$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2db0e90-cb59-4049-beac-d39b54244d28/de52b118-f70d-34c0-8d87-b4abb72880d9.roa File: de52b118-f70d-34c0-8d87-b4abb72880d9.roa (raw, json) Hash identifier: ds9BmqdlEa+ID45bzf6Xnj+cC9dF/jepzW2M7FiKX44= Subject key identifier: DF:BA:ED:7E:7A:61:8F:64:0E:59:78:FC:77:AD:20:F0:E5:2E:DA:8C Certificate issuer: /CN=b2db0e90-cb59-4049-beac-d39b54244d28 Certificate serial: 010D0C9F4328584E69A4B5A5CC8218CE9620AF00 Authority key identifier: 1D:C1:26:00:16:E9:EC:19:BC:69:F5:29:93:E9:1C:47:E7:00:7E:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2db0e90-cb59-4049-beac-d39b54244d28.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2db0e90-cb59-4049-beac-d39b54244d28/de52b118-f70d-34c0-8d87-b4abb72880d9.roa Signing time: Mon 06 Jul 2026 21:00:13 +0000 ROA not before: Mon 06 Jul 2026 21:00:13 +0000 ROA not after: Sun 04 Oct 2026 21:00:13 +0000 asID: 11155 IP address blocks: 147.124.16.0/20 maxlen: 24 153.75.32.0/20 maxlen: 24 162.118.64.0/19 maxlen: 24 2605:f9c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2db0e90-cb59-4049-beac-d39b54244d28/b2db0e90-cb59-4049-beac-d39b54244d28.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2db0e90-cb59-4049-beac-d39b54244d28/b2db0e90-cb59-4049-beac-d39b54244d28.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2db0e90-cb59-4049-beac-d39b54244d28.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 16 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:69:a4:b5:a5:cc:82:18:ce:96:20:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2db0e90-cb59-4049-beac-d39b54244d28 Validity Not Before: Jul 6 21:00:13 2026 GMT Not After : Oct 4 21:00:13 2026 GMT Subject: CN=f138ed39-8db7-4245-8a80-93481d0db892 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:80:59:97:23:f2:ec:97:64:53:e6:c2:da:93: cb:dc:c6:0c:d5:13:b0:ea:db:e5:9c:4e:22:64:db: 5c:68:ef:64:43:8c:a0:c6:0c:7c:55:ce:5a:f4:b4: 26:8e:38:15:8a:bb:ac:9c:97:6b:60:8f:7f:65:68: 83:5b:5f:3e:ec:c0:3b:0d:2e:4a:47:5f:70:b2:59: c2:5d:6b:c8:bc:ee:98:f6:66:6c:73:06:b6:6a:41: 23:8f:06:e0:7f:48:bf:c8:1d:4b:cc:b2:ae:f2:c5: b6:50:9d:18:bf:6a:52:d6:9f:4c:4c:c9:2d:22:d4: d0:7b:c6:01:17:a8:ac:7e:17:d6:e2:2f:a1:68:98: 54:2b:1f:55:80:7e:30:ab:a2:7b:13:a3:83:92:5c: f6:28:93:44:76:7d:88:a0:1a:96:83:72:8a:3f:8f: ba:82:7b:42:50:06:f1:35:25:41:dd:6a:75:61:d2: ff:dc:55:88:f6:72:19:97:6c:70:4e:f5:b4:25:46: 58:6d:dc:7c:9c:56:81:64:87:83:50:7b:71:55:db: 9e:b8:c9:04:cc:8d:9c:7a:41:a6:b0:2e:12:67:9f: 3a:12:3b:3e:0a:7a:d8:8b:e3:87:0d:8a:b5:46:45: 8b:a3:30:e1:1d:69:24:81:03:cb:80:06:ce:b9:bb: 9a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:BA:ED:7E:7A:61:8F:64:0E:59:78:FC:77:AD:20:F0:E5:2E:DA:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2db0e90-cb59-4049-beac-d39b54244d28/de52b118-f70d-34c0-8d87-b4abb72880d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2db0e90-cb59-4049-beac-d39b54244d28/b2db0e90-cb59-4049-beac-d39b54244d28.crl X509v3 Authority Key Identifier: keyid:1D:C1:26:00:16:E9:EC:19:BC:69:F5:29:93:E9:1C:47:E7:00:7E:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2db0e90-cb59-4049-beac-d39b54244d28.cer sbgp-ipAddrBlock: critical IPv4: 147.124.16.0/20 153.75.32.0/20 162.118.64.0/19 IPv6: 2605:f9c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:6a:3a:36:23:b8:1a:11:13:9a:e6:86:b2:c1:74:a5:aa:88: 19:c1:7c:b6:68:27:20:d5:48:38:85:0c:9f:8b:67:38:ca:91: 9c:a7:a3:7f:21:cd:96:e5:29:6a:dd:ef:1c:9b:cc:c7:e8:dd: dd:d2:ce:6f:af:25:b7:7d:d9:c5:b1:ee:ae:58:23:b6:3b:de: 29:11:f0:18:83:1b:89:b6:84:f0:47:5a:d7:56:bb:c4:07:ed: a2:27:99:ad:88:4a:62:a8:68:f6:d3:a1:79:60:7a:82:02:ec: 62:a6:6a:81:f8:20:51:d6:6e:19:b0:3a:64:b2:70:40:30:a4: 38:fa:a6:b4:d9:56:c0:40:0a:c7:24:16:33:b8:77:11:e7:83: 5d:37:f8:36:2c:19:0e:b9:cd:0b:fa:38:1d:a3:05:14:ca:d4: 6e:ae:1e:da:34:76:ed:a7:26:c0:69:20:1a:b9:9f:a2:86:ab: a6:3f:71:a5:54:f3:52:84:16:46:07:0c:5f:f5:ac:13:a7:3c: f8:82:33:1d:ea:9a:67:ed:4e:ad:eb:4f:48:f5:05:26:20:e8: 37:23:2f:f5:d7:d0:ba:1d:60:99:9c:bc:89:54:e5:f3:47:04: 03:9c:6e:0f:ac:a2:29:91:3c:aa:66:e0:08:3d:a7:ca:1f:51: 41:80:7e:79 -----BEGIN CERTIFICATE----- MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWE5ppLWlzIIYzpYgrwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJkYjBlOTAtY2I1OS00MDQ5LWJlYWMtZDM5YjU0MjQ0 ZDI4MB4XDTI2MDcwNjIxMDAxM1oXDTI2MTAwNDIxMDAxM1owLzEtMCsGA1UEAxMk ZjEzOGVkMzktOGRiNy00MjQ1LThhODAtOTM0ODFkMGRiODkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYBZlyPy7JdkU+bC2pPL3MYM1ROw6tvlnE4i ZNtcaO9kQ4ygxgx8Vc5a9LQmjjgVirusnJdrYI9/ZWiDW18+7MA7DS5KR19wslnC XWvIvO6Y9mZscwa2akEjjwbgf0i/yB1LzLKu8sW2UJ0Yv2pS1p9MTMktItTQe8YB F6isfhfW4i+haJhUKx9VgH4wq6J7E6ODklz2KJNEdn2IoBqWg3KKP4+6gntCUAbx NSVB3Wp1YdL/3FWI9nIZl2xwTvW0JUZYbdx8nFaBZIeDUHtxVdueuMkEzI2cekGm sC4SZ586Ejs+CnrYi+OHDYq1RkWLozDhHWkkgQPLgAbOubuarwIDAQABo4IDcDCC A2wwHQYDVR0OBBYEFN+67X56YY9kDll4/HetIPDlLtqMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9iMmRi MGU5MC1jYjU5LTQwNDktYmVhYy1kMzliNTQyNDRkMjgvZGU1MmIxMTgtZjcwZC0z NGMwLThkODctYjRhYmI3Mjg4MGQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYjJkYjBlOTAtY2I1OS00MDQ5LWJl YWMtZDM5YjU0MjQ0ZDI4L2IyZGIwZTkwLWNiNTktNDA0OS1iZWFjLWQzOWI1NDI0 NGQyOC5jcmwwHwYDVR0jBBgwFoAUHcEmABbp7Bm8afUpk+kcR+cAfq4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9iMmRiMGU5MC1jYjU5LTQwNDktYmVhYy1kMzli NTQyNDRkMjguY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQEk3wQAwQE mUsgAwQFonZAMA0EAgACMAcDBQAmBfnAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHNqOjYjuBoRE5rmhrLB dKWqiBnBfLZoJyDVSDiFDJ+LZzjKkZyno38hzZblKWrd7xybzMfo3d3Szm+vJbd9 2cWx7q5YI7Y73ikR8BiDG4m2hPBHWtdWu8QH7aInma2ISmKoaPbToXlgeoIC7GKm aoH4IFHWbhmwOmSycEAwpDj6prTZVsBACsckFjO4dxHng103+DYsGQ65zQv6OB2j BRTK1G6uHto0du2nJsBpIBq5n6KGq6Y/caVU81KEFkYHDF/1rBOnPPiCMx3qmmft Tq3rT0j1BSYg6DcjL/XX0LodYJmcvIlU5fNHBAOcbg+soimRPKpm4Ag9p8ofUUGA fnk= -----END CERTIFICATE-----Generated at Wed Jul 15 03:07:21 2026 by rpki-client