$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d86fdaf4-369c-338b-84f9-7b070357186a.roa File: d86fdaf4-369c-338b-84f9-7b070357186a.roa (raw, json) Hash identifier: mCPQF3yRq1NzoUFDd0Cun5DNJL8/GgnOchsp04FeCmg= Subject key identifier: 2E:8D:4E:B7:52:C2:17:EE:05:A1:3F:4F:37:0E:67:C2:74:98:00:12 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584E8DA23A2CDF7B647D1FF75180 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d86fdaf4-369c-338b-84f9-7b070357186a.roa Signing time: Sun 19 Jul 2026 18:24:21 +0000 ROA not before: Sun 19 Jul 2026 18:24:21 +0000 ROA not after: Sat 17 Oct 2026 18:24:21 +0000 asID: 396481 IP address blocks: 152.44.189.0/24 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8d:a2:3a:2c:df:7b:64:7d:1f:f7:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Jul 19 18:24:21 2026 GMT Not After : Oct 17 18:24:21 2026 GMT Subject: CN=f29de77e-be49-4914-9577-ac431938a2f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:7b:31:9a:12:0a:95:bf:5b:26:c0:4d:36:f0: 86:74:64:5f:74:c4:09:d2:c6:0b:16:c9:0a:ad:ed: 61:11:a4:d2:c9:ad:cf:ca:2e:84:19:f1:43:66:41: 9d:19:02:db:29:90:19:67:0b:54:b8:fc:63:b3:bc: 41:4b:6d:83:85:a2:95:f2:2d:de:2c:e5:5f:b8:e9: 58:b6:16:95:cd:ca:ef:58:f8:c5:85:a7:ff:b3:16: 53:d0:1e:cf:35:26:7e:28:04:b3:c3:b2:3f:7b:1c: ee:09:0a:b3:61:ea:80:b1:99:95:63:c3:c5:32:fc: 60:7b:be:1d:49:44:cd:62:fa:20:7a:1c:f6:86:97: dc:f6:f3:61:e2:af:90:0c:19:a6:33:f3:3e:31:cf: cb:d1:e4:50:79:34:6a:2f:dc:5a:d6:23:b2:4f:7c: fe:d8:dd:a5:c1:f6:4d:f0:04:e3:11:3b:28:0f:1e: ee:a4:5c:87:29:52:d6:2d:87:a5:c9:4c:01:ae:8b: 02:df:ba:72:72:68:a7:5a:e3:6e:a2:d1:44:0e:ab: 9a:f9:98:94:98:c3:07:cc:b0:11:13:3d:2b:0d:16: f0:8e:da:dc:ce:77:b7:06:42:ba:bd:0a:8e:99:e9: af:d6:d8:66:02:1c:5d:6f:32:d0:a5:25:0a:8e:e5: 81:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:8D:4E:B7:52:C2:17:EE:05:A1:3F:4F:37:0E:67:C2:74:98:00:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d86fdaf4-369c-338b-84f9-7b070357186a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 152.44.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:8e:7d:35:b7:2e:6d:fe:2b:2a:50:a3:67:4a:91:e0:54:9b: 49:30:e7:57:a3:05:23:90:02:be:79:98:a8:13:93:3c:6d:95: a8:9e:58:0f:b8:c1:98:35:8b:16:78:46:f7:04:f9:9e:f8:cb: 6a:1b:13:34:f1:81:e9:5b:9c:60:01:05:fb:f9:90:f6:61:93: 78:3b:d7:d4:33:2e:86:ba:93:cd:ce:7e:99:fa:90:8b:05:de: 58:c2:6a:d3:97:ef:c5:40:f1:33:ed:ff:0e:e0:d8:db:84:98: a8:89:29:28:1a:ba:23:f7:4f:af:37:b4:08:84:22:c0:8a:ed: a0:1f:92:d8:82:7a:94:cd:5a:14:5f:6e:37:74:26:5f:31:bb: 44:b0:e3:ef:f7:bd:da:8c:0e:db:6f:e4:5f:d8:8e:1c:16:54: e9:08:e2:6a:11:e4:69:73:b8:68:9f:e0:de:90:d7:b6:08:7d: 72:df:ce:ba:af:ef:12:28:4f:62:1a:9d:7c:e1:f5:8c:7a:17: da:87:67:45:fb:29:24:ec:2e:37:63:f0:69:f0:11:45:de:35: 37:9e:1b:a3:aa:ea:9c:93:94:06:af:1b:47:fd:90:42:f1:df: 94:fb:db:55:57:00:44:18:b4:c6:82:fa:1a:43:be:80:e4:71: 8a:8e:50:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6Nojos33tkfR/3UYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI2MDcxOTE4MjQyMVoXDTI2MTAxNzE4MjQyMVowLzEtMCsGA1UEAxMk ZjI5ZGU3N2UtYmU0OS00OTE0LTk1NzctYWM0MzE5MzhhMmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XsxmhIKlb9bJsBNNvCGdGRfdMQJ0sYLFskK re1hEaTSya3Pyi6EGfFDZkGdGQLbKZAZZwtUuPxjs7xBS22DhaKV8i3eLOVfuOlY thaVzcrvWPjFhaf/sxZT0B7PNSZ+KASzw7I/exzuCQqzYeqAsZmVY8PFMvxge74d SUTNYvogehz2hpfc9vNh4q+QDBmmM/M+Mc/L0eRQeTRqL9xa1iOyT3z+2N2lwfZN 8ATjETsoDx7upFyHKVLWLYelyUwBrosC37pycminWuNuotFEDqua+ZiUmMMHzLAR Ez0rDRbwjtrczne3BkK6vQqOmemv1thmAhxdbzLQpSUKjuWBLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC6NTrdSwhfuBaE/TzcOZ8J0mAASMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvZDg2ZmRhZjQtMzY5Yy0z MzhiLTg0ZjktN2IwNzAzNTcxODZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmCy9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEuOfTW3Lm3+KypQo2dKkeBUm0kw51ejBSOQAr55mKgTkzxtlaieWA+4 wZg1ixZ4RvcE+Z74y2obEzTxgelbnGABBfv5kPZhk3g719QzLoa6k83Ofpn6kIsF 3ljCatOX78VA8TPt/w7g2NuEmKiJKSgauiP3T683tAiEIsCK7aAfktiCepTNWhRf bjd0Jl8xu0Sw4+/3vdqMDttv5F/YjhwWVOkI4moR5GlzuGif4N6Q17YIfXLfzrqv 7xIoT2IanXzh9Yx6F9qHZ0X7KSTsLjdj8GnwEUXeNTeeG6Oq6pyTlAavG0f9kELx 35T721VXAEQYtMaC+hpDvoDkcYqOUNc= -----END CERTIFICATE-----Generated at Tue Jul 21 22:37:26 2026 by rpki-client