$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d/e5e6aa31-b14a-31f9-a13b-828a710daada.roa File: e5e6aa31-b14a-31f9-a13b-828a710daada.roa (raw, json) Hash identifier: vl9jqqNcGeq2Z+mJB30euf8m7lQY3AD/e0XPqxdHLxI= Subject key identifier: 31:74:BF:56:5A:58:35:A2:6D:79:03:55:56:A4:BE:08:81:18:80:D8 Certificate issuer: /CN=4bf6b4aa-8fed-421b-bd5c-8385c0504c1d Certificate serial: 010D0C9F4328584EA17A72DEE312724FC1DCE280 Authority key identifier: 71:C9:0F:E3:08:1D:55:F8:36:88:E7:2D:B4:90:78:27:C0:F4:66:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d/e5e6aa31-b14a-31f9-a13b-828a710daada.roa Signing time: Sun 26 Jul 2026 21:00:11 +0000 ROA not before: Sun 26 Jul 2026 21:00:11 +0000 ROA not after: Sat 24 Oct 2026 21:00:11 +0000 asID: 0 IP address blocks: 192.195.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a1:7a:72:de:e3:12:72:4f:c1:dc:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bf6b4aa-8fed-421b-bd5c-8385c0504c1d Validity Not Before: Jul 26 21:00:11 2026 GMT Not After : Oct 24 21:00:11 2026 GMT Subject: CN=c12475f3-496b-405f-90a7-1308db129c2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:bd:73:59:d1:44:d8:38:fd:33:4a:2a:8c:45: 24:0e:98:e5:60:43:d1:11:08:68:5b:6f:02:cd:af: d7:ef:c7:a1:5c:27:71:b8:89:c2:83:36:17:d7:61: f1:44:28:ec:64:6c:cf:78:59:ec:c1:c2:28:2d:30: c9:18:73:cc:6d:04:09:7d:47:e1:d6:9e:2a:7b:11: 62:91:10:dc:13:37:a5:eb:a0:5a:df:fe:c3:40:13: 2c:69:25:00:57:1e:c4:c0:6f:e5:34:d4:37:d6:6f: ad:c6:16:fe:6b:c5:3a:35:33:e7:af:f8:28:26:13: 4c:26:b3:8e:0a:be:c2:4d:2c:13:76:82:f9:b3:31: 1c:9a:54:2e:e3:3c:44:ad:36:63:2b:d8:77:77:83: 0e:db:52:23:df:a2:77:f4:26:2d:43:1e:de:40:b9: b1:0b:d0:82:54:0d:af:67:85:70:e5:8b:c7:42:a1: d3:76:5b:d5:ff:53:fb:eb:22:47:24:e3:cf:ca:9b: b1:00:2f:ff:fa:75:26:3c:c1:7c:dd:a9:0e:14:8d: fd:41:d0:06:d3:5a:47:0f:83:c5:0a:48:f4:68:20: 40:3a:14:d7:d3:98:fa:89:7b:b5:b6:ad:b6:f9:b1: 2f:74:60:ce:db:74:5c:ed:27:e5:35:3e:43:4c:ee: 84:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:74:BF:56:5A:58:35:A2:6D:79:03:55:56:A4:BE:08:81:18:80:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d/e5e6aa31-b14a-31f9-a13b-828a710daada.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d.crl X509v3 Authority Key Identifier: keyid:71:C9:0F:E3:08:1D:55:F8:36:88:E7:2D:B4:90:78:27:C0:F4:66:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d.cer sbgp-ipAddrBlock: critical IPv4: 192.195.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:70:63:3a:4b:d7:09:1c:4d:71:ff:19:0a:d5:16:42:53:26: bd:0a:c7:10:1d:2f:5e:5c:45:8f:72:a7:07:04:80:62:55:1f: 0f:51:c1:91:fd:9a:23:b9:68:09:94:38:4e:a1:45:58:50:f0: 9d:4a:d3:8d:3d:50:04:68:32:7b:2b:74:73:a7:6d:e9:3d:c8: 3a:be:f1:4a:c7:d6:41:0e:a7:4e:12:56:e8:7b:5d:21:b5:67: 35:75:da:a0:d1:31:f6:0f:e4:27:f1:bf:4b:86:d6:07:9d:ff: c2:8f:11:a6:3c:24:6a:14:e7:79:43:46:52:b1:ac:71:1b:56: d7:b7:bc:26:5e:7f:6e:5a:a7:33:f1:fc:f4:29:b8:77:2e:b8: b2:26:91:76:a7:fe:38:46:ae:48:8f:1d:c4:1c:0d:9c:e0:22: 2d:30:0f:12:a2:f0:e6:c9:bd:93:87:44:21:19:cd:02:fa:fe: 7b:49:7b:9c:a7:41:34:95:1c:4f:83:34:0f:e2:50:98:37:1b: d0:88:5d:0f:f9:4d:e1:c6:ed:78:bf:83:8a:60:62:16:f0:ee: d8:30:3a:0d:b6:b1:c3:2c:c9:61:b6:bb:51:5d:ea:78:de:65: d9:05:b3:5c:49:b4:66:b3:fb:ac:90:55:9c:cb:0f:95:6a:85: 47:38:20:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6henLe4xJyT8Hc4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGJmNmI0YWEtOGZlZC00MjFiLWJkNWMtODM4NWMwNTA0 YzFkMB4XDTI2MDcyNjIxMDAxMVoXDTI2MTAyNDIxMDAxMVowLzEtMCsGA1UEAxMk YzEyNDc1ZjMtNDk2Yi00MDVmLTkwYTctMTMwOGRiMTI5YzJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkb1zWdFE2Dj9M0oqjEUkDpjlYEPREQhoW28C za/X78ehXCdxuInCgzYX12HxRCjsZGzPeFnswcIoLTDJGHPMbQQJfUfh1p4qexFi kRDcEzel66Ba3/7DQBMsaSUAVx7EwG/lNNQ31m+txhb+a8U6NTPnr/goJhNMJrOO Cr7CTSwTdoL5szEcmlQu4zxErTZjK9h3d4MO21Ij36J39CYtQx7eQLmxC9CCVA2v Z4Vw5YvHQqHTdlvV/1P76yJHJOPPypuxAC//+nUmPMF83akOFI39QdAG01pHD4PF Ckj0aCBAOhTX05j6iXu1tq22+bEvdGDO23Rc7SflNT5DTO6EcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDF0v1ZaWDWibXkDVVakvgiBGIDYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi80YmY2 YjRhYS04ZmVkLTQyMWItYmQ1Yy04Mzg1YzA1MDRjMWQvZTVlNmFhMzEtYjE0YS0z MWY5LWExM2ItODI4YTcxMGRhYWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNGJmNmI0YWEtOGZlZC00MjFiLWJk NWMtODM4NWMwNTA0YzFkLzRiZjZiNGFhLThmZWQtNDIxYi1iZDVjLTgzODVjMDUw NGMxZC5jcmwwHwYDVR0jBBgwFoAUcckP4wgdVfg2iOcttJB4J8D0Zh8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi80YmY2YjRhYS04ZmVkLTQyMWItYmQ1Yy04Mzg1 YzA1MDRjMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwMOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAVwYzpL1wkcTXH/GQrVFkJTJr0KxxAdL15cRY9ypwcEgGJVHw9RwZH9 miO5aAmUOE6hRVhQ8J1K0409UARoMnsrdHOnbek9yDq+8UrH1kEOp04SVuh7XSG1 ZzV12qDRMfYP5Cfxv0uG1ged/8KPEaY8JGoU53lDRlKxrHEbVte3vCZef25apzPx /PQpuHcuuLImkXan/jhGrkiPHcQcDZzgIi0wDxKi8ObJvZOHRCEZzQL6/ntJe5yn QTSVHE+DNA/iUJg3G9CIXQ/5TeHG7Xi/g4pgYhbw7tgwOg22scMsyWG2u1Fd6nje ZdkFs1xJtGaz+6yQVZzLD5VqhUc4IF8= -----END CERTIFICATE-----Generated at Tue Jul 28 18:12:34 2026 by rpki-client