$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/dfdd0091-b9b3-3042-8648-0b61443c27c7.roa File: dfdd0091-b9b3-3042-8648-0b61443c27c7.roa (raw, json) Hash identifier: PAm5R8g1IFlpE51SONfsJIcc0R12AOiYUxDWfCpfYZA= Subject key identifier: DD:DB:10:11:ED:C6:0F:C2:90:B1:7B:62:7F:28:B5:68:7F:D6:30:AF Certificate issuer: /CN=c43335db-c55b-443e-b20c-5c74e1c256c9 Certificate serial: 010D0C9F4328584EA01541B6F66AC4EA1A588940 Authority key identifier: C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/dfdd0091-b9b3-3042-8648-0b61443c27c7.roa Signing time: Sun 26 Jul 2026 09:00:12 +0000 ROA not before: Sun 26 Jul 2026 09:00:12 +0000 ROA not after: Sat 24 Oct 2026 09:00:12 +0000 asID: 54535 IP address blocks: 156.37.192.0/24 maxlen: 24 156.37.193.0/24 maxlen: 24 156.37.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a0:15:41:b6:f6:6a:c4:ea:1a:58:89:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c43335db-c55b-443e-b20c-5c74e1c256c9 Validity Not Before: Jul 26 09:00:12 2026 GMT Not After : Oct 24 09:00:12 2026 GMT Subject: CN=330ee8f5-242b-4bdf-b7ff-397ae6cab506 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6f:83:b2:81:fb:02:e7:20:82:97:24:63:cc: 66:64:e2:14:b3:b9:a7:b5:44:d6:4a:7e:10:26:7b: e6:03:1f:e0:e2:24:28:9f:e9:d5:76:e9:ca:5e:35: dd:68:47:5b:df:60:4b:8c:36:e4:ed:a2:2e:51:0f: 11:e6:3f:a0:e9:42:09:cd:6e:89:04:34:6a:d4:6f: c7:f0:c7:2b:25:18:a8:7c:08:f2:4d:72:4c:1a:be: 00:a9:63:b8:fb:32:34:46:7a:0b:01:63:21:83:c0: 9e:11:8a:4b:73:fd:77:12:44:f1:01:99:ba:ed:80: 87:fa:25:32:e8:cf:1b:32:6d:d4:96:b4:21:d7:d5: e9:b3:59:2f:6a:3c:59:8a:1a:01:4d:d4:c9:db:04: 72:4a:61:60:85:82:41:da:88:e9:de:78:8a:32:5f: b1:59:50:fb:d0:e9:30:be:03:43:bc:70:18:99:9c: 72:06:33:fe:d4:cb:63:d7:8d:e6:54:aa:f3:ec:d6: 8c:2c:56:74:cf:bf:1f:e4:c3:8f:1e:f6:a3:7e:82: 8b:eb:4e:4b:a3:1e:6d:fd:42:0f:36:dc:89:84:37: 1a:c0:59:d5:e2:c0:8e:b9:22:f4:33:49:24:ce:f9: f9:05:0b:5b:7f:0c:f9:bd:dd:86:e5:66:11:b9:0f: 6c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:DB:10:11:ED:C6:0F:C2:90:B1:7B:62:7F:28:B5:68:7F:D6:30:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/dfdd0091-b9b3-3042-8648-0b61443c27c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl X509v3 Authority Key Identifier: keyid:C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer sbgp-ipAddrBlock: critical IPv4: 156.37.192.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:a0:43:58:98:f8:d8:6f:2c:ea:fe:57:53:52:9f:20:3e:4c: 66:be:9e:a5:bb:13:58:4f:e9:38:06:62:1a:41:36:75:b1:3e: 72:de:e3:26:fd:f3:68:eb:15:67:5c:49:93:e1:ff:8f:3d:18: de:94:56:d7:7b:6c:19:9d:f2:cf:93:2b:f9:c0:d2:3f:c1:b6: e3:aa:ae:81:06:8c:22:03:e2:0c:05:e4:16:16:22:53:d8:bb: ae:2b:0b:4b:3e:bb:b6:40:71:17:15:8b:ad:e3:77:22:49:29: a1:08:4c:b8:e1:3c:13:8a:8a:56:4e:1f:bf:bc:b7:87:90:de: f3:47:b4:3a:4a:b3:e9:7a:9b:bf:ce:5b:30:4c:b9:bd:58:61: 41:13:c2:d6:e0:70:fb:8a:cd:44:e3:52:80:ec:98:a7:30:39: 98:0d:ac:e3:b9:e8:ee:d9:49:ce:52:41:a1:ea:65:23:4e:3c: 8e:08:59:8c:c8:4e:eb:36:6c:2b:f7:46:de:dc:5d:03:70:80: cf:aa:01:1a:d2:b7:56:87:b4:a3:2a:e8:b9:56:38:b3:dd:2c: 8d:0b:e2:f2:10:e3:7d:af:03:2e:99:03:9d:db:9a:aa:cf:74: 66:6a:54:6a:5e:b1:a4:0d:99:0b:ac:89:50:c8:03:20:9a:98: b2:f4:96:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6gFUG29mrE6hpYiUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQzMzM1ZGItYzU1Yi00NDNlLWIyMGMtNWM3NGUxYzI1 NmM5MB4XDTI2MDcyNjA5MDAxMloXDTI2MTAyNDA5MDAxMlowLzEtMCsGA1UEAxMk MzMwZWU4ZjUtMjQyYi00YmRmLWI3ZmYtMzk3YWU2Y2FiNTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2+DsoH7AucggpckY8xmZOIUs7mntUTWSn4Q JnvmAx/g4iQon+nVdunKXjXdaEdb32BLjDbk7aIuUQ8R5j+g6UIJzW6JBDRq1G/H 8McrJRiofAjyTXJMGr4AqWO4+zI0RnoLAWMhg8CeEYpLc/13EkTxAZm67YCH+iUy 6M8bMm3UlrQh19Xps1kvajxZihoBTdTJ2wRySmFghYJB2ojp3niKMl+xWVD70Okw vgNDvHAYmZxyBjP+1Mtj143mVKrz7NaMLFZ0z78f5MOPHvajfoKL605Lox5t/UIP NtyJhDcawFnV4sCOuSL0M0kkzvn5BQtbfwz5vd2G5WYRuQ9srQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN3bEBHtxg/CkLF7Yn8otWh/1jCvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jNDMz MzVkYi1jNTViLTQ0M2UtYjIwYy01Yzc0ZTFjMjU2YzkvZGZkZDAwOTEtYjliMy0z MDQyLTg2NDgtMGI2MTQ0M2MyN2M3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzQzMzM1ZGItYzU1Yi00NDNlLWIy MGMtNWM3NGUxYzI1NmM5L2M0MzMzNWRiLWM1NWItNDQzZS1iMjBjLTVjNzRlMWMy NTZjOS5jcmwwHwYDVR0jBBgwFoAUxAvagFtAIbjQ1K7dFqiSimKzZdkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jNDMzMzVkYi1jNTViLTQ0M2UtYjIwYy01Yzc0 ZTFjMjU2YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnCXAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGCgQ1iY+NhvLOr+V1NSnyA+TGa+nqW7E1hP6TgGYhpBNnWxPnLe4yb9 82jrFWdcSZPh/489GN6UVtd7bBmd8s+TK/nA0j/BtuOqroEGjCID4gwF5BYWIlPY u64rC0s+u7ZAcRcVi63jdyJJKaEITLjhPBOKilZOH7+8t4eQ3vNHtDpKs+l6m7/O WzBMub1YYUETwtbgcPuKzUTjUoDsmKcwOZgNrOO56O7ZSc5SQaHqZSNOPI4IWYzI Tus2bCv3Rt7cXQNwgM+qARrSt1aHtKMq6LlWOLPdLI0L4vIQ432vAy6ZA53bmqrP dGZqVGpesaQNmQusiVDIAyCamLL0lv4= -----END CERTIFICATE-----Generated at Wed Jul 29 02:14:40 2026 by rpki-client