$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d311abab-4b88-3922-9528-e66fb1ddecdc.roa File: d311abab-4b88-3922-9528-e66fb1ddecdc.roa (raw, json) Hash identifier: /uB47NozKkH6nd7AslkYEQGf5oz/9uIkrX5rYfdQPQI= Subject key identifier: E1:28:AE:B3:22:98:5F:FB:6B:12:3F:B0:34:20:CA:A8:29:D1:8F:37 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E81D0C1DD120C827E59FD7BE0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d311abab-4b88-3922-9528-e66fb1ddecdc.roa Signing time: Wed 15 Jul 2026 12:48:25 +0000 ROA not before: Wed 15 Jul 2026 12:48:25 +0000 ROA not after: Tue 13 Oct 2026 12:48:25 +0000 asID: 2763 IP address blocks: 156.151.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:81:d0:c1:dd:12:0c:82:7e:59:fd:7b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 15 12:48:25 2026 GMT Not After : Oct 13 12:48:25 2026 GMT Subject: CN=5c087c28-6613-4102-9c58-74da43657e75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b6:6e:68:e8:5a:ce:73:3b:6f:f3:db:f2:a6: b1:27:f9:e3:13:db:a3:7a:62:26:21:bb:4a:06:2e: 8f:ba:4f:c7:96:22:8e:3e:af:aa:a2:27:dc:69:4f: 39:95:8c:28:22:8f:9d:c0:1e:60:a3:b2:9f:85:d4: a3:ef:a2:da:4a:cd:58:8c:34:66:82:0b:2d:16:b0: fe:fe:6d:07:34:8a:90:71:6b:74:54:31:f4:15:f9: f0:64:bf:2d:ec:ae:92:23:7e:54:39:3b:69:a3:0f: 76:ea:aa:f6:ee:79:03:f4:67:29:75:9f:2f:56:46: ff:d7:a0:29:3f:52:c7:d5:15:65:08:3c:93:04:81: 5c:51:17:e2:03:c4:bf:a8:82:5c:9a:99:b4:16:44: 0e:27:8d:d1:7a:ca:8c:e3:6c:40:75:1f:fe:22:64: 0e:36:12:66:57:74:ca:45:e7:d4:d1:57:0b:ae:3f: 6b:6e:6c:98:32:65:f8:45:e4:31:eb:64:89:16:66: c0:08:e7:ba:66:24:12:c1:29:31:bc:cd:0d:f4:54: 6d:19:07:a3:54:77:c7:ba:86:4c:40:1e:34:2f:27: b6:aa:b2:b0:8e:75:5f:85:3f:75:06:65:ed:1b:4e: 01:b0:16:90:59:97:fa:43:0f:8c:3b:f7:45:5b:69: 04:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:28:AE:B3:22:98:5F:FB:6B:12:3F:B0:34:20:CA:A8:29:D1:8F:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d311abab-4b88-3922-9528-e66fb1ddecdc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 156.151.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:6c:4e:f4:fb:6f:d6:52:95:f6:10:dc:bc:49:7a:09:4e:ac: 5d:1d:a6:6f:9b:02:4c:74:03:dd:45:f3:23:4f:5a:78:c7:32: bb:21:cb:dd:24:c3:eb:6d:98:e0:71:8e:fc:0e:b5:59:46:0f: 9d:4a:c2:d2:bc:a1:ce:60:01:62:f8:06:59:c0:c4:07:c0:9f: 64:af:61:c1:c4:83:52:4a:27:34:d3:b5:85:78:d7:14:48:8c: 8e:80:9c:be:ee:d1:ce:44:d2:e0:3f:4f:0b:67:ea:df:3e:a1: bc:71:fa:99:a2:be:7a:cb:48:23:85:4f:18:40:3b:21:15:d1: 51:0c:f5:f0:b8:b6:76:d6:1c:82:7b:50:f5:e0:eb:66:ef:50: 57:41:a0:43:46:a6:e4:b9:5f:d2:b5:10:ed:ef:f2:28:cf:1e: 8b:5d:0c:91:ad:19:88:68:87:04:59:b1:07:e0:a3:20:59:da: 36:70:da:cd:42:8d:2e:9b:73:66:0b:18:3a:59:a0:82:4f:3b: 0d:5b:78:8f:57:15:22:f9:c4:1d:68:33:2c:69:62:37:8f:58: ff:89:1c:f4:af:f8:ce:fd:02:b6:2f:4a:16:e1:2d:b1:96:11: 23:a9:56:63:a4:81:c5:72:a5:07:7d:8e:2d:2d:09:50:bb:6f: 38:85:99:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6B0MHdEgyCfln9e+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcxNTEyNDgyNVoXDTI2MTAxMzEyNDgyNVowLzEtMCsGA1UEAxMk NWMwODdjMjgtNjYxMy00MTAyLTljNTgtNzRkYTQzNjU3ZTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLZuaOhaznM7b/Pb8qaxJ/njE9ujemImIbtK Bi6Puk/HliKOPq+qoifcaU85lYwoIo+dwB5go7KfhdSj76LaSs1YjDRmggstFrD+ /m0HNIqQcWt0VDH0FfnwZL8t7K6SI35UOTtpow926qr27nkD9GcpdZ8vVkb/16Ap P1LH1RVlCDyTBIFcURfiA8S/qIJcmpm0FkQOJ43ResqM42xAdR/+ImQONhJmV3TK RefU0VcLrj9rbmyYMmX4ReQx62SJFmbACOe6ZiQSwSkxvM0N9FRtGQejVHfHuoZM QB40Lye2qrKwjnVfhT91BmXtG04BsBaQWZf6Qw+MO/dFW2kEbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOEorrMimF/7axI/sDQgyqgp0Y83MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZDMxMWFiYWItNGI4OC0z OTIyLTk1MjgtZTY2ZmIxZGRlY2RjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJfNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGVsTvT7b9ZSlfYQ3LxJeglOrF0dpm+bAkx0A91F8yNPWnjHMrshy90k w+ttmOBxjvwOtVlGD51KwtK8oc5gAWL4BlnAxAfAn2SvYcHEg1JKJzTTtYV41xRI jI6AnL7u0c5E0uA/Twtn6t8+obxx+pmivnrLSCOFTxhAOyEV0VEM9fC4tnbWHIJ7 UPXg62bvUFdBoENGpuS5X9K1EO3v8ijPHotdDJGtGYhohwRZsQfgoyBZ2jZw2s1C jS6bc2YLGDpZoIJPOw1beI9XFSL5xB1oMyxpYjePWP+JHPSv+M79ArYvShbhLbGW ESOpVmOkgcVypQd9ji0tCVC7bziFmfA= -----END CERTIFICATE-----Generated at Wed Jul 22 02:31:35 2026 by rpki-client