$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/f9b26b9a-62f4-3a86-bbf1-f0545b947871.roa File: f9b26b9a-62f4-3a86-bbf1-f0545b947871.roa (raw, json) Hash identifier: QxC2TY2WeIyu6VbSwcdmmHple2WnCMMFxjz3LqaY6nY= Subject key identifier: 76:B5:17:46:43:D7:DE:5C:75:C2:ED:B4:41:A9:EF:3B:D0:D6:99:85 Certificate issuer: /CN=cb9f3dc5-4d82-4d82-ae22-349c75195f65 Certificate serial: 010D0C9F4328584E6C496B1784A5DF1A9E7C3C80 Authority key identifier: 3B:9B:BA:FC:6C:3C:EF:C2:F5:8A:A8:A5:BA:88:C5:16:10:2E:A5:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/f9b26b9a-62f4-3a86-bbf1-f0545b947871.roa Signing time: Tue 07 Jul 2026 19:43:45 +0000 ROA not before: Tue 07 Jul 2026 19:43:45 +0000 ROA not after: Sat 15 Aug 2026 01:00:24 +0000 asID: 1299 IP address blocks: 192.225.156.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/cb9f3dc5-4d82-4d82-ae22-349c75195f65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/cb9f3dc5-4d82-4d82-ae22-349c75195f65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6c:49:6b:17:84:a5:df:1a:9e:7c:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb9f3dc5-4d82-4d82-ae22-349c75195f65 Validity Not Before: Jul 7 19:43:45 2026 GMT Not After : Aug 15 01:00:24 2026 GMT Subject: CN=0ea4d419-b13d-4ace-beb2-f33fbd2ab49b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f7:cb:1c:e5:21:50:2b:28:be:57:2f:b3:c2: 3d:98:43:fc:7a:f4:87:8f:7c:c2:73:9c:16:62:50: 0f:34:60:c6:d2:46:4d:d8:47:be:30:71:30:c6:5c: 25:d4:75:69:1f:aa:0f:ae:73:42:fe:8c:0d:4d:da: c6:a4:75:2e:48:d2:6c:63:be:a9:c3:38:82:a4:9a: 10:39:5f:f5:26:e4:fa:98:49:c9:11:51:7d:63:57: 0b:ea:09:9a:3f:34:cc:e3:ed:78:59:03:30:c5:96: fc:a8:68:9b:06:0c:53:b5:cc:c6:02:b7:03:22:14: 7c:98:59:e4:88:79:ca:7c:b3:20:0a:7a:69:9d:ca: 88:8f:1e:c6:b6:70:13:0d:3f:58:6d:12:84:e8:75: 4e:f5:5f:33:33:c7:ea:31:ab:f3:d9:0f:ba:61:f4: 4e:7d:53:d3:29:6e:55:dd:eb:ea:32:ae:67:64:33: 35:16:87:27:85:ab:79:fc:4b:bc:4c:96:48:0e:48: 66:cb:99:a6:fb:28:85:21:1c:c5:82:92:89:4c:fc: 24:92:3e:fc:bd:07:fc:8b:03:20:61:f0:c4:50:a8: 55:20:fd:d3:2b:34:18:a7:1b:db:85:7a:a8:10:24: df:b7:cb:e2:6e:4f:5f:41:01:3b:63:30:cb:a2:43: 16:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:B5:17:46:43:D7:DE:5C:75:C2:ED:B4:41:A9:EF:3B:D0:D6:99:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/f9b26b9a-62f4-3a86-bbf1-f0545b947871.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/cb9f3dc5-4d82-4d82-ae22-349c75195f65.crl X509v3 Authority Key Identifier: keyid:3B:9B:BA:FC:6C:3C:EF:C2:F5:8A:A8:A5:BA:88:C5:16:10:2E:A5:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65.cer sbgp-ipAddrBlock: critical IPv4: 192.225.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:a8:fe:f1:2a:a2:d3:8a:e7:ee:97:e2:bf:b3:c0:25:da:5e: 26:7b:3c:33:71:ff:68:3c:bc:23:64:98:02:40:b4:27:18:bd: 25:8d:31:57:0c:50:66:3c:ef:dc:76:08:ca:67:96:21:c4:7a: a1:ad:2a:28:2d:e0:54:93:ef:ca:1a:ad:ba:3c:9d:42:36:b0: db:36:ab:26:03:1c:a1:2d:32:f1:25:5b:58:17:37:da:98:a4: c4:8e:79:52:c4:9c:b4:33:b2:ce:cb:52:22:fb:08:44:bc:4b: 4d:60:a5:be:ce:d3:55:8a:af:dd:2d:a2:ea:b6:01:6c:91:14: 63:e2:19:1d:18:34:26:fe:43:67:7a:fb:c6:f3:5e:ee:da:6c: 88:97:2b:4f:cd:ba:cb:77:99:ef:30:24:df:49:d7:da:30:1f: bf:0d:ad:58:47:6f:fa:38:fd:14:77:06:05:be:43:03:a9:85: bf:6d:2a:29:a2:5a:dc:2d:22:e4:66:02:d4:2c:4d:90:97:99: 8a:1f:ca:d3:0c:b3:53:78:31:d3:3b:76:78:6d:cd:fb:3c:df: a5:7c:55:5b:a7:ec:a8:fc:01:11:0a:e7:e9:65:50:ed:15:f2: dc:d8:ec:c1:0b:f1:54:05:ed:2a:01:a5:c1:55:cf:1c:2f:ba: 77:a4:f4:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5sSWsXhKXfGp58PIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I5ZjNkYzUtNGQ4Mi00ZDgyLWFlMjItMzQ5Yzc1MTk1 ZjY1MB4XDTI2MDcwNzE5NDM0NVoXDTI2MDgxNTAxMDAyNFowLzEtMCsGA1UEAxMk MGVhNGQ0MTktYjEzZC00YWNlLWJlYjItZjMzZmJkMmFiNDliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvfLHOUhUCsovlcvs8I9mEP8evSHj3zCc5wW YlAPNGDG0kZN2Ee+MHEwxlwl1HVpH6oPrnNC/owNTdrGpHUuSNJsY76pwziCpJoQ OV/1JuT6mEnJEVF9Y1cL6gmaPzTM4+14WQMwxZb8qGibBgxTtczGArcDIhR8mFnk iHnKfLMgCnppncqIjx7GtnATDT9YbRKE6HVO9V8zM8fqMavz2Q+6YfROfVPTKW5V 3evqMq5nZDM1Focnhat5/Eu8TJZIDkhmy5mm+yiFIRzFgpKJTPwkkj78vQf8iwMg YfDEUKhVIP3TKzQYpxvbhXqoECTft8vibk9fQQE7YzDLokMW+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHa1F0ZD195cdcLttEGp7zvQ1pmFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jYjlm M2RjNS00ZDgyLTRkODItYWUyMi0zNDljNzUxOTVmNjUvZjliMjZiOWEtNjJmNC0z YTg2LWJiZjEtZjA1NDViOTQ3ODcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvY2I5ZjNkYzUtNGQ4Mi00ZDgyLWFl MjItMzQ5Yzc1MTk1ZjY1L2NiOWYzZGM1LTRkODItNGQ4Mi1hZTIyLTM0OWM3NTE5 NWY2NS5jcmwwHwYDVR0jBBgwFoAUO5u6/Gw878L1iqiluojFFhAupTAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jYjlmM2RjNS00ZDgyLTRkODItYWUyMi0zNDlj NzUxOTVmNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwOGcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHeo/vEqotOK5+6X4r+zwCXaXiZ7PDNx/2g8vCNkmAJAtCcYvSWNMVcM UGY879x2CMpnliHEeqGtKigt4FST78oarbo8nUI2sNs2qyYDHKEtMvElW1gXN9qY pMSOeVLEnLQzss7LUiL7CES8S01gpb7O01WKr90touq2AWyRFGPiGR0YNCb+Q2d6 +8bzXu7abIiXK0/Nust3me8wJN9J19owH78NrVhHb/o4/RR3BgW+QwOphb9tKimi WtwtIuRmAtQsTZCXmYofytMMs1N4MdM7dnhtzfs836V8VVun7Kj8AREK5+llUO0V 8tzY7MEL8VQF7SoBpcFVzxwvunek9Hc= -----END CERTIFICATE-----Generated at Tue Jul 21 14:04:40 2026 by rpki-client