$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/841e38cd-a0cf-3a6e-99e8-3da6c149485e.roa File: 841e38cd-a0cf-3a6e-99e8-3da6c149485e.roa (raw, json) Hash identifier: ZCbz47eENA/Lp/QdZK6hHdcXTtbLc2AeMWfBK8S1i3E= Subject key identifier: 94:8C:96:72:A8:F7:7B:2D:51:E5:13:7C:6F:8D:E2:65:9B:BF:6C:08 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E858F8FF8985A269814792B80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/841e38cd-a0cf-3a6e-99e8-3da6c149485e.roa Signing time: Thu 16 Jul 2026 21:00:12 +0000 ROA not before: Thu 16 Jul 2026 21:00:12 +0000 ROA not after: Wed 14 Oct 2026 21:00:12 +0000 asID: 31898 IP address blocks: 156.151.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:85:8f:8f:f8:98:5a:26:98:14:79:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 16 21:00:12 2026 GMT Not After : Oct 14 21:00:12 2026 GMT Subject: CN=91e94c2e-caa8-4190-9984-422ae1b0384d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ac:6d:dc:33:d8:62:02:a1:19:f4:bf:42:f2: b8:31:9d:f4:a1:3b:7f:a6:96:22:2a:d2:25:3b:91: 6b:e0:4e:42:9a:f9:da:9b:ef:51:1b:24:6e:c7:94: 50:24:be:51:fc:9b:f9:0f:c6:d9:66:94:3b:9a:62: 77:f6:bc:af:9c:c1:69:54:ae:41:17:1d:33:93:b9: 41:18:d3:8c:2c:21:be:73:8e:47:20:66:71:75:97: ef:98:03:81:46:42:41:d5:58:f1:08:1a:ba:da:39: 9b:e9:f5:94:1d:bb:ce:e5:5e:6d:1f:7e:ee:af:f8: 82:fa:b3:79:a6:5b:00:79:ff:a4:56:d1:9b:92:f5: 5f:d5:8f:d8:37:1f:25:2e:fc:aa:78:46:a5:0d:54: 56:50:a7:7a:91:34:5b:9a:dd:df:e2:92:bc:55:ea: 10:6c:d8:6d:dc:d8:9f:21:c0:c0:67:90:22:e5:48: b0:9e:fd:ab:91:e1:1c:42:51:71:50:c8:0e:fa:c6: 67:90:b7:9c:ee:37:be:58:2b:64:66:c6:48:35:e8: 9b:d8:a1:46:c0:85:b7:f5:d0:5b:fb:81:0c:14:5e: f8:d7:9d:59:b9:38:f9:d8:44:8e:d5:30:56:9c:ae: a3:33:f9:19:36:6b:75:0f:b6:e8:a6:f1:ab:7e:fa: 65:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:8C:96:72:A8:F7:7B:2D:51:E5:13:7C:6F:8D:E2:65:9B:BF:6C:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/841e38cd-a0cf-3a6e-99e8-3da6c149485e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 156.151.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:40:c3:d3:a1:70:f9:66:b2:26:2a:4f:50:75:6d:95:17:bd: 13:bb:02:a8:fc:a4:9e:89:99:7a:cc:fb:a6:b7:d9:47:19:17: 10:1f:b8:ce:6c:21:ff:c0:f4:40:57:e3:f4:1d:2e:69:68:d0: 81:ab:9e:e9:c9:76:1d:19:74:cd:2e:4f:6f:9c:88:6d:df:d7: c1:25:89:27:0c:99:f3:dc:e1:37:fd:55:2d:d8:c8:9d:81:51: 41:5e:03:27:31:30:e4:54:0b:0b:05:a8:a3:0d:a4:01:28:2a: 1d:72:62:48:cb:f3:49:6a:cb:06:cc:4f:c1:97:6b:c2:60:54: dc:25:6a:7f:d6:d8:b0:41:a2:a2:ca:33:94:ed:f1:1d:bf:84: 62:ca:07:be:6e:7d:a0:5d:71:e3:6c:cf:54:73:6e:e8:d9:1d: fd:5d:d4:75:9f:29:14:be:76:02:35:94:12:9d:85:6d:b7:8e: 08:d9:6a:22:a1:0a:26:e1:cf:fe:5a:3c:48:99:83:65:b3:00: 4f:40:7d:b3:a4:82:1d:6e:33:30:e8:70:8e:d0:6b:cd:6d:6d: 1c:8a:5d:a5:9c:64:a9:68:e9:b0:77:cb:c3:2e:c7:4e:9e:28: 9d:e1:c4:22:4c:2d:f3:03:87:52:cd:70:83:5c:60:93:b7:b3: 32:dc:b0:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6Fj4/4mFommBR5K4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcxNjIxMDAxMloXDTI2MTAxNDIxMDAxMlowLzEtMCsGA1UEAxMk OTFlOTRjMmUtY2FhOC00MTkwLTk5ODQtNDIyYWUxYjAzODRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6xt3DPYYgKhGfS/QvK4MZ30oTt/ppYiKtIl O5Fr4E5Cmvnam+9RGyRux5RQJL5R/Jv5D8bZZpQ7mmJ39ryvnMFpVK5BFx0zk7lB GNOMLCG+c45HIGZxdZfvmAOBRkJB1VjxCBq62jmb6fWUHbvO5V5tH37ur/iC+rN5 plsAef+kVtGbkvVf1Y/YNx8lLvyqeEalDVRWUKd6kTRbmt3f4pK8VeoQbNht3Nif IcDAZ5Ai5Uiwnv2rkeEcQlFxUMgO+sZnkLec7je+WCtkZsZINeib2KFGwIW39dBb +4EMFF74151ZuTj52ESO1TBWnK6jM/kZNmt1D7bopvGrfvplZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJSMlnKo93stUeUTfG+N4mWbv2wIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvODQxZTM4Y2QtYTBjZi0z YTZlLTk5ZTgtM2RhNmMxNDk0ODVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJfHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFAw9OhcPlmsiYqT1B1bZUXvRO7Aqj8pJ6JmXrM+6a32UcZFxAfuM5s If/A9EBX4/QdLmlo0IGrnunJdh0ZdM0uT2+ciG3f18EliScMmfPc4Tf9VS3YyJ2B UUFeAycxMORUCwsFqKMNpAEoKh1yYkjL80lqywbMT8GXa8JgVNwlan/W2LBBoqLK M5Tt8R2/hGLKB75ufaBdceNsz1RzbujZHf1d1HWfKRS+dgI1lBKdhW23jgjZaiKh Cibhz/5aPEiZg2WzAE9AfbOkgh1uMzDocI7Qa81tbRyKXaWcZKlo6bB3y8Mux06e KJ3hxCJMLfMDh1LNcINcYJO3szLcsPE= -----END CERTIFICATE-----Generated at Fri Jul 24 00:28:42 2026 by rpki-client