$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/eafd673f-1b99-3314-a8b5-d658f6891223.roa File: eafd673f-1b99-3314-a8b5-d658f6891223.roa (raw, json) Hash identifier: fLdxehJ7HoQq9V5Rg1ZKN6mkTj0xrNR0g5IoYMrN9Ts= Subject key identifier: E4:15:9E:51:E6:58:9F:35:2B:2E:8B:11:24:F0:63:5B:6A:E1:EB:54 Certificate issuer: /CN=4d754a75-6fef-427a-8a5d-d152fb72f46d Certificate serial: 010D0C9F4328584EA78745DDE7663F0B4BF56300 Authority key identifier: E4:23:FA:30:4E:50:F0:F7:51:74:45:81:BD:6E:13:37:F9:19:D9:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/eafd673f-1b99-3314-a8b5-d658f6891223.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 32913 IP address blocks: 23.157.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/4d754a75-6fef-427a-8a5d-d152fb72f46d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/4d754a75-6fef-427a-8a5d-d152fb72f46d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:45:dd:e7:66:3f:0b:4b:f5:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d754a75-6fef-427a-8a5d-d152fb72f46d Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=649ab4b5-85c1-43ca-8815-3b5ad9a53e7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:5f:b6:09:33:7f:7f:c7:3d:62:33:06:34:3f: 22:8e:2b:52:66:6f:f0:55:e6:7f:0e:ec:0b:20:1f: 79:8e:d3:ff:bb:00:ee:f0:77:18:2c:66:b1:d9:64: c3:3c:ea:30:df:d7:0c:bc:8a:da:d3:78:4f:01:67: 56:48:b5:4c:04:0e:38:60:d7:6f:8a:70:05:1f:5e: 4e:40:c1:f4:db:f5:5c:46:f2:9c:c6:65:7d:9a:0e: d7:15:95:3f:a8:d1:43:3a:6c:05:41:43:c6:eb:80: 1e:38:fb:e5:89:a8:08:02:7a:18:fd:a3:65:8b:e3: 49:a6:a1:8f:53:2d:81:d7:67:7f:a2:49:47:db:32: 5c:97:be:a1:24:f5:5a:ad:ec:e1:cf:5b:d7:15:6d: c6:fb:f3:39:50:40:85:b1:40:46:17:64:30:96:4a: 33:ec:53:84:23:7c:76:1c:e3:b3:4a:6b:a8:4d:b6: c1:33:f5:f5:07:11:22:4b:1c:46:ba:07:c1:7b:c7: 2d:35:da:d3:f3:1f:56:38:5e:86:ea:78:3e:a8:21: 31:89:d8:8d:e0:25:c1:67:fa:47:e2:f5:88:06:2f: f8:54:0a:47:30:23:00:7f:6c:c1:f0:36:08:3b:54: 6c:45:0b:af:e7:54:6f:69:ec:16:35:1a:66:1f:4a: 43:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:15:9E:51:E6:58:9F:35:2B:2E:8B:11:24:F0:63:5B:6A:E1:EB:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/eafd673f-1b99-3314-a8b5-d658f6891223.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/4d754a75-6fef-427a-8a5d-d152fb72f46d.crl X509v3 Authority Key Identifier: keyid:E4:23:FA:30:4E:50:F0:F7:51:74:45:81:BD:6E:13:37:F9:19:D9:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d.cer sbgp-ipAddrBlock: critical IPv4: 23.157.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:7b:7e:b6:87:1a:2c:1b:ed:5a:f4:e0:b8:6a:d0:67:ea:82: ac:3f:8b:81:f5:4a:5c:c8:26:11:d2:1a:d4:f2:11:79:19:9c: 74:de:34:b1:0b:c3:89:4d:16:69:4f:fb:42:1f:82:4a:b1:02: 99:52:00:40:3b:19:1e:f1:88:48:b8:74:37:63:f6:66:40:1b: 02:0f:71:8d:b9:78:c8:e8:ad:4b:df:07:48:2b:15:0e:fe:d2: 01:62:dc:51:81:38:62:27:e6:e5:6e:0e:6f:ba:f9:dd:bf:83: f8:b8:1f:93:36:c8:84:b1:05:9c:f3:f8:e8:35:f8:68:1e:77: b5:0a:72:88:27:31:67:12:24:49:02:39:57:df:45:b0:9a:36: 88:d9:02:fb:82:fc:6c:b2:70:7b:fb:18:0d:a8:de:0c:b0:33: bc:db:0f:69:32:8c:8c:76:da:b8:ef:65:96:12:92:35:f9:4d: 94:e6:ea:bc:af:63:ed:10:35:ea:a0:2f:67:f9:82:03:4a:51: 0e:12:19:e5:74:db:85:7c:75:69:de:9e:39:92:76:47:c6:2c: e6:5a:ea:27:98:c8:fd:75:93:de:30:86:f0:d9:99:63:88:7e: 81:94:d6:a1:ea:26:37:30:76:00:71:cb:05:bb:52:6d:ed:7b: 36:92:f1:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh0Xd52Y/C0v1YwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQ3NTRhNzUtNmZlZi00MjdhLThhNWQtZDE1MmZiNzJm NDZkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NjQ5YWI0YjUtODVjMS00M2NhLTg4MTUtM2I1YWQ5YTUzZTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiV+2CTN/f8c9YjMGND8ijitSZm/wVeZ/DuwL IB95jtP/uwDu8HcYLGax2WTDPOow39cMvIra03hPAWdWSLVMBA44YNdvinAFH15O QMH02/VcRvKcxmV9mg7XFZU/qNFDOmwFQUPG64AeOPvliagIAnoY/aNli+NJpqGP Uy2B12d/oklH2zJcl76hJPVarezhz1vXFW3G+/M5UECFsUBGF2Qwlkoz7FOEI3x2 HOOzSmuoTbbBM/X1BxEiSxxGugfBe8ctNdrT8x9WOF6G6ng+qCExidiN4CXBZ/pH 4vWIBi/4VApHMCMAf2zB8DYIO1RsRQuv51RvaewWNRpmH0pD7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOQVnlHmWJ81Ky6LESTwY1tq4etUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZDc1 NGE3NS02ZmVmLTQyN2EtOGE1ZC1kMTUyZmI3MmY0NmQvZWFmZDY3M2YtMWI5OS0z MzE0LWE4YjUtZDY1OGY2ODkxMjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGQ3NTRhNzUtNmZlZi00MjdhLThh NWQtZDE1MmZiNzJmNDZkLzRkNzU0YTc1LTZmZWYtNDI3YS04YTVkLWQxNTJmYjcy ZjQ2ZC5jcmwwHwYDVR0jBBgwFoAU5CP6ME5Q8PdRdEWBvW4TN/kZ2UswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZDc1NGE3NS02ZmVmLTQyN2EtOGE1ZC1kMTUy ZmI3MmY0NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF52YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH97fraHGiwb7Vr04Lhq0Gfqgqw/i4H1SlzIJhHSGtTyEXkZnHTeNLEL w4lNFmlP+0IfgkqxAplSAEA7GR7xiEi4dDdj9mZAGwIPcY25eMjorUvfB0grFQ7+ 0gFi3FGBOGIn5uVuDm+6+d2/g/i4H5M2yISxBZzz+Og1+Gged7UKcognMWcSJEkC OVffRbCaNojZAvuC/GyycHv7GA2o3gywM7zbD2kyjIx22rjvZZYSkjX5TZTm6ryv Y+0QNeqgL2f5ggNKUQ4SGeV024V8dWnenjmSdkfGLOZa6ieYyP11k94whvDZmWOI foGU1qHqJjcwdgBxywW7Um3tezaS8eI= -----END CERTIFICATE-----Generated at Wed Jul 29 04:44:43 2026 by rpki-client