$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/45a9e62f-1683-335b-bfa6-34e4781b1dab.roa File: 45a9e62f-1683-335b-bfa6-34e4781b1dab.roa (raw, json) Hash identifier: KRycY41OyiCJDbWRSi5fwx0N/SZZL2G4z5mWcydUup8= Subject key identifier: AC:CE:97:CF:A3:20:3E:FD:32:E1:35:F0:57:F4:C4:A9:60:29:9A:E3 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E81D9AA8E0F640B389C834B80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/45a9e62f-1683-335b-bfa6-34e4781b1dab.roa Signing time: Wed 15 Jul 2026 13:06:22 +0000 ROA not before: Wed 15 Jul 2026 13:06:22 +0000 ROA not after: Tue 13 Oct 2026 13:06:22 +0000 asID: 2763 IP address blocks: 156.151.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:81:d9:aa:8e:0f:64:0b:38:9c:83:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 15 13:06:22 2026 GMT Not After : Oct 13 13:06:22 2026 GMT Subject: CN=41dd68fe-a1c2-412a-b56d-d15aa4e6ff85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1d:4c:ba:ba:27:f8:7a:34:ad:37:1b:e6:b3: 9f:c1:b3:81:92:94:8f:94:47:af:8b:bc:87:f7:9c: f6:af:17:2c:13:58:62:28:0b:90:48:35:ae:35:6b: 04:39:b2:42:38:0a:03:a9:9f:5b:5d:67:75:96:db: fe:fb:f8:d4:26:80:27:78:f9:04:f4:00:af:77:04: 23:0b:53:90:7a:37:c6:54:c1:90:ab:f7:d3:89:ab: 6d:84:7c:ab:68:15:7b:da:41:07:d9:1d:79:04:24: 2c:e5:8d:66:36:88:6c:dc:06:60:95:11:67:04:8d: 09:20:1e:36:79:66:f0:eb:2c:44:3c:57:98:39:d1: 5a:6a:83:62:64:04:14:56:5e:75:90:da:a9:a9:58: 73:08:8f:07:b8:ed:10:0d:06:36:c3:e6:0e:d9:03: 9e:19:95:e3:bf:ae:9c:8a:87:c1:ce:c2:fe:15:23: 2f:d0:bc:cf:d3:77:8c:05:32:95:25:e0:ef:03:b5: c1:a6:9d:e3:dc:2f:fd:89:4b:b7:b0:e1:63:d8:cb: 06:d5:e7:a8:75:58:75:ac:91:7c:5d:04:c8:1a:84: 1b:1d:68:ab:38:bd:42:71:5a:5a:6e:e9:b7:77:d9: 4a:4c:8a:1a:82:20:d3:e4:58:d3:e0:61:2a:ca:a4: 89:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:CE:97:CF:A3:20:3E:FD:32:E1:35:F0:57:F4:C4:A9:60:29:9A:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/45a9e62f-1683-335b-bfa6-34e4781b1dab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 156.151.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:8f:4b:d3:59:1f:db:83:96:5e:1e:bc:e0:a8:b7:97:90:2b: 7b:17:ed:88:a3:eb:5a:43:fc:7f:d9:90:af:9f:8f:c0:0c:55: 7a:3a:64:35:29:f2:b0:27:6b:70:92:68:a6:ab:c2:9e:74:2a: 7a:2d:10:ce:2f:4f:89:64:9a:c9:a5:1d:aa:ef:02:79:7f:4c: 8e:ed:8b:47:32:1c:cc:44:34:c9:44:cb:2e:82:e4:c7:2b:bf: 40:df:3c:51:bc:96:57:32:70:f4:7c:63:71:6f:1c:1d:38:37: 44:d3:ba:89:ca:8a:48:1c:97:a7:97:75:37:bd:46:38:32:66: d7:f9:0b:a6:69:6d:8d:f8:ec:67:0b:4f:ed:20:73:72:e0:5d: d3:95:6d:dd:20:a6:07:55:be:3c:f9:b7:6e:4d:cb:33:58:c3: 8d:2d:6c:ef:eb:a3:30:45:d1:b5:02:03:55:2d:f1:c9:96:9a: 43:4b:ec:83:0c:11:cc:07:77:d3:5f:50:cc:e0:40:a2:86:41: 37:81:db:89:5d:9d:45:da:b5:7e:37:07:6c:e5:22:1e:d2:64: d2:3d:37:e2:8a:0e:f5:e0:f5:57:27:da:d3:a2:02:7d:5c:16: 23:3f:87:91:55:46:32:0a:6d:f3:fd:ca:9d:2d:1a:6f:bd:8f: 14:fe:2f:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6B2aqOD2QLOJyDS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcxNTEzMDYyMloXDTI2MTAxMzEzMDYyMlowLzEtMCsGA1UEAxMk NDFkZDY4ZmUtYTFjMi00MTJhLWI1NmQtZDE1YWE0ZTZmZjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuR1Muron+Ho0rTcb5rOfwbOBkpSPlEevi7yH 95z2rxcsE1hiKAuQSDWuNWsEObJCOAoDqZ9bXWd1ltv++/jUJoAnePkE9ACvdwQj C1OQejfGVMGQq/fTiatthHyraBV72kEH2R15BCQs5Y1mNohs3AZglRFnBI0JIB42 eWbw6yxEPFeYOdFaaoNiZAQUVl51kNqpqVhzCI8HuO0QDQY2w+YO2QOeGZXjv66c iofBzsL+FSMv0LzP03eMBTKVJeDvA7XBpp3j3C/9iUu3sOFj2MsG1eeodVh1rJF8 XQTIGoQbHWirOL1CcVpabum3d9lKTIoagiDT5FjT4GEqyqSJ7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKzOl8+jID79MuE18Ff0xKlgKZrjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNDVhOWU2MmYtMTY4My0z MzViLWJmYTYtMzRlNDc4MWIxZGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJfVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABWPS9NZH9uDll4evOCot5eQK3sX7Yij61pD/H/ZkK+fj8AMVXo6ZDUp 8rAna3CSaKarwp50KnotEM4vT4lkmsmlHarvAnl/TI7ti0cyHMxENMlEyy6C5Mcr v0DfPFG8llcycPR8Y3FvHB04N0TTuonKikgcl6eXdTe9RjgyZtf5C6ZpbY347GcL T+0gc3LgXdOVbd0gpgdVvjz5t25NyzNYw40tbO/rozBF0bUCA1Ut8cmWmkNL7IMM EcwHd9NfUMzgQKKGQTeB24ldnUXatX43B2zlIh7SZNI9N+KKDvXg9Vcn2tOiAn1c FiM/h5FVRjIKbfP9yp0tGm+9jxT+L+g= -----END CERTIFICATE-----Generated at Wed Jul 22 02:32:35 2026 by rpki-client