$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/aa4087d7-dc3e-33d9-919f-151eee0337f4.roa File: aa4087d7-dc3e-33d9-919f-151eee0337f4.roa (raw, json) Hash identifier: cDrG9CPWizn3ZCy/rZ0/S8iSygMTcjv+gGDzbo18QRQ= Subject key identifier: D2:4B:CB:A9:66:FC:3B:10:39:BA:D1:20:0F:60:AD:BE:D5:EF:4A:0C Certificate issuer: /CN=f9441892-5f50-4eb3-a218-8dada1be8f65 Certificate serial: 010D0C9F4328584E9EAFD8B2678FB1F1E4924680 Authority key identifier: 5A:12:BF:4D:73:FD:98:40:60:30:56:D7:B6:3C:BC:9E:37:AA:B3:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/aa4087d7-dc3e-33d9-919f-151eee0337f4.roa Signing time: Sat 25 Jul 2026 21:00:12 +0000 ROA not before: Sat 25 Jul 2026 21:00:12 +0000 ROA not after: Fri 23 Oct 2026 21:00:12 +0000 asID: 29900 IP address blocks: 162.218.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/f9441892-5f50-4eb3-a218-8dada1be8f65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/f9441892-5f50-4eb3-a218-8dada1be8f65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9e:af:d8:b2:67:8f:b1:f1:e4:92:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9441892-5f50-4eb3-a218-8dada1be8f65 Validity Not Before: Jul 25 21:00:12 2026 GMT Not After : Oct 23 21:00:12 2026 GMT Subject: CN=1a86bd18-f2a8-4cbd-ac7d-4a63f7384068 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e8:49:61:05:a2:ef:51:cc:72:9b:f0:92:11: 04:f4:38:2f:12:a8:be:26:2a:34:11:c7:5f:16:42: 56:db:42:c7:aa:fb:d6:3a:92:5e:b0:51:96:69:5f: 99:03:6a:9e:e1:b9:75:38:3e:d5:0b:41:6b:29:91: 01:ef:3f:cd:12:f7:ae:1e:44:8f:f2:16:97:01:df: a7:af:cf:52:eb:0f:a1:d2:5b:16:af:4d:05:3c:43: 00:06:38:b4:4b:ed:3c:f6:d1:b9:9c:90:08:b4:ae: 62:8b:98:4f:94:13:4b:9a:21:cc:11:d8:4f:06:97: 88:9d:b7:72:9e:5a:5a:51:fd:22:4e:dc:04:ed:c9: 64:3c:7c:f2:ec:73:38:17:d7:80:51:32:15:f4:65: 97:9d:6f:b2:ef:8f:f6:02:e4:46:f2:3c:fd:36:a7: 39:86:4b:d4:e3:52:79:66:03:43:37:b0:b7:2d:e2: 31:04:d1:69:cb:a6:9e:37:73:e5:d1:94:21:17:9d: 8b:33:01:ec:ad:a9:19:81:61:42:66:cf:06:6d:bd: 8d:a6:9b:fa:d1:35:22:55:a8:ab:70:d7:c5:6d:23: aa:a4:0e:e4:69:9d:e1:5e:59:96:cd:53:a6:46:00: be:9c:a2:3a:6c:4d:0c:da:aa:6f:77:dc:75:8b:9a: 17:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:4B:CB:A9:66:FC:3B:10:39:BA:D1:20:0F:60:AD:BE:D5:EF:4A:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/aa4087d7-dc3e-33d9-919f-151eee0337f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/f9441892-5f50-4eb3-a218-8dada1be8f65.crl X509v3 Authority Key Identifier: keyid:5A:12:BF:4D:73:FD:98:40:60:30:56:D7:B6:3C:BC:9E:37:AA:B3:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65.cer sbgp-ipAddrBlock: critical IPv4: 162.218.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:6c:8b:7f:cb:7f:40:e6:55:76:1b:71:55:a0:a0:11:2c:17: 65:1f:50:e8:a8:90:15:98:3e:f9:52:79:51:cf:17:4e:be:d5: e3:69:d8:fc:7a:61:14:83:ae:50:a7:35:1d:60:b7:22:a8:e7: 42:11:e2:c5:fa:42:82:0e:cd:35:b4:49:96:68:73:23:36:98: 9b:97:fd:8d:e7:3c:47:95:67:95:96:fa:8f:ed:d7:1f:27:43: 98:90:af:2a:c2:fb:25:72:1b:52:4d:15:b6:df:15:16:81:29: cc:4b:4f:db:51:a8:7f:01:f2:25:cb:d6:60:31:ba:9f:f3:48: 26:93:95:35:2e:66:54:92:5a:9e:96:75:1a:6f:ca:5f:aa:78: ab:ec:4a:b0:51:2e:17:c7:ae:c8:e9:29:d0:8e:10:6b:6d:f3: bf:cc:30:11:2b:44:26:8e:c0:ad:3c:a3:30:65:47:5a:e4:1c: a1:4a:98:e1:b4:12:d5:d5:7c:69:f5:c7:52:4b:c0:2d:03:c8: d6:4a:08:5f:cd:55:11:6b:67:ba:40:b0:b9:b9:38:5c:46:d1: 6d:09:a2:8f:10:38:bf:f7:b1:6b:99:4e:55:00:07:35:d7:d2: a0:8b:e2:be:a1:3f:b5:4f:87:12:cc:1c:bc:75:3e:98:f4:01: 15:33:48:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6er9iyZ4+x8eSSRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk0NDE4OTItNWY1MC00ZWIzLWEyMTgtOGRhZGExYmU4 ZjY1MB4XDTI2MDcyNTIxMDAxMloXDTI2MTAyMzIxMDAxMlowLzEtMCsGA1UEAxMk MWE4NmJkMTgtZjJhOC00Y2JkLWFjN2QtNGE2M2Y3Mzg0MDY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOhJYQWi71HMcpvwkhEE9DgvEqi+Jio0Ecdf FkJW20LHqvvWOpJesFGWaV+ZA2qe4bl1OD7VC0FrKZEB7z/NEveuHkSP8haXAd+n r89S6w+h0lsWr00FPEMABji0S+089tG5nJAItK5ii5hPlBNLmiHMEdhPBpeInbdy nlpaUf0iTtwE7clkPHzy7HM4F9eAUTIV9GWXnW+y74/2AuRG8jz9Nqc5hkvU41J5 ZgNDN7C3LeIxBNFpy6aeN3Pl0ZQhF52LMwHsrakZgWFCZs8Gbb2Nppv60TUiVair cNfFbSOqpA7kaZ3hXlmWzVOmRgC+nKI6bE0M2qpvd9x1i5oXGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNJLy6lm/DsQObrRIA9grb7V70oMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mOTQ0 MTg5Mi01ZjUwLTRlYjMtYTIxOC04ZGFkYTFiZThmNjUvYWE0MDg3ZDctZGMzZS0z M2Q5LTkxOWYtMTUxZWVlMDMzN2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjk0NDE4OTItNWY1MC00ZWIzLWEy MTgtOGRhZGExYmU4ZjY1L2Y5NDQxODkyLTVmNTAtNGViMy1hMjE4LThkYWRhMWJl OGY2NS5jcmwwHwYDVR0jBBgwFoAUWhK/TXP9mEBgMFbXtjy8njeqs8kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mOTQ0MTg5Mi01ZjUwLTRlYjMtYTIxOC04ZGFk YTFiZThmNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAotrDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAhsi3/Lf0DmVXYbcVWgoBEsF2UfUOiokBWYPvlSeVHPF06+1eNp2Px6 YRSDrlCnNR1gtyKo50IR4sX6QoIOzTW0SZZocyM2mJuX/Y3nPEeVZ5WW+o/t1x8n Q5iQryrC+yVyG1JNFbbfFRaBKcxLT9tRqH8B8iXL1mAxup/zSCaTlTUuZlSSWp6W dRpvyl+qeKvsSrBRLhfHrsjpKdCOEGtt87/MMBErRCaOwK08ozBlR1rkHKFKmOG0 EtXVfGn1x1JLwC0DyNZKCF/NVRFrZ7pAsLm5OFxG0W0Joo8QOL/3sWuZTlUABzXX 0qCL4r6hP7VPhxLMHLx1Ppj0ARUzSCA= -----END CERTIFICATE-----Generated at Wed Jul 29 04:25:59 2026 by rpki-client