$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/424ac7fb-6720-33a7-9d21-730580de8ab4.roa File: 424ac7fb-6720-33a7-9d21-730580de8ab4.roa (raw, json) Hash identifier: 2bs5t/asbWiKRmBso5+CYJCRMzdTY7jlTL8HAiElRbs= Subject key identifier: 74:24:47:FC:6A:D2:AB:70:A1:05:73:3D:E9:1E:A8:A7:8F:44:79:78 Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Certificate serial: 010D0C9F4328584EA79017185CCF7F4EE7F73E20 Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/424ac7fb-6720-33a7-9d21-730580de8ab4.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 13768 IP address blocks: 65.39.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:90:17:18:5c:cf:7f:4e:e7:f7:3e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=c11170dc-b88b-4547-9b41-3377b61125da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:78:ef:c8:02:99:9a:26:c4:13:fb:86:d4:81: 01:f7:f8:d5:a9:c9:33:84:e1:70:cc:b3:b6:5a:05: ba:15:71:61:47:6f:7c:a7:a6:10:f5:dc:08:45:85: e6:7e:45:25:45:6e:55:f7:0f:53:60:2e:98:4e:70: 2c:7b:36:80:e7:62:90:79:67:08:67:d3:04:50:0a: 99:5b:83:40:9b:2b:13:d4:79:5b:66:8f:be:b8:6b: 85:f5:57:98:8f:2c:d5:e0:2f:ac:5e:61:07:01:55: 95:50:02:f5:ae:1a:ea:96:d3:9a:92:64:b7:f5:f3: 73:dc:37:71:01:0e:02:04:3d:5b:11:96:2e:23:38: 4d:8a:19:89:82:d3:ba:7e:b9:38:66:f8:be:68:65: 57:3b:8b:c4:d8:39:f4:04:3a:d9:58:33:b3:62:09: 96:80:d1:4b:06:03:04:54:69:9f:4a:15:81:46:17: 94:3b:15:e8:ab:b4:b7:e9:d9:b4:6d:fa:94:8d:f8: e1:ef:86:42:ea:c0:1a:db:8c:2c:ef:a6:0f:a6:7d: 29:cd:e7:84:0a:fd:b7:08:31:7a:ef:10:b4:39:ac: ca:4c:d8:44:d9:96:73:44:80:f8:e8:17:b3:e3:c7: 89:56:c6:97:62:5e:24:b9:d1:b4:dd:08:7d:ac:b0: cf:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:24:47:FC:6A:D2:AB:70:A1:05:73:3D:E9:1E:A8:A7:8F:44:79:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/424ac7fb-6720-33a7-9d21-730580de8ab4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl X509v3 Authority Key Identifier: keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer sbgp-ipAddrBlock: critical IPv4: 65.39.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:d6:e4:8f:87:ff:8e:d4:da:32:19:4a:1f:a3:10:d1:35:a2: 80:bb:21:7f:2f:0d:6a:88:71:21:2a:7c:65:7b:fe:36:3a:02: a6:bd:5a:b1:57:e1:82:1a:85:6e:2d:a3:59:a5:dc:c9:ed:db: 00:f0:fb:06:8e:c0:b0:dc:82:ee:30:a5:d4:a5:be:2b:40:80: c6:ad:4c:3d:4a:7e:84:0d:27:2a:69:0a:04:26:fd:ba:38:43: 37:73:3c:89:07:5e:5d:27:47:00:02:3a:f2:32:5f:9a:c2:c4: 14:0d:04:75:a0:b8:9e:b7:42:d6:3c:f3:4f:38:18:af:4d:d1: 40:2d:30:cd:b3:11:54:c8:63:76:58:85:9b:e9:86:8c:ad:fe: 1b:f7:8f:78:bd:8c:a5:5a:23:3c:72:69:1b:69:42:c4:dd:db: a8:2c:f3:30:82:7c:e5:3e:5d:3e:4e:79:44:8f:1e:ce:db:02: ba:0c:8b:70:43:56:1f:14:6b:90:74:a5:0b:3e:ef:58:87:30: 6e:47:04:fd:49:65:7d:0e:f1:ac:d9:de:c9:ee:03:51:b4:b0: de:67:db:ad:44:ac:c2:8d:62:ce:ad:01:f5:a2:d1:b2:1e:be: bf:73:f5:f6:6d:b0:cc:6c:ff:8b:67:e3:a0:3d:2e:65:f6:34: e3:b8:f4:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkBcYXM9/Tuf3PiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk YjEwMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YzExMTcwZGMtYjg4Yi00NTQ3LTliNDEtMzM3N2I2MTEyNWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA73jvyAKZmibEE/uG1IEB9/jVqckzhOFwzLO2 WgW6FXFhR298p6YQ9dwIRYXmfkUlRW5V9w9TYC6YTnAsezaA52KQeWcIZ9MEUAqZ W4NAmysT1HlbZo++uGuF9VeYjyzV4C+sXmEHAVWVUAL1rhrqltOakmS39fNz3Ddx AQ4CBD1bEZYuIzhNihmJgtO6frk4Zvi+aGVXO4vE2Dn0BDrZWDOzYgmWgNFLBgME VGmfShWBRheUOxXoq7S36dm0bfqUjfjh74ZC6sAa24ws76YPpn0pzeeECv23CDF6 7xC0OazKTNhE2ZZzRID46Bez48eJVsaXYl4kudG03Qh9rLDPwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHQkR/xq0qtwoQVzPekeqKePRHl4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3 OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvNDI0YWM3ZmItNjcyMC0z M2E3LTlkMjEtNzMwNTgwZGU4YWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0 YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1 ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQSecMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3W5I+H/47U2jIZSh+jENE1ooC7IX8vDWqIcSEqfGV7/jY6Aqa9WrFX 4YIahW4to1ml3Mnt2wDw+waOwLDcgu4wpdSlvitAgMatTD1KfoQNJyppCgQm/bo4 QzdzPIkHXl0nRwACOvIyX5rCxBQNBHWguJ63QtY88084GK9N0UAtMM2zEVTIY3ZY hZvphoyt/hv3j3i9jKVaIzxyaRtpQsTd26gs8zCCfOU+XT5OeUSPHs7bAroMi3BD Vh8Ua5B0pQs+71iHMG5HBP1JZX0O8azZ3snuA1G0sN5n261ErMKNYs6tAfWi0bIe vr9z9fZtsMxs/4tn46A9LmX2NOO49ME= -----END CERTIFICATE-----Generated at Sat Sep 5 07:36:54 2026 by rpki-client