$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ecee568d-eb00-478c-b486-db3f5d62cbf3/2c3258e8-cbe5-3f6f-a700-ceaaa9ea9e5a.roa File: 2c3258e8-cbe5-3f6f-a700-ceaaa9ea9e5a.roa (raw, json) Hash identifier: GqeApU5AGzyWns6jQoG/QaRm/t6+ozaBQlGmjgrCYG4= Subject key identifier: 14:0B:DC:6D:5E:E7:52:34:5B:CC:78:F0:02:F5:8F:CA:02:16:2F:A3 Certificate issuer: /CN=ecee568d-eb00-478c-b486-db3f5d62cbf3 Certificate serial: 010D0C9F4328584E7634F6162DBFECCFADBD7F00 Authority key identifier: DD:EC:C1:62:6B:16:28:4E:3F:9B:52:C6:83:04:C5:D6:75:80:A5:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ecee568d-eb00-478c-b486-db3f5d62cbf3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ecee568d-eb00-478c-b486-db3f5d62cbf3/2c3258e8-cbe5-3f6f-a700-ceaaa9ea9e5a.roa Signing time: Sat 11 Jul 2026 09:00:12 +0000 ROA not before: Sat 11 Jul 2026 09:00:12 +0000 ROA not after: Fri 09 Oct 2026 09:00:12 +0000 asID: 26395 IP address blocks: 159.222.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ecee568d-eb00-478c-b486-db3f5d62cbf3/ecee568d-eb00-478c-b486-db3f5d62cbf3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ecee568d-eb00-478c-b486-db3f5d62cbf3/ecee568d-eb00-478c-b486-db3f5d62cbf3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ecee568d-eb00-478c-b486-db3f5d62cbf3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:76:34:f6:16:2d:bf:ec:cf:ad:bd:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecee568d-eb00-478c-b486-db3f5d62cbf3 Validity Not Before: Jul 11 09:00:12 2026 GMT Not After : Oct 9 09:00:12 2026 GMT Subject: CN=309fe3c9-e9d8-45bc-b8ff-fd3819a6262e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:e8:5f:2d:ea:c4:25:f0:e4:ce:94:9b:16:cf: f6:52:d9:bb:e9:be:4c:33:7e:25:3d:88:b8:f5:6a: 24:45:0d:8e:b7:19:d4:7f:2e:a5:84:b0:3e:5d:46: 79:4e:46:7b:db:35:86:d5:ea:b1:8a:62:13:d4:35: 72:ed:ef:68:80:ea:40:a0:c0:cf:a7:f5:35:4e:be: 9b:3d:3d:74:c1:67:96:af:94:b6:f7:8a:89:57:1c: bc:28:7c:49:da:eb:f7:74:15:36:3d:5e:e2:ba:c5: 0a:55:70:8e:9a:15:ba:af:da:4f:f4:6c:54:27:67: 02:6a:af:54:c8:ec:ab:59:e4:c8:74:04:4b:49:4e: 6f:79:d4:58:1d:31:63:05:91:0c:ae:47:9e:5f:3d: 32:2c:5d:13:f7:27:4d:89:de:d2:aa:fe:e6:8c:f7: 21:03:2c:ec:88:df:27:8f:c9:62:c2:d2:ab:e5:57: 91:00:32:64:df:b0:46:f1:e4:d2:7b:d5:32:24:7a: 03:55:1d:bc:e8:a8:4d:07:04:ac:14:45:a9:2b:c3: 04:10:85:5c:c1:c3:8b:e7:59:0e:e8:9e:56:2b:b2: f5:07:63:c3:fb:7b:d3:81:74:e8:ed:be:32:41:72: 92:20:89:dd:3b:b5:71:ca:d0:bf:02:d1:2a:38:9e: 96:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:0B:DC:6D:5E:E7:52:34:5B:CC:78:F0:02:F5:8F:CA:02:16:2F:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ecee568d-eb00-478c-b486-db3f5d62cbf3/2c3258e8-cbe5-3f6f-a700-ceaaa9ea9e5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ecee568d-eb00-478c-b486-db3f5d62cbf3/ecee568d-eb00-478c-b486-db3f5d62cbf3.crl X509v3 Authority Key Identifier: keyid:DD:EC:C1:62:6B:16:28:4E:3F:9B:52:C6:83:04:C5:D6:75:80:A5:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ecee568d-eb00-478c-b486-db3f5d62cbf3.cer sbgp-ipAddrBlock: critical IPv4: 159.222.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:06:d9:b7:46:3a:cf:83:65:d9:5c:4a:2f:ae:92:5a:d5:cb: 27:13:a9:5b:a6:11:62:05:a7:48:56:58:a2:15:90:da:ac:f6: d1:09:83:61:27:5b:83:9d:bb:f8:65:2c:dd:83:c2:6f:47:c9: 74:9a:7c:3f:92:de:e3:c0:69:49:43:44:00:fc:5d:fa:c0:b1: 7a:36:dc:17:af:33:1d:d5:e8:f5:0b:09:1b:52:2c:19:b3:ba: 1a:a1:17:45:52:7b:66:12:93:cf:e2:2b:e5:c1:af:6a:77:25: 80:69:21:34:7b:a6:90:72:0a:a5:7c:ce:51:ff:4e:6e:05:9d: cd:87:6d:88:bf:89:aa:12:67:58:53:ba:7a:eb:52:28:ab:dd: 4c:25:6e:7d:1e:79:12:a8:c8:ee:50:f2:9e:c8:09:57:96:f4: bd:cf:39:45:ac:ca:01:09:4d:28:cc:10:2d:52:29:f0:5f:ec: 20:83:37:a7:82:23:c6:16:ea:ac:02:37:98:3c:ee:c4:8c:9b: ed:1e:a3:3b:59:09:df:b1:0e:99:52:ec:56:67:3f:95:bc:ef: a5:e3:87:f1:91:b2:36:b3:58:87:58:51:0a:45:82:a0:2b:ff: f9:19:24:02:8c:da:ae:6a:42:43:5d:15:1b:d9:de:99:fa:53: 54:91:99:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE52NPYWLb/sz629fwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWNlZTU2OGQtZWIwMC00NzhjLWI0ODYtZGIzZjVkNjJj YmYzMB4XDTI2MDcxMTA5MDAxMloXDTI2MTAwOTA5MDAxMlowLzEtMCsGA1UEAxMk MzA5ZmUzYzktZTlkOC00NWJjLWI4ZmYtZmQzODE5YTYyNjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgehfLerEJfDkzpSbFs/2Utm76b5MM34lPYi4 9WokRQ2OtxnUfy6lhLA+XUZ5TkZ72zWG1eqximIT1DVy7e9ogOpAoMDPp/U1Tr6b PT10wWeWr5S294qJVxy8KHxJ2uv3dBU2PV7iusUKVXCOmhW6r9pP9GxUJ2cCaq9U yOyrWeTIdARLSU5vedRYHTFjBZEMrkeeXz0yLF0T9ydNid7Sqv7mjPchAyzsiN8n j8liwtKr5VeRADJk37BG8eTSe9UyJHoDVR286KhNBwSsFEWpK8MEEIVcwcOL51kO 6J5WK7L1B2PD+3vTgXTo7b4yQXKSIIndO7VxytC/AtEqOJ6WCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBQL3G1e51I0W8x48AL1j8oCFi+jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lY2Vl NTY4ZC1lYjAwLTQ3OGMtYjQ4Ni1kYjNmNWQ2MmNiZjMvMmMzMjU4ZTgtY2JlNS0z ZjZmLWE3MDAtY2VhYWE5ZWE5ZTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZWNlZTU2OGQtZWIwMC00NzhjLWI0 ODYtZGIzZjVkNjJjYmYzL2VjZWU1NjhkLWViMDAtNDc4Yy1iNDg2LWRiM2Y1ZDYy Y2JmMy5jcmwwHwYDVR0jBBgwFoAU3ezBYmsWKE4/m1LGgwTF1nWApUYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lY2VlNTY4ZC1lYjAwLTQ3OGMtYjQ4Ni1kYjNm NWQ2MmNiZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAn96kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFEG2bdGOs+DZdlcSi+uklrVyycTqVumEWIFp0hWWKIVkNqs9tEJg2En W4Odu/hlLN2Dwm9HyXSafD+S3uPAaUlDRAD8XfrAsXo23BevMx3V6PULCRtSLBmz uhqhF0VSe2YSk8/iK+XBr2p3JYBpITR7ppByCqV8zlH/Tm4Fnc2HbYi/iaoSZ1hT unrrUiir3Uwlbn0eeRKoyO5Q8p7ICVeW9L3POUWsygEJTSjMEC1SKfBf7CCDN6eC I8YW6qwCN5g87sSMm+0eoztZCd+xDplS7FZnP5W876Xjh/GRsjazWIdYUQpFgqAr //kZJAKM2q5qQkNdFRvZ3pn6U1SRmaA= -----END CERTIFICATE-----Generated at Tue Jul 21 15:34:35 2026 by rpki-client