$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/1aa339fc-bd67-31a6-bfa3-dd05d5454582.roa File: 1aa339fc-bd67-31a6-bfa3-dd05d5454582.roa (raw, json) Hash identifier: nKwxGYtoiXZGph4GLTM96/H9fD4u6Vz6Q0sYUL6mIYs= Subject key identifier: D8:25:20:FA:BE:A1:9D:DA:54:A7:3D:DB:53:67:70:05:EE:00:C2:02 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584E8DA236C9860444EA3B79E100 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/1aa339fc-bd67-31a6-bfa3-dd05d5454582.roa Signing time: Sun 19 Jul 2026 18:24:20 +0000 ROA not before: Sun 19 Jul 2026 18:24:20 +0000 ROA not after: Sat 17 Oct 2026 18:24:20 +0000 asID: 54858 IP address blocks: 152.44.128.0/17 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8d:a2:36:c9:86:04:44:ea:3b:79:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Jul 19 18:24:20 2026 GMT Not After : Oct 17 18:24:20 2026 GMT Subject: CN=8d8f8f3a-a412-4a13-8394-8bacdfc82b2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c3:11:d5:d1:e4:19:ad:58:c1:f6:4f:a9:5a: 5d:ce:73:c4:c3:3a:59:17:d4:19:c4:4d:b9:58:92: 18:31:88:be:fa:10:43:a1:9f:bb:d2:ec:f8:2e:5a: 5d:7b:94:bc:98:94:c8:d1:67:35:d6:c6:c4:b3:3e: 7b:6e:48:c7:6a:2d:f5:89:c5:e2:bb:91:f2:51:43: 65:d6:c5:00:f8:9f:54:93:1f:29:b6:43:5e:9b:31: e3:d8:25:0f:da:1c:80:bb:59:9d:d1:28:68:c2:ed: fb:9d:96:0b:c0:f3:ab:38:6d:cc:59:58:75:df:ef: 20:c4:0a:d8:cb:2d:08:bf:f4:50:2d:dd:71:47:c9: dc:fe:ed:5f:e0:f1:4a:b9:9d:f8:d1:ee:8d:96:51: ea:15:e6:8f:96:8e:0a:17:b3:cf:c5:ea:c5:0f:a7: b4:23:cc:35:fb:64:ff:ad:0a:38:b0:fe:ee:20:6c: 07:79:fd:13:17:25:3a:fd:40:45:ec:50:e7:43:e6: 1c:c2:34:b2:04:dd:2c:b3:54:17:d2:5f:2c:26:66: 25:02:97:08:86:a0:9f:02:72:09:1c:d4:6d:5c:eb: 02:61:8c:cb:b3:ee:d4:10:f2:a1:a1:1a:e1:14:f4: 6e:7b:e9:f4:ed:d8:25:39:cb:80:06:40:65:74:85: ee:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:25:20:FA:BE:A1:9D:DA:54:A7:3D:DB:53:67:70:05:EE:00:C2:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/1aa339fc-bd67-31a6-bfa3-dd05d5454582.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 152.44.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:cc:c2:0d:20:25:08:62:77:fd:68:80:92:e5:9b:2c:de:43: bd:c9:55:a1:1a:2c:4a:d0:1e:36:fe:c6:50:94:4c:b9:25:14: 2a:56:36:a6:f1:5f:5b:bd:c5:cb:17:14:0e:47:70:13:44:7c: ee:74:3b:de:1f:99:f1:6b:79:50:ed:4d:49:6e:98:51:a8:67: b6:00:21:c9:be:25:58:85:22:cd:29:62:b9:00:33:27:c7:bf: 16:1f:1e:90:90:14:2d:c6:c0:1b:b9:9a:d8:12:4f:fa:cb:70: 8f:64:37:b1:24:b2:ad:7a:9d:39:04:90:86:c5:24:e3:9d:be: 39:38:7d:c3:f2:a5:7a:8f:26:bf:75:6c:de:ce:0d:83:69:e5: f6:ef:ba:97:6b:c1:3a:93:e1:b7:97:e0:f6:d1:6d:89:fa:61: 0e:47:48:d6:e8:3d:3d:1f:3b:0b:e9:06:8f:46:95:87:f2:2d: 98:be:d6:68:56:be:0b:3e:27:a2:8d:4c:6c:37:41:23:92:26: bc:ba:a1:38:9a:60:a9:3f:8f:ca:48:03:c2:9d:2d:5a:90:9e: 69:ff:9a:34:45:89:9a:fb:53:c2:cd:da:ab:aa:0f:7c:2c:4e: e8:3f:55:a7:0c:4e:cf:ed:15:cd:40:bc:75:76:c4:8a:79:2b: 1d:6f:11:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6NojbJhgRE6jt54QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI2MDcxOTE4MjQyMFoXDTI2MTAxNzE4MjQyMFowLzEtMCsGA1UEAxMk OGQ4ZjhmM2EtYTQxMi00YTEzLTgzOTQtOGJhY2RmYzgyYjJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcMR1dHkGa1YwfZPqVpdznPEwzpZF9QZxE25 WJIYMYi++hBDoZ+70uz4Llpde5S8mJTI0Wc11sbEsz57bkjHai31icXiu5HyUUNl 1sUA+J9Ukx8ptkNemzHj2CUP2hyAu1md0Showu37nZYLwPOrOG3MWVh13+8gxArY yy0Iv/RQLd1xR8nc/u1f4PFKuZ340e6NllHqFeaPlo4KF7PPxerFD6e0I8w1+2T/ rQo4sP7uIGwHef0TFyU6/UBF7FDnQ+YcwjSyBN0ss1QX0l8sJmYlApcIhqCfAnIJ HNRtXOsCYYzLs+7UEPKhoRrhFPRue+n07dglOcuABkBldIXufwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNglIPq+oZ3aVKc921NncAXuAMICMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvMWFhMzM5ZmMtYmQ2Ny0z MWE2LWJmYTMtZGQwNWQ1NDU0NTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHmCyAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEXMwg0gJQhid/1ogJLlmyzeQ73JVaEaLErQHjb+xlCUTLklFCpWNqbx X1u9xcsXFA5HcBNEfO50O94fmfFreVDtTUlumFGoZ7YAIcm+JViFIs0pYrkAMyfH vxYfHpCQFC3GwBu5mtgST/rLcI9kN7Eksq16nTkEkIbFJOOdvjk4fcPypXqPJr91 bN7ODYNp5fbvupdrwTqT4beX4PbRbYn6YQ5HSNboPT0fOwvpBo9GlYfyLZi+1mhW vgs+J6KNTGw3QSOSJry6oTiaYKk/j8pIA8KdLVqQnmn/mjRFiZr7U8LN2quqD3ws Tug/VacMTs/tFc1AvHV2xIp5Kx1vER4= -----END CERTIFICATE-----Generated at Tue Jul 21 22:37:35 2026 by rpki-client