$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be7d7ab4-136a-4b57-94de-4d26121783f3/abc3da0f-9d0d-3aee-8a90-f378926aaf59.roa File: abc3da0f-9d0d-3aee-8a90-f378926aaf59.roa (raw, json) Hash identifier: Xt0yB7kh0WaWiPUGRHLqt9BNXrTmkN24R36FUgBY2Ac= Subject key identifier: 3F:99:B0:9B:AF:13:62:C0:29:4A:8B:E5:7D:A2:A0:5F:6B:25:C9:DB Certificate issuer: /CN=be7d7ab4-136a-4b57-94de-4d26121783f3 Certificate serial: 010D0C9F4328584EBDDC555BE3AB1E8EAFFE4680 Authority key identifier: AE:9F:AA:9B:68:F3:00:6B:A6:83:5A:D3:93:07:D5:25:AA:84:6C:65 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be7d7ab4-136a-4b57-94de-4d26121783f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be7d7ab4-136a-4b57-94de-4d26121783f3/abc3da0f-9d0d-3aee-8a90-f378926aaf59.roa Signing time: Thu 06 Aug 2026 01:00:12 +0000 ROA not before: Thu 06 Aug 2026 01:00:12 +0000 ROA not after: Wed 04 Nov 2026 02:00:12 +0000 asID: 402584 IP address blocks: 147.153.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be7d7ab4-136a-4b57-94de-4d26121783f3/be7d7ab4-136a-4b57-94de-4d26121783f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be7d7ab4-136a-4b57-94de-4d26121783f3/be7d7ab4-136a-4b57-94de-4d26121783f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be7d7ab4-136a-4b57-94de-4d26121783f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 11 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bd:dc:55:5b:e3:ab:1e:8e:af:fe:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be7d7ab4-136a-4b57-94de-4d26121783f3 Validity Not Before: Aug 6 01:00:12 2026 GMT Not After : Nov 4 02:00:12 2026 GMT Subject: CN=fd6e1c03-2b51-44ab-b1ff-c5a931dce587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:13:26:16:84:6a:91:c6:2a:c4:63:f9:0a:3e: 61:a5:2e:3a:55:be:52:d0:c9:d0:10:a7:3b:63:34: 1d:9b:b5:b5:ac:2f:c7:fe:f9:7f:d5:0d:9d:c5:5c: 44:09:e0:41:6c:2a:b8:6f:37:b0:2e:d3:b3:9f:f1: 4c:0b:bb:ba:64:7b:9b:46:33:ef:b5:11:ea:55:82: a3:20:40:4d:01:b3:aa:e0:92:5c:b8:9a:40:48:f1: 88:56:1b:7a:ce:90:22:a6:a6:89:6f:60:09:58:06: 56:89:ed:2a:07:b9:07:4b:40:31:0d:7f:75:47:42: 14:8e:a1:1e:da:13:2a:86:d4:dd:13:f5:aa:a0:89: a0:ec:5e:d4:11:fa:aa:b9:98:c1:2a:54:b8:f1:98: 14:8d:99:1f:7d:2d:41:51:df:8e:67:d3:ea:42:bc: 18:ac:d9:16:55:fd:b7:b9:f6:44:af:df:c1:33:a4: 21:98:a8:9c:26:70:f7:65:6a:33:c3:08:7e:a2:f6: 45:5a:b0:dd:51:12:27:80:f5:5c:e7:a9:ae:44:5b: 42:7f:f6:79:1f:7f:71:2e:bc:28:e3:47:cd:b4:58: 2f:e7:78:f8:27:a2:50:2f:b2:c2:90:4d:27:df:98: 13:9a:14:22:76:d5:c3:d2:da:c3:6b:d5:17:c5:b2: 5d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:99:B0:9B:AF:13:62:C0:29:4A:8B:E5:7D:A2:A0:5F:6B:25:C9:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be7d7ab4-136a-4b57-94de-4d26121783f3/abc3da0f-9d0d-3aee-8a90-f378926aaf59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be7d7ab4-136a-4b57-94de-4d26121783f3/be7d7ab4-136a-4b57-94de-4d26121783f3.crl X509v3 Authority Key Identifier: keyid:AE:9F:AA:9B:68:F3:00:6B:A6:83:5A:D3:93:07:D5:25:AA:84:6C:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be7d7ab4-136a-4b57-94de-4d26121783f3.cer sbgp-ipAddrBlock: critical IPv4: 147.153.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:21:a0:7f:ee:9a:e1:c3:90:0f:25:b4:22:f9:c0:59:77:a5: 6d:58:96:67:e2:99:9e:64:24:50:0d:4b:e0:be:b8:73:61:3b: da:20:05:69:ba:ab:1e:b8:0a:e3:f5:7d:7c:0c:70:7a:bd:76: 61:de:2a:36:08:be:60:85:65:ce:ce:51:50:ba:f2:d2:84:e0: c2:3b:d6:aa:5a:40:12:03:a1:06:dd:dd:73:74:ad:35:36:a8: 98:1a:74:90:6e:f1:36:32:a5:35:a4:bd:01:97:51:e7:6f:77: fd:7c:41:c2:18:ac:e8:8a:57:3f:1d:32:0d:06:f8:14:f5:1b: e1:ab:dc:ee:93:c3:a2:6d:25:a0:b1:0a:e1:b5:bb:09:4b:93: ab:c0:4d:e9:19:35:b4:69:de:f2:58:37:22:03:d6:ec:00:25: a4:24:7c:d0:02:04:f8:82:01:f2:bb:e9:46:93:ec:99:39:33: 62:29:e3:a3:26:f9:c1:41:a7:19:5d:c5:32:02:fb:54:04:54: 6d:a9:fa:2a:70:98:f5:c1:04:67:45:d2:e7:65:66:11:0b:11: 4f:e4:57:ce:e2:c9:ce:e3:7a:01:98:d2:93:9f:4e:e7:7f:11: fa:94:8b:2d:47:4c:ec:36:77:3f:86:c8:4b:46:eb:aa:60:05: 77:1d:48:86 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE693FVb46sejq/+RoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmU3ZDdhYjQtMTM2YS00YjU3LTk0ZGUtNGQyNjEyMTc4 M2YzMB4XDTI2MDgwNjAxMDAxMloXDTI2MTEwNDAyMDAxMlowLzEtMCsGA1UEAxMk ZmQ2ZTFjMDMtMmI1MS00NGFiLWIxZmYtYzVhOTMxZGNlNTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRMmFoRqkcYqxGP5Cj5hpS46Vb5S0MnQEKc7 YzQdm7W1rC/H/vl/1Q2dxVxECeBBbCq4bzewLtOzn/FMC7u6ZHubRjPvtRHqVYKj IEBNAbOq4JJcuJpASPGIVht6zpAipqaJb2AJWAZWie0qB7kHS0AxDX91R0IUjqEe 2hMqhtTdE/WqoImg7F7UEfqquZjBKlS48ZgUjZkffS1BUd+OZ9PqQrwYrNkWVf23 ufZEr9/BM6QhmKicJnD3ZWozwwh+ovZFWrDdURIngPVc56muRFtCf/Z5H39xLrwo 40fNtFgv53j4J6JQL7LCkE0n35gTmhQidtXD0trDa9UXxbJdqQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFD+ZsJuvE2LAKUqL5X2ioF9rJcnbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iZTdk N2FiNC0xMzZhLTRiNTctOTRkZS00ZDI2MTIxNzgzZjMvYWJjM2RhMGYtOWQwZC0z YWVlLThhOTAtZjM3ODkyNmFhZjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYmU3ZDdhYjQtMTM2YS00YjU3LTk0 ZGUtNGQyNjEyMTc4M2YzL2JlN2Q3YWI0LTEzNmEtNGI1Ny05NGRlLTRkMjYxMjE3 ODNmMy5jcmwwHwYDVR0jBBgwFoAUrp+qm2jzAGumg1rTkwfVJaqEbGUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iZTdkN2FiNC0xMzZhLTRiNTctOTRkZS00ZDI2 MTIxNzgzZjMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAk5kwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAQiGgf+6a4cOQDyW0IvnAWXelbViWZ+KZnmQkUA1L4L64c2E72iAFabqr HrgK4/V9fAxwer12Yd4qNgi+YIVlzs5RULry0oTgwjvWqlpAEgOhBt3dc3StNTao mBp0kG7xNjKlNaS9AZdR5293/XxBwhis6IpXPx0yDQb4FPUb4avc7pPDom0loLEK 4bW7CUuTq8BN6Rk1tGne8lg3IgPW7AAlpCR80AIE+IIB8rvpRpPsmTkzYinjoyb5 wUGnGV3FMgL7VARUban6KnCY9cEEZ0XS52VmEQsRT+RXzuLJzuN6AZjSk59O538R +pSLLUdM7DZ3P4bIS0brqmAFdx1Ihg== -----END CERTIFICATE-----Generated at Mon Aug 10 14:48:13 2026 by rpki-client