$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/95fcfe8e-969b-49df-a5b9-01e3adfe2b7a/7d7f65ee-d668-399b-9c1c-d64b8e083acb.roa File: 7d7f65ee-d668-399b-9c1c-d64b8e083acb.roa (raw, json) Hash identifier: 7tXjCRsY6zoGR3YaPH96g7pkjE4Z7Vy7Ze87vRiOAjw= Subject key identifier: 33:E6:05:E7:67:C9:55:94:04:2E:09:17:2F:64:5A:3B:85:D4:D8:05 Certificate issuer: /CN=95fcfe8e-969b-49df-a5b9-01e3adfe2b7a Certificate serial: 010D0C9F4328584E9BE5059A47558D665573C180 Authority key identifier: 76:52:C2:6D:AF:7F:E6:5D:CB:3A:1B:06:70:5A:BD:9D:00:1C:42:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/95fcfe8e-969b-49df-a5b9-01e3adfe2b7a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/95fcfe8e-969b-49df-a5b9-01e3adfe2b7a/7d7f65ee-d668-399b-9c1c-d64b8e083acb.roa Signing time: Fri 24 Jul 2026 21:00:12 +0000 ROA not before: Fri 24 Jul 2026 21:00:12 +0000 ROA not after: Thu 22 Oct 2026 21:00:12 +0000 asID: 16509 IP address blocks: 192.152.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/95fcfe8e-969b-49df-a5b9-01e3adfe2b7a/95fcfe8e-969b-49df-a5b9-01e3adfe2b7a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/95fcfe8e-969b-49df-a5b9-01e3adfe2b7a/95fcfe8e-969b-49df-a5b9-01e3adfe2b7a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/95fcfe8e-969b-49df-a5b9-01e3adfe2b7a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9b:e5:05:9a:47:55:8d:66:55:73:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95fcfe8e-969b-49df-a5b9-01e3adfe2b7a Validity Not Before: Jul 24 21:00:12 2026 GMT Not After : Oct 22 21:00:12 2026 GMT Subject: CN=7328b5e3-d98a-4122-ae66-6b6e3fd8ceff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:00:fe:2a:fa:16:f4:1a:be:54:c3:f7:e1:59: a8:31:6c:c5:c9:a8:a1:80:c9:ed:67:40:dd:8a:16: d1:e1:c7:c4:1b:c2:27:d4:55:5f:f0:36:b4:3f:bf: 03:25:9d:79:20:96:8a:68:9d:79:a2:8b:52:67:59: 70:81:11:49:92:b1:4d:11:83:e3:f7:2a:e6:03:64: 08:f3:e2:39:67:68:3a:b6:44:a8:b1:79:4c:17:ed: 3b:cb:9e:cc:09:8e:02:1c:58:4a:77:5f:28:d4:27: ba:7e:3a:11:45:1a:9d:1d:92:05:d0:6f:84:41:aa: 43:cc:f0:da:17:c5:74:71:60:2c:f7:74:6c:5b:11: 35:cb:92:35:05:fa:87:32:88:bb:93:36:47:c2:bc: af:dd:3e:85:9b:e6:9b:b4:87:5e:f3:4c:5c:b0:82: c8:fe:1b:4d:bf:bb:1c:5b:80:9f:0d:58:26:d4:8d: 29:61:9b:07:ca:8b:f1:08:25:7f:43:41:ee:f8:28: 71:12:0d:38:1e:67:3e:45:a8:05:e7:e0:50:de:fb: c8:64:ee:c3:67:91:81:05:6f:2f:db:21:51:d8:86: ce:94:7c:6d:4c:67:e2:5a:e3:e6:fb:80:c9:75:f6: 56:62:26:05:0f:cb:b7:f7:49:e8:2c:60:fc:c4:f2: fb:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:E6:05:E7:67:C9:55:94:04:2E:09:17:2F:64:5A:3B:85:D4:D8:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/95fcfe8e-969b-49df-a5b9-01e3adfe2b7a/7d7f65ee-d668-399b-9c1c-d64b8e083acb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/95fcfe8e-969b-49df-a5b9-01e3adfe2b7a/95fcfe8e-969b-49df-a5b9-01e3adfe2b7a.crl X509v3 Authority Key Identifier: keyid:76:52:C2:6D:AF:7F:E6:5D:CB:3A:1B:06:70:5A:BD:9D:00:1C:42:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/95fcfe8e-969b-49df-a5b9-01e3adfe2b7a.cer sbgp-ipAddrBlock: critical IPv4: 192.152.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:df:53:58:cc:48:bb:68:9f:a9:1f:5a:a6:bb:22:07:20:cf: d9:13:2c:d0:c5:18:03:5e:4b:33:51:4a:92:44:9c:88:ec:9e: db:71:3c:42:b4:7d:44:2c:68:da:c9:da:f3:89:60:58:e0:b5: 60:97:63:78:9f:77:8d:8a:57:34:85:c8:5e:cc:e4:d2:0e:b5: 86:f4:85:4a:51:2e:94:7a:16:f4:f3:4b:96:27:eb:e0:27:e4: 0d:da:02:64:ae:bd:47:7a:be:07:a0:87:dc:52:49:9b:69:72: e5:54:6f:92:f9:db:90:7d:65:96:d4:37:b1:bc:19:ec:7f:11: f8:2c:0a:b3:b1:c3:7a:04:36:7e:f2:43:40:f3:d2:2e:64:91: cd:f8:d3:77:8d:85:0d:60:7a:fb:73:de:43:09:18:c6:b5:21: 25:eb:e0:a5:6b:49:5f:46:57:1b:c5:e6:cd:6d:4c:ad:ed:6a: 33:a9:58:d1:9f:dd:80:e5:11:51:7f:13:98:a6:c8:f1:9f:b7: 12:f1:0d:d3:55:d2:32:dd:1a:0f:2c:23:5a:4d:6c:00:d2:3e: 5b:ea:ab:01:95:f0:d5:d9:e1:65:0a:e2:34:3b:50:9f:db:bd: ef:82:b8:b0:b5:99:b5:dc:ea:4e:3f:8e:3f:cd:da:bb:60:e5: 53:04:82:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6b5QWaR1WNZlVzwYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVmY2ZlOGUtOTY5Yi00OWRmLWE1YjktMDFlM2FkZmUy YjdhMB4XDTI2MDcyNDIxMDAxMloXDTI2MTAyMjIxMDAxMlowLzEtMCsGA1UEAxMk NzMyOGI1ZTMtZDk4YS00MTIyLWFlNjYtNmI2ZTNmZDhjZWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAD+KvoW9Bq+VMP34VmoMWzFyaihgMntZ0Dd ihbR4cfEG8In1FVf8Da0P78DJZ15IJaKaJ15ootSZ1lwgRFJkrFNEYPj9yrmA2QI 8+I5Z2g6tkSosXlMF+07y57MCY4CHFhKd18o1Ce6fjoRRRqdHZIF0G+EQapDzPDa F8V0cWAs93RsWxE1y5I1BfqHMoi7kzZHwryv3T6Fm+abtIde80xcsILI/htNv7sc W4CfDVgm1I0pYZsHyovxCCV/Q0Hu+ChxEg04Hmc+RagF5+BQ3vvIZO7DZ5GBBW8v 2yFR2IbOlHxtTGfiWuPm+4DJdfZWYiYFD8u390noLGD8xPL7KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDPmBednyVWUBC4JFy9kWjuF1NgFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi85NWZj ZmU4ZS05NjliLTQ5ZGYtYTViOS0wMWUzYWRmZTJiN2EvN2Q3ZjY1ZWUtZDY2OC0z OTliLTljMWMtZDY0YjhlMDgzYWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOTVmY2ZlOGUtOTY5Yi00OWRmLWE1 YjktMDFlM2FkZmUyYjdhLzk1ZmNmZThlLTk2OWItNDlkZi1hNWI5LTAxZTNhZGZl MmI3YS5jcmwwHwYDVR0jBBgwFoAUdlLCba9/5l3LOhsGcFq9nQAcQlswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi85NWZjZmU4ZS05NjliLTQ5ZGYtYTViOS0wMWUz YWRmZTJiN2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJj4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIPfU1jMSLton6kfWqa7Igcgz9kTLNDFGANeSzNRSpJEnIjsnttxPEK0 fUQsaNrJ2vOJYFjgtWCXY3ifd42KVzSFyF7M5NIOtYb0hUpRLpR6FvTzS5Yn6+An 5A3aAmSuvUd6vgegh9xSSZtpcuVUb5L525B9ZZbUN7G8Gex/EfgsCrOxw3oENn7y Q0Dz0i5kkc3403eNhQ1gevtz3kMJGMa1ISXr4KVrSV9GVxvF5s1tTK3tajOpWNGf 3YDlEVF/E5imyPGftxLxDdNV0jLdGg8sI1pNbADSPlvqqwGV8NXZ4WUK4jQ7UJ/b ve+CuLC1mbXc6k4/jj/N2rtg5VMEgo0= -----END CERTIFICATE-----Generated at Tue Jul 28 21:53:21 2026 by rpki-client