$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/aa8db4aa-92d1-3c01-b7ef-86cdaafff606.roa File: aa8db4aa-92d1-3c01-b7ef-86cdaafff606.roa (raw, json) Hash identifier: I5DppRSAZTUwe88pvggiyT7ljKr36Gh3H6q9SJeEaw4= Subject key identifier: 88:41:70:7C:A9:B2:75:D0:B0:B9:71:BA:B8:46:28:AD:17:BA:C4:C0 Certificate issuer: /CN=9e1491d6-2ab7-4c14-bee6-122ee4531127 Certificate serial: 010D0C9F4328584EA8EC40B830F3962BA0BD4100 Authority key identifier: C2:B5:FB:E5:85:57:E2:F0:2A:41:C4:C8:DA:D4:D7:06:C3:0E:9B:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/aa8db4aa-92d1-3c01-b7ef-86cdaafff606.roa Signing time: Wed 29 Jul 2026 13:00:12 +0000 ROA not before: Wed 29 Jul 2026 13:00:12 +0000 ROA not after: Tue 27 Oct 2026 13:00:12 +0000 asID: 8070 IP address blocks: 152.228.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/9e1491d6-2ab7-4c14-bee6-122ee4531127.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/9e1491d6-2ab7-4c14-bee6-122ee4531127.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 01 Aug 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a8:ec:40:b8:30:f3:96:2b:a0:bd:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e1491d6-2ab7-4c14-bee6-122ee4531127 Validity Not Before: Jul 29 13:00:12 2026 GMT Not After : Oct 27 13:00:12 2026 GMT Subject: CN=b32a7b41-359e-4ad7-adfd-cf85254ed520 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:38:60:3d:d8:72:fc:e8:4c:cc:b4:b3:f7:8d: 81:01:87:56:44:0c:d5:22:ee:da:6c:83:10:9e:5d: 6f:e0:e9:6e:e5:b2:c7:f0:5c:0f:a8:d5:5e:0d:43: 24:7f:b8:2d:b3:ef:cc:52:bf:a8:6c:5d:a4:f3:97: a3:a2:15:7a:ce:15:30:ef:12:ab:55:eb:8a:88:4c: aa:3f:10:2f:7c:30:0d:74:34:71:86:2d:cd:49:dc: 3c:50:ef:75:34:ef:1a:7e:f8:b4:71:9d:7b:df:e5: 88:7e:d4:ae:78:ff:0f:00:46:d7:a3:2a:6c:ba:77: d6:1b:96:8b:a3:69:f8:05:53:ef:31:cc:7d:b8:1e: fd:71:0e:9e:71:55:7d:e8:b2:27:29:9f:9f:b0:37: 89:e2:f6:40:a1:8e:22:3e:60:23:c4:ec:e3:21:44: 98:00:23:eb:c5:3a:ad:28:2e:42:1e:e5:56:a2:b4: 05:d6:15:61:73:1f:03:23:e4:e4:69:2b:1f:49:64: e0:aa:e9:f2:75:a7:7b:7a:f3:c4:e9:93:45:03:35: e3:e8:4d:27:bd:dd:7e:68:7d:87:1e:f3:b6:7c:a2: 20:a9:b9:f7:58:7f:b7:88:96:bf:bd:0f:24:b6:15: 9b:54:34:a8:8c:22:ac:ff:41:ab:86:d1:89:6c:bc: 5b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:41:70:7C:A9:B2:75:D0:B0:B9:71:BA:B8:46:28:AD:17:BA:C4:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/aa8db4aa-92d1-3c01-b7ef-86cdaafff606.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/9e1491d6-2ab7-4c14-bee6-122ee4531127.crl X509v3 Authority Key Identifier: keyid:C2:B5:FB:E5:85:57:E2:F0:2A:41:C4:C8:DA:D4:D7:06:C3:0E:9B:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127.cer sbgp-ipAddrBlock: critical IPv4: 152.228.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:c1:76:6a:a9:62:36:7f:13:e6:7b:fd:79:e6:44:7d:e4:5c: 6e:b2:51:54:e5:9d:9f:b8:15:f2:eb:bb:5e:17:3d:23:28:f2: 31:c6:8a:00:e8:82:f9:a9:97:68:5c:ef:19:a8:39:15:c7:7f: e1:67:38:cd:ed:af:87:ce:1b:6a:f4:d3:1d:db:89:d7:c4:c0: 98:54:04:32:e2:75:f5:6c:96:af:de:bd:04:b4:63:3a:6f:32: ad:3b:59:38:aa:14:87:76:10:61:64:0f:5d:bf:38:42:f9:dd: f4:de:fc:2d:ce:1e:df:33:ca:06:b8:4a:b6:f6:fd:90:c0:12: b8:c1:5f:1b:df:66:96:27:72:a6:e5:89:e0:be:31:05:c7:e8: 41:85:fd:ce:a0:df:e6:b3:37:4b:df:4d:a7:33:84:59:8b:f8: cf:78:a2:20:4b:cb:1d:d0:2f:c8:a0:4f:00:b2:ca:1c:38:fb: 73:ed:24:b8:59:5b:c8:ac:08:aa:c3:b2:9f:c1:b7:ea:94:44: 3f:ad:75:03:df:9e:2d:df:db:6c:0a:9b:5c:8e:fd:31:e1:bc: 10:5f:a7:1f:19:3d:10:5a:58:64:0f:c5:d9:bf:ba:83:8b:5a: 53:b9:06:d5:fe:4f:ac:ff:96:f5:f2:c6:2b:55:b3:d7:15:49: f8:b7:ae:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6o7EC4MPOWK6C9QQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWUxNDkxZDYtMmFiNy00YzE0LWJlZTYtMTIyZWU0NTMx MTI3MB4XDTI2MDcyOTEzMDAxMloXDTI2MTAyNzEzMDAxMlowLzEtMCsGA1UEAxMk YjMyYTdiNDEtMzU5ZS00YWQ3LWFkZmQtY2Y4NTI1NGVkNTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDhgPdhy/OhMzLSz942BAYdWRAzVIu7abIMQ nl1v4Olu5bLH8FwPqNVeDUMkf7gts+/MUr+obF2k85ejohV6zhUw7xKrVeuKiEyq PxAvfDANdDRxhi3NSdw8UO91NO8afvi0cZ173+WIftSueP8PAEbXoypsunfWG5aL o2n4BVPvMcx9uB79cQ6ecVV96LInKZ+fsDeJ4vZAoY4iPmAjxOzjIUSYACPrxTqt KC5CHuVWorQF1hVhcx8DI+TkaSsfSWTgqunydad7evPE6ZNFAzXj6E0nvd1+aH2H HvO2fKIgqbn3WH+3iJa/vQ8kthWbVDSojCKs/0GrhtGJbLxbtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIhBcHypsnXQsLlxurhGKK0XusTAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85ZTE0 OTFkNi0yYWI3LTRjMTQtYmVlNi0xMjJlZTQ1MzExMjcvYWE4ZGI0YWEtOTJkMS0z YzAxLWI3ZWYtODZjZGFhZmZmNjA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWUxNDkxZDYtMmFiNy00YzE0LWJl ZTYtMTIyZWU0NTMxMTI3LzllMTQ5MWQ2LTJhYjctNGMxNC1iZWU2LTEyMmVlNDUz MTEyNy5jcmwwHwYDVR0jBBgwFoAUwrX75YVX4vAqQcTI2tTXBsMOm2gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85ZTE0OTFkNi0yYWI3LTRjMTQtYmVlNi0xMjJl ZTQ1MzExMjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmOQxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAbBdmqpYjZ/E+Z7/XnmRH3kXG6yUVTlnZ+4FfLru14XPSMo8jHGigDo gvmpl2hc7xmoORXHf+FnOM3tr4fOG2r00x3bidfEwJhUBDLidfVslq/evQS0Yzpv Mq07WTiqFId2EGFkD12/OEL53fTe/C3OHt8zyga4Srb2/ZDAErjBXxvfZpYncqbl ieC+MQXH6EGF/c6g3+azN0vfTaczhFmL+M94oiBLyx3QL8igTwCyyhw4+3PtJLhZ W8isCKrDsp/Bt+qURD+tdQPfni3f22wKm1yO/THhvBBfpx8ZPRBaWGQPxdm/uoOL WlO5BtX+T6z/lvXyxitVs9cVSfi3rjk= -----END CERTIFICATE-----Generated at Wed Jul 29 22:59:51 2026 by rpki-client