$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/abe939e6-015c-3bda-92fa-f8264ac59be6.roa File: abe939e6-015c-3bda-92fa-f8264ac59be6.roa (raw, json) Hash identifier: yX2ixG0FCDPQW4Wu3NPaExrlkHSiMDtEl2KIKe1Fgg8= Subject key identifier: E1:55:65:D5:86:44:8C:D5:F9:49:3B:9E:8B:69:C4:FA:EB:7E:1C:BC Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584EA79B63C8EA6F92E0A4FBA480 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/abe939e6-015c-3bda-92fa-f8264ac59be6.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 213122 IP address blocks: 128.254.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9b:63:c8:ea:6f:92:e0:a4:fb:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=c031d201-acce-4a64-9cb4-82a86455b314 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:52:b7:45:8e:c4:42:b4:bb:02:21:0c:a0:6a: f0:72:30:ef:2d:89:10:b6:c2:eb:38:68:29:76:e8: ae:2f:0f:73:92:45:21:6d:70:11:19:c9:be:9a:49: 35:ab:05:a8:96:af:62:21:49:6d:da:49:2e:b2:d2: 25:f4:26:86:61:07:12:fa:58:f7:2e:04:22:da:d8: 90:08:95:63:cb:70:a8:3d:11:8c:11:6b:d2:18:4f: 3c:6f:04:d4:23:93:1e:fc:c2:e5:29:be:7d:d9:cd: 13:d0:7c:59:c9:49:ce:68:f1:b9:3f:07:0e:46:4c: 10:06:18:b9:6f:e7:19:0a:54:2e:89:51:3d:a8:41: b0:51:06:5f:19:0c:96:63:50:1e:42:49:87:03:e7: 2c:4a:ef:67:c2:d0:92:68:ff:fd:99:a7:71:f9:0a: d8:c3:e6:b0:fb:b3:ba:0c:cf:f8:61:49:96:09:11: c7:e0:91:f5:6b:88:28:00:6d:3b:83:a6:c0:5d:4a: 62:e7:8e:ed:51:9d:f3:ca:d7:92:2d:5d:44:ec:f2: e0:0b:e8:66:35:1d:5b:68:6c:df:7e:8a:24:eb:66: 4f:d0:b7:66:bf:da:38:a5:aa:74:3d:da:ef:a1:7d: 84:8b:59:a0:68:34:d0:02:68:02:8b:4a:1a:03:9b: 6d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:55:65:D5:86:44:8C:D5:F9:49:3B:9E:8B:69:C4:FA:EB:7E:1C:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/abe939e6-015c-3bda-92fa-f8264ac59be6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 128.254.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:32:1a:1a:b0:e1:22:dd:36:75:3d:7f:7f:8a:f5:20:1d:2d: 79:36:74:12:21:af:40:1e:4f:6b:9e:46:f3:7d:c3:06:e6:8f: 69:e8:65:2c:20:23:5f:1c:25:76:10:fc:40:ab:21:43:ab:20: 82:d3:dc:b5:92:73:2d:21:9c:3a:c7:78:83:da:0c:ed:7a:93: 06:d0:42:18:e0:f0:2a:74:d2:f5:cd:78:e5:d3:bf:79:b0:fe: da:d3:47:fe:02:82:6f:a0:d1:46:38:ac:15:93:81:4d:8d:49: 45:6d:0e:a8:f9:5b:0d:7d:62:06:bd:0d:2c:e1:5f:e1:41:19: 44:91:1b:d0:b7:c1:cc:17:2f:7d:57:84:72:81:4a:72:f0:20: ee:bc:c9:1d:85:06:e6:20:49:30:4f:f7:94:97:5f:d3:e7:17: 36:96:02:ec:40:c7:37:0f:f1:20:89:44:9e:f8:2a:2d:93:a4: d3:6c:85:aa:ee:47:36:52:15:de:2d:14:2c:ff:c8:d7:6d:29: 7b:8b:0c:4c:8f:6b:77:87:d7:71:e4:c1:db:1f:f0:6f:ff:4b: 0f:ef:e4:ef:a1:86:bc:d2:33:cd:a6:e1:c6:54:0d:7b:a6:ab: 8c:76:06:ea:ac:e8:2d:c2:83:fa:4b:2f:76:8d:d6:d7:b6:d1: d2:89:34:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nm2PI6m+S4KT7pIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YzAzMWQyMDEtYWNjZS00YTY0LTljYjQtODJhODY0NTViMzE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1K3RY7EQrS7AiEMoGrwcjDvLYkQtsLrOGgp duiuLw9zkkUhbXARGcm+mkk1qwWolq9iIUlt2kkustIl9CaGYQcS+lj3LgQi2tiQ CJVjy3CoPRGMEWvSGE88bwTUI5Me/MLlKb592c0T0HxZyUnOaPG5PwcORkwQBhi5 b+cZClQuiVE9qEGwUQZfGQyWY1AeQkmHA+csSu9nwtCSaP/9madx+QrYw+aw+7O6 DM/4YUmWCRHH4JH1a4goAG07g6bAXUpi547tUZ3zyteSLV1E7PLgC+hmNR1baGzf fook62ZP0Ldmv9o4pap0PdrvoX2Ei1mgaDTQAmgCi0oaA5ttrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOFVZdWGRIzV+Uk7notpxPrrfhy8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvYWJlOTM5ZTYtMDE1Yy0z YmRhLTkyZmEtZjgyNjRhYzU5YmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgP7DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAIyGhqw4SLdNnU9f3+K9SAdLXk2dBIhr0AeT2ueRvN9wwbmj2noZSwg I18cJXYQ/ECrIUOrIILT3LWScy0hnDrHeIPaDO16kwbQQhjg8Cp00vXNeOXTv3mw /trTR/4Cgm+g0UY4rBWTgU2NSUVtDqj5Ww19Yga9DSzhX+FBGUSRG9C3wcwXL31X hHKBSnLwIO68yR2FBuYgSTBP95SXX9PnFzaWAuxAxzcP8SCJRJ74Ki2TpNNsharu RzZSFd4tFCz/yNdtKXuLDEyPa3eH13Hkwdsf8G//Sw/v5O+hhrzSM82m4cZUDXum q4x2Buqs6C3Cg/pLL3aN1te20dKJNPA= -----END CERTIFICATE-----Generated at Wed Jul 29 05:17:45 2026 by rpki-client