA not after: Wed 14 Oct 2026 21:00:12 +0000 asID: 2631 IP address blocks: 157.166.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:85:8f:89:55:a4:80:53:d0:8e:75:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Validity Not Before: Jul 16 21:00:12 2026 GMT Not After : Oct 14 21:00:12 2026 GMT Subject: CN=db34b33f-b86a-486d-ac66-b14e8eda39c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:1d:fe:b2:27:e8:e2:87:a2:a5:57:d5:64:e5: 7e:61:55:5b:cd:1c:6c:f7:52:03:da:f0:a8:d5:d6: 20:d5:48:7c:cb:98:5a:7d:85:ed:1c:d7:d5:4e:17: 52:d5:44:50:ef:d6:53:3f:1e:2e:7e:f3:10:a6:f5: 53:26:43:98:8b:96:44:1c:8e:4f:82:69:66:56:08: ed:d8:6c:f1:a2:f6:eb:17:68:16:dd:d2:6f:45:e2: c0:ca:f2:54:62:43:c6:e5:83:2e:12:d2:f8:1a:2f: 1d:37:5d:da:cc:7b:69:ed:1c:54:9a:a5:aa:34:d5: 1a:55:59:0f:cb:53:1f:c6:39:8e:47:2d:e1:70:21: cc:17:f5:f0:15:27:43:b1:93:34:6e:5c:4f:f3:02: 37:8a:35:eb:95:d3:50:a4:b4:10:b6:7e:c8:77:37: 72:37:7d:61:9d:08:61:0c:8e:a7:c8:83:dc:69:bb: c8:5e:cb:76:7d:04:91:f1:ea:79:81:4e:8f:e1:d6: 59:e3:e4:aa:3d:2d:2a:47:19:11:29:05:cb:9f:2a: cc:b4:e5:55:35:95:de:61:97:ac:9c:af:38:21:7b: 52:64:a3:d8:c9:4a:9b:08:5e:37:7d:2b:81:87:39: 33:bb:78:60:54:5f:64:0b:2e:3b:e5:43:e0:36:4a: 9a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:20:20:49:16:E9:DA:9D:3E:6C:D7:C0:53:F0:48:DA:63:8B:44:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/9d6a98a8-c579-38f2-9fa0-eb90a2842b0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl X509v3 Authority Key Identifier: keyid:73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer sbgp-ipAddrBlock: critical IPv4: 157.166.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:94:b7:4b:10:93:20:45:ec:09:eb:2d:90:ef:e4:e4:6f:53: 14:3c:26:7e:a6:75:3a:92:76:36:9b:e3:3c:15:d7:00:26:da: 64:9a:f8:0f:89:4c:61:ad:b5:41:fd:04:21:ee:c7:54:72:4e: 84:68:19:96:c2:10:03:f4:6e:e3:c1:43:38:fc:66:bf:87:31: f2:d2:f2:5a:14:e7:b3:58:58:1b:a4:bf:9a:93:d8:06:49:df: 8c:30:45:21:7e:80:db:83:fc:1f:c4:0c:cf:16:8a:70:dc:d8: e1:45:97:fc:1c:7f:df:ed:05:26:ce:17:cf:0a:ac:24:14:9e: 91:cb:23:c1:2a:d4:bf:c3:04:f5:82:59:7d:26:67:54:8d:69: 59:22:ee:93:8c:71:cc:7f:97:e4:48:50:8c:6a:fd:6c:ab:d2: 9f:67:a3:73:67:11:3a:14:46:f6:fa:ff:ee:d1:79:dd:b4:59: 1d:63:87:83:3e:1a:58:1d:4c:6e:9c:1b:07:2f:14:a7:12:69: 1c:86:83:ab:e6:ce:92:b4:28:ac:53:0e:28:c9:45:c0:d9:3e: 23:e2:79:ee:b4:84:74:f1:dc:25:49:19:19:c1:41:46:3a:a5: bf:fb:1b:a0:e2:21:3e:d3:70:b5:b5:46:65:bc:67:64:2b:52: 6a:2c:be:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6Fj4lVpIBT0I515oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQzMzVmYTAtNmMzZi00ODc4LTlmM2YtOTVjNWNlMGZi OTU1MB4XDTI2MDcxNjIxMDAxMloXDTI2MTAxNDIxMDAxMlowLzEtMCsGA1UEAxMk ZGIzNGIzM2YtYjg2YS00ODZkLWFjNjYtYjE0ZThlZGEzOWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnx3+sifo4oeipVfVZOV+YVVbzRxs91ID2vCo 1dYg1Uh8y5hafYXtHNfVThdS1URQ79ZTPx4ufvMQpvVTJkOYi5ZEHI5PgmlmVgjt 2GzxovbrF2gW3dJvReLAyvJUYkPG5YMuEtL4Gi8dN13azHtp7RxUmqWqNNUaVVkP y1MfxjmORy3hcCHMF/XwFSdDsZM0blxP8wI3ijXrldNQpLQQtn7IdzdyN31hnQhh DI6nyIPcabvIXst2fQSR8ep5gU6P4dZZ4+SqPS0qRxkRKQXLnyrMtOVVNZXeYZes nK84IXtSZKPYyUqbCF43fSuBhzkzu3hgVF9kCy475UPgNkqaowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCkgIEkW6dqdPmzXwFPwSNpji0R2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDMz NWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1Y2UwZmI5NTUvOWQ2YTk4YTgtYzU3OS0z OGYyLTlmYTAtZWI5MGEyODQyYjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQzMzVmYTAtNmMzZi00ODc4LTlm M2YtOTVjNWNlMGZiOTU1Lzc0MzM1ZmEwLTZjM2YtNDg3OC05ZjNmLTk1YzVjZTBm Yjk1NS5jcmwwHwYDVR0jBBgwFoAUc8cjZ4oeUR/cZOb0iBi2CNEe5TEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDMzNWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1 Y2UwZmI5NTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnaaYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGUt0sQkyBF7AnrLZDv5ORvUxQ8Jn6mdTqSdjab4zwV1wAm2mSa+A+J TGGttUH9BCHux1RyToRoGZbCEAP0buPBQzj8Zr+HMfLS8loU57NYWBukv5qT2AZJ 34wwRSF+gNuD/B/EDM8WinDc2OFFl/wcf9/tBSbOF88KrCQUnpHLI8Eq1L/DBPWC WX0mZ1SNaVki7pOMccx/l+RIUIxq/Wyr0p9no3NnEToURvb6/+7Red20WR1jh4M+ GlgdTG6cGwcvFKcSaRyGg6vmzpK0KKxTDijJRcDZPiPiee60hHTx3CVJGRnBQUY6 pb/7G6DiIT7TcLW1RmW8Z2QrUmosvpE= -----END CERTIFICATE-----Generated at Fri Jul 24 10:34:00 2026 by rpki-client