$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/ca7502c4-7f6d-3df2-86ef-b4eaab0d7073.roa File: ca7502c4-7f6d-3df2-86ef-b4eaab0d7073.roa (raw, json) Hash identifier: R3Xo9blAIrmWBnFepV9W5FKJAhObGDtKvZsIddc6d/E= Subject key identifier: 1D:EC:C3:C4:2D:95:4F:E3:EE:84:7E:2D:8F:C7:E9:A4:A4:10:A1:1C Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584E7204C773F44E3CAE03856000 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/ca7502c4-7f6d-3df2-86ef-b4eaab0d7073.roa Signing time: Thu 09 Jul 2026 21:00:11 +0000 ROA not before: Thu 09 Jul 2026 21:00:11 +0000 ROA not after: Wed 07 Oct 2026 21:00:11 +0000 asID: 46261 IP address blocks: 158.115.224.0/23 maxlen: 23 158.115.226.0/23 maxlen: 23 158.115.230.0/23 maxlen: 23 158.115.236.0/22 maxlen: 22 158.115.242.0/23 maxlen: 23 158.115.244.0/23 maxlen: 23 158.115.246.0/23 maxlen: 23 158.115.250.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:72:04:c7:73:f4:4e:3c:ae:03:85:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Jul 9 21:00:11 2026 GMT Not After : Oct 7 21:00:11 2026 GMT Subject: CN=1ddf76c6-29d3-455f-90fc-373cdcbda5ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:41:83:01:8f:69:f1:9b:37:ca:7b:8a:a4:f2: bc:f7:92:8f:86:b8:17:90:77:a6:98:ec:35:cd:35: dc:1b:a4:aa:85:be:e1:e7:13:b7:78:1d:d1:0e:5a: 3f:15:c1:79:bc:f3:aa:81:45:13:83:51:f0:8d:ed: 0e:52:ca:7c:3d:0b:15:99:19:87:ce:6c:f1:23:9a: e2:e0:01:39:8b:95:31:87:32:ce:ff:bf:b5:ab:78: 66:c9:8a:dc:b4:30:46:2f:05:e6:3c:fa:38:12:a8: 92:95:a0:ce:37:a8:4f:1b:57:c2:06:78:30:26:7f: f2:f6:77:04:01:3d:4a:66:10:e0:92:77:73:75:42: be:63:86:3d:06:d4:e5:ae:98:c5:c9:da:e0:2c:26: 83:03:41:78:36:7e:70:86:59:a7:cb:32:91:be:ad: d9:ef:17:a6:49:6b:69:2f:22:3b:c1:19:32:0a:4a: 3c:57:81:33:8c:4b:5c:01:f5:5f:df:a1:93:1c:7d: b9:41:60:56:57:34:5d:1f:7d:e9:18:75:1e:60:60: 1a:83:08:9d:e0:c9:4d:f3:a7:62:4c:cc:b9:6c:74: 52:49:82:29:6c:df:b5:f1:52:50:c1:5f:50:db:9f: 19:b7:a5:b9:d4:be:9d:d0:de:68:a4:91:9b:94:5d: 28:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:EC:C3:C4:2D:95:4F:E3:EE:84:7E:2D:8F:C7:E9:A4:A4:10:A1:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/ca7502c4-7f6d-3df2-86ef-b4eaab0d7073.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 158.115.224.0/22 158.115.230.0/23 158.115.236.0/22 158.115.242.0-158.115.247.255 158.115.250.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:c5:68:ad:af:28:83:9d:b1:24:65:fa:45:d3:70:0d:84:63: 79:74:91:d2:fd:07:46:7e:64:69:30:41:ac:d5:f3:99:22:f4: 56:7c:f9:a8:47:5d:de:55:ed:7c:04:d8:72:f5:67:22:95:f4: 00:08:57:f4:e6:e2:59:e3:69:75:d5:ee:da:5d:af:ad:99:64: 6b:95:2a:0b:74:34:22:44:cc:e8:0a:78:5e:ed:ea:02:65:d1: c9:46:1b:f3:7e:24:c0:2e:a2:3b:01:b5:dd:c7:9b:e0:16:80: b9:f0:cd:c2:08:71:3e:f5:6d:79:70:af:51:87:03:40:c4:67: 31:57:a4:b0:66:71:29:a7:42:85:ac:76:98:a2:c1:9d:be:69: 39:75:35:d7:d4:cd:52:6f:b2:3e:ef:4c:a7:a2:3b:13:07:0c: 75:90:14:5b:57:e2:31:92:a8:b9:4c:5c:59:14:a4:8c:74:ce: 01:5c:f1:16:97:81:c7:20:e1:64:a4:6a:88:d1:07:73:c4:e5: 15:63:ee:22:19:9c:eb:91:55:0a:b4:4f:49:f9:69:85:b7:78: 80:60:be:d1:c8:a1:fc:fa:ef:c2:b6:4c:41:a5:c6:96:7c:0a: c2:5d:be:c3:03:c0:9c:98:53:b6:2c:e6:98:3e:2b:32:03:00: ba:c1:9f:5f -----BEGIN CERTIFICATE----- MIIGYzCCBUugAwIBAgIUAQ0Mn0MoWE5yBMdz9E48rgOFYAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI2MDcwOTIxMDAxMVoXDTI2MTAwNzIxMDAxMVowLzEtMCsGA1UEAxMk MWRkZjc2YzYtMjlkMy00NTVmLTkwZmMtMzczY2RjYmRhNWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3kGDAY9p8Zs3ynuKpPK895KPhrgXkHemmOw1 zTXcG6Sqhb7h5xO3eB3RDlo/FcF5vPOqgUUTg1Hwje0OUsp8PQsVmRmHzmzxI5ri 4AE5i5UxhzLO/7+1q3hmyYrctDBGLwXmPPo4EqiSlaDON6hPG1fCBngwJn/y9ncE AT1KZhDgkndzdUK+Y4Y9BtTlrpjFydrgLCaDA0F4Nn5whlmnyzKRvq3Z7xemSWtp LyI7wRkyCko8V4EzjEtcAfVf36GTHH25QWBWVzRdH33pGHUeYGAagwid4MlN86di TMy5bHRSSYIpbN+18VJQwV9Q258Zt6W51L6d0N5opJGblF0ozQIDAQABo4IDdTCC A3EwHQYDVR0OBBYEFB3sw8QtlU/j7oR+LY/H6aSkEKEcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvY2E3NTAyYzQtN2Y2ZC0z ZGYyLTg2ZWYtYjRlYWFiMGQ3MDczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQCnnPgAwQB nnPmAwQCnnPsMAwDBAGec/IDBAOec/ADBAGec/owVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEADcVora8og52x JGX6RdNwDYRjeXSR0v0HRn5kaTBBrNXzmSL0Vnz5qEdd3lXtfATYcvVnIpX0AAhX 9ObiWeNpddXu2l2vrZlka5UqC3Q0IkTM6Ap4Xu3qAmXRyUYb834kwC6iOwG13ceb 4BaAufDNwghxPvVteXCvUYcDQMRnMVeksGZxKadChax2mKLBnb5pOXU119TNUm+y Pu9Mp6I7EwcMdZAUW1fiMZKouUxcWRSkjHTOAVzxFpeBxyDhZKRqiNEHc8TlFWPu Ihmc65FVCrRPSflphbd4gGC+0cih/PrvwrZMQaXGlnwKwl2+wwPAnJhTtizmmD4r MgMAusGfXw== -----END CERTIFICATE-----Generated at Tue Jul 21 14:04:28 2026 by rpki-client