$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/a68f1666-dd52-3783-9bcb-75feac650037.roa File: a68f1666-dd52-3783-9bcb-75feac650037.roa (raw, json) Hash identifier: 1X0lFNrFTkMxmUVNgH2/jAJW7/8VoH8JmmiqKUVocsc= Subject key identifier: 97:DE:FF:3A:B3:E9:17:09:BA:D6:34:7C:4D:E8:DA:87:09:9B:B6:6F Certificate issuer: /CN=7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf Certificate serial: 010D0C9F4328584EB8475C040F6EA334C32E5680 Authority key identifier: 90:25:00:D5:D4:81:50:60:54:00:7C:D6:30:FD:71:A6:4F:93:46:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/a68f1666-dd52-3783-9bcb-75feac650037.roa Signing time: Tue 04 Aug 2026 01:00:12 +0000 ROA not before: Tue 04 Aug 2026 01:00:12 +0000 ROA not after: Mon 02 Nov 2026 02:00:12 +0000 asID: 27395 IP address blocks: 162.248.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Aug 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b8:47:5c:04:0f:6e:a3:34:c3:2e:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf Validity Not Before: Aug 4 01:00:12 2026 GMT Not After : Nov 2 02:00:12 2026 GMT Subject: CN=235499c9-f975-4fe6-9644-9b227f72a8b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:13:f2:5f:0a:e1:b6:0f:99:c7:94:8c:70:a8: 7c:0e:a9:18:ca:07:a6:9b:c5:f6:d3:8c:b7:96:c0: fa:19:14:34:dd:9f:54:19:90:dc:dd:f8:84:bf:cd: 28:04:73:a1:55:94:88:93:7b:d4:e3:7e:68:ad:ae: 6b:94:01:16:ae:32:a8:8b:1c:ef:96:b5:d9:a2:a6: 62:5c:94:ab:5a:15:32:0f:bd:42:c3:60:6d:04:08: 53:32:e0:ae:32:cc:c7:5d:40:2b:70:c3:db:f7:57: 90:76:91:d1:8f:a5:6b:46:8b:66:00:b0:3f:e7:ec: d4:da:b2:77:df:43:89:01:74:a1:d1:8a:41:13:6f: 0e:6c:36:d3:a9:ee:91:e1:59:04:ef:21:f4:9f:58: 99:6b:ea:c6:a4:95:f7:c8:0f:a7:18:32:dc:e3:db: 50:49:ed:8a:6f:58:4e:90:48:18:fb:36:3e:d0:7c: 95:a1:c1:ca:95:a7:2f:a9:57:c6:55:ee:e5:87:f0: 06:b2:45:94:4c:8b:a2:13:71:38:eb:76:83:27:3f: 63:c9:e3:48:d8:4d:84:84:af:9f:44:73:2d:8f:ff: 63:6f:3c:ba:4d:39:a6:61:6c:cc:1e:88:b9:0c:08: 27:18:d6:71:3f:83:d8:3c:8c:3c:78:ff:01:4f:6a: 5a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:DE:FF:3A:B3:E9:17:09:BA:D6:34:7C:4D:E8:DA:87:09:9B:B6:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/a68f1666-dd52-3783-9bcb-75feac650037.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.crl X509v3 Authority Key Identifier: keyid:90:25:00:D5:D4:81:50:60:54:00:7C:D6:30:FD:71:A6:4F:93:46:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer sbgp-ipAddrBlock: critical IPv4: 162.248.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:37:30:35:07:e6:29:ae:c6:5f:12:12:2d:30:60:e1:07:51: 1f:54:dc:e6:65:f3:38:97:66:6a:1f:06:65:12:0f:67:c8:5d: 04:99:f6:37:9e:2e:45:d2:66:2b:d0:7f:61:3a:53:c7:3d:af: 1b:fa:96:aa:2f:85:b9:7f:99:94:e9:52:08:5a:2c:d4:7b:c2: 46:fe:11:5e:92:9e:cf:d6:e9:02:07:91:46:c8:d9:d0:d0:80: ce:01:9a:1d:5c:8e:e1:5c:6e:34:c1:da:88:4e:25:1c:96:6c: 13:06:08:24:87:b6:cb:ef:a5:2d:1a:7a:88:b3:54:a7:05:d3: f2:3b:d7:95:36:72:9f:57:44:71:d0:ac:43:4a:07:36:a1:0b: 07:9c:9d:2f:2d:c5:9e:28:c7:5d:a8:1a:03:b6:aa:95:5d:0a: bd:b9:65:bf:35:39:38:e9:a2:b0:f9:a7:25:29:f7:ee:9b:31: f0:9c:9f:cc:1e:80:af:2c:f5:79:61:36:2a:06:47:dc:8b:6e: 4c:c2:c3:20:1a:9a:52:f7:64:3f:37:ac:1e:5b:ed:7e:b9:36: 08:2a:b5:5d:39:e3:12:c1:cc:f4:12:ed:9e:3c:49:fc:8a:b9: e2:f2:c5:7b:73:cb:c1:0a:77:10:87:fe:42:a9:a0:8c:86:46: c8:ee:3c:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE64R1wED26jNMMuVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2JlZDlkMmMtNTUyNi00ZDdlLWJlNGYtYzliNWVjYzY3 ZWFmMB4XDTI2MDgwNDAxMDAxMloXDTI2MTEwMjAyMDAxMlowLzEtMCsGA1UEAxMk MjM1NDk5YzktZjk3NS00ZmU2LTk2NDQtOWIyMjdmNzJhOGI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBPyXwrhtg+Zx5SMcKh8DqkYygemm8X204y3 lsD6GRQ03Z9UGZDc3fiEv80oBHOhVZSIk3vU435ora5rlAEWrjKoixzvlrXZoqZi XJSrWhUyD71Cw2BtBAhTMuCuMszHXUArcMPb91eQdpHRj6VrRotmALA/5+zU2rJ3 30OJAXSh0YpBE28ObDbTqe6R4VkE7yH0n1iZa+rGpJX3yA+nGDLc49tQSe2Kb1hO kEgY+zY+0HyVocHKlacvqVfGVe7lh/AGskWUTIuiE3E463aDJz9jyeNI2E2EhK+f RHMtj/9jbzy6TTmmYWzMHoi5DAgnGNZxP4PYPIw8eP8BT2paZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJfe/zqz6RcJutY0fE3o2ocJm7ZvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YmVk OWQyYy01NTI2LTRkN2UtYmU0Zi1jOWI1ZWNjNjdlYWYvYTY4ZjE2NjYtZGQ1Mi0z NzgzLTliY2ItNzVmZWFjNjUwMDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2JlZDlkMmMtNTUyNi00ZDdlLWJl NGYtYzliNWVjYzY3ZWFmLzdiZWQ5ZDJjLTU1MjYtNGQ3ZS1iZTRmLWM5YjVlY2M2 N2VhZi5jcmwwHwYDVR0jBBgwFoAUkCUA1dSBUGBUAHzWMP1xpk+TRq8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83YmVkOWQyYy01NTI2LTRkN2UtYmU0Zi1jOWI1 ZWNjNjdlYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoviFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGE3MDUH5imuxl8SEi0wYOEHUR9U3OZl8ziXZmofBmUSD2fIXQSZ9jee LkXSZivQf2E6U8c9rxv6lqovhbl/mZTpUghaLNR7wkb+EV6Sns/W6QIHkUbI2dDQ gM4Bmh1cjuFcbjTB2ohOJRyWbBMGCCSHtsvvpS0aeoizVKcF0/I715U2cp9XRHHQ rENKBzahCwecnS8txZ4ox12oGgO2qpVdCr25Zb81OTjporD5pyUp9+6bMfCcn8we gK8s9XlhNioGR9yLbkzCwyAamlL3ZD83rB5b7X65NggqtV054xLBzPQS7Z48SfyK ueLyxXtzy8EKdxCH/kKpoIyGRsjuPHA= -----END CERTIFICATE-----Generated at Fri Aug 7 07:04:34 2026 by rpki-client