$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/6a7cc440-c701-3906-b2fe-594c62786924.roa File: 6a7cc440-c701-3906-b2fe-594c62786924.roa (raw, json) Hash identifier: Xc7Wte0C9qJLLbux+zhXuOK9D/rbqb9LqW+6Pmbup9c= Subject key identifier: EF:E5:28:65:95:8A:74:39:15:C0:59:C0:C4:E5:40:E6:00:B3:4C:0F Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Certificate serial: 010D0C9F4328584E6144AB08AACDD7BD2F4CBD00 Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/6a7cc440-c701-3906-b2fe-594c62786924.roa Signing time: Fri 03 Jul 2026 21:00:11 +0000 ROA not before: Fri 03 Jul 2026 21:00:11 +0000 ROA not after: Thu 01 Oct 2026 21:00:11 +0000 asID: 29538 IP address blocks: 128.1.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:61:44:ab:08:aa:cd:d7:bd:2f:4c:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Validity Not Before: Jul 3 21:00:11 2026 GMT Not After : Oct 1 21:00:11 2026 GMT Subject: CN=fb48ee30-4deb-4e25-b5df-cffb463ea7de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:25:76:8b:9c:69:12:3e:51:5f:6a:0a:7e:3d: 29:5c:93:ae:79:6e:f7:44:ea:6f:37:12:a9:3e:d6: 78:45:f0:ad:23:fe:b1:55:12:ec:90:10:20:e2:21: 1f:fe:ad:bf:4e:a3:a2:7b:29:45:bf:c1:3b:6e:01: d8:f2:4d:87:78:f5:61:a2:e9:ef:2d:cd:ae:fc:0f: b5:46:3d:75:84:ee:49:51:e9:65:e0:67:50:7a:e0: e8:ed:0c:b5:e2:9f:46:2b:e1:7a:f2:87:69:d2:23: 00:f4:7b:8f:05:27:a7:12:2d:da:25:bc:c9:d5:00: 61:2c:1e:96:c7:c3:ae:9d:ab:2d:cc:04:a1:08:d2: bb:f1:56:75:f1:d0:fc:c2:31:f5:81:31:03:ee:76: f6:4c:60:43:38:47:09:f9:3b:63:40:dd:55:6d:43: e3:d2:83:cd:a1:21:10:46:d8:c2:70:a3:69:95:bd: 11:0c:ec:c8:b9:dc:e0:c4:e0:2d:8c:7c:c1:80:53: 6d:42:8a:a9:02:0d:06:a8:52:57:62:c6:34:63:bf: fb:49:95:8b:28:c9:32:32:c5:ca:5d:66:cb:cb:db: 36:44:96:15:d1:ac:5c:a7:de:72:d5:5e:f6:67:01: d4:a0:20:06:c2:fc:1c:26:9c:2d:3d:b6:42:f5:5f: ef:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:E5:28:65:95:8A:74:39:15:C0:59:C0:C4:E5:40:E6:00:B3:4C:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/6a7cc440-c701-3906-b2fe-594c62786924.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl X509v3 Authority Key Identifier: keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer sbgp-ipAddrBlock: critical IPv4: 128.1.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:7d:cb:58:af:f8:1f:3b:0a:39:6e:2e:9a:9a:9f:93:6b:ed: 63:08:ba:e8:12:1d:76:e8:f4:72:35:84:21:da:15:87:33:83: 71:7f:4d:0c:15:2e:30:93:f1:43:47:e7:c7:d5:e4:2b:da:dd: 1a:43:5c:90:dd:ab:3e:0f:19:43:e2:21:9d:4d:f8:c6:03:15: 11:56:d7:33:75:1a:7f:23:82:ec:a0:4a:3b:e4:b4:44:84:dd: aa:ae:0a:9c:42:79:c0:c2:90:7e:32:e1:b2:b3:2d:50:67:67: 8e:16:dc:68:9c:0f:ef:09:5c:6a:0f:28:e5:16:b4:cf:cc:97: b0:e2:cb:4b:2d:d7:ee:a6:c5:fd:1e:37:1e:33:89:c9:25:f1: df:d5:97:0c:5b:89:59:dc:6b:09:c2:fa:bc:dc:6a:c7:17:3f: 2f:26:33:0f:fa:9d:bb:ae:60:87:14:f7:df:39:06:37:6c:ea: 97:e9:a8:64:79:af:d4:7b:d9:a3:fe:6a:ae:03:e8:67:1d:29: f3:ee:73:e7:2c:be:ab:7a:53:31:01:88:8f:8d:7f:7d:2d:df: 4e:d8:5e:5d:60:fe:ff:82:45:2d:1a:d2:b3:28:78:1e:b1:c3: 9e:09:dc:6f:69:e6:4a:56:2d:a1:95:22:89:73:d4:89:da:30: 3f:ef:4f:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5hRKsIqs3XvS9MvQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm M2E1MB4XDTI2MDcwMzIxMDAxMVoXDTI2MTAwMTIxMDAxMVowLzEtMCsGA1UEAxMk ZmI0OGVlMzAtNGRlYi00ZTI1LWI1ZGYtY2ZmYjQ2M2VhN2RlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCV2i5xpEj5RX2oKfj0pXJOueW73ROpvNxKp PtZ4RfCtI/6xVRLskBAg4iEf/q2/TqOieylFv8E7bgHY8k2HePVhounvLc2u/A+1 Rj11hO5JUell4GdQeuDo7Qy14p9GK+F68odp0iMA9HuPBSenEi3aJbzJ1QBhLB6W x8OunastzAShCNK78VZ18dD8wjH1gTED7nb2TGBDOEcJ+TtjQN1VbUPj0oPNoSEQ RtjCcKNplb0RDOzIudzgxOAtjHzBgFNtQoqpAg0GqFJXYsY0Y7/7SZWLKMkyMsXK XWbLy9s2RJYV0axcp95y1V72ZwHUoCAGwvwcJpwtPbZC9V/vQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO/lKGWVinQ5FcBZwMTlQOYAs0wPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvNmE3Y2M0NDAtYzcwMS0z OTA2LWIyZmUtNTk0YzYyNzg2OTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgAGYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFR9y1iv+B87CjluLpqan5Nr7WMIuugSHXbo9HI1hCHaFYczg3F/TQwV LjCT8UNH58fV5Cva3RpDXJDdqz4PGUPiIZ1N+MYDFRFW1zN1Gn8jguygSjvktESE 3aquCpxCecDCkH4y4bKzLVBnZ44W3GicD+8JXGoPKOUWtM/Ml7Diy0st1+6mxf0e Nx4zickl8d/VlwxbiVncawnC+rzcascXPy8mMw/6nbuuYIcU9985Bjds6pfpqGR5 r9R72aP+aq4D6GcdKfPuc+csvqt6UzEBiI+Nf30t307YXl1g/v+CRS0a0rMoeB6x w54J3G9p5kpWLaGVIolz1InaMD/vT+M= -----END CERTIFICATE-----Generated at Tue Jul 21 15:00:28 2026 by rpki-client