$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994/100036a5-3ecc-3953-ad52-6114836271e0.roa File: 100036a5-3ecc-3953-ad52-6114836271e0.roa (raw, json) Hash identifier: Bfl4cS3IU28BqWPrBm8SdIbGNrsjMIMOHNxNqdWyfGE= Subject key identifier: 0C:A5:59:EB:59:03:CD:C7:A6:05:55:5D:BE:56:63:D0:94:EC:4E:77 Certificate issuer: /CN=db9c5868-bb9c-4fd1-9aca-05762a850994 Certificate serial: 010D0C9F4328584EA791BF6305F8781139427180 Authority key identifier: C2:E2:9F:49:29:F7:CA:7B:D9:1D:13:1D:DF:1C:9E:F3:39:BB:3F:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994/100036a5-3ecc-3953-ad52-6114836271e0.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 15046 IP address blocks: 128.230.152.0/24 maxlen: 24 128.230.157.128/25 maxlen: 25 128.230.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994/db9c5868-bb9c-4fd1-9aca-05762a850994.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994/db9c5868-bb9c-4fd1-9aca-05762a850994.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:91:bf:63:05:f8:78:11:39:42:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db9c5868-bb9c-4fd1-9aca-05762a850994 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=95f2dabc-d250-4be8-ae32-1c64d4641d99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:a5:00:27:e1:44:af:ed:36:fb:e8:bd:ae:be: 1e:b1:c5:0d:99:c9:63:f5:1e:47:78:16:d5:6e:5b: e4:6e:a1:55:6d:15:ae:e4:91:9b:7e:a9:5d:0d:ea: 29:97:49:03:39:c7:5d:a2:6c:c0:5f:21:87:ea:b2: 2b:68:cc:28:eb:e0:c5:c8:4b:37:19:32:68:89:a6: ab:85:a4:e8:ac:0c:1c:7d:89:26:bc:a6:50:7a:25: 2e:c1:14:21:fd:bd:9e:3d:c6:7a:ef:e0:1f:f2:66: 39:6f:75:fe:69:91:ed:24:dc:de:12:6b:fb:2f:92: 4a:04:a0:07:c3:36:2d:de:99:26:b2:08:d3:7f:a5: 1e:4b:95:5e:99:2f:77:b2:0b:ea:d9:a5:1a:cd:ed: ad:26:51:cf:d8:e3:ae:64:4e:c7:16:c7:04:f3:9b: 84:32:27:41:ac:a1:98:af:e1:8d:f4:13:17:a6:36: 9a:a0:1e:f6:c4:86:eb:6f:33:54:f2:63:97:48:d4: c7:4f:49:12:16:b3:eb:72:01:b6:9b:8e:1f:5c:e8: b3:ab:eb:70:3f:29:9f:df:e1:8d:3f:17:95:bb:57: 4b:13:f0:1c:b8:83:dd:92:c1:03:28:f7:74:5d:b9: 97:7d:db:32:72:7e:dc:f1:e6:e4:ba:4c:dc:6b:4d: 3e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:A5:59:EB:59:03:CD:C7:A6:05:55:5D:BE:56:63:D0:94:EC:4E:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994/100036a5-3ecc-3953-ad52-6114836271e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994/db9c5868-bb9c-4fd1-9aca-05762a850994.crl X509v3 Authority Key Identifier: keyid:C2:E2:9F:49:29:F7:CA:7B:D9:1D:13:1D:DF:1C:9E:F3:39:BB:3F:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994.cer sbgp-ipAddrBlock: critical IPv4: 128.230.152.0/24 128.230.157.128/25 128.230.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:bf:27:c6:34:a0:ac:11:a4:e5:ca:53:f4:58:1f:92:b4:f2: c9:7c:e3:9e:f3:e2:07:62:06:36:bf:70:14:73:9f:60:41:a0: 77:ac:39:21:36:95:5d:65:b6:a7:4a:20:db:a9:9b:a5:ae:9b: 67:32:d0:57:3e:99:f8:30:e8:f3:f0:7b:41:b8:4d:24:51:55: f0:03:dc:a4:d9:3f:d0:0a:70:b4:c5:b7:27:7f:04:12:37:e4: cf:7e:bd:20:f8:80:82:9c:53:40:2f:ce:fc:15:24:b9:1a:44: cc:7c:ee:5e:ef:36:88:39:c9:38:40:94:a5:0d:af:a5:eb:5e: 90:72:42:52:d6:4b:df:c6:cf:6a:b8:65:97:a3:4c:0f:5a:80: ba:de:e1:f4:02:b8:1a:c6:c6:cb:71:df:9a:f3:70:22:a5:c9: 02:ff:f2:d9:25:6c:f0:ea:52:54:87:96:56:fb:eb:62:e4:60: 28:2d:fc:f3:04:4d:49:eb:54:c5:51:d4:02:d9:4f:8f:02:fd: e5:d7:51:68:04:fd:8c:01:d6:15:38:2f:fb:86:17:32:3a:46: 1e:0d:b1:d3:a9:5f:6f:2c:38:ea:f5:6a:68:4d:d3:4a:b4:2d: 36:2a:97:8c:cc:24:2c:15:14:ef:93:a8:8f:ce:a7:14:31:99: 31:b8:10:d9 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE6nkb9jBfh4ETlCcYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI5YzU4NjgtYmI5Yy00ZmQxLTlhY2EtMDU3NjJhODUw OTk0MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OTVmMmRhYmMtZDI1MC00YmU4LWFlMzItMWM2NGQ0NjQxZDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA46UAJ+FEr+02++i9rr4escUNmclj9R5HeBbV blvkbqFVbRWu5JGbfqldDeopl0kDOcddomzAXyGH6rIraMwo6+DFyEs3GTJoiaar haTorAwcfYkmvKZQeiUuwRQh/b2ePcZ67+Af8mY5b3X+aZHtJNzeEmv7L5JKBKAH wzYt3pkmsgjTf6UeS5VemS93sgvq2aUaze2tJlHP2OOuZE7HFscE85uEMidBrKGY r+GN9BMXpjaaoB72xIbrbzNU8mOXSNTHT0kSFrPrcgG2m44fXOizq+twPymf3+GN PxeVu1dLE/AcuIPdksEDKPd0XbmXfdsycn7c8ebkukzca00+xwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFAylWetZA83HpgVVXb5WY9CU7E53MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kYjlj NTg2OC1iYjljLTRmZDEtOWFjYS0wNTc2MmE4NTA5OTQvMTAwMDM2YTUtM2VjYy0z OTUzLWFkNTItNjExNDgzNjI3MWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGI5YzU4NjgtYmI5Yy00ZmQxLTlh Y2EtMDU3NjJhODUwOTk0L2RiOWM1ODY4LWJiOWMtNGZkMS05YWNhLTA1NzYyYTg1 MDk5NC5jcmwwHwYDVR0jBBgwFoAUwuKfSSn3ynvZHRMd3xye8zm7PxkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kYjljNTg2OC1iYjljLTRmZDEtOWFjYS0wNTc2 MmE4NTA5OTQuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAATATAwQAgOaYAwUH gOadgAMEAIDmvDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA7vyfGNKCsEaTlylP0WB+StPLJfOOe8+IHYgY2 v3AUc59gQaB3rDkhNpVdZbanSiDbqZulrptnMtBXPpn4MOjz8HtBuE0kUVXwA9yk 2T/QCnC0xbcnfwQSN+TPfr0g+ICCnFNAL878FSS5GkTMfO5e7zaIOck4QJSlDa+l 616QckJS1kvfxs9quGWXo0wPWoC63uH0ArgaxsbLcd+a83AipckC//LZJWzw6lJU h5ZW++ti5GAoLfzzBE1J61TFUdQC2U+PAv3l11FoBP2MAdYVOC/7hhcyOkYeDbHT qV9vLDjq9WpoTdNKtC02KpeMzCQsFRTvk6iPzqcUMZkxuBDZ -----END CERTIFICATE-----Generated at Wed Jul 29 10:23:31 2026 by rpki-client