$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/aa5dbaf7-9f34-3a5a-abfb-344711c66ef5.roa File: aa5dbaf7-9f34-3a5a-abfb-344711c66ef5.roa (raw, json) Hash identifier: j+TP9tVSOn3YkucjpwK0e9dZlLz7vk97g+Ty0pT1Smo= Subject key identifier: 7B:6A:FC:E4:F6:E0:6F:DA:D9:C0:E0:BF:8C:C6:1B:5E:CF:A7:75:25 Certificate issuer: /CN=4a06d1f9-0d04-482f-a665-8c270260e2c1 Certificate serial: 010D0C9F4328584EA788CFA78E13C4D08C2843C0 Authority key identifier: 7B:44:2C:34:6A:A0:F4:F0:11:B5:27:93:C3:37:45:6B:6A:A6:43:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/aa5dbaf7-9f34-3a5a-abfb-344711c66ef5.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 399103 IP address blocks: 192.240.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/4a06d1f9-0d04-482f-a665-8c270260e2c1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/4a06d1f9-0d04-482f-a665-8c270260e2c1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Aug 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:cf:a7:8e:13:c4:d0:8c:28:43:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a06d1f9-0d04-482f-a665-8c270260e2c1 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=d3129d9f-73e7-4250-a5ad-2938aa494aa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c7:e0:3c:b3:30:4c:2f:11:15:8f:dd:19:ea: fc:70:c1:4c:52:51:bd:2e:b1:ae:bd:e3:85:2f:36: 50:b6:8d:61:7e:f7:c3:9d:54:f1:b4:2d:3b:6c:b3: 31:b2:fb:9e:84:60:f5:58:16:2e:9b:7a:19:c7:55: de:a2:26:79:92:51:bf:f8:50:05:3f:d1:2a:89:42: 17:e8:e4:63:e4:28:55:e3:dd:b3:52:82:4a:18:01: 7a:32:c2:e8:ee:02:95:56:75:b1:a8:84:8a:79:e4: 7a:08:f7:a6:d0:29:f0:5c:64:54:7d:ac:35:32:73: 81:bb:83:d3:bd:da:c5:03:b5:df:4d:eb:72:90:11: c9:37:a2:60:5c:a8:e1:97:65:62:a1:7b:1b:83:c9: 8d:26:31:8f:b7:d9:f0:06:9e:c4:ef:a7:e9:0d:ef: df:00:72:28:c2:1a:9c:15:03:c4:bb:f1:a7:d0:1a: fb:0d:54:03:72:cb:e0:6a:a3:26:23:0d:db:9f:a6: 0e:cc:73:e3:e3:8a:6c:fe:cc:c7:b7:f8:c8:89:db: bd:13:90:37:8d:0b:6d:c3:22:29:b3:6d:13:8f:6b: 14:c9:62:42:a0:ee:0b:4d:77:1a:89:2f:2b:b8:9b: e3:a6:0d:b2:17:a2:7a:a6:f4:62:00:af:5a:c4:13: 12:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:6A:FC:E4:F6:E0:6F:DA:D9:C0:E0:BF:8C:C6:1B:5E:CF:A7:75:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/aa5dbaf7-9f34-3a5a-abfb-344711c66ef5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/4a06d1f9-0d04-482f-a665-8c270260e2c1.crl X509v3 Authority Key Identifier: keyid:7B:44:2C:34:6A:A0:F4:F0:11:B5:27:93:C3:37:45:6B:6A:A6:43:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1.cer sbgp-ipAddrBlock: critical IPv4: 192.240.47.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:8b:49:6d:26:46:9f:be:ec:91:36:22:5e:fa:3a:13:c4:6c: 2b:f0:94:d8:75:74:52:ef:dc:f0:e9:03:6b:91:65:0c:ee:67: 74:bb:29:61:fd:b2:cc:a0:fe:b5:ec:09:cc:85:c1:89:14:49: bf:ae:4c:e0:22:88:3d:88:51:52:5a:32:6d:30:f3:6e:32:ee: 93:54:d3:d6:96:a2:89:5b:67:07:06:bb:86:80:be:80:15:a7: 07:14:d2:b1:98:cf:72:f3:a3:88:1e:b0:79:65:dd:e4:97:94: cc:90:2a:22:74:cb:49:01:09:9f:56:56:0d:25:d8:1b:0a:25: ee:c5:48:70:c7:33:5e:e4:21:93:36:ed:90:78:92:fb:d1:42: bc:c8:83:89:c8:ab:54:5f:9d:55:29:e1:7f:b3:3b:e9:42:d7: 72:80:7a:43:b9:11:d1:03:7a:ac:ed:39:fa:5e:09:34:ed:7f: 32:99:cb:11:d4:dc:58:3f:d0:2d:8d:c2:ba:93:92:31:e9:4d: ce:6a:ab:d1:d1:70:6a:9c:25:17:91:9e:d8:f5:9d:44:8e:b0: 0e:fe:e7:dc:b4:f9:8f:3f:ae:11:f1:ff:e3:4f:77:25:61:05: c7:0f:bd:a4:2b:74:33:53:1d:32:52:07:59:36:13:76:8d:4c: 7b:90:f8:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niM+njhPE0IwoQ8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwNmQxZjktMGQwNC00ODJmLWE2NjUtOGMyNzAyNjBl MmMxMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZDMxMjlkOWYtNzNlNy00MjUwLWE1YWQtMjkzOGFhNDk0YWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusfgPLMwTC8RFY/dGer8cMFMUlG9LrGuveOF LzZQto1hfvfDnVTxtC07bLMxsvuehGD1WBYum3oZx1XeoiZ5klG/+FAFP9EqiUIX 6ORj5ChV492zUoJKGAF6MsLo7gKVVnWxqISKeeR6CPem0CnwXGRUfaw1MnOBu4PT vdrFA7XfTetykBHJN6JgXKjhl2VioXsbg8mNJjGPt9nwBp7E76fpDe/fAHIowhqc FQPEu/Gn0Br7DVQDcsvgaqMmIw3bn6YOzHPj44ps/szHt/jIidu9E5A3jQttwyIp s20Tj2sUyWJCoO4LTXcaiS8ruJvjpg2yF6J6pvRiAK9axBMSzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHtq/OT24G/a2cDgv4zGG17Pp3UlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80YTA2 ZDFmOS0wZDA0LTQ4MmYtYTY2NS04YzI3MDI2MGUyYzEvYWE1ZGJhZjctOWYzNC0z YTVhLWFiZmItMzQ0NzExYzY2ZWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGEwNmQxZjktMGQwNC00ODJmLWE2 NjUtOGMyNzAyNjBlMmMxLzRhMDZkMWY5LTBkMDQtNDgyZi1hNjY1LThjMjcwMjYw ZTJjMS5jcmwwHwYDVR0jBBgwFoAUe0QsNGqg9PARtSeTwzdFa2qmQ+swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80YTA2ZDFmOS0wZDA0LTQ4MmYtYTY2NS04YzI3 MDI2MGUyYzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPAvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKWLSW0mRp++7JE2Il76OhPEbCvwlNh1dFLv3PDpA2uRZQzuZ3S7KWH9 ssyg/rXsCcyFwYkUSb+uTOAiiD2IUVJaMm0w824y7pNU09aWoolbZwcGu4aAvoAV pwcU0rGYz3Lzo4gesHll3eSXlMyQKiJ0y0kBCZ9WVg0l2BsKJe7FSHDHM17kIZM2 7ZB4kvvRQrzIg4nIq1RfnVUp4X+zO+lC13KAekO5EdEDeqztOfpeCTTtfzKZyxHU 3Fg/0C2NwrqTkjHpTc5qq9HRcGqcJReRntj1nUSOsA7+59y0+Y8/rhHx/+NPdyVh BccPvaQrdDNTHTJSB1k2E3aNTHuQ+NY= -----END CERTIFICATE-----Generated at Thu Aug 20 00:07:08 2026 by rpki-client