$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/85f04602-815a-374a-b7b8-25f3d69f600e.roa File: 85f04602-815a-374a-b7b8-25f3d69f600e.roa (raw, json) Hash identifier: AJlQI3iR7XZfsDp8MAnkP7yonBJ0vf+O6/6OMAfhGkE= Subject key identifier: 67:92:32:87:2B:E3:07:1C:83:CF:31:65:4C:22:01:A1:9C:51:F6:12 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584EA7871FE94B07759A3203A880 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/85f04602-815a-374a-b7b8-25f3d69f600e.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 19905 IP address blocks: 150.195.54.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:1f:e9:4b:07:75:9a:32:03:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=6e27956e-1cd7-4d39-bfe5-30a3ebd41cf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ae:3c:fd:9d:dd:8c:04:ed:15:e1:b9:e6:8f: 2f:e7:07:90:f2:05:19:73:fb:49:f7:fe:fc:ea:37: 8f:9f:17:dc:17:56:8d:9a:5c:6d:5f:87:f8:46:55: 2e:9a:c2:88:00:76:a8:ea:81:84:ee:40:9b:83:67: 5f:d7:1b:ef:43:7d:c6:0c:f2:de:b8:2b:1e:76:d8: 28:a6:69:5d:53:98:4e:70:ff:05:9a:28:8d:17:d8: e5:31:38:9b:da:5b:f1:93:41:e9:d2:3f:ea:1c:8a: 42:82:e0:29:5e:de:4b:1d:80:6f:40:8b:9d:8f:f0: e3:43:61:a4:c8:92:dc:ec:3f:81:20:28:b3:2b:95: 05:5a:13:0c:f3:a7:50:df:ba:27:f7:44:04:73:66: 64:31:8e:62:a2:0f:82:3c:13:f9:02:bd:f3:10:59: 56:44:55:e1:68:5d:13:7f:bf:3e:88:fd:d5:9d:b2: 2e:59:00:5a:af:b1:52:25:e4:47:df:3a:ea:14:eb: f9:7b:c1:c8:fc:cd:bc:d9:03:53:63:3f:28:23:3f: be:61:34:4b:ad:39:b3:3f:f4:56:ac:0f:c9:5c:99: 46:0b:f4:ec:ac:86:fb:6c:e4:76:69:0d:bd:17:bf: 1f:0b:cc:68:53:82:26:d0:ee:55:d5:0e:ab:97:e8: ea:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:92:32:87:2B:E3:07:1C:83:CF:31:65:4C:22:01:A1:9C:51:F6:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/85f04602-815a-374a-b7b8-25f3d69f600e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 150.195.54.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:5f:25:ec:21:5b:31:1d:38:18:19:99:16:e9:ac:5a:4a:c8: 48:ab:d1:8b:6d:bd:2c:ab:65:6c:37:c8:1a:5a:08:f7:2b:4f: a4:27:de:4a:6a:89:f2:c2:f2:00:33:27:2e:c3:bb:af:e5:48: fd:64:39:27:d9:45:4a:1b:f5:5f:e8:ec:cb:64:fe:89:71:22: 8f:9f:01:6d:21:5d:f5:4e:ff:9d:9e:73:30:61:cc:16:8e:98: 82:b6:11:1f:69:71:8d:df:67:0e:38:d5:f4:44:92:3f:f6:f6: 54:b5:e7:28:cc:70:2d:40:57:fc:33:b5:cb:e2:67:7c:9f:54: f4:1b:8c:8b:f5:31:e5:3f:07:10:8e:1b:dd:fa:3f:29:60:dd: f5:40:1b:42:b4:ea:e2:b4:5c:4c:b6:10:8c:90:89:a1:f4:57: da:62:24:29:f2:36:2b:5b:2d:d9:3d:00:7d:12:59:7f:52:d9: 90:42:71:ea:cd:13:8b:78:6c:7a:67:04:88:ad:29:61:a3:e2: 59:0f:96:c1:ad:79:7c:f2:d3:63:c2:14:20:62:53:65:76:bd: 28:75:47:df:89:21:d2:78:3a:64:f7:3d:aa:33:24:29:4e:c0: 78:ca:13:c4:65:d7:a2:d3:13:56:c0:d4:2a:4d:71:e0:54:91: ad:f9:39:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nhx/pSwd1mjIDqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NmUyNzk1NmUtMWNkNy00ZDM5LWJmZTUtMzBhM2ViZDQxY2Y1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkK48/Z3djATtFeG55o8v5weQ8gUZc/tJ9/78 6jePnxfcF1aNmlxtX4f4RlUumsKIAHao6oGE7kCbg2df1xvvQ33GDPLeuCsedtgo pmldU5hOcP8FmiiNF9jlMTib2lvxk0Hp0j/qHIpCguApXt5LHYBvQIudj/DjQ2Gk yJLc7D+BICizK5UFWhMM86dQ37on90QEc2ZkMY5iog+CPBP5Ar3zEFlWRFXhaF0T f78+iP3VnbIuWQBar7FSJeRH3zrqFOv5e8HI/M282QNTYz8oIz++YTRLrTmzP/RW rA/JXJlGC/TsrIb7bOR2aQ29F78fC8xoU4Im0O5V1Q6rl+jq8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGeSMocr4wccg88xZUwiAaGcUfYSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODVmMDQ2MDItODE1YS0z NzRhLWI3YjgtMjVmM2Q2OWY2MDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlsM2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABhfJewhWzEdOBgZmRbprFpKyEir0YttvSyrZWw3yBpaCPcrT6Qn3kpq ifLC8gAzJy7Du6/lSP1kOSfZRUob9V/o7Mtk/olxIo+fAW0hXfVO/52eczBhzBaO mIK2ER9pcY3fZw441fREkj/29lS15yjMcC1AV/wztcviZ3yfVPQbjIv1MeU/BxCO G936Pylg3fVAG0K06uK0XEy2EIyQiaH0V9piJCnyNitbLdk9AH0SWX9S2ZBCcerN E4t4bHpnBIitKWGj4lkPlsGteXzy02PCFCBiU2V2vSh1R9+JIdJ4OmT3PaozJClO wHjKE8Rl16LTE1bA1CpNceBUka35OSA= -----END CERTIFICATE-----Generated at Wed Jul 29 08:18:16 2026 by rpki-client