$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/42017b9c-7ea7-3f9a-8686-04d01900fd20.roa File: 42017b9c-7ea7-3f9a-8686-04d01900fd20.roa (raw, json) Hash identifier: LzOB0TJ458YgE4fA9jXZVA4vRmavObqIF2bzd+OZHSI= Subject key identifier: 3A:48:06:67:BE:33:6A:E1:E5:BB:F7:E9:9D:76:C2:81:71:D5:E9:91 Certificate issuer: /CN=95e29289-6f1c-4c2f-84f4-c944e9e54940 Certificate serial: 010D0C9F4328584E640F61273D91A249E47CDC80 Authority key identifier: 4D:BA:45:AA:AB:B9:87:63:A5:E6:6F:B3:09:C5:6E:97:30:94:9A:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/42017b9c-7ea7-3f9a-8686-04d01900fd20.roa Signing time: Sat 04 Jul 2026 21:00:12 +0000 ROA not before: Sat 04 Jul 2026 21:00:12 +0000 ROA not after: Fri 02 Oct 2026 21:00:12 +0000 asID: 19905 IP address blocks: 155.254.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:64:0f:61:27:3d:91:a2:49:e4:7c:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95e29289-6f1c-4c2f-84f4-c944e9e54940 Validity Not Before: Jul 4 21:00:12 2026 GMT Not After : Oct 2 21:00:12 2026 GMT Subject: CN=905a247d-afb5-4978-8007-e6ab9e58c9a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:60:dd:82:5f:1c:ab:8e:1a:06:cb:fe:9d:b7: f1:eb:af:63:3f:b0:fd:a1:77:fd:76:b5:8e:37:a3: 1b:32:fc:ef:dd:6a:4a:e4:8b:dd:f5:d9:1f:54:a8: 31:9c:2c:71:eb:33:bc:da:22:1b:e2:58:89:95:d9: ee:a0:30:e1:80:e8:04:89:22:e3:08:28:db:96:31: 6d:b7:a4:59:07:bc:19:48:76:ed:48:6f:77:5f:cb: d0:26:dd:8f:80:d1:43:d0:be:21:de:b7:7a:59:96: d5:59:db:f1:34:ea:e1:e5:ab:1c:03:27:3a:4d:25: 43:a0:d9:c1:f9:7c:11:ea:95:04:ca:24:88:6c:20: 7b:dc:9e:77:d0:b1:d4:60:84:3c:52:b0:b7:51:53: 12:c3:b9:37:6e:97:be:54:09:d1:9d:99:4c:f5:1c: c6:14:76:71:5d:68:69:80:41:54:43:de:eb:91:49: d5:6b:49:89:85:b1:15:68:de:f8:cd:47:6f:81:a9: 01:a2:be:5c:20:8a:a7:50:45:52:f2:20:40:7c:97: d3:f8:11:8c:6f:89:b5:fe:78:2c:d5:77:c0:25:99: 39:54:dc:c3:1f:69:c5:e5:91:55:8c:7b:dc:93:fc: 8c:a8:0a:c9:6d:82:a8:04:9e:cb:f0:70:93:63:7f: 60:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:48:06:67:BE:33:6A:E1:E5:BB:F7:E9:9D:76:C2:81:71:D5:E9:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/42017b9c-7ea7-3f9a-8686-04d01900fd20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.crl X509v3 Authority Key Identifier: keyid:4D:BA:45:AA:AB:B9:87:63:A5:E6:6F:B3:09:C5:6E:97:30:94:9A:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer sbgp-ipAddrBlock: critical IPv4: 155.254.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:cd:41:65:a6:19:00:29:7f:9e:4d:b2:9c:eb:47:62:f8:34: cd:42:a7:03:a3:83:32:78:02:0f:7d:16:6a:77:06:92:21:ff: 84:ff:8b:c0:b5:d5:a5:e6:1f:85:77:72:09:59:44:6a:24:08: 16:11:d1:95:30:f5:e7:df:91:cb:e8:ac:f0:34:1e:a6:68:5d: 1c:88:77:f7:03:bc:ce:76:31:99:bc:75:33:de:31:4a:89:74: 60:65:79:8e:9c:3e:3c:98:12:bb:6c:2e:ae:66:a0:ad:ed:df: 21:60:10:b1:42:97:ec:12:e0:ac:60:ba:ce:81:18:14:77:b2: 69:7a:c4:2f:ba:44:c4:ca:f5:fa:81:05:ed:b4:01:45:1f:29: ee:71:2e:a5:6a:02:8d:6a:c7:72:b8:04:7c:10:0e:6e:77:64: e4:ad:d5:60:da:f0:8e:69:7a:07:2c:29:af:84:1a:e7:61:94: 20:c1:d7:65:ca:4f:fc:6e:ac:05:e9:0d:cb:43:fc:ee:69:9a: 61:3d:32:b9:e8:6c:b3:86:19:4e:83:29:8e:6f:d4:55:ef:8e: 62:e3:ae:8f:99:e1:9c:a8:78:e2:09:24:1f:28:e1:1d:0c:3c: 56:f1:d2:01:4f:97:7e:e6:87:7c:33:2e:52:b5:38:4f:40:2f: ed:b5:cc:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5kD2EnPZGiSeR83IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVlMjkyODktNmYxYy00YzJmLTg0ZjQtYzk0NGU5ZTU0 OTQwMB4XDTI2MDcwNDIxMDAxMloXDTI2MTAwMjIxMDAxMlowLzEtMCsGA1UEAxMk OTA1YTI0N2QtYWZiNS00OTc4LTgwMDctZTZhYjllNThjOWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2Ddgl8cq44aBsv+nbfx669jP7D9oXf9drWO N6MbMvzv3WpK5Ivd9dkfVKgxnCxx6zO82iIb4liJldnuoDDhgOgEiSLjCCjbljFt t6RZB7wZSHbtSG93X8vQJt2PgNFD0L4h3rd6WZbVWdvxNOrh5ascAyc6TSVDoNnB +XwR6pUEyiSIbCB73J530LHUYIQ8UrC3UVMSw7k3bpe+VAnRnZlM9RzGFHZxXWhp gEFUQ97rkUnVa0mJhbEVaN74zUdvgakBor5cIIqnUEVS8iBAfJfT+BGMb4m1/ngs 1XfAJZk5VNzDH2nF5ZFVjHvck/yMqArJbYKoBJ7L8HCTY39gOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDpIBme+M2rh5bv36Z12woFx1emRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85NWUy OTI4OS02ZjFjLTRjMmYtODRmNC1jOTQ0ZTllNTQ5NDAvNDIwMTdiOWMtN2VhNy0z ZjlhLTg2ODYtMDRkMDE5MDBmZDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTVlMjkyODktNmYxYy00YzJmLTg0 ZjQtYzk0NGU5ZTU0OTQwLzk1ZTI5Mjg5LTZmMWMtNGMyZi04NGY0LWM5NDRlOWU1 NDk0MC5jcmwwHwYDVR0jBBgwFoAUTbpFqqu5h2Ol5m+zCcVulzCUmp4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85NWUyOTI4OS02ZjFjLTRjMmYtODRmNC1jOTQ0 ZTllNTQ5NDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEm/6QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFDNQWWmGQApf55NspzrR2L4NM1CpwOjgzJ4Ag99Fmp3BpIh/4T/i8C1 1aXmH4V3cglZRGokCBYR0ZUw9effkcvorPA0HqZoXRyId/cDvM52MZm8dTPeMUqJ dGBleY6cPjyYErtsLq5moK3t3yFgELFCl+wS4Kxgus6BGBR3sml6xC+6RMTK9fqB Be20AUUfKe5xLqVqAo1qx3K4BHwQDm53ZOSt1WDa8I5pegcsKa+EGudhlCDB12XK T/xurAXpDctD/O5pmmE9MrnobLOGGU6DKY5v1FXvjmLjro+Z4ZyoeOIJJB8o4R0M PFbx0gFPl37mh3wzLlK1OE9AL+21zL4= -----END CERTIFICATE-----Generated at Wed Jul 8 18:03:34 2026 by rpki-client