$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/df156af0-49c2-46d4-906b-5cf25869e65f/e75d8978-0cca-3d04-885f-aabcb43ccc66.roa File: e75d8978-0cca-3d04-885f-aabcb43ccc66.roa (raw, json) Hash identifier: wJNnompM61zs7+HlhOgFInc4sH+EnijusfFEwEmuzcU= Subject key identifier: 91:21:A4:23:E3:4E:A2:67:CC:1B:06:B6:1F:98:F1:A0:4E:A6:FD:08 Certificate issuer: /CN=df156af0-49c2-46d4-906b-5cf25869e65f Certificate serial: 010D0C9F4328584E842A313D9624B088F7767400 Authority key identifier: B9:69:84:6D:2E:E2:2C:10:2C:B2:AA:C6:E6:A3:5B:AE:F1:42:46:4F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/df156af0-49c2-46d4-906b-5cf25869e65f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/df156af0-49c2-46d4-906b-5cf25869e65f/e75d8978-0cca-3d04-885f-aabcb43ccc66.roa Signing time: Thu 16 Jul 2026 09:00:12 +0000 ROA not before: Thu 16 Jul 2026 09:00:12 +0000 ROA not after: Wed 14 Oct 2026 09:00:12 +0000 asID: 26548 IP address blocks: 140.235.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/df156af0-49c2-46d4-906b-5cf25869e65f/df156af0-49c2-46d4-906b-5cf25869e65f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/df156af0-49c2-46d4-906b-5cf25869e65f/df156af0-49c2-46d4-906b-5cf25869e65f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/df156af0-49c2-46d4-906b-5cf25869e65f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:84:2a:31:3d:96:24:b0:88:f7:76:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df156af0-49c2-46d4-906b-5cf25869e65f Validity Not Before: Jul 16 09:00:12 2026 GMT Not After : Oct 14 09:00:12 2026 GMT Subject: CN=e556802d-40bb-4807-9ae2-e6adf66f1103 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:20:ec:82:2c:0b:04:a0:64:a7:ef:5c:48:4a: ea:fc:f6:7f:c2:84:ce:95:05:46:6a:04:50:a0:46: e6:b1:fe:5b:6b:79:8d:7f:88:ee:05:4a:fe:c0:46: 8b:f2:02:5c:ee:07:ea:e8:2a:38:ee:c6:3c:d1:c1: af:5d:07:b4:09:fc:e3:91:a7:13:a3:97:14:af:bc: 28:b5:70:27:93:15:31:59:a1:68:0c:4d:13:76:0c: 0e:4a:54:77:72:f4:4b:59:2c:58:c2:ac:4b:fd:eb: 60:e4:ba:c8:41:ba:29:ee:aa:5d:32:fd:23:9f:00: a6:6e:f1:20:89:83:66:2c:26:58:b6:29:df:51:fd: a5:30:d9:8c:7f:e0:39:66:a9:78:c1:7f:13:5e:ec: ca:98:30:37:db:2e:0f:fe:ec:22:15:ef:03:20:78: 12:69:07:da:da:1f:c7:09:f1:0e:e4:68:6f:ff:33: 73:3d:5e:ba:65:c8:08:7a:ba:36:f4:cc:6e:ae:ee: 1e:e3:e3:db:d1:38:1d:e2:5c:d9:ef:74:e2:cf:7d: 2a:d8:90:51:57:ef:ca:fc:ba:3f:d9:ff:e5:47:81: 67:56:92:ef:d3:3f:a8:97:51:8b:a5:cd:71:fc:bf: 94:5a:e5:73:3e:8a:11:73:bb:50:22:1f:9a:a7:99: f9:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:21:A4:23:E3:4E:A2:67:CC:1B:06:B6:1F:98:F1:A0:4E:A6:FD:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/df156af0-49c2-46d4-906b-5cf25869e65f/e75d8978-0cca-3d04-885f-aabcb43ccc66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/df156af0-49c2-46d4-906b-5cf25869e65f/df156af0-49c2-46d4-906b-5cf25869e65f.crl X509v3 Authority Key Identifier: keyid:B9:69:84:6D:2E:E2:2C:10:2C:B2:AA:C6:E6:A3:5B:AE:F1:42:46:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/df156af0-49c2-46d4-906b-5cf25869e65f.cer sbgp-ipAddrBlock: critical IPv4: 140.235.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:2c:a2:b6:03:af:e7:b6:05:2a:d6:81:c4:47:af:49:d9:9b: 42:85:52:42:a4:72:00:3c:a2:5c:38:5b:3e:24:54:7c:1a:18: 7f:03:ec:78:ea:46:40:87:97:9d:e3:cb:19:7e:e3:5b:cb:ab: 16:d6:e5:40:04:5f:a6:6b:e1:e1:6b:40:c6:04:64:2e:9d:13: 49:e5:46:3b:e2:5f:c2:db:0c:a1:e8:6d:c4:e0:cb:de:1a:38: 59:01:6c:57:97:0d:56:be:e0:d8:0c:fc:ec:19:22:0a:98:a4: dc:89:62:ad:b6:57:3e:05:34:bc:0b:89:32:92:d6:c0:d7:ec: 69:1a:c3:46:ea:7d:21:2e:cd:31:ed:7d:51:47:8a:97:8c:06: 57:a5:94:11:00:60:08:b7:a5:c6:2b:17:45:e7:81:5f:c2:43: 52:84:4f:fe:41:25:f6:8d:79:38:ff:b1:32:28:67:d0:d5:f9: 0e:13:cc:5a:84:49:e2:02:5a:7c:58:aa:99:de:ea:19:bc:e8: e0:c1:ed:3f:ef:1f:47:d8:6e:31:88:87:63:fa:c3:a6:a9:cf: 21:70:87:0d:e6:26:34:df:fc:fe:23:92:9d:26:85:c0:b7:2e: 1d:6f:9a:da:cd:47:11:7b:fe:60:9a:ab:0f:7e:47:fc:74:9e: 40:de:8a:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6EKjE9liSwiPd2dAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYxNTZhZjAtNDljMi00NmQ0LTkwNmItNWNmMjU4Njll NjVmMB4XDTI2MDcxNjA5MDAxMloXDTI2MTAxNDA5MDAxMlowLzEtMCsGA1UEAxMk ZTU1NjgwMmQtNDBiYi00ODA3LTlhZTItZTZhZGY2NmYxMTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyDsgiwLBKBkp+9cSErq/PZ/woTOlQVGagRQ oEbmsf5ba3mNf4juBUr+wEaL8gJc7gfq6Co47sY80cGvXQe0CfzjkacTo5cUr7wo tXAnkxUxWaFoDE0TdgwOSlR3cvRLWSxYwqxL/etg5LrIQbop7qpdMv0jnwCmbvEg iYNmLCZYtinfUf2lMNmMf+A5Zql4wX8TXuzKmDA32y4P/uwiFe8DIHgSaQfa2h/H CfEO5Ghv/zNzPV66ZcgIero29Mxuru4e4+Pb0Tgd4lzZ73Tiz30q2JBRV+/K/Lo/ 2f/lR4FnVpLv0z+ol1GLpc1x/L+UWuVzPooRc7tQIh+ap5n5eQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJEhpCPjTqJnzBsGth+Y8aBOpv0IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kZjE1 NmFmMC00OWMyLTQ2ZDQtOTA2Yi01Y2YyNTg2OWU2NWYvZTc1ZDg5NzgtMGNjYS0z ZDA0LTg4NWYtYWFiY2I0M2NjYzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGYxNTZhZjAtNDljMi00NmQ0LTkw NmItNWNmMjU4NjllNjVmL2RmMTU2YWYwLTQ5YzItNDZkNC05MDZiLTVjZjI1ODY5 ZTY1Zi5jcmwwHwYDVR0jBBgwFoAUuWmEbS7iLBAssqrG5qNbrvFCRk8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kZjE1NmFmMC00OWMyLTQ2ZDQtOTA2Yi01Y2Yy NTg2OWU2NWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjOsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKssorYDr+e2BSrWgcRHr0nZm0KFUkKkcgA8olw4Wz4kVHwaGH8D7Hjq RkCHl53jyxl+41vLqxbW5UAEX6Zr4eFrQMYEZC6dE0nlRjviX8LbDKHobcTgy94a OFkBbFeXDVa+4NgM/OwZIgqYpNyJYq22Vz4FNLwLiTKS1sDX7Gkaw0bqfSEuzTHt fVFHipeMBlellBEAYAi3pcYrF0XngV/CQ1KET/5BJfaNeTj/sTIoZ9DV+Q4TzFqE SeICWnxYqpne6hm86ODB7T/vH0fYbjGIh2P6w6apzyFwhw3mJjTf/P4jkp0mhcC3 Lh1vmtrNRxF7/mCaqw9+R/x0nkDeirY= -----END CERTIFICATE-----Generated at Tue Jul 21 01:33:41 2026 by rpki-client