$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/a58e14d5-547f-3d71-aeb8-fd4b06e87618.roa File: a58e14d5-547f-3d71-aeb8-fd4b06e87618.roa (raw, json) Hash identifier: B6xarH63tByobVp0z7oiu48MBLBE9qFs/KPNyTzicrI= Subject key identifier: D8:82:90:09:5E:51:58:E5:68:EA:B3:17:B1:C4:7A:C7:6B:52:43:97 Certificate issuer: /CN=45d9fc7a-f366-485f-a2c8-58c4b470361a Certificate serial: 010D0C9F4328584EA7926E7CC90225BEB38A7AF0 Authority key identifier: 96:12:B0:E7:AD:D9:71:F2:E5:1F:50:56:E7:7A:70:25:0D:98:B7:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/a58e14d5-547f-3d71-aeb8-fd4b06e87618.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 36850 IP address blocks: 152.19.0.0/16 maxlen: 16 152.23.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/45d9fc7a-f366-485f-a2c8-58c4b470361a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/45d9fc7a-f366-485f-a2c8-58c4b470361a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:92:6e:7c:c9:02:25:be:b3:8a:7a:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45d9fc7a-f366-485f-a2c8-58c4b470361a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=ef4ef024-f57c-4a33-ba0f-8769aebd5c67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:03:e0:49:69:31:d4:a6:95:53:65:88:a9:c0: 0d:e4:22:b0:e4:27:6c:94:e1:8f:86:d5:df:b9:ff: 29:c4:cc:d8:90:66:a7:04:5b:4d:73:61:56:a4:a4: eb:2a:a6:59:30:aa:ad:08:34:a0:67:c8:d8:dc:b7: 99:fe:15:72:e8:98:84:fa:af:9c:ae:0b:ad:6f:a7: d5:2a:18:05:bb:b3:ed:d0:38:3c:b3:31:76:ae:5a: a0:a5:73:fe:36:d8:be:83:ff:fc:d2:85:a4:3e:8e: 91:63:06:06:56:51:c7:56:f9:37:0f:88:c9:07:7d: 98:8f:73:91:9d:77:2b:88:25:f9:df:95:02:d5:88: 73:68:bb:15:e2:70:dd:d9:64:a2:44:8a:13:ac:be: ee:c5:0a:3c:55:5c:1c:89:6f:0c:c0:d5:55:c9:5b: a2:a4:05:0f:ee:44:1a:f4:15:24:a8:00:52:98:68: e2:3d:a8:43:e1:40:20:51:85:08:c9:34:3e:22:bf: 0a:32:e9:75:b7:c2:83:a4:85:aa:66:cf:91:f7:c5: 08:91:a9:e5:3b:cc:fb:1a:c8:2b:32:d6:9a:73:32: 0f:dc:ac:3f:15:e5:2d:ed:09:d6:07:78:6d:76:1e: 76:df:75:6a:9d:f7:20:4d:85:44:c6:7c:b3:12:f7: 28:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:82:90:09:5E:51:58:E5:68:EA:B3:17:B1:C4:7A:C7:6B:52:43:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/a58e14d5-547f-3d71-aeb8-fd4b06e87618.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/45d9fc7a-f366-485f-a2c8-58c4b470361a.crl X509v3 Authority Key Identifier: keyid:96:12:B0:E7:AD:D9:71:F2:E5:1F:50:56:E7:7A:70:25:0D:98:B7:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a.cer sbgp-ipAddrBlock: critical IPv4: 152.19.0.0/16 152.23.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:f1:a5:24:d8:be:58:bc:23:7c:55:16:bd:54:21:7c:b9:86: 87:46:b1:e6:e5:01:f8:30:de:2e:51:e7:2c:da:3c:9f:01:c0: e8:5c:09:c0:ce:09:98:0b:d4:1f:d8:1a:c8:89:92:77:05:dc: 28:f2:b8:32:14:98:dd:21:0b:70:fb:24:c4:c6:df:63:9c:30: 7a:48:96:e9:7a:22:3b:3b:89:93:90:ba:db:af:e3:da:69:f2: 82:a1:ef:c1:3e:cb:c4:6d:5f:8f:fb:75:55:96:02:9f:36:7d: bb:57:4a:93:a2:5d:cf:82:93:39:01:ec:84:0f:eb:bd:f5:6d: 50:ce:62:a6:f5:f7:7d:0a:66:4b:96:a4:42:b1:b8:e4:61:24: 50:44:7c:be:58:20:74:f2:cb:b8:f0:c3:30:8f:30:c0:b6:e4: 81:29:3a:95:9f:29:47:a5:01:00:07:42:4c:ae:ef:e1:12:76: f6:d0:56:95:4b:39:ad:8b:28:b0:eb:f6:25:e9:e9:fc:f3:c9: 66:67:1b:2b:2e:ce:96:84:0b:e7:9a:12:9e:a5:79:99:7f:0f: 49:ab:a4:f8:89:5e:9e:90:dd:6b:7e:26:99:2b:1e:cd:fc:78: eb:ea:3c:f5:ac:f8:7e:ac:6a:51:73:cb:1f:a4:3f:4c:a3:2d: 8d:0e:f4:a7 -----BEGIN CERTIFICATE----- MIIGRzCCBS+gAwIBAgIUAQ0Mn0MoWE6nkm58yQIlvrOKevAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDVkOWZjN2EtZjM2Ni00ODVmLWEyYzgtNThjNGI0NzAz NjFhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZWY0ZWYwMjQtZjU3Yy00YTMzLWJhMGYtODc2OWFlYmQ1YzY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAPgSWkx1KaVU2WIqcAN5CKw5CdslOGPhtXf uf8pxMzYkGanBFtNc2FWpKTrKqZZMKqtCDSgZ8jY3LeZ/hVy6JiE+q+crgutb6fV KhgFu7Pt0Dg8szF2rlqgpXP+Nti+g//80oWkPo6RYwYGVlHHVvk3D4jJB32Yj3OR nXcriCX535UC1YhzaLsV4nDd2WSiRIoTrL7uxQo8VVwciW8MwNVVyVuipAUP7kQa 9BUkqABSmGjiPahD4UAgUYUIyTQ+Ir8KMul1t8KDpIWqZs+R98UIkanlO8z7Gsgr MtaaczIP3Kw/FeUt7QnWB3htdh5233VqnfcgTYVExnyzEvco2QIDAQABo4IDWTCC A1UwHQYDVR0OBBYEFNiCkAleUVjlaOqzF7HEesdrUkOXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NWQ5 ZmM3YS1mMzY2LTQ4NWYtYTJjOC01OGM0YjQ3MDM2MWEvYTU4ZTE0ZDUtNTQ3Zi0z ZDcxLWFlYjgtZmQ0YjA2ZTg3NjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDVkOWZjN2EtZjM2Ni00ODVmLWEy YzgtNThjNGI0NzAzNjFhLzQ1ZDlmYzdhLWYzNjYtNDg1Zi1hMmM4LTU4YzRiNDcw MzYxYS5jcmwwHwYDVR0jBBgwFoAUlhKw563ZcfLlH1BW53pwJQ2Yt7swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80NWQ5ZmM3YS1mMzY2LTQ4NWYtYTJjOC01OGM0 YjQ3MDM2MWEuY2VyMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAATAKAwMAmBMDAwCY FzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQBe8aUk2L5YvCN8VRa9VCF8uYaHRrHm5QH4MN4uUecs2jyfAcDo XAnAzgmYC9Qf2BrIiZJ3Bdwo8rgyFJjdIQtw+yTExt9jnDB6SJbpeiI7O4mTkLrb r+PaafKCoe/BPsvEbV+P+3VVlgKfNn27V0qTol3PgpM5AeyED+u99W1QzmKm9fd9 CmZLlqRCsbjkYSRQRHy+WCB08su48MMwjzDAtuSBKTqVnylHpQEAB0JMru/hEnb2 0FaVSzmtiyiw6/Yl6en888lmZxsrLs6WhAvnmhKepXmZfw9Jq6T4iV6ekN1rfiaZ Kx7N/Hjr6jz1rPh+rGpRc8sfpD9Moy2NDvSn -----END CERTIFICATE-----Generated at Wed Jul 29 11:14:17 2026 by rpki-client