$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e659e35d-faf2-4685-b322-e54fbe3a41e9/bb5fb053-0a17-3122-970c-cf4d60448f9d.roa File: bb5fb053-0a17-3122-970c-cf4d60448f9d.roa (raw, json) Hash identifier: 2YOgGxycOSrPpDaSdMsIIiqcTkpFvEuW8ieB0OO/7QM= Subject key identifier: 80:86:70:DC:28:3D:B1:99:08:73:AC:18:32:D5:AF:D2:61:E6:89:6B Certificate issuer: /CN=e659e35d-faf2-4685-b322-e54fbe3a41e9 Certificate serial: 010D0C9F4328584EA798D2AE08A0BBE6A7E2DC40 Authority key identifier: 0E:22:9A:4B:EB:5E:CF:B1:66:AB:A8:F5:E5:88:21:29:35:12:5A:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e659e35d-faf2-4685-b322-e54fbe3a41e9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e659e35d-faf2-4685-b322-e54fbe3a41e9/bb5fb053-0a17-3122-970c-cf4d60448f9d.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 23265 IP address blocks: 67.158.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e659e35d-faf2-4685-b322-e54fbe3a41e9/e659e35d-faf2-4685-b322-e54fbe3a41e9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e659e35d-faf2-4685-b322-e54fbe3a41e9/e659e35d-faf2-4685-b322-e54fbe3a41e9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e659e35d-faf2-4685-b322-e54fbe3a41e9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:98:d2:ae:08:a0:bb:e6:a7:e2:dc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e659e35d-faf2-4685-b322-e54fbe3a41e9 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=a46a3a98-8405-41dc-8044-1ada02d15c57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a1:ad:2a:14:78:1c:d4:8c:af:f5:7b:79:f5: 9c:ae:ab:2c:18:c6:3f:4d:ff:8c:1c:27:69:d6:b5: 3b:d7:d5:57:7e:3c:9c:c9:db:52:a9:5a:69:63:51: 57:2c:be:f2:d3:61:0a:a3:1d:62:fd:4d:21:9b:df: 4e:6e:7c:c3:b3:f6:2d:b6:3f:b1:e0:e4:3a:9a:24: ed:af:9e:ee:7d:51:16:26:df:7b:80:73:57:c4:08: bc:9d:36:7f:51:12:cc:03:e3:1e:1f:cc:33:52:03: 9c:cf:4d:86:ef:ab:90:41:9f:19:db:d8:f6:d0:55: 6d:18:bf:1e:5f:c3:08:ae:e3:42:02:1c:c7:01:80: 4f:73:c1:62:53:ba:a3:3b:67:e4:38:95:ea:ab:30: 70:33:76:cb:5e:9f:07:13:e8:88:f0:63:6d:da:18: b3:43:ca:96:87:9a:4d:08:b4:df:28:a7:6e:42:b8: c5:66:c3:89:a6:e1:04:f1:f7:ce:c7:c7:15:94:82: 6e:02:7b:5a:46:aa:50:b6:1f:30:c2:1c:ca:8b:30: fb:29:22:20:0a:3b:52:2c:ea:8a:55:da:d8:e1:99: 20:69:82:c3:cc:ea:85:57:b3:51:41:01:19:59:f7: fe:b5:0d:ed:6f:9e:65:0d:fe:d9:05:07:92:e0:20: 06:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:86:70:DC:28:3D:B1:99:08:73:AC:18:32:D5:AF:D2:61:E6:89:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e659e35d-faf2-4685-b322-e54fbe3a41e9/bb5fb053-0a17-3122-970c-cf4d60448f9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e659e35d-faf2-4685-b322-e54fbe3a41e9/e659e35d-faf2-4685-b322-e54fbe3a41e9.crl X509v3 Authority Key Identifier: keyid:0E:22:9A:4B:EB:5E:CF:B1:66:AB:A8:F5:E5:88:21:29:35:12:5A:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e659e35d-faf2-4685-b322-e54fbe3a41e9.cer sbgp-ipAddrBlock: critical IPv4: 67.158.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:08:4a:01:4a:68:16:bb:6f:c0:22:53:e3:42:89:af:13:d2: 26:41:6f:bf:ff:eb:9e:77:13:1c:d6:f4:e3:e7:f7:4b:dc:4b: 97:7c:a5:6f:de:4a:30:e2:b7:72:a9:74:e5:50:d6:2f:79:c0: cf:68:fe:e5:13:5e:8a:1d:6a:f5:3a:f2:2d:81:73:12:27:59: 00:d5:24:6a:c5:2d:b6:46:4d:16:c8:fc:30:6c:9e:0b:3e:ed: 48:67:6d:66:5d:40:95:ac:3c:90:ee:db:14:b5:42:98:00:75: ce:be:2f:27:72:22:e4:e9:22:b7:93:3e:fd:da:d4:04:5f:20: bb:fd:e2:10:6b:80:b1:58:6f:cd:34:f8:7a:9e:e8:f8:61:43: 35:1f:68:a2:cf:43:59:68:1c:61:e7:44:cb:81:7a:56:c9:4e: 9a:11:11:00:ac:fe:38:11:00:55:53:d6:3e:3c:ad:21:1e:59: df:96:df:39:fd:83:0a:c5:2a:2c:e9:c2:d6:79:bc:9a:61:d9: fd:5c:1c:f9:30:95:d7:a4:63:e8:b9:4a:2c:20:5d:4a:3e:da: f3:60:26:e6:ef:80:21:28:c1:0a:a8:3d:6f:23:45:83:f8:69: e9:f7:6c:7c:4b:16:a7:62:88:9f:76:d7:00:6f:f0:78:96:20: ee:40:d9:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmNKuCKC75qfi3EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTY1OWUzNWQtZmFmMi00Njg1LWIzMjItZTU0ZmJlM2E0 MWU5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YTQ2YTNhOTgtODQwNS00MWRjLTgwNDQtMWFkYTAyZDE1YzU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaGtKhR4HNSMr/V7efWcrqssGMY/Tf+MHCdp 1rU719VXfjycydtSqVppY1FXLL7y02EKox1i/U0hm99ObnzDs/Yttj+x4OQ6miTt r57ufVEWJt97gHNXxAi8nTZ/URLMA+MeH8wzUgOcz02G76uQQZ8Z29j20FVtGL8e X8MIruNCAhzHAYBPc8FiU7qjO2fkOJXqqzBwM3bLXp8HE+iI8GNt2hizQ8qWh5pN CLTfKKduQrjFZsOJpuEE8ffOx8cVlIJuAntaRqpQth8wwhzKizD7KSIgCjtSLOqK VdrY4ZkgaYLDzOqFV7NRQQEZWff+tQ3tb55lDf7ZBQeS4CAGhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFICGcNwoPbGZCHOsGDLVr9Jh5olrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lNjU5 ZTM1ZC1mYWYyLTQ2ODUtYjMyMi1lNTRmYmUzYTQxZTkvYmI1ZmIwNTMtMGExNy0z MTIyLTk3MGMtY2Y0ZDYwNDQ4ZjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTY1OWUzNWQtZmFmMi00Njg1LWIz MjItZTU0ZmJlM2E0MWU5L2U2NTllMzVkLWZhZjItNDY4NS1iMzIyLWU1NGZiZTNh NDFlOS5jcmwwHwYDVR0jBBgwFoAUDiKaS+tez7Fmq6j15YghKTUSWvswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lNjU5ZTM1ZC1mYWYyLTQ2ODUtYjMyMi1lNTRm YmUzYTQxZTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ57gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABEISgFKaBa7b8AiU+NCia8T0iZBb7//6553ExzW9OPn90vcS5d8pW/e SjDit3KpdOVQ1i95wM9o/uUTXoodavU68i2BcxInWQDVJGrFLbZGTRbI/DBsngs+ 7UhnbWZdQJWsPJDu2xS1QpgAdc6+LydyIuTpIreTPv3a1ARfILv94hBrgLFYb800 +Hqe6PhhQzUfaKLPQ1loHGHnRMuBelbJTpoREQCs/jgRAFVT1j48rSEeWd+W3zn9 gwrFKizpwtZ5vJph2f1cHPkwldekY+i5SiwgXUo+2vNgJubvgCEowQqoPW8jRYP4 aen3bHxLFqdiiJ921wBv8HiWIO5A2cs= -----END CERTIFICATE-----Generated at Wed Jul 29 09:12:34 2026 by rpki-client