$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/4a48ae92-64c5-3e26-981f-085a604cbb12.roa File: 4a48ae92-64c5-3e26-981f-085a604cbb12.roa (raw, json) Hash identifier: 7hy/UI64TQYKqDl0MgEYnyb896DyWB6JiJ8sYxn7p1M= Subject key identifier: 5B:B2:38:5E:67:52:18:0E:3E:CD:34:17:B1:AB:AD:A7:35:43:53:29 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584E78FF77ABC5F7EED4F0718680 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/4a48ae92-64c5-3e26-981f-085a604cbb12.roa Signing time: Sun 12 Jul 2026 09:00:11 +0000 ROA not before: Sun 12 Jul 2026 09:00:11 +0000 ROA not after: Sat 10 Oct 2026 09:00:11 +0000 asID: 31898 IP address blocks: 144.25.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:78:ff:77:ab:c5:f7:ee:d4:f0:71:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Jul 12 09:00:11 2026 GMT Not After : Oct 10 09:00:11 2026 GMT Subject: CN=6a4a20db-e0f1-43ee-a013-fa0f4fcc036b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:45:d4:b5:bb:15:b8:36:ae:5b:48:10:16:9c: e2:db:9b:84:e8:f7:c5:fd:80:e8:ac:d4:89:39:ac: e0:09:67:df:c1:73:af:a7:cc:20:d1:a8:4a:88:8b: 0b:58:19:8d:64:ef:ff:a1:b9:b1:fb:54:9f:2d:b1: 08:d6:4c:a5:7d:7d:8f:03:f7:fe:e4:1f:e7:c9:32: d2:42:42:14:16:3d:40:e1:32:25:1b:fd:99:7e:6e: 6b:d8:73:e0:17:f9:8c:c0:25:52:b8:5a:23:45:8c: bb:0f:76:9b:e7:2f:87:22:b7:df:26:2a:3a:e8:1d: 10:14:01:10:b3:7c:07:94:40:24:dc:54:3b:81:3f: d8:c3:68:fe:ab:82:60:e5:15:dc:a6:f1:94:60:64: a3:03:1a:eb:6c:33:8e:4e:a4:78:4c:b4:b1:48:aa: e6:f6:e0:ae:2c:c3:0a:71:0c:94:9b:a4:f7:72:37: 8f:ff:69:f1:23:3c:ec:84:04:5c:be:a0:05:d0:68: 37:f6:09:a9:3a:55:07:e2:7c:80:b3:4b:f9:05:6e: 9a:46:f6:08:bb:8e:d1:36:26:a5:52:16:07:f1:7b: 51:6f:ee:f1:9f:3e:72:bf:4e:26:94:ae:80:16:89: e5:41:d1:40:0a:be:ab:d0:dd:d1:62:8b:1c:e8:ef: 9d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:B2:38:5E:67:52:18:0E:3E:CD:34:17:B1:AB:AD:A7:35:43:53:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/4a48ae92-64c5-3e26-981f-085a604cbb12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 144.25.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:f5:b0:cd:83:95:bf:6f:c0:c7:50:52:37:65:f9:41:fc:fe: 33:ed:51:2d:05:6e:ce:bc:5f:f4:76:a8:65:a9:52:6d:8c:48: f0:3c:d0:13:27:fe:0a:8f:3d:ce:9b:d1:e3:61:f1:b8:68:8e: dc:c6:fc:df:e1:57:46:07:5f:08:e9:d5:1e:5f:f1:0d:30:20: c2:21:94:d9:29:9b:7f:b2:f5:4d:ca:3a:38:2e:17:ba:20:c7: 8f:d7:fd:08:14:c6:3c:bb:8f:b6:d0:50:5f:df:3f:5e:06:c6: e4:31:af:90:e1:27:18:7e:0d:21:b7:ec:af:39:97:de:4d:7b: d7:f0:e9:69:02:38:62:5d:42:0a:bf:7d:40:e6:85:62:c8:61: 8f:00:64:2f:cb:58:13:e1:f1:51:56:af:84:99:c3:41:9a:1a: 70:b9:cc:d3:0e:7f:da:7f:bd:c8:eb:ab:b3:01:e4:b9:09:f9: cb:63:1b:7f:3a:45:78:37:1b:a2:c8:08:16:74:33:20:a5:58: 49:cb:24:53:65:cc:2e:41:e1:42:6f:8d:0f:87:c5:6e:1e:8a: 34:9e:f7:32:a8:b6:a1:68:7c:9a:1e:84:1e:54:17:ba:78:ad: 44:16:b1:8b:ea:77:69:6c:74:62:0e:ff:7d:0b:c1:f5:f3:b0: 66:9f:28:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE54/3erxffu1PBxhoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDcxMjA5MDAxMVoXDTI2MTAxMDA5MDAxMVowLzEtMCsGA1UEAxMk NmE0YTIwZGItZTBmMS00M2VlLWEwMTMtZmEwZjRmY2MwMzZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEXUtbsVuDauW0gQFpzi25uE6PfF/YDorNSJ OazgCWffwXOvp8wg0ahKiIsLWBmNZO//obmx+1SfLbEI1kylfX2PA/f+5B/nyTLS QkIUFj1A4TIlG/2Zfm5r2HPgF/mMwCVSuFojRYy7D3ab5y+HIrffJio66B0QFAEQ s3wHlEAk3FQ7gT/Yw2j+q4Jg5RXcpvGUYGSjAxrrbDOOTqR4TLSxSKrm9uCuLMMK cQyUm6T3cjeP/2nxIzzshARcvqAF0Gg39gmpOlUH4nyAs0v5BW6aRvYIu47RNial UhYH8XtRb+7xnz5yv04mlK6AFonlQdFACr6r0N3RYosc6O+dswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFuyOF5nUhgOPs00F7Grrac1Q1MpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvNGE0OGFlOTItNjRjNS0z ZTI2LTk4MWYtMDg1YTYwNGNiYjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCkBkoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ31sM2Dlb9vwMdQUjdl+UH8/jPtUS0Fbs68X/R2qGWpUm2MSPA80BMn /gqPPc6b0eNh8bhojtzG/N/hV0YHXwjp1R5f8Q0wIMIhlNkpm3+y9U3KOjguF7og x4/X/QgUxjy7j7bQUF/fP14GxuQxr5DhJxh+DSG37K85l95Ne9fw6WkCOGJdQgq/ fUDmhWLIYY8AZC/LWBPh8VFWr4SZw0GaGnC5zNMOf9p/vcjrq7MB5LkJ+ctjG386 RXg3G6LICBZ0MyClWEnLJFNlzC5B4UJvjQ+HxW4eijSe9zKotqFofJoehB5UF7p4 rUQWsYvqd2lsdGIO/30LwfXzsGafKDA= -----END CERTIFICATE-----Generated at Fri Jul 24 00:45:54 2026 by rpki-client