$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47c38599-11bd-476a-9b98-d0fb43b76d60/787c0dea-fa35-351f-9bf6-45a7b33af696.roa File: 787c0dea-fa35-351f-9bf6-45a7b33af696.roa (raw, json) Hash identifier: zsz4nbvFR8zhqnHqPDCdpNDnv6xrzWRSPD/wgtw+Wlg= Subject key identifier: 60:D1:C7:64:F9:10:81:3F:F0:95:00:9F:97:8A:4D:85:E6:7E:95:5C Certificate issuer: /CN=47c38599-11bd-476a-9b98-d0fb43b76d60 Certificate serial: 010D0C9F4328584DD35B06878F10D2FD2C07B540 Authority key identifier: 69:46:23:EC:B6:C3:CA:38:B8:F3:C4:E6:21:A8:0A:E9:19:05:81:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47c38599-11bd-476a-9b98-d0fb43b76d60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47c38599-11bd-476a-9b98-d0fb43b76d60/787c0dea-fa35-351f-9bf6-45a7b33af696.roa Signing time: Thu 14 May 2026 01:00:25 +0000 ROA not before: Thu 14 May 2026 01:00:25 +0000 ROA not after: Wed 12 Aug 2026 01:00:25 +0000 asID: 19845 IP address blocks: 192.131.151.0/24 maxlen: 24 192.131.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47c38599-11bd-476a-9b98-d0fb43b76d60/47c38599-11bd-476a-9b98-d0fb43b76d60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47c38599-11bd-476a-9b98-d0fb43b76d60/47c38599-11bd-476a-9b98-d0fb43b76d60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47c38599-11bd-476a-9b98-d0fb43b76d60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d3:5b:06:87:8f:10:d2:fd:2c:07:b5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47c38599-11bd-476a-9b98-d0fb43b76d60 Validity Not Before: May 14 01:00:25 2026 GMT Not After : Aug 12 01:00:25 2026 GMT Subject: CN=318d63f3-7c01-4c27-820b-8deb7e2c1044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:01:97:d9:50:49:00:77:f8:7f:cf:a7:2b:7e: b2:87:8c:c1:87:ec:85:93:59:1e:03:85:e4:64:8b: d6:41:b9:a9:a0:5e:2e:0c:a9:ba:86:f0:54:6d:ab: 79:01:66:5f:b7:b8:5f:c9:26:2e:35:8c:84:cf:9e: ab:71:cf:2a:2e:0f:23:56:8a:eb:d6:18:7c:56:fc: bb:d6:44:1b:e8:cf:f9:bb:8a:e1:8c:8a:20:60:08: ec:eb:bb:c7:cf:17:d8:21:c4:77:9a:a9:ce:92:1f: df:e7:48:72:c0:c5:35:03:b7:6b:1d:cf:74:0b:d0: 1e:ca:a6:eb:0a:75:d6:56:02:53:b1:aa:df:5c:a8: 47:09:64:f4:45:5b:91:82:70:62:79:c3:b2:76:74: 57:e6:23:bd:29:58:a8:20:c4:bb:5d:43:45:3f:c6: 28:22:1f:ce:c4:9e:e9:d6:9a:4d:44:5d:f2:9a:ea: b3:6e:6e:3f:d4:18:7b:46:05:69:30:67:9b:25:69: b6:6d:36:d8:45:d8:86:24:89:44:d0:69:05:c2:36: e3:59:76:9b:3b:29:46:02:c0:a7:d0:2a:64:ed:f5: 88:6b:15:fe:8a:84:30:9e:ef:f0:2a:4e:ac:f4:c7: d3:8d:cb:ba:8e:62:38:6c:06:7c:cf:7e:d8:d4:e3: 01:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:D1:C7:64:F9:10:81:3F:F0:95:00:9F:97:8A:4D:85:E6:7E:95:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47c38599-11bd-476a-9b98-d0fb43b76d60/787c0dea-fa35-351f-9bf6-45a7b33af696.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47c38599-11bd-476a-9b98-d0fb43b76d60/47c38599-11bd-476a-9b98-d0fb43b76d60.crl X509v3 Authority Key Identifier: keyid:69:46:23:EC:B6:C3:CA:38:B8:F3:C4:E6:21:A8:0A:E9:19:05:81:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47c38599-11bd-476a-9b98-d0fb43b76d60.cer sbgp-ipAddrBlock: critical IPv4: 192.131.151.0/24 192.131.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:62:20:48:ab:e0:ec:a7:e7:a2:7f:cb:71:91:8c:27:5f:e2: 12:09:e8:3c:c8:61:c0:aa:7a:55:ed:42:4f:7c:68:f7:a1:60: fc:10:8d:f5:1b:1a:f4:79:0f:57:7f:4f:81:33:53:0c:93:a7: 2b:03:23:77:83:11:50:98:37:75:eb:e7:96:55:46:9e:9f:06: 29:93:3a:94:a5:f9:ca:53:bf:f8:55:bb:c0:28:69:cb:b8:c6: 41:db:5d:48:46:6f:09:cf:f0:57:93:7e:76:64:ed:c3:63:be: f3:66:3f:48:c7:13:10:5e:6d:31:cf:e5:f8:53:4c:42:d7:dd: 0e:a5:9c:0c:80:9a:54:c0:e6:9f:10:fa:8f:a0:35:40:5a:c7: 4e:dc:5b:ed:f9:72:b8:cb:d0:4f:2a:67:c5:19:bb:04:3a:82: b6:14:e4:3b:c0:dd:df:c7:93:bf:25:2f:3d:10:2b:ac:22:13: c2:68:a3:3e:8a:44:0b:b1:39:5a:1f:59:ef:c6:2e:58:b9:61: 51:84:e7:5a:9d:d1:34:d0:66:64:8f:11:f8:45:b8:0a:3b:e2: 9b:a0:81:7b:b8:f7:2e:66:1d:e8:f6:9a:cb:7f:63:f2:42:2a: 4c:bf:13:f8:1e:5d:53:35:5c:70:5c:d6:8c:60:d6:da:09:8e: 9e:d1:5a:a1 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE3TWwaHjxDS/SwHtUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDdjMzg1OTktMTFiZC00NzZhLTliOTgtZDBmYjQzYjc2 ZDYwMB4XDTI2MDUxNDAxMDAyNVoXDTI2MDgxMjAxMDAyNVowLzEtMCsGA1UEAxMk MzE4ZDYzZjMtN2MwMS00YzI3LTgyMGItOGRlYjdlMmMxMDQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswGX2VBJAHf4f8+nK36yh4zBh+yFk1keA4Xk ZIvWQbmpoF4uDKm6hvBUbat5AWZft7hfySYuNYyEz56rcc8qLg8jVorr1hh8Vvy7 1kQb6M/5u4rhjIogYAjs67vHzxfYIcR3mqnOkh/f50hywMU1A7drHc90C9Aeyqbr CnXWVgJTsarfXKhHCWT0RVuRgnBiecOydnRX5iO9KVioIMS7XUNFP8YoIh/OxJ7p 1ppNRF3ymuqzbm4/1Bh7RgVpMGebJWm2bTbYRdiGJIlE0GkFwjbjWXabOylGAsCn 0Cpk7fWIaxX+ioQwnu/wKk6s9MfTjcu6jmI4bAZ8z37Y1OMB6QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFGDRx2T5EIE/8JUAn5eKTYXmfpVcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80N2Mz ODU5OS0xMWJkLTQ3NmEtOWI5OC1kMGZiNDNiNzZkNjAvNzg3YzBkZWEtZmEzNS0z NTFmLTliZjYtNDVhN2IzM2FmNjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDdjMzg1OTktMTFiZC00NzZhLTli OTgtZDBmYjQzYjc2ZDYwLzQ3YzM4NTk5LTExYmQtNDc2YS05Yjk4LWQwZmI0M2I3 NmQ2MC5jcmwwHwYDVR0jBBgwFoAUaUYj7LbDyji488TmIagK6RkFgVIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80N2MzODU5OS0xMWJkLTQ3NmEtOWI5OC1kMGZi NDNiNzZkNjAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwIOXAwQA wIOZMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFNiIEir4Oyn56J/y3GRjCdf4hIJ6DzIYcCqelXtQk98aPeh YPwQjfUbGvR5D1d/T4EzUwyTpysDI3eDEVCYN3Xr55ZVRp6fBimTOpSl+cpTv/hV u8Aoacu4xkHbXUhGbwnP8FeTfnZk7cNjvvNmP0jHExBebTHP5fhTTELX3Q6lnAyA mlTA5p8Q+o+gNUBax07cW+35crjL0E8qZ8UZuwQ6grYU5DvA3d/Hk78lLz0QK6wi E8Jooz6KRAuxOVofWe/GLli5YVGE51qd0TTQZmSPEfhFuAo74puggXu49y5mHej2 mst/Y/JCKky/E/geXVM1XHBc1oxg1toJjp7RWqE= -----END CERTIFICATE-----Generated at Sat Jun 13 18:49:12 2026 by rpki-client