$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/25137228-8fa7-3aeb-9e3c-11ca24e94074.roa File: 25137228-8fa7-3aeb-9e3c-11ca24e94074.roa (raw, json) Hash identifier: W1BEmcKZyBIh3kRIUvZ8PQbtG4EBV133cRdGg+tgtDE= Subject key identifier: 66:82:F5:07:6D:43:06:7E:9A:90:E3:35:CC:81:26:D9:78:A0:21:43 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E84B2D88E8BD4AD2625CCE700 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/25137228-8fa7-3aeb-9e3c-11ca24e94074.roa Signing time: Thu 16 Jul 2026 13:35:34 +0000 ROA not before: Thu 16 Jul 2026 13:35:34 +0000 ROA not after: Wed 14 Oct 2026 13:35:34 +0000 asID: 2763 IP address blocks: 156.151.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:84:b2:d8:8e:8b:d4:ad:26:25:cc:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 16 13:35:34 2026 GMT Not After : Oct 14 13:35:34 2026 GMT Subject: CN=9b124958-73cd-473e-9c88-9ad733205142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c4:76:6b:0f:a1:62:38:6e:3c:3a:5e:72:f9: c1:ec:dc:48:12:84:48:4d:fc:51:96:46:27:37:52: ee:89:aa:a5:93:19:d5:a7:6f:35:6b:19:ac:71:74: 95:4a:87:9d:98:fe:4c:29:b6:c5:a0:0f:8d:80:38: e6:cf:8b:90:5a:00:d7:f3:0e:fe:3e:5c:ef:1e:5e: 0d:16:cb:33:85:3d:99:4a:b5:d3:30:d5:3c:8c:7e: f0:ae:b9:f3:41:5c:18:2a:b2:42:86:42:90:50:20: 6c:e6:15:78:16:e9:d5:64:3a:e5:8e:78:a4:9b:40: 5c:f0:2f:20:71:a0:5a:b1:85:46:6b:f3:3a:e4:e8: c4:b4:f4:91:dc:30:ce:03:1e:ff:f8:3c:32:cd:9d: 18:0a:4e:da:68:47:38:f9:1a:12:b8:c1:52:20:ce: 74:b5:b5:ed:de:dd:31:9f:d9:d0:31:68:3e:15:22: a9:e9:92:32:02:d3:4a:60:04:71:c5:45:85:a6:a7: 2e:6c:81:66:d2:01:c6:59:70:fc:59:28:02:7f:f5: ad:fa:f8:da:c9:91:1f:4f:e8:39:75:c3:10:32:81: 59:ee:64:5e:13:b9:23:9e:e6:77:a3:87:3c:cf:a7: fe:cd:86:cd:33:9f:d8:e4:6a:01:1d:a9:01:69:17: 6a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:82:F5:07:6D:43:06:7E:9A:90:E3:35:CC:81:26:D9:78:A0:21:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/25137228-8fa7-3aeb-9e3c-11ca24e94074.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 156.151.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:31:bf:81:20:d4:0d:ee:9f:f8:6e:66:3b:b3:dc:28:ac:b3: 9d:f9:5a:aa:56:b1:1b:23:18:76:07:23:7b:8c:3a:07:23:d8: 64:d9:8d:c0:d2:5b:0a:e2:de:9d:0e:cb:f8:40:5c:bc:08:30: 6e:f1:8c:a9:42:b9:d3:d8:1e:6c:4f:59:f7:f3:ef:3f:b0:5c: 1e:38:26:d6:07:d6:8e:e2:77:c7:55:dd:fc:6f:e8:51:c4:5f: 41:ec:a7:99:07:e4:5d:42:db:4f:13:ca:b1:47:b4:20:d1:32: 19:65:de:04:a7:f9:0d:c5:db:40:83:94:6c:c7:db:11:7a:56: 96:f3:6b:22:aa:17:ca:87:75:09:62:43:e1:99:f3:9f:a3:00: 4e:8d:07:60:33:f1:ed:d2:57:d7:e9:39:69:6f:51:66:37:df: 8a:d6:84:b0:71:da:54:18:42:dc:6a:dc:98:29:70:a6:86:eb: 90:75:de:45:a7:d8:a1:15:64:9e:ad:b6:37:ee:ce:5f:a3:1a: 7d:de:75:bc:45:01:0c:21:fd:00:c0:7b:d8:cf:e7:c0:21:e4: 11:4f:8f:1d:0d:43:f4:9b:d5:5f:b4:8d:25:0d:e1:57:e7:73: 56:1a:41:5c:16:34:39:61:f9:2c:e2:db:62:82:70:d2:77:c3: 3f:36:e0:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6EstiOi9StJiXM5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcxNjEzMzUzNFoXDTI2MTAxNDEzMzUzNFowLzEtMCsGA1UEAxMk OWIxMjQ5NTgtNzNjZC00NzNlLTljODgtOWFkNzMzMjA1MTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcR2aw+hYjhuPDpecvnB7NxIEoRITfxRlkYn N1LuiaqlkxnVp281axmscXSVSoedmP5MKbbFoA+NgDjmz4uQWgDX8w7+PlzvHl4N FsszhT2ZSrXTMNU8jH7wrrnzQVwYKrJChkKQUCBs5hV4FunVZDrljnikm0Bc8C8g caBasYVGa/M65OjEtPSR3DDOAx7/+DwyzZ0YCk7aaEc4+RoSuMFSIM50tbXt3t0x n9nQMWg+FSKp6ZIyAtNKYARxxUWFpqcubIFm0gHGWXD8WSgCf/Wt+vjayZEfT+g5 dcMQMoFZ7mReE7kjnuZ3o4c8z6f+zYbNM5/Y5GoBHakBaRdqDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGaC9QdtQwZ+mpDjNcyBJtl4oCFDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMjUxMzcyMjgtOGZhNy0z YWViLTllM2MtMTFjYTI0ZTk0MDc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJfdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAkxv4Eg1A3un/huZjuz3Ciss535WqpWsRsjGHYHI3uMOgcj2GTZjcDS Wwri3p0Oy/hAXLwIMG7xjKlCudPYHmxPWffz7z+wXB44JtYH1o7id8dV3fxv6FHE X0Hsp5kH5F1C208TyrFHtCDRMhll3gSn+Q3F20CDlGzH2xF6VpbzayKqF8qHdQli Q+GZ85+jAE6NB2Az8e3SV9fpOWlvUWY334rWhLBx2lQYQtxq3JgpcKaG65B13kWn 2KEVZJ6ttjfuzl+jGn3edbxFAQwh/QDAe9jP58Ah5BFPjx0NQ/Sb1V+0jSUN4Vfn c1YaQVwWNDlh+Szi22KCcNJ3wz824Kc= -----END CERTIFICATE-----Generated at Wed Jul 22 02:32:36 2026 by rpki-client