$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5/d56026a1-cfac-3474-a6ad-48aea0c9a396.roa File: d56026a1-cfac-3474-a6ad-48aea0c9a396.roa (raw, json) Hash identifier: yY6a9Yz5AKA97UeYzoqEDfJKL7WF9q+U2ch9fXER6G8= Subject key identifier: 74:27:EB:4C:A0:79:E6:46:B9:1D:4E:8B:F0:D0:8F:DF:17:AC:63:D7 Certificate issuer: /CN=3c70845f-7a59-44ea-8f3a-c3d10affa9e5 Certificate serial: 010D0C9F4328584EA78F7649375D55438E383100 Authority key identifier: E1:A8:6C:BE:0B:A2:D5:01:82:26:EE:FA:C5:22:58:3D:FF:F8:C9:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5/d56026a1-cfac-3474-a6ad-48aea0c9a396.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396261 IP address blocks: 128.163.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5/3c70845f-7a59-44ea-8f3a-c3d10affa9e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5/3c70845f-7a59-44ea-8f3a-c3d10affa9e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 14 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8f:76:49:37:5d:55:43:8e:38:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c70845f-7a59-44ea-8f3a-c3d10affa9e5 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=1480f31f-fe86-40c7-adf5-ba9e5909f8dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:3b:19:09:3c:79:70:f9:a7:85:56:cb:4c:79: c7:b7:7b:92:42:c5:15:39:73:0e:44:03:03:08:f6: d5:0c:17:db:ec:2f:7a:c6:ac:46:fd:4c:4a:6e:b0: 39:ce:0e:43:2a:a8:9a:64:dd:06:08:6a:1f:7b:3d: bf:51:9c:bd:c6:f2:ad:76:49:7a:bb:f6:7e:0e:d9: 80:dc:f3:f0:10:f0:6b:42:e7:6f:8c:bc:e7:0d:6b: 89:be:08:ea:8e:63:ba:8e:32:0a:4e:17:59:4e:cb: ff:bc:70:d1:66:08:a1:d1:35:f9:6e:db:fe:f8:26: cc:e3:af:9e:a8:10:b9:76:8c:9a:be:79:1c:66:44: f2:99:00:3f:87:18:d1:65:43:1e:b4:ee:db:08:18: 0f:5d:7e:27:c2:af:8d:5b:41:20:9a:58:92:59:8c: 9b:23:61:dc:0e:49:e0:a2:40:33:ca:b1:6b:b7:1d: f3:48:3c:fc:c0:d3:b0:d7:df:10:90:fc:79:41:be: f2:a5:e5:ae:76:53:0e:bb:0d:86:2d:2e:34:55:00: 1b:60:77:0b:16:c7:55:53:48:bc:e2:f6:9e:aa:8b: d0:ed:ad:8f:a5:88:d0:16:9e:43:b1:97:dd:21:c0: bc:c1:9c:e1:d8:da:09:8e:95:6a:a7:42:71:45:c8: d8:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:27:EB:4C:A0:79:E6:46:B9:1D:4E:8B:F0:D0:8F:DF:17:AC:63:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5/d56026a1-cfac-3474-a6ad-48aea0c9a396.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5/3c70845f-7a59-44ea-8f3a-c3d10affa9e5.crl X509v3 Authority Key Identifier: keyid:E1:A8:6C:BE:0B:A2:D5:01:82:26:EE:FA:C5:22:58:3D:FF:F8:C9:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5.cer sbgp-ipAddrBlock: critical IPv4: 128.163.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:67:4a:c5:53:9c:a2:10:0a:ef:56:9a:7e:ab:14:a1:18:79: 00:3e:82:c0:ac:5f:2e:2c:c8:d9:ad:79:bb:5a:00:02:6d:db: 29:23:ed:f4:4b:29:73:18:d4:2f:e2:e6:f0:9c:fb:d7:2b:66: 77:0f:4d:66:3d:2d:ba:d1:ab:b4:a3:a5:b8:75:e4:55:48:e2: 7e:a5:94:7d:db:a5:aa:6f:d9:52:38:97:b4:8b:7b:25:ba:8c: 35:12:a6:96:5b:27:2e:b8:b7:c7:23:38:7a:80:56:34:90:f2: cc:87:8c:05:4f:34:97:9e:91:56:da:5b:44:c9:ac:2a:00:6a: 2e:d1:67:d4:bb:be:0b:99:56:7d:f0:2f:30:81:60:f1:56:89: 48:95:ec:bd:f4:90:1a:e5:f2:1a:22:f1:b6:48:64:30:d9:5b: b9:8e:ba:cc:c8:15:b8:e0:2c:d8:09:06:ca:52:99:f5:ee:97: 15:c1:be:f0:08:a5:f3:5e:43:8e:11:50:a0:4e:e5:38:ae:34: 93:1b:47:1e:ce:f6:8f:f2:ca:66:7a:94:99:33:75:2d:ec:07: 30:26:50:4d:52:86:a2:7e:fe:b9:bd:0a:65:10:e3:5e:61:24: 72:67:75:f8:bc:a4:df:8b:f4:22:3f:19:f4:f1:98:2c:4e:43: ea:c4:56:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nj3ZJN11VQ444MQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M3MDg0NWYtN2E1OS00NGVhLThmM2EtYzNkMTBhZmZh OWU1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MTQ4MGYzMWYtZmU4Ni00MGM3LWFkZjUtYmE5ZTU5MDlmOGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzsZCTx5cPmnhVbLTHnHt3uSQsUVOXMORAMD CPbVDBfb7C96xqxG/UxKbrA5zg5DKqiaZN0GCGofez2/UZy9xvKtdkl6u/Z+DtmA 3PPwEPBrQudvjLznDWuJvgjqjmO6jjIKThdZTsv/vHDRZgih0TX5btv++CbM46+e qBC5doyavnkcZkTymQA/hxjRZUMetO7bCBgPXX4nwq+NW0EgmliSWYybI2HcDkng okAzyrFrtx3zSDz8wNOw198QkPx5Qb7ypeWudlMOuw2GLS40VQAbYHcLFsdVU0i8 4vaeqovQ7a2PpYjQFp5DsZfdIcC8wZzh2NoJjpVqp0JxRcjYDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHQn60ygeeZGuR1Oi/DQj98XrGPXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zYzcw ODQ1Zi03YTU5LTQ0ZWEtOGYzYS1jM2QxMGFmZmE5ZTUvZDU2MDI2YTEtY2ZhYy0z NDc0LWE2YWQtNDhhZWEwYzlhMzk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2M3MDg0NWYtN2E1OS00NGVhLThm M2EtYzNkMTBhZmZhOWU1LzNjNzA4NDVmLTdhNTktNDRlYS04ZjNhLWMzZDEwYWZm YTllNS5jcmwwHwYDVR0jBBgwFoAU4ahsvgui1QGCJu76xSJYPf/4yTkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zYzcwODQ1Zi03YTU5LTQ0ZWEtOGYzYS1jM2Qx MGFmZmE5ZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgKPKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAARnSsVTnKIQCu9Wmn6rFKEYeQA+gsCsXy4syNmtebtaAAJt2ykj7fRL KXMY1C/i5vCc+9crZncPTWY9LbrRq7Sjpbh15FVI4n6llH3bpapv2VI4l7SLeyW6 jDUSppZbJy64t8cjOHqAVjSQ8syHjAVPNJeekVbaW0TJrCoAai7RZ9S7vguZVn3w LzCBYPFWiUiV7L30kBrl8hoi8bZIZDDZW7mOuszIFbjgLNgJBspSmfXulxXBvvAI pfNeQ44RUKBO5TiuNJMbRx7O9o/yymZ6lJkzdS3sBzAmUE1ShqJ+/rm9CmUQ415h JHJndfi8pN+L9CI/GfTxmCxOQ+rEVrc= -----END CERTIFICATE-----Generated at Thu Aug 13 12:54:39 2026 by rpki-client