$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/b1e66ddd-f5af-39e8-93f9-c38eff664429.roa File: b1e66ddd-f5af-39e8-93f9-c38eff664429.roa (raw, json) Hash identifier: MfBf5ShmjgE5W1yzzABIIR5SJyohht9d+U1TiC8LwNk= Subject key identifier: 92:E6:9F:60:49:5D:A3:D3:81:B9:D8:56:84:F4:F8:99:06:2F:CF:DB Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584EA79B6393C7DB7050788CCA40 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/b1e66ddd-f5af-39e8-93f9-c38eff664429.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 213122 IP address blocks: 128.254.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9b:63:93:c7:db:70:50:78:8c:ca:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=c3505807-96f4-4b8b-8c3a-cacef4fe044a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a5:f9:16:0b:c8:35:9d:f3:a7:25:93:bf:54: 2d:71:e6:63:83:72:57:48:55:06:45:3e:90:ec:89: 12:fd:04:48:da:21:23:05:86:03:7a:19:fa:9c:fe: e2:b5:6d:fb:19:ab:d4:e1:63:26:f7:d6:fe:bc:7a: 23:04:89:7f:ae:90:47:1f:04:30:8d:68:34:bf:7a: 86:0c:87:c1:30:95:11:68:c4:53:bd:04:b7:90:7d: 52:f4:cf:ad:a8:d9:69:6e:f2:f5:fc:c6:01:50:89: 71:d2:ed:18:4c:42:0a:09:10:ae:25:62:9e:51:0c: 1e:4f:ec:ae:d2:c1:65:f1:8d:80:8f:7f:c3:c6:03: 33:2a:7d:a5:7c:b6:45:66:3b:66:38:29:19:10:b5: c9:59:d8:f5:14:a3:49:53:44:6d:bf:f2:97:d9:2d: 8c:3f:6d:07:a3:79:02:2a:68:08:fc:71:76:35:44: 0c:8a:fd:36:f2:10:13:b5:b2:79:9d:28:49:7e:9d: 34:5e:53:51:48:7f:9f:20:99:1b:d3:fc:50:46:5e: 53:e6:44:34:3f:ba:5a:a7:0f:5c:d4:bb:69:59:0e: a5:a6:69:71:bc:bb:4b:4a:b1:b0:fc:75:2e:d9:bc: 5c:2a:32:83:3b:50:03:bb:06:90:85:4c:aa:3f:6d: 02:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:E6:9F:60:49:5D:A3:D3:81:B9:D8:56:84:F4:F8:99:06:2F:CF:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/b1e66ddd-f5af-39e8-93f9-c38eff664429.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 128.254.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:0c:0e:e4:c2:2e:88:bc:a5:73:45:b0:02:d2:6b:d9:bd:4f: 12:ec:5d:10:6a:40:8c:79:d2:26:66:a8:e2:95:1d:13:a1:e9: e6:23:1b:4d:e7:b7:1b:85:a9:da:02:96:e9:38:72:99:20:61: 8f:92:5d:aa:85:81:86:d0:fa:a2:c0:a5:27:ce:05:ac:7b:10: 8e:dc:fa:e2:6e:13:bf:02:83:90:7a:fd:29:38:49:5d:6c:91: f2:3e:c0:32:a1:aa:20:55:9b:30:43:ed:ed:31:66:bf:87:ff: f2:f0:d5:da:e0:7b:8d:37:c1:d1:b5:4c:26:9a:9b:62:d7:a6: 1c:15:60:b3:47:89:16:9d:2a:cf:1e:55:77:e5:44:1c:22:63: 22:0b:fa:db:e7:83:e4:0b:d9:a0:d5:04:75:f0:be:c2:9d:58: a8:3f:b4:88:a2:49:43:16:21:d4:cd:b9:7b:91:76:13:97:97: 85:46:00:06:8f:66:09:ef:aa:33:e5:17:b3:db:df:a0:5c:be: a0:5d:e5:1a:5b:8c:6b:0f:20:be:09:d5:5a:17:b5:5a:17:7d: 7f:c6:8a:1d:10:ee:cb:bb:90:51:2c:27:71:df:b3:24:dd:a7: 62:e3:71:89:4a:cf:5c:5b:f4:e4:ff:45:11:33:36:e9:eb:e4: a8:38:af:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nm2OTx9twUHiMykAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YzM1MDU4MDctOTZmNC00YjhiLThjM2EtY2FjZWY0ZmUwNDRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqX5FgvINZ3zpyWTv1QtceZjg3JXSFUGRT6Q 7IkS/QRI2iEjBYYDehn6nP7itW37GavU4WMm99b+vHojBIl/rpBHHwQwjWg0v3qG DIfBMJURaMRTvQS3kH1S9M+tqNlpbvL1/MYBUIlx0u0YTEIKCRCuJWKeUQweT+yu 0sFl8Y2Aj3/DxgMzKn2lfLZFZjtmOCkZELXJWdj1FKNJU0Rtv/KX2S2MP20Ho3kC KmgI/HF2NUQMiv028hATtbJ5nShJfp00XlNRSH+fIJkb0/xQRl5T5kQ0P7papw9c 1LtpWQ6lpmlxvLtLSrGw/HUu2bxcKjKDO1ADuwaQhUyqP20CjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJLmn2BJXaPTgbnYVoT0+JkGL8/bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvYjFlNjZkZGQtZjVhZi0z OWU4LTkzZjktYzM4ZWZmNjY0NDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgP7AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMMDuTCLoi8pXNFsALSa9m9TxLsXRBqQIx50iZmqOKVHROh6eYjG03n txuFqdoCluk4cpkgYY+SXaqFgYbQ+qLApSfOBax7EI7c+uJuE78Cg5B6/Sk4SV1s kfI+wDKhqiBVmzBD7e0xZr+H//Lw1drge403wdG1TCaam2LXphwVYLNHiRadKs8e VXflRBwiYyIL+tvng+QL2aDVBHXwvsKdWKg/tIiiSUMWIdTNuXuRdhOXl4VGAAaP ZgnvqjPlF7Pb36BcvqBd5RpbjGsPIL4J1VoXtVoXfX/Gih0Q7su7kFEsJ3HfsyTd p2LjcYlKz1xb9OT/RREzNunr5Kg4rxM= -----END CERTIFICATE-----Generated at Wed Jul 29 03:41:55 2026 by rpki-client