$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3ee0259-cdb3-41ce-bbf7-7a028f4b9b13/aba6c02d-fed0-3228-8e92-425fc2384005.roa File: aba6c02d-fed0-3228-8e92-425fc2384005.roa (raw, json) Hash identifier: ok79CNYHYDyjygoYXcbB1oZkY/8LRl71nDu8lJXr3ic= Subject key identifier: A9:7C:CA:B8:5F:04:94:90:ED:6A:FF:56:8C:8D:58:F5:B8:1C:CC:47 Certificate issuer: /CN=a3ee0259-cdb3-41ce-bbf7-7a028f4b9b13 Certificate serial: 010D0C9F4328584E9A7FE8938DB79AEFC58D5600 Authority key identifier: BA:CA:B1:CC:95:8A:80:DF:CB:14:94:8D:05:44:9E:A7:B0:46:28:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3ee0259-cdb3-41ce-bbf7-7a028f4b9b13.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3ee0259-cdb3-41ce-bbf7-7a028f4b9b13/aba6c02d-fed0-3228-8e92-425fc2384005.roa Signing time: Fri 24 Jul 2026 09:00:12 +0000 ROA not before: Fri 24 Jul 2026 09:00:12 +0000 ROA not after: Thu 22 Oct 2026 09:00:12 +0000 asID: 14576 IP address blocks: 204.155.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3ee0259-cdb3-41ce-bbf7-7a028f4b9b13/a3ee0259-cdb3-41ce-bbf7-7a028f4b9b13.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3ee0259-cdb3-41ce-bbf7-7a028f4b9b13/a3ee0259-cdb3-41ce-bbf7-7a028f4b9b13.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3ee0259-cdb3-41ce-bbf7-7a028f4b9b13.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9a:7f:e8:93:8d:b7:9a:ef:c5:8d:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3ee0259-cdb3-41ce-bbf7-7a028f4b9b13 Validity Not Before: Jul 24 09:00:12 2026 GMT Not After : Oct 22 09:00:12 2026 GMT Subject: CN=6f44cb41-5b82-4922-904d-22a295ce7466 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:80:0a:d4:c9:a9:81:2a:bb:8b:f1:8f:4e:e4: ac:ac:71:95:37:62:5c:6a:cd:05:1c:19:a5:46:39: fa:c0:d8:cd:f1:64:51:43:09:c7:cc:c1:97:3d:e9: 6f:07:17:92:93:0a:7d:b2:41:5a:bc:9d:a6:a6:51: 25:c6:1f:e2:65:69:a2:b9:77:ab:e3:c3:cd:51:01: 25:94:8a:e4:65:3a:13:c2:80:95:f4:59:d3:df:97: 62:59:be:25:52:47:90:ba:67:55:a5:1c:5d:a5:01: 15:d6:b0:20:32:1b:62:21:3c:f9:ff:55:8f:cd:1d: d2:4e:92:1d:ce:0d:2f:7d:3f:6e:74:1b:82:e6:31: 4c:b5:07:ab:67:aa:05:13:05:a3:92:8b:d2:4e:00: 82:6b:c9:7f:a1:e2:44:c7:99:6b:e8:3b:9b:b0:c8: 9d:7d:f4:b1:d3:2f:4f:dc:c5:27:7f:c4:f6:2e:c2: 6d:0a:dd:51:11:1b:29:ea:04:95:66:6c:45:e2:af: ea:e7:3f:38:8a:a0:05:c7:65:9e:92:56:99:12:01: 21:fc:b0:fc:c0:30:1d:09:89:b8:ed:b4:75:84:28: fe:88:39:7e:84:2d:d1:af:8a:7d:9e:50:af:08:c1: 1f:5f:00:14:c8:3e:e6:ca:42:67:57:64:f3:20:2e: 1c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:7C:CA:B8:5F:04:94:90:ED:6A:FF:56:8C:8D:58:F5:B8:1C:CC:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3ee0259-cdb3-41ce-bbf7-7a028f4b9b13/aba6c02d-fed0-3228-8e92-425fc2384005.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3ee0259-cdb3-41ce-bbf7-7a028f4b9b13/a3ee0259-cdb3-41ce-bbf7-7a028f4b9b13.crl X509v3 Authority Key Identifier: keyid:BA:CA:B1:CC:95:8A:80:DF:CB:14:94:8D:05:44:9E:A7:B0:46:28:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3ee0259-cdb3-41ce-bbf7-7a028f4b9b13.cer sbgp-ipAddrBlock: critical IPv4: 204.155.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:9b:5f:1b:bf:29:12:75:46:2b:ff:f9:d2:7d:ee:a6:5a:db: b5:c7:51:05:67:2a:f8:8c:2b:96:66:93:b1:03:7d:53:9a:ef: c8:37:99:7e:5c:5a:bd:b3:20:07:04:38:6e:71:6a:68:48:07: b1:dc:6f:a7:9d:79:93:f7:83:13:3d:9c:fe:71:7c:ae:9e:44: 00:2d:e1:3b:20:ca:55:3f:3f:01:1c:3a:96:3d:59:fe:ca:b0: 7a:c1:08:e3:87:12:6a:8a:e4:a4:6b:ee:95:ad:66:47:d1:39: 8b:b8:47:4f:9b:b8:e7:c5:6b:59:c9:25:f1:e9:ff:65:85:d9: fb:e0:d2:48:04:fa:6f:39:05:a3:e0:7e:88:83:2d:bf:67:a9: a3:17:02:ef:d4:a7:b2:9b:c0:d1:da:df:1a:e4:f3:be:e5:f3: 1b:d4:5c:59:0b:f9:39:93:73:06:5b:12:6a:04:8a:28:dd:52: 10:b2:ce:99:7a:38:05:8c:bf:4f:17:e6:e0:1b:78:f2:bc:5d: bf:56:53:69:25:f8:3f:28:7e:0f:37:33:87:3c:9f:2a:02:59: eb:3d:1a:a1:95:ba:e6:62:0f:c8:9b:f3:ec:c1:03:d2:30:46: 14:c7:e8:4b:07:9f:6a:d7:35:50:5b:4f:be:35:39:f2:f1:60: 31:e8:70:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6af+iTjbea78WNVgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTNlZTAyNTktY2RiMy00MWNlLWJiZjctN2EwMjhmNGI5 YjEzMB4XDTI2MDcyNDA5MDAxMloXDTI2MTAyMjA5MDAxMlowLzEtMCsGA1UEAxMk NmY0NGNiNDEtNWI4Mi00OTIyLTkwNGQtMjJhMjk1Y2U3NDY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIAK1MmpgSq7i/GPTuSsrHGVN2Jcas0FHBml Rjn6wNjN8WRRQwnHzMGXPelvBxeSkwp9skFavJ2mplElxh/iZWmiuXer48PNUQEl lIrkZToTwoCV9FnT35diWb4lUkeQumdVpRxdpQEV1rAgMhtiITz5/1WPzR3STpId zg0vfT9udBuC5jFMtQerZ6oFEwWjkovSTgCCa8l/oeJEx5lr6DubsMidffSx0y9P 3MUnf8T2LsJtCt1RERsp6gSVZmxF4q/q5z84iqAFx2WeklaZEgEh/LD8wDAdCYm4 7bR1hCj+iDl+hC3Rr4p9nlCvCMEfXwAUyD7mykJnV2TzIC4cMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKl8yrhfBJSQ7Wr/VoyNWPW4HMxHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hM2Vl MDI1OS1jZGIzLTQxY2UtYmJmNy03YTAyOGY0YjliMTMvYWJhNmMwMmQtZmVkMC0z MjI4LThlOTItNDI1ZmMyMzg0MDA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTNlZTAyNTktY2RiMy00MWNlLWJi ZjctN2EwMjhmNGI5YjEzL2EzZWUwMjU5LWNkYjMtNDFjZS1iYmY3LTdhMDI4ZjRi OWIxMy5jcmwwHwYDVR0jBBgwFoAUusqxzJWKgN/LFJSNBUSep7BGKLUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hM2VlMDI1OS1jZGIzLTQxY2UtYmJmNy03YTAy OGY0YjliMTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzJscMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADabXxu/KRJ1Riv/+dJ97qZa27XHUQVnKviMK5Zmk7EDfVOa78g3mX5c Wr2zIAcEOG5xamhIB7Hcb6edeZP3gxM9nP5xfK6eRAAt4TsgylU/PwEcOpY9Wf7K sHrBCOOHEmqK5KRr7pWtZkfROYu4R0+buOfFa1nJJfHp/2WF2fvg0kgE+m85BaPg foiDLb9nqaMXAu/Up7KbwNHa3xrk877l8xvUXFkL+TmTcwZbEmoEiijdUhCyzpl6 OAWMv08X5uAbePK8Xb9WU2kl+D8ofg83M4c8nyoCWes9GqGVuuZiD8ib8+zBA9Iw RhTH6EsHn2rXNVBbT741OfLxYDHocFE= -----END CERTIFICATE-----Generated at Mon Jul 27 09:23:15 2026 by rpki-client