$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/5c4f117d-45b9-3f38-be81-53b231ffe933.roa File: 5c4f117d-45b9-3f38-be81-53b231ffe933.roa (raw, json) Hash identifier: wTHsMibkQSvqGLCFt5wZ+PIkv5V4X1ue9Dh6xBFBwBo= Subject key identifier: 11:62:A8:70:F1:D9:7E:35:88:F2:60:66:DF:FB:FF:F9:88:8E:29:90 Certificate issuer: /CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Certificate serial: 010D0C9F4328584EC371CAF266230F3F463C78C0 Authority key identifier: 58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/5c4f117d-45b9-3f38-be81-53b231ffe933.roa Signing time: Sat 08 Aug 2026 01:00:11 +0000 ROA not before: Sat 08 Aug 2026 01:00:11 +0000 ROA not after: Fri 06 Nov 2026 02:00:11 +0000 asID: 46687 IP address blocks: 170.253.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c3:71:ca:f2:66:23:0f:3f:46:3c:78:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Validity Not Before: Aug 8 01:00:11 2026 GMT Not After : Nov 6 02:00:11 2026 GMT Subject: CN=6b7b3082-0272-43e2-a0fe-124dfa2ad965 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:92:99:47:20:66:e7:e4:0a:6d:f9:98:c7:01: 04:c0:02:50:64:7e:3d:ba:ea:0b:73:0d:df:f6:93: 47:6e:ac:1d:fb:30:32:33:4c:d1:80:e2:08:90:a1: 32:2e:35:94:b3:74:c8:6d:fb:8a:0c:48:a6:b7:9f: 3b:b3:c3:19:cf:9a:a5:a9:62:27:46:b8:f5:4f:74: 6b:14:2a:19:38:24:54:55:f6:a7:27:92:ed:c1:8e: 55:e8:6f:f8:d7:cc:db:df:bb:98:40:b0:f3:91:5c: 70:12:ce:87:21:18:9f:1c:38:62:b2:bc:c2:b8:f6: 02:d5:59:b4:39:c6:27:98:bb:2b:09:f9:10:0e:a4: 14:c2:3f:7c:84:6a:4c:e7:66:50:64:27:16:55:97: d1:32:ae:45:ad:25:f9:9a:ae:dc:65:06:3b:ea:37: 6d:ea:b4:55:80:1c:8e:50:7e:f2:b2:3d:94:9d:b6: 16:2b:2f:25:3f:c2:b0:a3:cd:8c:0c:f7:a0:e7:f6: e7:e3:06:93:a9:0f:db:40:33:fb:78:00:c6:42:1d: ea:f3:c0:df:de:16:1f:7c:5f:30:42:42:7a:bd:da: 97:80:0c:6b:b6:28:f0:4d:4d:0a:97:24:39:74:69: 38:35:cd:8d:b6:b1:dc:76:4f:56:62:21:be:be:1f: e5:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:62:A8:70:F1:D9:7E:35:88:F2:60:66:DF:FB:FF:F9:88:8E:29:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/5c4f117d-45b9-3f38-be81-53b231ffe933.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl X509v3 Authority Key Identifier: keyid:58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer sbgp-ipAddrBlock: critical IPv4: 170.253.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:e4:01:f6:37:6d:17:82:00:55:e1:98:02:01:a4:b4:61:86: 29:d2:68:87:05:fb:97:71:c3:1e:47:f6:19:1b:c6:19:78:6a: 50:0d:b9:bd:52:61:f2:df:80:e4:81:6d:f0:db:8d:2a:44:5e: 38:c3:a1:2a:ac:da:77:ab:b8:4c:0d:f5:62:3d:f7:5a:7e:ab: 18:47:53:2c:da:eb:87:da:84:ef:88:02:b8:11:18:9d:d1:ed: b5:75:b3:41:a9:6a:80:f0:37:b1:8e:85:24:f4:b8:f7:91:71: 64:ba:de:94:5e:70:26:bf:ac:c8:b3:31:d4:05:53:f5:2c:de: 3e:be:fc:31:71:cf:49:21:bc:ff:14:7e:62:29:00:5d:76:bf: dc:51:76:af:9a:f3:2c:c7:53:e1:cc:93:d3:4c:46:f2:02:86: 9c:a1:ae:a2:4d:86:9e:44:b0:f6:39:16:9c:9e:97:c3:92:06: d1:1c:57:89:cb:1e:5b:0d:99:a8:d4:b0:02:2a:41:cd:8b:5d: c9:3b:74:b7:08:52:e2:6b:08:58:3f:63:3d:9a:0f:f2:80:fc: 12:90:3d:f7:3e:c1:aa:8c:f4:cd:1e:b3:18:29:71:99:72:94: dd:74:8c:f9:20:9e:53:05:97:a3:3c:61:76:64:e4:37:23:3d: 09:2f:d8:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7DccryZiMPP0Y8eMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEzMWE0YTAtN2I3Ny00ZjU2LThmODktMDE1MjViNTA2 MTI5MB4XDTI2MDgwODAxMDAxMVoXDTI2MTEwNjAyMDAxMVowLzEtMCsGA1UEAxMk NmI3YjMwODItMDI3Mi00M2UyLWEwZmUtMTI0ZGZhMmFkOTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ZKZRyBm5+QKbfmYxwEEwAJQZH49uuoLcw3f 9pNHbqwd+zAyM0zRgOIIkKEyLjWUs3TIbfuKDEimt587s8MZz5qlqWInRrj1T3Rr FCoZOCRUVfanJ5LtwY5V6G/418zb37uYQLDzkVxwEs6HIRifHDhisrzCuPYC1Vm0 OcYnmLsrCfkQDqQUwj98hGpM52ZQZCcWVZfRMq5FrSX5mq7cZQY76jdt6rRVgByO UH7ysj2UnbYWKy8lP8Kwo82MDPeg5/bn4waTqQ/bQDP7eADGQh3q88Df3hYffF8w QkJ6vdqXgAxrtijwTU0KlyQ5dGk4Nc2NtrHcdk9WYiG+vh/lkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBFiqHDx2X41iPJgZt/7//mIjimQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYTMx YTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUyNWI1MDYxMjkvNWM0ZjExN2QtNDViOS0z ZjM4LWJlODEtNTNiMjMxZmZlOTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWEzMWE0YTAtN2I3Ny00ZjU2LThm ODktMDE1MjViNTA2MTI5L2FhMzFhNGEwLTdiNzctNGY1Ni04Zjg5LTAxNTI1YjUw NjEyOS5jcmwwHwYDVR0jBBgwFoAUWIlNWT2gnXPWliBuheubsbqbZj0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYTMxYTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUy NWI1MDYxMjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHqv2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABnkAfY3bReCAFXhmAIBpLRhhinSaIcF+5dxwx5H9hkbxhl4alANub1S YfLfgOSBbfDbjSpEXjjDoSqs2neruEwN9WI991p+qxhHUyza64fahO+IArgRGJ3R 7bV1s0GpaoDwN7GOhST0uPeRcWS63pRecCa/rMizMdQFU/Us3j6+/DFxz0khvP8U fmIpAF12v9xRdq+a8yzHU+HMk9NMRvIChpyhrqJNhp5EsPY5Fpyel8OSBtEcV4nL HlsNmajUsAIqQc2LXck7dLcIUuJrCFg/Yz2aD/KA/BKQPfc+waqM9M0esxgpcZly lN10jPkgnlMFl6M8YXZk5DcjPQkv2Ow= -----END CERTIFICATE-----Generated at Wed Aug 26 08:09:08 2026 by rpki-client