$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/a936f59c-530b-3701-8514-dcc669422914.roa File: a936f59c-530b-3701-8514-dcc669422914.roa (raw, json) Hash identifier: 99TKvgZNQUpTT0LI5p3FOXZvZFlEGi7wByTQInjXAMI= Subject key identifier: AC:15:54:31:DE:0A:3F:7F:ED:F6:FB:9F:B3:FF:5A:A5:CD:76:98:00 Certificate issuer: /CN=61e7cca0-e65d-417d-a651-371c91be9c95 Certificate serial: 010D0C9F4328584E50849E15677CAB64A24F7380 Authority key identifier: 64:A2:9F:B0:12:A3:74:F2:09:E2:03:8E:EB:E2:C6:D3:63:24:57:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/a936f59c-530b-3701-8514-dcc669422914.roa Signing time: Sat 27 Jun 2026 21:00:12 +0000 ROA not before: Sat 27 Jun 2026 21:00:12 +0000 ROA not after: Fri 25 Sep 2026 21:00:12 +0000 asID: 1448 IP address blocks: 156.146.128.0/18 maxlen: 18 156.146.192.0/20 maxlen: 20 156.146.208.0/20 maxlen: 20 156.146.224.0/19 maxlen: 19 158.41.128.0/19 maxlen: 19 158.41.160.0/20 maxlen: 20 158.41.176.0/21 maxlen: 21 158.41.184.0/21 maxlen: 21 158.41.192.0/20 maxlen: 20 158.41.208.0/20 maxlen: 20 158.41.224.0/20 maxlen: 20 158.41.240.0/20 maxlen: 20 158.41.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/61e7cca0-e65d-417d-a651-371c91be9c95.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/61e7cca0-e65d-417d-a651-371c91be9c95.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:50:84:9e:15:67:7c:ab:64:a2:4f:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61e7cca0-e65d-417d-a651-371c91be9c95 Validity Not Before: Jun 27 21:00:12 2026 GMT Not After : Sep 25 21:00:12 2026 GMT Subject: CN=994101d0-8fd4-478d-8364-64c5bc354ee7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:4e:d6:ef:fb:0c:a6:d5:a3:d1:46:2e:3c:75: 7a:99:0b:cd:1f:5a:45:89:ab:6a:b2:98:5d:31:da: 15:0d:00:58:16:6c:04:af:9d:92:4a:f8:7a:03:89: 0e:a0:09:3c:f8:0b:5a:4d:ce:bc:b6:d2:31:1e:2d: 4c:9b:a1:09:9e:ce:44:02:67:3f:43:fb:23:7f:96: ec:b8:25:90:98:fe:b7:4a:f3:57:d4:9d:b6:8a:dd: e4:4c:c8:66:9a:3a:c7:92:91:73:c9:b8:23:ed:d4: ce:90:49:e2:16:d1:3d:01:a5:2c:5e:16:be:a2:a1: d0:64:dc:7c:6b:71:4a:b4:cf:3f:09:01:c5:80:8b: c1:d8:7f:af:0f:31:cc:33:29:d3:d5:c9:8a:4b:0b: 05:5b:45:70:39:22:4f:b2:a6:ef:15:5e:8b:a9:99: 3b:c0:e0:bc:fe:dc:11:c8:eb:ed:13:ac:74:29:02: e6:5a:f4:98:20:ca:10:02:ac:44:5f:d5:46:7b:48: 84:ce:f6:d3:b1:ae:e1:d0:1d:9b:c3:85:8a:7e:61: a1:9a:e2:41:1b:0f:9e:15:72:66:c5:b0:10:82:d7: b5:fb:e6:a7:b7:72:01:a4:7e:37:a2:9c:e6:da:62: dc:eb:d0:26:f6:51:7f:66:e1:d4:2e:b7:3c:c2:35: 95:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:15:54:31:DE:0A:3F:7F:ED:F6:FB:9F:B3:FF:5A:A5:CD:76:98:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/a936f59c-530b-3701-8514-dcc669422914.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/61e7cca0-e65d-417d-a651-371c91be9c95.crl X509v3 Authority Key Identifier: keyid:64:A2:9F:B0:12:A3:74:F2:09:E2:03:8E:EB:E2:C6:D3:63:24:57:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95.cer sbgp-ipAddrBlock: critical IPv4: 156.146.128.0/17 158.41.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:f3:59:e4:a8:e8:a8:f0:3e:b6:ec:ac:03:4d:e3:94:89:91: d8:0f:e7:d8:18:b4:48:15:98:50:a1:e5:fe:10:47:0e:68:e0: 77:2b:cd:71:ba:32:6d:40:8c:b4:86:b1:77:f2:9d:5a:1e:cf: ed:76:24:9d:44:b7:b9:76:d0:5f:58:26:1b:39:13:4e:8c:aa: 19:40:de:93:1c:70:b2:62:85:53:b8:c0:9f:f6:45:d8:44:14: c6:38:9d:2c:5f:89:84:6c:5a:e2:88:e8:5b:5b:2d:6d:58:d9: f0:33:58:eb:9f:ba:4e:0d:28:66:a7:32:b1:c7:61:bf:8c:22: d7:77:4f:04:14:77:81:f2:d7:8c:bb:a1:16:5e:a0:1e:78:d3: fc:f7:71:aa:d8:e5:ce:e5:a2:8d:8b:1a:6a:74:0a:a6:d4:b0: 5e:3d:1a:8c:c9:ad:44:aa:b1:3a:18:c4:8a:6f:6f:74:5f:18: c3:6e:d5:ea:0d:1a:ca:99:35:5f:c9:01:60:d8:69:ec:ad:93: 3d:0e:19:a4:b5:35:bc:04:6f:d8:5f:ff:ec:aa:f2:7e:0a:2a: e0:a4:14:8d:6d:aa:dd:02:4e:96:2c:fc:05:9e:aa:34:8c:6c: 46:46:77:9a:18:db:e7:d7:8c:af:42:24:ba:fe:d5:34:96:1c: 07:7d:01:96 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE5QhJ4VZ3yrZKJPc4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjFlN2NjYTAtZTY1ZC00MTdkLWE2NTEtMzcxYzkxYmU5 Yzk1MB4XDTI2MDYyNzIxMDAxMloXDTI2MDkyNTIxMDAxMlowLzEtMCsGA1UEAxMk OTk0MTAxZDAtOGZkNC00NzhkLTgzNjQtNjRjNWJjMzU0ZWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlU7W7/sMptWj0UYuPHV6mQvNH1pFiatqsphd MdoVDQBYFmwEr52SSvh6A4kOoAk8+AtaTc68ttIxHi1Mm6EJns5EAmc/Q/sjf5bs uCWQmP63SvNX1J22it3kTMhmmjrHkpFzybgj7dTOkEniFtE9AaUsXha+oqHQZNx8 a3FKtM8/CQHFgIvB2H+vDzHMMynT1cmKSwsFW0VwOSJPsqbvFV6LqZk7wOC8/twR yOvtE6x0KQLmWvSYIMoQAqxEX9VGe0iEzvbTsa7h0B2bw4WKfmGhmuJBGw+eFXJm xbAQgte1++ant3IBpH43opzm2mLc69Am9lF/ZuHULrc8wjWVuQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFKwVVDHeCj9/7fb7n7P/WqXNdpgAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82MWU3 Y2NhMC1lNjVkLTQxN2QtYTY1MS0zNzFjOTFiZTljOTUvYTkzNmY1OWMtNTMwYi0z NzAxLTg1MTQtZGNjNjY5NDIyOTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjFlN2NjYTAtZTY1ZC00MTdkLWE2 NTEtMzcxYzkxYmU5Yzk1LzYxZTdjY2EwLWU2NWQtNDE3ZC1hNjUxLTM3MWM5MWJl OWM5NS5jcmwwHwYDVR0jBBgwFoAUZKKfsBKjdPIJ4gOO6+LG02MkVyEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82MWU3Y2NhMC1lNjVkLTQxN2QtYTY1MS0zNzFj OTFiZTljOTUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQHnJKAAwQH nimAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAJTzWeSo6KjwPrbsrANN45SJkdgP59gYtEgVmFCh5f4QRw5o 4HcrzXG6Mm1AjLSGsXfynVoez+12JJ1Et7l20F9YJhs5E06MqhlA3pMccLJihVO4 wJ/2RdhEFMY4nSxfiYRsWuKI6FtbLW1Y2fAzWOufuk4NKGanMrHHYb+MItd3TwQU d4Hy14y7oRZeoB540/z3carY5c7loo2LGmp0CqbUsF49GozJrUSqsToYxIpvb3Rf GMNu1eoNGsqZNV/JAWDYaeytkz0OGaS1NbwEb9hf/+yq8n4KKuCkFI1tqt0CTpYs /AWeqjSMbEZGd5oY2+fXjK9CJLr+1TSWHAd9AZY= -----END CERTIFICATE-----Generated at Thu Jul 9 10:15:12 2026 by rpki-client