$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/522ca8ff-ebf8-3e85-8366-3520513994fb.roa File: 522ca8ff-ebf8-3e85-8366-3520513994fb.roa (raw, json) Hash identifier: wAuVywnzy2G+HnC6bk33jLhOZjTTB6yPvU/VzpK4SPM= Subject key identifier: 87:9E:33:E0:89:B2:B7:37:7B:DF:3D:20:66:BA:BC:93:54:FF:24:99 Certificate issuer: /CN=b5de9249-f707-4392-b43f-d406dfb20aee Certificate serial: 010D0C9F4328584EC00081F9FE1AB8C89D616240 Authority key identifier: 05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/522ca8ff-ebf8-3e85-8366-3520513994fb.roa Signing time: Thu 06 Aug 2026 19:24:44 +0000 ROA not before: Thu 06 Aug 2026 19:24:44 +0000 ROA not after: Wed 04 Nov 2026 20:24:44 +0000 asID: 198949 IP address blocks: 157.96.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 09 Aug 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c0:00:81:f9:fe:1a:b8:c8:9d:61:62:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5de9249-f707-4392-b43f-d406dfb20aee Validity Not Before: Aug 6 19:24:44 2026 GMT Not After : Nov 4 20:24:44 2026 GMT Subject: CN=428f4920-9236-45eb-9401-a8fbabc67cae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:43:82:e6:0d:92:d8:19:0b:cf:c9:69:0b:91: fb:22:34:ef:f8:80:a2:2e:53:d0:32:e4:c9:1b:f6: fc:b7:f1:f8:ce:75:6c:f5:2d:8b:b4:43:b2:16:91: 98:63:bb:13:61:4c:3e:d9:53:32:2d:9e:8c:5c:16: 68:b0:90:3e:ce:53:d8:82:e5:8d:b5:ba:54:ea:6b: bc:dc:d7:8c:e0:a4:d7:b5:97:97:ed:31:60:0e:fd: f6:42:a5:fc:d4:f0:39:69:2c:d6:fd:6a:d5:2a:f3: 57:fd:fb:bc:14:d6:7c:80:02:89:36:7d:cc:90:91: 0d:e6:33:ac:89:11:8f:4b:34:c6:e7:a8:d6:58:ab: bb:cd:90:48:af:1d:b4:38:ce:78:3d:ed:70:d1:1d: bb:9e:ce:93:98:41:47:a8:49:21:af:88:b1:9a:33: 58:1d:88:7f:d8:99:21:1d:b2:8f:ae:37:ca:05:ca: 40:ed:5d:43:e3:6d:8b:db:59:65:f5:ef:fb:a7:44: f3:16:b9:64:91:0b:ee:22:2c:38:63:e2:e6:0e:47: bf:f3:0e:85:03:88:3a:c4:ce:5b:bc:10:da:34:c7: 9d:2a:77:62:cf:a2:30:ee:51:82:e2:68:be:31:1e: c0:e0:0a:69:36:11:b6:23:a0:07:4a:f9:32:09:f9: b4:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:9E:33:E0:89:B2:B7:37:7B:DF:3D:20:66:BA:BC:93:54:FF:24:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/522ca8ff-ebf8-3e85-8366-3520513994fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl X509v3 Authority Key Identifier: keyid:05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer sbgp-ipAddrBlock: critical IPv4: 157.96.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:05:86:0e:78:31:38:6e:33:8e:38:a4:c8:2f:6b:10:1e:cc: fe:5c:6f:84:75:5d:e8:0c:18:4d:07:77:5f:df:ec:eb:74:d9: e1:49:1b:b2:65:67:f7:6b:80:74:67:7b:5d:f9:fd:36:91:4b: 1e:22:a3:74:71:48:d6:a7:7e:ac:c9:da:d7:47:43:dd:42:0e: ec:e7:8c:47:48:df:1c:fd:9d:bf:0f:04:29:8c:ab:75:24:7a: 74:9f:60:7b:22:55:d0:af:b0:3e:3e:1a:b8:46:f2:98:e5:cd: c2:41:ab:a7:86:55:21:2a:eb:14:1c:91:38:23:c7:b0:7d:b2: cf:f6:b0:a1:58:05:11:44:da:a0:c9:85:92:3a:b5:9c:66:49: 04:2e:39:91:d4:1f:17:7f:15:66:68:36:74:6e:8f:8c:1f:c1: 5e:01:70:6e:05:b0:66:bb:c2:11:c7:8c:0b:43:05:8c:17:ba: cc:01:10:b3:e8:31:48:d0:2e:8a:ac:d0:c4:0a:4b:93:21:09: ed:87:1d:c7:d8:95:b7:a0:92:9e:bb:b2:5a:14:40:53:89:7c: 77:10:60:c9:55:15:aa:3f:f2:67:6e:e6:13:b8:39:51:f5:83: 26:5c:c5:0f:53:79:80:55:98:c7:0a:7d:7c:92:d7:ef:ff:6e: 41:1d:0f:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7AAIH5/hq4yJ1hYkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVkZTkyNDktZjcwNy00MzkyLWI0M2YtZDQwNmRmYjIw YWVlMB4XDTI2MDgwNjE5MjQ0NFoXDTI2MTEwNDIwMjQ0NFowLzEtMCsGA1UEAxMk NDI4ZjQ5MjAtOTIzNi00NWViLTk0MDEtYThmYmFiYzY3Y2FlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUOC5g2S2BkLz8lpC5H7IjTv+ICiLlPQMuTJ G/b8t/H4znVs9S2LtEOyFpGYY7sTYUw+2VMyLZ6MXBZosJA+zlPYguWNtbpU6mu8 3NeM4KTXtZeX7TFgDv32QqX81PA5aSzW/WrVKvNX/fu8FNZ8gAKJNn3MkJEN5jOs iRGPSzTG56jWWKu7zZBIrx20OM54Pe1w0R27ns6TmEFHqEkhr4ixmjNYHYh/2Jkh HbKPrjfKBcpA7V1D422L21ll9e/7p0TzFrlkkQvuIiw4Y+LmDke/8w6FA4g6xM5b vBDaNMedKndiz6Iw7lGC4mi+MR7A4AppNhG2I6AHSvkyCfm0AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIeeM+CJsrc3e989IGa6vJNU/ySZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iNWRl OTI0OS1mNzA3LTQzOTItYjQzZi1kNDA2ZGZiMjBhZWUvNTIyY2E4ZmYtZWJmOC0z ZTg1LTgzNjYtMzUyMDUxMzk5NGZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYjVkZTkyNDktZjcwNy00MzkyLWI0 M2YtZDQwNmRmYjIwYWVlL2I1ZGU5MjQ5LWY3MDctNDM5Mi1iNDNmLWQ0MDZkZmIy MGFlZS5jcmwwHwYDVR0jBBgwFoAUBQwgTZ1GgdH5HArYCUuvUKm259UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9iNWRlOTI0OS1mNzA3LTQzOTItYjQzZi1kNDA2 ZGZiMjBhZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnWAcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGoFhg54MThuM444pMgvaxAezP5cb4R1XegMGE0Hd1/f7Ot02eFJG7Jl Z/drgHRne135/TaRSx4io3RxSNanfqzJ2tdHQ91CDuznjEdI3xz9nb8PBCmMq3Uk enSfYHsiVdCvsD4+GrhG8pjlzcJBq6eGVSEq6xQckTgjx7B9ss/2sKFYBRFE2qDJ hZI6tZxmSQQuOZHUHxd/FWZoNnRuj4wfwV4BcG4FsGa7whHHjAtDBYwXuswBELPo MUjQLoqs0MQKS5MhCe2HHcfYlbegkp67sloUQFOJfHcQYMlVFao/8mdu5hO4OVH1 gyZcxQ9TeYBVmMcKfXyS1+//bkEdDyQ= -----END CERTIFICATE-----Generated at Sat Aug 8 00:01:19 2026 by rpki-client