$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/ab69eefc-d487-3a61-8252-5562c84033db.roa File: ab69eefc-d487-3a61-8252-5562c84033db.roa (raw, json) Hash identifier: ZPr6Z3mmRPA8PVvQRE/Sg1ZZ3zBsjsWYnF9rovO5Wv8= Subject key identifier: 75:5C:24:A6:7F:7F:1F:85:18:8E:A7:CF:AC:DB:D2:1F:52:07:B4:18 Certificate issuer: /CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2 Certificate serial: 010D0C9F4328584EC20C7BD2B03D1A82060A2100 Authority key identifier: AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/ab69eefc-d487-3a61-8252-5562c84033db.roa Signing time: Fri 07 Aug 2026 13:00:11 +0000 ROA not before: Fri 07 Aug 2026 13:00:11 +0000 ROA not after: Thu 05 Nov 2026 14:00:11 +0000 asID: 62943 IP address blocks: 209.152.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 11 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c2:0c:7b:d2:b0:3d:1a:82:06:0a:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2 Validity Not Before: Aug 7 13:00:11 2026 GMT Not After : Nov 5 14:00:11 2026 GMT Subject: CN=4362baf3-357b-490c-a4dd-c33c788ed5bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:38:10:31:a8:0e:5d:41:9d:3f:33:b3:ff:be: ec:44:d0:58:43:1f:40:88:d4:4e:0a:c6:10:a7:01: d9:39:a6:19:a2:15:fc:83:34:67:2f:26:d6:6c:83: ce:48:87:bd:71:b9:c9:1b:67:16:83:6c:e3:8f:e4: 80:ee:9e:80:4e:2c:d4:05:15:20:81:73:58:c7:81: 07:7c:8d:3e:9e:5f:4c:ea:d3:88:4a:7f:03:eb:95: 87:52:97:2a:37:1f:fd:dd:ba:df:25:81:88:46:29: 53:ff:e3:0d:cc:63:3c:e6:5a:2b:39:5f:62:bf:19: da:6a:d4:f4:df:3b:d5:8f:27:44:15:0c:70:00:7c: e5:dc:81:b5:7f:ce:c4:69:03:6f:6b:e8:ca:3a:54: 5c:5e:ff:6a:42:fe:fe:f5:9a:4f:b4:76:e4:d8:1f: 69:09:63:18:80:d4:bc:58:65:44:03:a2:65:29:63: d7:19:eb:d8:01:95:81:9e:5d:bb:c5:a9:ce:6f:8b: c2:70:16:81:43:81:40:51:37:a8:d9:16:1f:83:9a: c2:4b:0f:c8:e6:c1:31:46:7e:ab:1e:c7:36:0e:c5: 0e:cb:51:27:9b:89:32:47:6c:c2:8d:f7:7c:00:51: 83:51:ee:79:a0:65:fc:91:96:f1:98:f7:ec:8c:01: 12:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:5C:24:A6:7F:7F:1F:85:18:8E:A7:CF:AC:DB:D2:1F:52:07:B4:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/ab69eefc-d487-3a61-8252-5562c84033db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl X509v3 Authority Key Identifier: keyid:AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer sbgp-ipAddrBlock: critical IPv4: 209.152.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:82:b5:45:1e:96:b4:77:64:86:c6:1f:5e:22:78:5b:a9:6c: 38:3b:45:29:82:02:8a:e4:af:78:0a:6b:ae:06:04:72:a4:b9: a5:61:cb:ee:26:df:6e:b0:6a:73:2e:77:ef:25:e0:15:c9:4c: 1a:8f:59:48:df:b0:f4:89:85:3e:af:64:75:d7:55:89:7a:da: 5a:f2:a2:c3:b7:d6:c0:cb:d0:32:b2:df:e0:3d:7a:88:19:58: d9:d1:a3:f2:93:f3:80:d4:ce:e9:e2:38:5f:fa:c4:9b:59:26: 47:3e:9f:1d:68:a7:4b:72:67:51:e5:3a:d5:fc:f3:78:9f:58: 04:55:85:a1:24:16:33:dc:91:37:1d:2e:8b:1a:07:e1:4d:5b: 9d:46:33:99:d4:e6:32:57:ef:63:40:9f:37:71:92:db:35:77: d1:27:6b:01:26:f7:68:b3:e3:cc:24:4e:1c:28:b5:b4:d8:11: 18:d3:e3:ce:8c:ce:2b:da:8c:8f:c7:f0:5e:f7:05:d1:e0:8f: 8a:a8:8c:73:3e:54:22:e9:a4:e7:f4:34:1c:8e:62:ac:02:29: 70:38:c2:10:aa:c6:27:a0:eb:ab:ae:33:b6:ed:03:7d:66:cb: e2:ba:10:61:64:b0:79:ba:e9:cc:ef:e9:64:0a:89:f1:6b:cb: c5:90:fd:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7CDHvSsD0aggYKIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjdlNDM1N2UtMTcwZi00ZmI5LTg4NDktM2M4NDI1N2Yy YWQyMB4XDTI2MDgwNzEzMDAxMVoXDTI2MTEwNTE0MDAxMVowLzEtMCsGA1UEAxMk NDM2MmJhZjMtMzU3Yi00OTBjLWE0ZGQtYzMzYzc4OGVkNWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTgQMagOXUGdPzOz/77sRNBYQx9AiNROCsYQ pwHZOaYZohX8gzRnLybWbIPOSIe9cbnJG2cWg2zjj+SA7p6ATizUBRUggXNYx4EH fI0+nl9M6tOISn8D65WHUpcqNx/93brfJYGIRilT/+MNzGM85lorOV9ivxnaatT0 3zvVjydEFQxwAHzl3IG1f87EaQNva+jKOlRcXv9qQv7+9ZpPtHbk2B9pCWMYgNS8 WGVEA6JlKWPXGevYAZWBnl27xanOb4vCcBaBQ4FAUTeo2RYfg5rCSw/I5sExRn6r Hsc2DsUOy1Enm4kyR2zCjfd8AFGDUe55oGX8kZbxmPfsjAESiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHVcJKZ/fx+FGI6nz6zb0h9SB7QYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iN2U0 MzU3ZS0xNzBmLTRmYjktODg0OS0zYzg0MjU3ZjJhZDIvYWI2OWVlZmMtZDQ4Ny0z YTYxLTgyNTItNTU2MmM4NDAzM2RiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYjdlNDM1N2UtMTcwZi00ZmI5LTg4 NDktM2M4NDI1N2YyYWQyL2I3ZTQzNTdlLTE3MGYtNGZiOS04ODQ5LTNjODQyNTdm MmFkMi5jcmwwHwYDVR0jBBgwFoAUqvQvX1cKAqH2YCqWDn5tkZT8Nh4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iN2U0MzU3ZS0xNzBmLTRmYjktODg0OS0zYzg0 MjU3ZjJhZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ZiDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGKCtUUelrR3ZIbGH14ieFupbDg7RSmCAorkr3gKa64GBHKkuaVhy+4m 326wanMud+8l4BXJTBqPWUjfsPSJhT6vZHXXVYl62lryosO31sDL0DKy3+A9eogZ WNnRo/KT84DUzuniOF/6xJtZJkc+nx1op0tyZ1HlOtX883ifWARVhaEkFjPckTcd LosaB+FNW51GM5nU5jJX72NAnzdxkts1d9EnawEm92iz48wkThwotbTYERjT486M zivajI/H8F73BdHgj4qojHM+VCLppOf0NByOYqwCKXA4whCqxieg66uuM7btA31m y+K6EGFksHm66czv6WQKifFry8WQ/bo= -----END CERTIFICATE-----Generated at Sun Aug 9 19:21:52 2026 by rpki-client