$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26/855579db-3d30-32f0-a4df-f95df04335e4.roa File: 855579db-3d30-32f0-a4df-f95df04335e4.roa (raw, json) Hash identifier: gqu2uaZIfdQbfmRoE/3cY/BeqsbJicfMTbaivgHvcjM= Subject key identifier: 42:76:5D:AD:EA:65:82:FC:91:23:A2:1A:DA:A6:6D:F6:9C:E5:94:A3 Certificate issuer: /CN=53047e29-2570-4585-9e69-b23797196c26 Certificate serial: 010D0C9F4328584E7BCA35520DBCE6FB1EEB0A00 Authority key identifier: C1:B1:C5:FD:AA:78:4E:92:7E:E5:E5:27:7A:CE:EF:A0:FC:B3:11:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26/855579db-3d30-32f0-a4df-f95df04335e4.roa Signing time: Mon 13 Jul 2026 09:00:12 +0000 ROA not before: Mon 13 Jul 2026 09:00:12 +0000 ROA not after: Sun 11 Oct 2026 09:00:12 +0000 asID: 16509 IP address blocks: 158.116.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26/53047e29-2570-4585-9e69-b23797196c26.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26/53047e29-2570-4585-9e69-b23797196c26.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7b:ca:35:52:0d:bc:e6:fb:1e:eb:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53047e29-2570-4585-9e69-b23797196c26 Validity Not Before: Jul 13 09:00:12 2026 GMT Not After : Oct 11 09:00:12 2026 GMT Subject: CN=4e087dd5-16d9-404e-9b7f-dda41dbe5533 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:3f:13:b3:ac:53:15:4d:18:a9:db:54:b1:26: 47:52:62:95:b7:70:87:e7:19:90:3b:a5:72:16:24: d5:f8:ee:b1:c9:5b:43:4f:43:dc:a8:00:48:41:95: d7:7f:6a:2d:30:c3:76:42:42:f1:90:40:86:71:99: c0:c3:e0:b5:08:a9:42:86:64:57:88:0a:c8:d0:a9: a6:74:ac:20:04:95:51:14:cf:c7:e8:2e:af:d7:85: ae:d0:e6:98:d6:fa:2a:0c:d1:07:ca:c1:83:a9:23: 41:fa:25:6e:a3:a6:ba:0f:78:6b:f3:80:79:c8:81: 1f:f1:09:06:d8:da:fd:4a:ac:c3:50:f9:9e:a7:6b: 3d:0e:9f:84:5d:7e:d8:2c:b3:48:da:c7:74:88:c6: fc:85:85:49:81:c9:8f:be:f7:cc:bd:0d:ed:da:71: 86:93:1a:7a:13:18:26:e8:11:a5:ad:cc:19:4f:6d: 9b:1b:c8:27:ae:74:e3:7a:e5:6e:96:45:95:67:a1: d0:b9:d3:5b:90:ab:1e:3c:83:90:b6:70:dd:63:e7: a1:2e:8d:3d:e3:59:95:79:67:17:67:7d:98:3d:5e: a5:09:35:27:ee:cd:67:49:b2:30:eb:8f:76:ef:96: 08:ae:e6:09:3e:a3:e8:5f:4c:3b:be:11:7b:0f:da: 4c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:76:5D:AD:EA:65:82:FC:91:23:A2:1A:DA:A6:6D:F6:9C:E5:94:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26/855579db-3d30-32f0-a4df-f95df04335e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26/53047e29-2570-4585-9e69-b23797196c26.crl X509v3 Authority Key Identifier: keyid:C1:B1:C5:FD:AA:78:4E:92:7E:E5:E5:27:7A:CE:EF:A0:FC:B3:11:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26.cer sbgp-ipAddrBlock: critical IPv4: 158.116.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:9f:cf:d2:a8:42:62:e7:59:93:21:2d:71:23:ef:54:fe:a0: 96:f2:6a:43:eb:77:f6:1b:34:5f:80:fa:ad:e6:58:c9:2f:28: 28:1f:a0:d1:0d:de:b9:f1:d5:30:6c:60:12:7c:fc:fe:4f:05: 5f:a7:bf:2f:b9:75:81:da:3f:c1:63:c0:7a:6f:c5:a3:be:07: 15:58:fc:e8:34:58:95:43:d9:d5:5b:ff:e5:b5:a1:12:d2:70: 12:ac:15:40:cc:3c:dd:80:a5:4e:54:bd:88:1e:e0:98:00:22: 00:d2:fe:15:fd:2d:3d:57:74:12:83:0f:6f:b2:2d:9c:1e:a4: 31:e4:19:c1:71:e8:9d:c4:b5:cf:85:80:44:3d:6e:c1:7d:10: 3b:65:aa:50:9a:12:00:34:1d:8e:29:15:0b:76:d8:bc:35:64: 58:89:a1:81:c8:29:b4:b7:88:36:50:73:d5:81:d5:d7:f6:b1: bd:1d:64:d8:9c:ed:aa:96:88:f8:c3:f4:dc:0a:5a:7f:e5:de: 09:a1:91:72:2d:82:de:76:97:b4:fd:e9:54:3a:6f:31:36:79: df:f7:8c:29:53:2d:39:cc:fb:96:7e:a1:54:52:25:bc:95:5e: 74:de:d1:10:d4:de:cf:d9:90:14:43:11:b5:e9:44:fa:63:65: 24:bb:c9:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE57yjVSDbzm+x7rCgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTMwNDdlMjktMjU3MC00NTg1LTllNjktYjIzNzk3MTk2 YzI2MB4XDTI2MDcxMzA5MDAxMloXDTI2MTAxMTA5MDAxMlowLzEtMCsGA1UEAxMk NGUwODdkZDUtMTZkOS00MDRlLTliN2YtZGRhNDFkYmU1NTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhT8Ts6xTFU0YqdtUsSZHUmKVt3CH5xmQO6Vy FiTV+O6xyVtDT0PcqABIQZXXf2otMMN2QkLxkECGcZnAw+C1CKlChmRXiArI0Kmm dKwgBJVRFM/H6C6v14Wu0OaY1voqDNEHysGDqSNB+iVuo6a6D3hr84B5yIEf8QkG 2Nr9SqzDUPmep2s9Dp+EXX7YLLNI2sd0iMb8hYVJgcmPvvfMvQ3t2nGGkxp6Exgm 6BGlrcwZT22bG8gnrnTjeuVulkWVZ6HQudNbkKsePIOQtnDdY+ehLo0941mVeWcX Z32YPV6lCTUn7s1nSbIw649275YIruYJPqPoX0w7vhF7D9pMAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJ2Xa3qZYL8kSOiGtqmbfac5ZSjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81MzA0 N2UyOS0yNTcwLTQ1ODUtOWU2OS1iMjM3OTcxOTZjMjYvODU1NTc5ZGItM2QzMC0z MmYwLWE0ZGYtZjk1ZGYwNDMzNWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNTMwNDdlMjktMjU3MC00NTg1LTll NjktYjIzNzk3MTk2YzI2LzUzMDQ3ZTI5LTI1NzAtNDU4NS05ZTY5LWIyMzc5NzE5 NmMyNi5jcmwwHwYDVR0jBBgwFoAUwbHF/ap4TpJ+5eUnes7voPyzEdgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS81MzA0N2UyOS0yNTcwLTQ1ODUtOWU2OS1iMjM3 OTcxOTZjMjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnnSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAISfz9KoQmLnWZMhLXEj71T+oJbyakPrd/YbNF+A+q3mWMkvKCgfoNEN 3rnx1TBsYBJ8/P5PBV+nvy+5dYHaP8FjwHpvxaO+BxVY/Og0WJVD2dVb/+W1oRLS cBKsFUDMPN2ApU5UvYge4JgAIgDS/hX9LT1XdBKDD2+yLZwepDHkGcFx6J3Etc+F gEQ9bsF9EDtlqlCaEgA0HY4pFQt22Lw1ZFiJoYHIKbS3iDZQc9WB1df2sb0dZNic 7aqWiPjD9NwKWn/l3gmhkXItgt52l7T96VQ6bzE2ed/3jClTLTnM+5Z+oVRSJbyV XnTe0RDU3s/ZkBRDEbXpRPpjZSS7yWI= -----END CERTIFICATE-----Generated at Tue Jul 21 16:08:37 2026 by rpki-client