$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/638654a1-b753-3294-b65c-20ed31513b81.roa File: 638654a1-b753-3294-b65c-20ed31513b81.roa (raw, json) Hash identifier: OgkFz6QETBUJNY2AxM8ikxdc/p+rGo63BhTrJBrDSxk= Subject key identifier: AA:45:58:E9:58:91:98:54:F7:C0:6E:CF:33:75:38:66:63:A5:BD:F2 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584E9D4A793CE45C5C20346F1900 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/638654a1-b753-3294-b65c-20ed31513b81.roa Signing time: Sat 25 Jul 2026 09:00:11 +0000 ROA not before: Sat 25 Jul 2026 09:00:11 +0000 ROA not after: Fri 23 Oct 2026 09:00:11 +0000 asID: 701 IP address blocks: 151.199.166.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9d:4a:79:3c:e4:5c:5c:20:34:6f:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jul 25 09:00:11 2026 GMT Not After : Oct 23 09:00:11 2026 GMT Subject: CN=d8ced1f1-cb2c-4c85-9499-69af49b4c5ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:39:48:99:9e:3a:f2:fd:c0:6c:2c:c2:70:9d: 5e:86:ad:fe:88:24:ec:e9:c8:af:a9:55:a6:13:3b: 66:93:90:ce:a3:87:da:c2:b5:95:c8:b9:b9:ff:fa: d3:16:dc:82:cb:90:c9:c2:81:62:82:cd:e6:87:3f: cd:1e:e8:7d:fe:59:b1:5e:41:9b:cf:c4:b8:12:8c: 14:4d:77:7f:3a:4e:b4:ad:2f:73:da:43:ca:f0:ce: 2d:71:cc:30:dd:23:ca:06:c8:d4:c0:62:ca:43:ae: b1:b5:97:9b:f4:ab:a1:3f:39:7d:42:8f:b6:07:58: fa:2d:b6:4f:8c:ce:13:6c:d5:36:f2:16:23:81:3b: e4:37:a3:ce:28:12:c2:8e:9e:fc:f3:1b:a3:d7:7c: dc:b3:65:b5:e6:d8:10:35:3f:72:20:77:25:d8:e6: de:64:a3:ca:ec:a6:ac:27:3e:83:fb:1a:a3:94:0f: e7:66:a9:bd:24:98:ee:29:60:a1:75:20:a6:f0:4d: ba:44:b9:db:ba:5a:1c:b1:a2:4a:4e:41:79:9c:3e: 57:16:eb:cc:5c:61:1c:47:9b:24:74:86:f1:fe:dd: af:3f:5b:70:51:ca:9c:8e:21:c4:73:19:ff:db:ea: f2:b0:da:00:b1:83:73:70:33:57:ed:27:47:0c:ac: 0c:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:45:58:E9:58:91:98:54:F7:C0:6E:CF:33:75:38:66:63:A5:BD:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/638654a1-b753-3294-b65c-20ed31513b81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 151.199.166.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:6a:2f:a2:32:0c:16:34:5a:b0:5c:7e:3c:ed:6e:93:a1:58: 8c:c3:a4:1f:82:f0:e9:ef:9d:67:69:2a:dc:5f:8e:5c:f7:13: fe:f3:87:72:df:64:7d:ca:06:87:51:93:23:46:16:9d:9f:2c: 1d:23:2f:a6:f3:1c:14:5e:88:b5:8f:22:dd:d3:f4:c5:12:7b: 53:46:c4:6e:cd:cc:db:58:9e:e6:b0:00:8e:81:19:51:33:b6: 67:af:73:53:7b:64:57:e1:d5:3d:95:ec:70:33:37:aa:cb:eb: 23:b2:98:31:48:ca:f5:e9:a9:5b:a4:96:da:ab:e2:fe:e8:42: 3c:7b:ae:61:9f:46:a7:69:36:13:02:d3:23:92:a7:ab:20:69: b5:a9:11:e6:c1:d6:f8:06:6b:bb:ce:ed:5c:27:f6:5b:ec:03: 4f:3a:a7:f0:4b:6e:b5:6d:59:91:3e:9c:6c:dd:ae:9b:6c:60: 31:8b:bb:58:e7:85:a3:c4:00:f9:2b:13:33:5b:5c:48:52:d9: 28:c0:d7:7f:39:a7:82:be:07:65:9a:36:c7:ca:f4:4c:fe:f3: c6:0c:58:1f:bb:b4:f5:a8:eb:91:10:d4:3d:5d:19:27:bb:04: a4:53:88:ce:e6:3d:19:dc:ef:b7:2f:34:20:96:e3:d8:2f:fd: 19:79:f7:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6dSnk85FxcIDRvGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDcyNTA5MDAxMVoXDTI2MTAyMzA5MDAxMVowLzEtMCsGA1UEAxMk ZDhjZWQxZjEtY2IyYy00Yzg1LTk0OTktNjlhZjQ5YjRjNWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDlImZ468v3AbCzCcJ1ehq3+iCTs6civqVWm Eztmk5DOo4fawrWVyLm5//rTFtyCy5DJwoFigs3mhz/NHuh9/lmxXkGbz8S4EowU TXd/Ok60rS9z2kPK8M4tccww3SPKBsjUwGLKQ66xtZeb9KuhPzl9Qo+2B1j6LbZP jM4TbNU28hYjgTvkN6POKBLCjp788xuj13zcs2W15tgQNT9yIHcl2ObeZKPK7Kas Jz6D+xqjlA/nZqm9JJjuKWChdSCm8E26RLnbulocsaJKTkF5nD5XFuvMXGEcR5sk dIbx/t2vP1twUcqcjiHEcxn/2+rysNoAsYNzcDNX7SdHDKwMJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKpFWOlYkZhU98BuzzN1OGZjpb3yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNjM4NjU0YTEtYjc1My0z Mjk0LWI2NWMtMjBlZDMxNTEzYjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBl8emMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEhqL6IyDBY0WrBcfjztbpOhWIzDpB+C8OnvnWdpKtxfjlz3E/7zh3Lf ZH3KBodRkyNGFp2fLB0jL6bzHBReiLWPIt3T9MUSe1NGxG7NzNtYnuawAI6BGVEz tmevc1N7ZFfh1T2V7HAzN6rL6yOymDFIyvXpqVukltqr4v7oQjx7rmGfRqdpNhMC 0yOSp6sgabWpEebB1vgGa7vO7Vwn9lvsA086p/BLbrVtWZE+nGzdrptsYDGLu1jn haPEAPkrEzNbXEhS2SjA1385p4K+B2WaNsfK9Ez+88YMWB+7tPWo65EQ1D1dGSe7 BKRTiM7mPRnc77cvNCCW49gv/Rl5900= -----END CERTIFICATE-----Generated at Wed Jul 29 10:38:42 2026 by rpki-client