$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/59deb3be-4cc8-3fcd-91ed-e8503c8b3154.roa File: 59deb3be-4cc8-3fcd-91ed-e8503c8b3154.roa (raw, json) Hash identifier: nyXSH1EO9Aw6dToXVnF35IujK0uOvk3C/IiWoSVQmP8= Subject key identifier: 87:DF:A2:AA:91:BB:EE:8B:65:29:5A:08:9B:D4:31:9E:20:FB:B9:52 Certificate issuer: /CN=8e5312d0-770c-4d40-8042-53d0eadc436b Certificate serial: 010D0C9F4328584EA8EC46E60C9D8738E8FB7D00 Authority key identifier: 3F:76:89:BD:0C:17:F7:63:C3:53:18:D2:89:B5:0A:47:37:D6:89:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/59deb3be-4cc8-3fcd-91ed-e8503c8b3154.roa Signing time: Wed 29 Jul 2026 13:00:12 +0000 ROA not before: Wed 29 Jul 2026 13:00:12 +0000 ROA not after: Tue 27 Oct 2026 13:00:12 +0000 asID: 21976 IP address blocks: 192.150.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/8e5312d0-770c-4d40-8042-53d0eadc436b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/8e5312d0-770c-4d40-8042-53d0eadc436b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 12 Aug 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a8:ec:46:e6:0c:9d:87:38:e8:fb:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e5312d0-770c-4d40-8042-53d0eadc436b Validity Not Before: Jul 29 13:00:12 2026 GMT Not After : Oct 27 13:00:12 2026 GMT Subject: CN=e492d4cc-d706-4d9d-9c7c-04c460ce7b09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:93:a9:33:e3:9c:4a:80:98:72:16:fb:b5:2e: 9c:4f:7d:bc:10:de:79:12:e4:42:d3:5b:26:b7:34: 85:b0:f9:c9:fd:40:17:a8:60:a5:db:f7:4f:3b:a7: 6c:73:92:b1:aa:2d:df:bd:a0:4b:dd:b4:20:4d:70: 60:53:cc:0b:42:4e:a0:74:b2:eb:36:f0:70:7a:da: ee:58:52:2f:27:e0:33:3b:58:57:ab:c0:65:60:53: e6:a9:64:26:93:8b:0b:f6:06:ad:88:83:35:20:6a: 47:49:a6:bc:dd:94:91:bf:68:b2:27:48:4d:2c:3c: 9a:72:67:60:4c:c9:87:c2:3a:92:78:9d:60:92:5d: 70:21:73:81:3a:4a:bc:ce:6d:fc:c6:5a:9e:79:8e: 4a:fa:ff:37:28:45:02:88:60:dd:d4:46:cf:d1:92: 14:2e:69:e9:84:16:97:22:2d:1c:3f:43:a8:c2:fa: 45:44:29:1c:4f:b4:56:0a:9a:b1:66:5f:07:6d:88: 5e:2b:f8:d3:75:f7:73:cb:59:34:19:87:0f:86:9b: c4:ca:e8:80:5c:82:94:11:c5:dc:30:a6:f0:8e:ac: 58:d5:8f:e7:b7:29:a0:53:f6:f8:9a:03:dc:65:94: 2f:77:a5:c9:d7:a5:54:78:3f:d5:87:1a:55:7f:c7: fd:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:DF:A2:AA:91:BB:EE:8B:65:29:5A:08:9B:D4:31:9E:20:FB:B9:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/59deb3be-4cc8-3fcd-91ed-e8503c8b3154.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/8e5312d0-770c-4d40-8042-53d0eadc436b.crl X509v3 Authority Key Identifier: keyid:3F:76:89:BD:0C:17:F7:63:C3:53:18:D2:89:B5:0A:47:37:D6:89:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b.cer sbgp-ipAddrBlock: critical IPv4: 192.150.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:ad:87:8a:d8:6e:44:48:e6:ef:32:4c:f3:35:a8:42:a3:ab: fd:5e:c1:9c:5c:3e:cb:43:f6:0a:80:8b:22:a3:cd:96:a0:7d: 01:7e:32:05:6c:22:de:52:8e:86:7e:ab:8f:f4:5b:cd:e2:6a: a9:18:08:19:6d:fc:7c:ee:49:53:b6:7e:bb:3c:14:3e:c8:db: 71:24:aa:cc:f4:66:5d:82:9f:de:ee:13:ea:50:c4:25:9e:cd: 11:67:70:7b:18:36:64:49:9f:fb:70:a8:03:02:51:e9:4c:93: eb:cd:7a:ac:dd:68:e7:80:0e:23:31:d8:6d:55:56:b8:8b:51: 1c:df:55:7a:3e:a2:8b:b5:87:e3:ec:f6:d3:37:dc:50:37:c5: 1b:bb:71:97:8c:33:87:2e:1d:5c:48:70:2b:10:89:c7:91:7b: a1:ea:77:5b:f9:d9:90:0a:0d:60:92:0e:12:d9:95:62:9b:cc: 55:a3:fb:d0:e2:69:93:2b:5d:86:6a:f8:23:16:ae:df:8a:fe: 8e:5c:a9:7c:43:7c:0b:71:92:9a:54:01:81:03:5d:16:8c:a3: 3b:93:86:c2:ff:95:13:72:af:77:68:d9:2e:73:61:87:70:51: 4f:bf:70:9a:28:e5:66:c2:c0:78:9a:26:e7:f5:b6:83:97:98: 98:55:a0:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6o7EbmDJ2HOOj7fQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU1MzEyZDAtNzcwYy00ZDQwLTgwNDItNTNkMGVhZGM0 MzZiMB4XDTI2MDcyOTEzMDAxMloXDTI2MTAyNzEzMDAxMlowLzEtMCsGA1UEAxMk ZTQ5MmQ0Y2MtZDcwNi00ZDlkLTljN2MtMDRjNDYwY2U3YjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJOpM+OcSoCYchb7tS6cT328EN55EuRC01sm tzSFsPnJ/UAXqGCl2/dPO6dsc5Kxqi3fvaBL3bQgTXBgU8wLQk6gdLLrNvBwetru WFIvJ+AzO1hXq8BlYFPmqWQmk4sL9gatiIM1IGpHSaa83ZSRv2iyJ0hNLDyacmdg TMmHwjqSeJ1gkl1wIXOBOkq8zm38xlqeeY5K+v83KEUCiGDd1EbP0ZIULmnphBaX Ii0cP0OowvpFRCkcT7RWCpqxZl8HbYheK/jTdfdzy1k0GYcPhpvEyuiAXIKUEcXc MKbwjqxY1Y/ntymgU/b4mgPcZZQvd6XJ16VUeD/VhxpVf8f9uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIffoqqRu+6LZSlaCJvUMZ4g+7lSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84ZTUz MTJkMC03NzBjLTRkNDAtODA0Mi01M2QwZWFkYzQzNmIvNTlkZWIzYmUtNGNjOC0z ZmNkLTkxZWQtZTg1MDNjOGIzMTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGU1MzEyZDAtNzcwYy00ZDQwLTgw NDItNTNkMGVhZGM0MzZiLzhlNTMxMmQwLTc3MGMtNGQ0MC04MDQyLTUzZDBlYWRj NDM2Yi5jcmwwHwYDVR0jBBgwFoAUP3aJvQwX92PDUxjSibUKRzfWiQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84ZTUzMTJkMC03NzBjLTRkNDAtODA0Mi01M2Qw ZWFkYzQzNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJaWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABOth4rYbkRI5u8yTPM1qEKjq/1ewZxcPstD9gqAiyKjzZagfQF+MgVs It5SjoZ+q4/0W83iaqkYCBlt/HzuSVO2frs8FD7I23Ekqsz0Zl2Cn97uE+pQxCWe zRFncHsYNmRJn/twqAMCUelMk+vNeqzdaOeADiMx2G1VVriLURzfVXo+oou1h+Ps 9tM33FA3xRu7cZeMM4cuHVxIcCsQiceRe6Hqd1v52ZAKDWCSDhLZlWKbzFWj+9Di aZMrXYZq+CMWrt+K/o5cqXxDfAtxkppUAYEDXRaMozuThsL/lRNyr3do2S5zYYdw UU+/cJoo5WbCwHiaJuf1toOXmJhVoFU= -----END CERTIFICATE-----Generated at Tue Aug 11 14:37:34 2026 by rpki-client