$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9a39c590-0f9f-3994-9c21-31fa96d1565e.roa File: 9a39c590-0f9f-3994-9c21-31fa96d1565e.roa (raw, json) Hash identifier: a3psWE5RcCYOyU7sCs6GmiPMoWiTkP3WR2ELGBLJwvQ= Subject key identifier: 30:AD:21:DC:31:93:DD:B8:02:66:43:2B:F2:DF:AF:E9:D9:48:77:6B Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E66D9FFB06A16D02AA2BFD4C0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9a39c590-0f9f-3994-9c21-31fa96d1565e.roa Signing time: Sun 05 Jul 2026 21:00:11 +0000 ROA not before: Sun 05 Jul 2026 21:00:11 +0000 ROA not after: Sat 03 Oct 2026 21:00:11 +0000 asID: 2763 IP address blocks: 156.151.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:66:d9:ff:b0:6a:16:d0:2a:a2:bf:d4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 5 21:00:11 2026 GMT Not After : Oct 3 21:00:11 2026 GMT Subject: CN=a6f5164f-e07a-404f-87c2-0e07ccda87c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:56:c9:f8:6c:39:9d:59:71:75:33:11:9f:fa: c0:58:1a:7c:4a:d6:c5:37:ec:ab:ad:10:8b:ba:15: 85:40:51:1c:c5:b5:26:93:82:5a:ec:a0:a4:f5:a9: 9d:94:57:a0:bc:17:2a:c1:a4:2a:84:61:1d:bd:45: 3e:f5:5b:82:26:d7:d4:9c:83:a5:0a:55:5e:22:19: fc:31:63:a3:ad:cf:27:ec:54:30:35:b9:55:00:b4: 75:e9:c9:66:0a:6e:3f:52:2f:5c:3c:df:b4:80:72: a1:22:49:1e:6c:91:ee:96:eb:66:c6:da:34:f1:88: 1c:58:56:6e:50:fd:e4:f5:28:af:57:7c:4f:96:7f: d2:ac:8a:86:12:f0:4a:21:8d:d9:f4:c5:f6:60:11: 76:69:fd:db:8f:cd:87:28:c3:01:00:33:48:e2:e5: 7e:28:aa:6e:6a:9d:2e:25:68:64:43:30:d5:f7:f4: ac:c8:5d:c1:3f:89:55:d1:c4:41:8d:aa:04:a1:64: 21:5d:8c:a2:a1:95:fc:5f:6c:f1:1c:34:ba:3d:3e: d2:d5:08:16:de:b1:3c:82:d6:03:f8:a2:db:27:d8: 17:cf:a0:cc:9e:74:a0:06:5d:c3:dc:6a:7f:cc:f2: 70:7e:86:16:18:b2:7d:05:72:8c:e0:66:bf:df:92: 76:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:AD:21:DC:31:93:DD:B8:02:66:43:2B:F2:DF:AF:E9:D9:48:77:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9a39c590-0f9f-3994-9c21-31fa96d1565e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 156.151.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:46:a5:67:80:4b:33:60:30:f6:10:2b:7f:0d:5b:ee:30:ba: a0:32:ea:f2:49:8b:cb:53:c7:35:2a:e1:10:6f:99:eb:0e:70: aa:46:e5:76:26:f8:db:a4:04:ec:1a:6b:2e:82:fe:02:bc:24: 13:68:a7:ea:ef:a3:20:98:98:a2:82:d0:fa:00:1f:35:39:83: f6:4a:c5:b3:04:0b:41:7b:12:9f:f8:52:e5:f1:5e:51:99:5d: 59:af:e8:6e:d9:06:d5:52:cb:ee:c8:0e:77:48:4c:55:16:f2: 9b:d7:54:7c:20:f0:f2:9a:da:73:04:1c:89:d6:45:ed:88:c6: ec:47:48:a7:5e:b0:14:f4:1a:03:35:6b:af:4a:30:df:08:48: ca:8a:02:0c:cf:da:34:b0:9d:da:fd:2f:59:79:08:3c:d9:a9: 78:b6:88:2e:f2:90:da:6b:52:c6:16:27:15:a2:4e:bc:91:61: d0:93:fc:63:20:33:99:5a:5c:77:ae:c3:85:8e:30:03:2c:e6: 38:5b:58:e0:25:04:8c:bd:47:53:07:cf:2f:c8:5e:de:7a:c5: c3:cd:95:2b:69:0a:86:b9:62:2e:9b:dc:35:3f:81:a7:e9:52: 73:a5:4a:2e:3f:5f:39:47:a3:03:77:0d:62:91:25:19:6d:ae: 91:9d:33:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5m2f+wahbQKqK/1MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcwNTIxMDAxMVoXDTI2MTAwMzIxMDAxMVowLzEtMCsGA1UEAxMk YTZmNTE2NGYtZTA3YS00MDRmLTg3YzItMGUwN2NjZGE4N2M3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlbJ+Gw5nVlxdTMRn/rAWBp8StbFN+yrrRCL uhWFQFEcxbUmk4Ja7KCk9amdlFegvBcqwaQqhGEdvUU+9VuCJtfUnIOlClVeIhn8 MWOjrc8n7FQwNblVALR16clmCm4/Ui9cPN+0gHKhIkkebJHulutmxto08YgcWFZu UP3k9SivV3xPln/SrIqGEvBKIY3Z9MX2YBF2af3bj82HKMMBADNI4uV+KKpuap0u JWhkQzDV9/SsyF3BP4lV0cRBjaoEoWQhXYyioZX8X2zxHDS6PT7S1QgW3rE8gtYD +KLbJ9gXz6DMnnSgBl3D3Gp/zPJwfoYWGLJ9BXKM4Ga/35J21QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDCtIdwxk924AmZDK/Lfr+nZSHdrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOWEzOWM1OTAtMGY5Zi0z OTk0LTljMjEtMzFmYTk2ZDE1NjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJfCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADdGpWeASzNgMPYQK38NW+4wuqAy6vJJi8tTxzUq4RBvmesOcKpG5XYm +NukBOwaay6C/gK8JBNop+rvoyCYmKKC0PoAHzU5g/ZKxbMEC0F7Ep/4UuXxXlGZ XVmv6G7ZBtVSy+7IDndITFUW8pvXVHwg8PKa2nMEHInWRe2IxuxHSKdesBT0GgM1 a69KMN8ISMqKAgzP2jSwndr9L1l5CDzZqXi2iC7ykNprUsYWJxWiTryRYdCT/GMg M5laXHeuw4WOMAMs5jhbWOAlBIy9R1MHzy/IXt56xcPNlStpCoa5Yi6b3DU/gafp UnOlSi4/XzlHowN3DWKRJRltrpGdM74= -----END CERTIFICATE-----Generated at Wed Jul 22 02:37:57 2026 by rpki-client