$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/a993a619-ee1e-3438-894d-7b8dfa52d09d.roa File: a993a619-ee1e-3438-894d-7b8dfa52d09d.roa (raw, json) Hash identifier: NHV2ROwyKH6TzcEyIMxybEFTGafLtq5Sb9C1m0/HP+4= Subject key identifier: 14:DE:D4:7C:32:64:09:5A:99:14:7D:13:B7:AD:BD:09:66:DC:47:AF Certificate issuer: /CN=df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7 Certificate serial: 010D0C9F4328584EA787490F5DE9FE90C6700FE8 Authority key identifier: E9:AF:89:0A:16:AB:F1:B0:DD:B2:78:75:6C:3A:92:E3:DF:74:08:BD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/a993a619-ee1e-3438-894d-7b8dfa52d09d.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 30387 IP address blocks: 156.40.98.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:49:0f:5d:e9:fe:90:c6:70:0f:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=ffd741e7-cd58-45e5-afe9-ff4e1a5c49e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:66:be:8c:34:ae:22:55:d3:8f:90:48:00:b2: 77:4c:ab:0b:66:b7:17:e9:d1:46:05:b0:7b:28:dd: f7:1d:18:0f:3d:0e:11:aa:a9:b4:5f:1d:2b:9c:bd: 8e:a9:67:38:e8:2f:74:74:e5:94:3c:7a:d6:c1:95: 84:b9:53:35:d7:4a:bc:d7:6e:3d:d0:31:18:46:3e: 85:87:5a:48:51:4a:60:51:11:5b:ca:09:88:53:a0: 05:eb:34:72:02:2d:58:37:75:43:92:b7:da:9b:e9: 54:82:7e:b1:69:cb:4f:32:e8:fb:78:b6:2c:e0:18: 01:71:29:72:5a:21:71:80:b3:13:e9:17:97:ca:cb: 12:e8:fd:97:4e:43:03:90:dd:ad:2f:bf:a0:5d:b1: 79:f3:31:ed:2c:0d:3e:48:e4:27:57:47:46:52:a9: 7d:e9:ad:a0:ca:2b:48:48:f7:d2:cd:41:20:51:ec: 6d:29:ed:72:66:27:82:2d:0e:91:f7:46:8c:9c:9c: 0c:ad:c4:75:f5:99:7e:07:e6:3d:34:4d:d1:00:c1: 5e:8f:0f:da:95:6d:a2:a0:4d:80:32:5f:61:1d:0d: 67:dd:3c:1b:74:97:6b:dd:2f:3f:53:50:9f:47:51: a6:1d:db:c9:ab:d6:76:8f:73:11:c3:df:63:ba:f8: b4:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:DE:D4:7C:32:64:09:5A:99:14:7D:13:B7:AD:BD:09:66:DC:47:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/a993a619-ee1e-3438-894d-7b8dfa52d09d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.crl X509v3 Authority Key Identifier: keyid:E9:AF:89:0A:16:AB:F1:B0:DD:B2:78:75:6C:3A:92:E3:DF:74:08:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer sbgp-ipAddrBlock: critical IPv4: 156.40.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:09:18:81:e8:15:52:1b:dd:02:23:df:d7:d4:f0:84:41:39: 21:09:23:81:7b:e1:8a:d8:20:7f:c9:f8:92:2c:43:83:ef:55: f5:df:e8:f1:eb:76:9b:e6:65:63:20:b3:9d:b6:d2:d5:2f:50: 5c:ea:dc:01:cf:ac:6b:a9:1b:2c:46:e0:ca:17:e8:9f:d0:fe: 91:71:9c:f9:f6:62:c2:8d:3a:ae:43:4d:73:71:fe:87:41:5d: 06:98:7b:f3:cf:fe:5f:c9:26:c2:4b:b0:e5:fd:34:ed:23:ed: 22:b9:0c:42:ae:2e:da:57:66:4c:b3:b4:6c:6a:ae:9b:0c:28: 4c:6d:cf:1b:45:59:c3:47:fa:b7:20:1f:f1:12:e0:b4:de:00: 6c:bc:39:19:c2:20:d4:57:2c:a8:78:f5:96:c5:e4:c5:51:d5: 91:59:c4:8a:70:42:64:51:59:4e:eb:3c:0f:a3:09:35:f1:3f: 74:9a:2f:25:99:97:d2:69:04:4b:fd:35:9e:19:d8:6b:e6:60: 52:39:4f:91:99:15:e4:5b:e3:b6:7b:1a:21:e7:65:eb:99:2a: 49:a6:45:f9:62:aa:05:bf:49:02:b6:6a:b8:0f:14:27:9a:5a: 99:ab:14:fb:3b:27:df:f1:47:7c:c5:bb:e0:57:c4:66:88:83: d3:6d:30:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh0kPXen+kMZwD+gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGY2ZjE0YjgtM2M3ZS00ZDY4LWFjMzYtZDU5OTliM2M0 ZWE3MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZmZkNzQxZTctY2Q1OC00NWU1LWFmZTktZmY0ZTFhNWM0OWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2a+jDSuIlXTj5BIALJ3TKsLZrcX6dFGBbB7 KN33HRgPPQ4Rqqm0Xx0rnL2OqWc46C90dOWUPHrWwZWEuVM110q812490DEYRj6F h1pIUUpgURFbygmIU6AF6zRyAi1YN3VDkrfam+lUgn6xactPMuj7eLYs4BgBcSly WiFxgLMT6ReXyssS6P2XTkMDkN2tL7+gXbF58zHtLA0+SOQnV0dGUql96a2gyitI SPfSzUEgUextKe1yZieCLQ6R90aMnJwMrcR19Zl+B+Y9NE3RAMFejw/alW2ioE2A Ml9hHQ1n3TwbdJdr3S8/U1CfR1GmHdvJq9Z2j3MRw99juvi0QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBTe1HwyZAlamRR9E7etvQlm3EevMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kZjZm MTRiOC0zYzdlLTRkNjgtYWMzNi1kNTk5OWIzYzRlYTcvYTk5M2E2MTktZWUxZS0z NDM4LTg5NGQtN2I4ZGZhNTJkMDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZGY2ZjE0YjgtM2M3ZS00ZDY4LWFj MzYtZDU5OTliM2M0ZWE3L2RmNmYxNGI4LTNjN2UtNGQ2OC1hYzM2LWQ1OTk5YjNj NGVhNy5jcmwwHwYDVR0jBBgwFoAU6a+JChar8bDdsnh1bDqS4990CL0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kZjZmMTRiOC0zYzdlLTRkNjgtYWMzNi1kNTk5 OWIzYzRlYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnChiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJAJGIHoFVIb3QIj39fU8IRBOSEJI4F74YrYIH/J+JIsQ4PvVfXf6PHr dpvmZWMgs5220tUvUFzq3AHPrGupGyxG4MoX6J/Q/pFxnPn2YsKNOq5DTXNx/odB XQaYe/PP/l/JJsJLsOX9NO0j7SK5DEKuLtpXZkyztGxqrpsMKExtzxtFWcNH+rcg H/ES4LTeAGy8ORnCINRXLKh49ZbF5MVR1ZFZxIpwQmRRWU7rPA+jCTXxP3SaLyWZ l9JpBEv9NZ4Z2GvmYFI5T5GZFeRb47Z7GiHnZeuZKkmmRfliqgW/SQK2argPFCea WpmrFPs7J9/xR3zFu+BXxGaIg9NtMNU= -----END CERTIFICATE-----Generated at Wed Jul 29 15:34:34 2026 by rpki-client