$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/aea2ecb1-242a-34a0-a0d2-7240ca38ad2e.roa File: aea2ecb1-242a-34a0-a0d2-7240ca38ad2e.roa (raw, json) Hash identifier: Ii8pER6aobQDKMF8vDrZ/EcHF7lvthJC9lPn9R0ZHSU= Subject key identifier: 19:B8:E9:04:1D:98:C4:4F:53:EC:E7:50:6B:EC:D9:91:FC:6D:3C:87 Certificate issuer: /CN=df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7 Certificate serial: 010D0C9F4328584E8C8A600317B84882B657E3C0 Authority key identifier: E9:AF:89:0A:16:AB:F1:B0:DD:B2:78:75:6C:3A:92:E3:DF:74:08:BD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/aea2ecb1-242a-34a0-a0d2-7240ca38ad2e.roa Signing time: Sun 19 Jul 2026 09:00:11 +0000 ROA not before: Sun 19 Jul 2026 09:00:11 +0000 ROA not after: Sat 17 Oct 2026 09:00:11 +0000 asID: 30387 IP address blocks: 156.40.53.0/24 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8c:8a:60:03:17:b8:48:82:b6:57:e3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7 Validity Not Before: Jul 19 09:00:11 2026 GMT Not After : Oct 17 09:00:11 2026 GMT Subject: CN=ac54308d-e9c8-4fe1-809b-d4e309adc163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:9a:a1:38:b9:db:75:c2:8e:3c:f7:8e:60:c4: 2a:8f:30:a5:53:3f:eb:8f:89:b0:df:db:bd:41:64: 5e:af:a1:f9:d3:8b:7d:b4:b7:cd:82:7a:dd:08:50: 83:48:04:58:f5:31:b7:31:2b:0f:c8:32:4f:aa:bf: 43:c1:c0:18:e0:15:a0:d2:0f:c3:26:13:5c:cf:15: 42:71:e2:39:9e:a1:a7:c7:e1:37:df:83:bd:c9:c1: 3c:c5:04:62:9d:17:d1:14:e3:52:4d:71:8c:98:d7: b1:7f:7f:a7:63:34:64:b8:60:5c:00:60:17:9f:74: db:12:2a:31:e5:b7:9b:8e:2f:e2:c7:a6:c3:1d:45: 4f:16:31:a7:c2:12:4e:20:da:2f:9b:d3:b4:cd:77: 34:f8:16:a2:d4:6b:6a:fa:79:06:88:0e:cf:e9:24: 07:2f:f4:56:56:49:92:7a:15:61:44:0b:d6:b0:a0: 5c:2c:f7:be:fa:03:f2:e2:db:34:73:05:08:9f:10: f1:33:28:cb:e8:c7:77:89:11:fb:59:78:d7:60:c8: 29:d9:98:18:6b:86:46:62:7d:6a:4a:f1:0c:a6:d3: de:21:6e:5b:d0:93:8f:4b:cb:60:7a:19:2e:3c:11: 10:76:f4:18:e2:5d:f9:a6:9e:ba:52:77:7f:07:04: a5:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:B8:E9:04:1D:98:C4:4F:53:EC:E7:50:6B:EC:D9:91:FC:6D:3C:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/aea2ecb1-242a-34a0-a0d2-7240ca38ad2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.crl X509v3 Authority Key Identifier: keyid:E9:AF:89:0A:16:AB:F1:B0:DD:B2:78:75:6C:3A:92:E3:DF:74:08:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer sbgp-ipAddrBlock: critical IPv4: 156.40.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:80:68:a6:8f:a7:03:17:40:5e:c4:f9:60:15:bb:d0:b2:23: 14:14:02:f9:95:76:dc:85:48:cc:e0:1e:5b:47:e8:6b:fb:58: 6d:ba:45:15:73:71:92:97:77:d1:fa:46:24:eb:00:69:5e:f4: 27:21:96:e2:b4:4b:e5:b9:58:e1:eb:4c:75:f6:36:e2:dc:38: 37:76:91:c3:2f:80:77:ba:46:b7:87:b2:e6:67:5d:b4:5d:17: c7:31:a7:65:52:f2:b2:09:c0:f1:d6:65:6c:9a:3c:80:bc:96: 92:ac:5c:26:8c:6d:34:10:93:96:f1:29:cc:41:dc:c5:75:9a: 13:6b:14:94:1e:2f:ab:f0:7f:bf:f1:67:53:77:9e:e0:1f:77: 30:8a:75:d3:42:10:01:93:c5:00:99:f6:0e:2c:98:0f:df:ee: f9:d1:24:95:d3:d0:0f:92:14:b2:84:56:17:49:fe:3f:dd:8e: f5:fe:65:e4:92:08:7c:74:7f:bf:58:98:4e:35:19:5c:fc:ef: c6:70:b9:13:b5:46:ab:c7:3b:6b:a3:04:c3:6d:d9:03:79:c8: 94:c6:fa:1f:6c:9d:36:eb:6b:41:60:7d:0e:22:dc:84:74:e2: 71:9f:09:f5:07:ce:cb:ab:7c:44:6b:68:92:72:9e:89:a8:04: 76:8f:3b:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6MimADF7hIgrZX48AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGY2ZjE0YjgtM2M3ZS00ZDY4LWFjMzYtZDU5OTliM2M0 ZWE3MB4XDTI2MDcxOTA5MDAxMVoXDTI2MTAxNzA5MDAxMVowLzEtMCsGA1UEAxMk YWM1NDMwOGQtZTljOC00ZmUxLTgwOWItZDRlMzA5YWRjMTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZqhOLnbdcKOPPeOYMQqjzClUz/rj4mw39u9 QWRer6H504t9tLfNgnrdCFCDSARY9TG3MSsPyDJPqr9DwcAY4BWg0g/DJhNczxVC ceI5nqGnx+E334O9ycE8xQRinRfRFONSTXGMmNexf3+nYzRkuGBcAGAXn3TbEiox 5bebji/ix6bDHUVPFjGnwhJOINovm9O0zXc0+Bai1Gtq+nkGiA7P6SQHL/RWVkmS ehVhRAvWsKBcLPe++gPy4ts0cwUInxDxMyjL6Md3iRH7WXjXYMgp2ZgYa4ZGYn1q SvEMptPeIW5b0JOPS8tgehkuPBEQdvQY4l35pp66Und/BwSlRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBm46QQdmMRPU+znUGvs2ZH8bTyHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kZjZm MTRiOC0zYzdlLTRkNjgtYWMzNi1kNTk5OWIzYzRlYTcvYWVhMmVjYjEtMjQyYS0z NGEwLWEwZDItNzI0MGNhMzhhZDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZGY2ZjE0YjgtM2M3ZS00ZDY4LWFj MzYtZDU5OTliM2M0ZWE3L2RmNmYxNGI4LTNjN2UtNGQ2OC1hYzM2LWQ1OTk5YjNj NGVhNy5jcmwwHwYDVR0jBBgwFoAU6a+JChar8bDdsnh1bDqS4990CL0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kZjZmMTRiOC0zYzdlLTRkNjgtYWMzNi1kNTk5 OWIzYzRlYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnCg1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAGAaKaPpwMXQF7E+WAVu9CyIxQUAvmVdtyFSMzgHltH6Gv7WG26RRVz cZKXd9H6RiTrAGle9CchluK0S+W5WOHrTHX2NuLcODd2kcMvgHe6RreHsuZnXbRd F8cxp2VS8rIJwPHWZWyaPIC8lpKsXCaMbTQQk5bxKcxB3MV1mhNrFJQeL6vwf7/x Z1N3nuAfdzCKddNCEAGTxQCZ9g4smA/f7vnRJJXT0A+SFLKEVhdJ/j/djvX+ZeSS CHx0f79YmE41GVz878ZwuRO1RqvHO2ujBMNt2QN5yJTG+h9snTbra0FgfQ4i3IR0 4nGfCfUHzsurfERraJJynomoBHaPO7Y= -----END CERTIFICATE-----Generated at Wed Jul 22 08:27:40 2026 by rpki-client