$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c17c80c2-d955-3d59-beef-b85041f9786c.roa File: c17c80c2-d955-3d59-beef-b85041f9786c.roa (raw, json) Hash identifier: oFzXP1M1VliCjJP+DSiEZYi5kQKd1eq7/3oZVQdKoQw= Subject key identifier: BB:A8:9A:10:41:92:ED:A7:17:C0:AD:EE:21:90:EE:17:0D:40:BE:62 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E7E9506B90B2B2F010A5639E0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c17c80c2-d955-3d59-beef-b85041f9786c.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 31898 IP address blocks: 157.151.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:95:06:b9:0b:2b:2f:01:0a:56:39:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=b5ac6623-01a5-45d1-9a76-cd9c92b7335a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:5a:07:04:87:57:37:04:e8:9c:99:be:21:a1: e0:45:ef:58:1a:9a:ea:ee:05:9f:90:2b:a7:8e:16: 2b:d0:8f:16:62:87:e1:41:c2:cc:9d:3e:85:cf:2a: 0a:bb:b0:7e:54:90:d9:b7:87:4e:7a:50:76:68:1d: ba:b2:cc:45:a8:f6:9c:1e:74:76:a7:a4:69:2b:02: 9e:c1:a9:10:6f:c5:af:44:21:29:8e:a4:5b:41:32: f7:b4:52:49:20:16:d1:c4:a8:54:d3:5e:99:39:db: c4:88:4d:e5:2f:15:94:1c:7d:1b:af:f6:43:60:c9: 63:49:96:8f:c1:1f:a6:04:1d:58:35:08:26:b3:6c: 61:72:28:db:b5:0f:20:ec:fe:c0:be:14:f0:db:1f: e6:79:75:51:24:5e:ac:89:fe:7a:47:bb:b9:83:6c: 80:aa:fe:88:58:17:31:2c:d6:1d:9c:32:cd:22:6a: 19:0e:d1:d3:85:8e:85:0d:93:01:b2:c3:7d:c1:5d: 97:89:4d:73:df:90:68:19:e8:22:b3:38:2d:f1:21: 53:aa:48:a6:81:1a:22:8a:4a:3e:89:16:ab:77:0a: aa:91:9b:b0:6d:7d:8e:06:11:7b:a0:bb:dc:52:4b: 94:8c:e6:99:27:83:e2:af:70:65:69:11:d9:20:55: 47:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:A8:9A:10:41:92:ED:A7:17:C0:AD:EE:21:90:EE:17:0D:40:BE:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c17c80c2-d955-3d59-beef-b85041f9786c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 157.151.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:20:63:8a:a7:82:f7:65:f5:e3:15:ea:c9:f6:b2:da:47:e0: 1d:6a:a6:7e:ec:7c:be:38:91:c4:75:2a:52:ff:ed:8b:7f:56: fe:5d:87:1b:d3:ed:b1:0d:d8:4d:f2:07:02:c7:8c:26:11:f0: 8b:b2:ba:23:0c:a6:69:5d:f0:66:aa:14:ba:22:33:ea:96:00: bd:e5:31:0e:82:c7:94:f5:66:da:fe:26:3b:74:b5:27:1c:35: 7a:55:55:56:e9:77:70:d3:55:95:ec:7d:e1:9e:25:a0:11:3e: 5d:6e:25:00:cf:b0:79:0b:67:68:b7:91:5e:e6:80:a3:20:dc: 3b:ec:ac:48:e6:19:28:b6:53:70:9f:a4:11:2f:1d:c4:2b:e1: 77:01:c8:84:f9:5b:f9:54:56:2e:8c:02:5d:f8:b2:9d:03:92: 76:ee:1a:2d:98:fe:d5:ab:28:4b:80:3e:1a:bf:4a:a0:9b:f4: f7:7f:77:b8:f1:9e:93:e1:11:d6:05:df:57:42:44:00:f2:ad: a4:e3:e2:5f:41:1d:62:87:32:5f:d8:bc:6f:76:47:61:66:df: 56:10:6d:9a:72:61:70:d0:05:78:75:28:7b:2b:70:54:e7:1c: f1:9a:54:e9:0e:ac:ae:e8:c3:72:10:96:74:9f:38:b8:4f:a2: ce:ca:94:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lQa5CysvAQpWOeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk YjVhYzY2MjMtMDFhNS00NWQxLTlhNzYtY2Q5YzkyYjczMzVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlloHBIdXNwTonJm+IaHgRe9YGprq7gWfkCun jhYr0I8WYofhQcLMnT6FzyoKu7B+VJDZt4dOelB2aB26ssxFqPacHnR2p6RpKwKe wakQb8WvRCEpjqRbQTL3tFJJIBbRxKhU016ZOdvEiE3lLxWUHH0br/ZDYMljSZaP wR+mBB1YNQgms2xhcijbtQ8g7P7AvhTw2x/meXVRJF6sif56R7u5g2yAqv6IWBcx LNYdnDLNImoZDtHThY6FDZMBssN9wV2XiU1z35BoGegiszgt8SFTqkimgRoiiko+ iRardwqqkZuwbX2OBhF7oLvcUkuUjOaZJ4Pir3BlaRHZIFVH7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLuomhBBku2nF8Ct7iGQ7hcNQL5iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYzE3YzgwYzItZDk1NS0z ZDU5LWJlZWYtYjg1MDQxZjk3ODZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnZc4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGUgY4qngvdl9eMV6sn2stpH4B1qpn7sfL44kcR1KlL/7Yt/Vv5dhxvT 7bEN2E3yBwLHjCYR8IuyuiMMpmld8GaqFLoiM+qWAL3lMQ6Cx5T1Ztr+Jjt0tScc NXpVVVbpd3DTVZXsfeGeJaARPl1uJQDPsHkLZ2i3kV7mgKMg3DvsrEjmGSi2U3Cf pBEvHcQr4XcByIT5W/lUVi6MAl34sp0DknbuGi2Y/tWrKEuAPhq/SqCb9Pd/d7jx npPhEdYF31dCRADyraTj4l9BHWKHMl/YvG92R2Fm31YQbZpyYXDQBXh1KHsrcFTn HPGaVOkOrK7ow3IQlnSfOLhPos7KlN0= -----END CERTIFICATE-----Generated at Fri Jul 24 03:19:42 2026 by rpki-client