$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/aaa15e59-d5a0-3d24-8b0a-7c3e178b4350.roa File: aaa15e59-d5a0-3d24-8b0a-7c3e178b4350.roa (raw, json) Hash identifier: zY5oPSb+gJumtCitOoHNZjJYj7a+XuyrigLFhNcg7Fo= Subject key identifier: 67:48:15:84:A1:F6:87:8B:AB:00:AA:0C:FA:4E:A1:85:0E:6F:98:BE Certificate issuer: /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20 Certificate serial: 010D0C9F4328584E9EAFE522B4CC1E943457DDC0 Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/aaa15e59-d5a0-3d24-8b0a-7c3e178b4350.roa Signing time: Sat 25 Jul 2026 21:00:12 +0000 ROA not before: Sat 25 Jul 2026 21:00:12 +0000 ROA not after: Fri 23 Oct 2026 21:00:12 +0000 asID: 0 IP address blocks: 192.58.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9e:af:e5:22:b4:cc:1e:94:34:57:dd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20 Validity Not Before: Jul 25 21:00:12 2026 GMT Not After : Oct 23 21:00:12 2026 GMT Subject: CN=f48da69b-4d3f-401c-a9f4-4cc968deceef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d9:c5:18:09:2d:39:5a:40:c0:92:8d:98:83: b9:68:d5:3d:b6:53:ab:1a:80:5e:e7:42:1f:51:10: 23:5d:06:53:34:df:1f:ef:f5:b5:16:8f:8d:43:38: f3:c1:bc:a7:29:9e:77:03:32:9d:89:ea:42:06:ae: 78:67:70:b5:18:22:da:a6:df:72:66:9d:33:2e:2a: 2b:77:f9:7c:ec:32:57:04:37:18:18:98:bd:dd:2d: 93:09:d1:a5:80:b7:f6:30:56:79:d9:3a:43:46:fc: 4f:da:95:fa:02:a9:ae:69:b4:42:24:93:27:73:ca: 70:c3:d5:ef:a7:fd:bb:ef:0e:29:a9:a4:30:11:60: 19:94:1e:ec:81:99:c9:92:72:b3:25:cb:3d:8c:cd: b7:7b:07:d9:73:37:94:4d:af:70:c0:78:06:e5:71: 68:1e:9b:0d:f5:40:9d:76:1b:cc:7c:5c:cf:3b:02: 6d:a0:e3:d5:b0:22:00:54:9d:ec:4c:a3:47:71:67: 4c:18:63:95:95:f5:0d:55:7c:8a:9b:11:21:07:30: c8:79:4a:28:f1:5d:a9:83:e1:55:99:37:eb:e4:a2: 3b:26:0c:ff:bc:ed:99:8a:b3:30:b1:50:73:38:00: 98:37:1e:5d:be:3d:c3:74:76:b5:47:67:50:8c:84: 13:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:48:15:84:A1:F6:87:8B:AB:00:AA:0C:FA:4E:A1:85:0E:6F:98:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/aaa15e59-d5a0-3d24-8b0a-7c3e178b4350.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl X509v3 Authority Key Identifier: keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer sbgp-ipAddrBlock: critical IPv4: 192.58.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:85:1e:b0:f9:b4:b2:68:21:3a:36:de:fd:51:78:75:34:4f: d7:d1:fb:6c:f9:eb:a2:01:df:9c:51:24:e2:14:ad:5a:ba:e4: 4f:fb:7a:13:d4:1c:ee:42:9e:a2:e1:12:a5:2a:9c:d1:da:a9: 6f:8d:9b:94:02:fe:04:06:ef:26:b4:da:4e:a7:bb:82:aa:17: 90:16:e5:dc:6f:5d:05:3a:28:ef:97:71:04:65:89:db:c4:ed: 58:7d:ff:5c:86:5a:b4:77:8c:7e:fc:ef:38:d8:1b:52:4d:be: cd:ad:f5:c6:27:20:2b:1a:19:2a:40:68:21:55:28:0a:29:41: 4b:dd:1f:a6:13:f4:c6:d1:df:af:84:26:96:22:65:34:61:0e: 12:01:fc:2f:4e:29:f3:8e:bc:8a:3d:af:04:d0:e4:ec:d7:03: 9c:6a:4a:76:b4:68:21:a5:e2:51:20:a6:13:f8:34:83:eb:3b: ce:57:7a:9e:84:51:db:5d:df:04:88:38:9a:e3:0f:2c:48:98: 1d:c0:79:20:6c:73:a0:23:8c:c1:5c:5d:85:58:a8:5b:e0:5f: 6f:4b:8a:42:e1:5f:d7:48:ad:a5:b0:42:af:54:6e:71:8b:f0: db:a5:10:c1:a0:53:9f:09:79:8a:fd:5b:6c:64:03:23:78:6a: 7f:27:37:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6er+UitMwelDRX3cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzVlMTM4ZGEtZGJhMy00ZDg5LWFiM2YtNjU2ZmJhNGI5 YzIwMB4XDTI2MDcyNTIxMDAxMloXDTI2MTAyMzIxMDAxMlowLzEtMCsGA1UEAxMk ZjQ4ZGE2OWItNGQzZi00MDFjLWE5ZjQtNGNjOTY4ZGVjZWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNnFGAktOVpAwJKNmIO5aNU9tlOrGoBe50If URAjXQZTNN8f7/W1Fo+NQzjzwbynKZ53AzKdiepCBq54Z3C1GCLapt9yZp0zLior d/l87DJXBDcYGJi93S2TCdGlgLf2MFZ52TpDRvxP2pX6AqmuabRCJJMnc8pww9Xv p/277w4pqaQwEWAZlB7sgZnJknKzJcs9jM23ewfZczeUTa9wwHgG5XFoHpsN9UCd dhvMfFzPOwJtoOPVsCIAVJ3sTKNHcWdMGGOVlfUNVXyKmxEhBzDIeUoo8V2pg+FV mTfr5KI7Jgz/vO2ZirMwsVBzOACYNx5dvj3DdHa1R2dQjIQTKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGdIFYSh9oeLqwCqDPpOoYUOb5i+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83NWUx MzhkYS1kYmEzLTRkODktYWIzZi02NTZmYmE0YjljMjAvYWFhMTVlNTktZDVhMC0z ZDI0LThiMGEtN2MzZTE3OGI0MzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzVlMTM4ZGEtZGJhMy00ZDg5LWFi M2YtNjU2ZmJhNGI5YzIwLzc1ZTEzOGRhLWRiYTMtNGQ4OS1hYjNmLTY1NmZiYTRi OWMyMC5jcmwwHwYDVR0jBBgwFoAUWY+WJt0yBRKzMlQ7ckHYRmR2yWEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83NWUxMzhkYS1kYmEzLTRkODktYWIzZi02NTZm YmE0YjljMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDrrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSFHrD5tLJoITo23v1ReHU0T9fR+2z566IB35xRJOIUrVq65E/7ehPU HO5CnqLhEqUqnNHaqW+Nm5QC/gQG7ya02k6nu4KqF5AW5dxvXQU6KO+XcQRlidvE 7Vh9/1yGWrR3jH787zjYG1JNvs2t9cYnICsaGSpAaCFVKAopQUvdH6YT9MbR36+E JpYiZTRhDhIB/C9OKfOOvIo9rwTQ5OzXA5xqSna0aCGl4lEgphP4NIPrO85Xep6E Udtd3wSIOJrjDyxImB3AeSBsc6AjjMFcXYVYqFvgX29LikLhX9dIraWwQq9UbnGL 8NulEMGgU58JeYr9W2xkAyN4an8nN98= -----END CERTIFICATE-----Generated at Wed Jul 29 02:44:41 2026 by rpki-client