$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44e39417-e931-4514-89dc-a42b5b458fb5/832e9cf3-7676-3b39-af93-a7eb74275a8e.roa File: 832e9cf3-7676-3b39-af93-a7eb74275a8e.roa (raw, json) Hash identifier: 4z81M7YQEL6MoTtmPe373EUch6pXRvzW11aojOhkywU= Subject key identifier: 5A:27:34:AE:AD:78:D6:75:83:EA:09:85:C0:95:92:F9:7A:B1:73:12 Certificate issuer: /CN=44e39417-e931-4514-89dc-a42b5b458fb5 Certificate serial: 010D0C9F4328584E7BCA2FAA157BC4AA68BE8BC0 Authority key identifier: 44:9D:B2:B5:1C:CA:4C:8C:77:44:9C:66:77:47:66:84:A2:C6:5F:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44e39417-e931-4514-89dc-a42b5b458fb5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44e39417-e931-4514-89dc-a42b5b458fb5/832e9cf3-7676-3b39-af93-a7eb74275a8e.roa Signing time: Mon 13 Jul 2026 09:00:12 +0000 ROA not before: Mon 13 Jul 2026 09:00:12 +0000 ROA not after: Sun 11 Oct 2026 09:00:12 +0000 asID: 8075 IP address blocks: 168.137.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44e39417-e931-4514-89dc-a42b5b458fb5/44e39417-e931-4514-89dc-a42b5b458fb5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44e39417-e931-4514-89dc-a42b5b458fb5/44e39417-e931-4514-89dc-a42b5b458fb5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44e39417-e931-4514-89dc-a42b5b458fb5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7b:ca:2f:aa:15:7b:c4:aa:68:be:8b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44e39417-e931-4514-89dc-a42b5b458fb5 Validity Not Before: Jul 13 09:00:12 2026 GMT Not After : Oct 11 09:00:12 2026 GMT Subject: CN=128494b9-bf1d-4d9d-a266-4c403604458b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f1:5b:9b:d1:89:21:92:e3:6e:41:eb:6b:9f: fa:28:19:6e:a0:6b:d0:7a:30:0d:52:f9:f9:91:8d: 57:f0:dc:fe:c5:10:3b:2a:16:94:04:c6:35:53:64: a6:da:10:c5:55:d6:23:91:f1:35:a2:5b:e2:2c:92: b6:b1:3b:3b:72:12:fb:a6:42:c0:e9:08:d0:4b:08: b9:75:22:fa:f5:dd:74:4c:7e:bd:fa:48:7b:38:f9: 9a:29:10:fc:5c:de:90:b5:35:36:ad:35:31:da:2c: 99:f9:cc:a5:04:0e:db:a1:29:8d:a8:a2:2d:5a:5a: f8:ce:61:f6:d6:b5:c6:fa:b7:f7:c7:43:bd:5f:42: 26:56:b9:c2:5a:de:9f:a7:a2:cd:c5:b6:46:2e:46: d3:00:72:99:5a:3f:6e:d6:c3:86:aa:45:71:7e:8b: 28:cb:b0:b1:22:9e:6b:de:94:4c:6f:df:9b:8e:34: e7:2c:42:96:10:76:c1:7a:83:bb:8c:52:ce:53:8e: a0:eb:56:53:6a:28:01:98:52:07:3f:93:4b:85:70: 91:7a:6e:7f:12:d5:6b:7b:2b:5a:74:8b:7e:7b:e8: fa:d1:8a:45:92:78:22:52:b1:44:bb:ed:2f:04:42: 8c:ed:d8:55:89:5c:b0:17:0d:f2:2f:90:59:54:aa: 9a:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:27:34:AE:AD:78:D6:75:83:EA:09:85:C0:95:92:F9:7A:B1:73:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44e39417-e931-4514-89dc-a42b5b458fb5/832e9cf3-7676-3b39-af93-a7eb74275a8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44e39417-e931-4514-89dc-a42b5b458fb5/44e39417-e931-4514-89dc-a42b5b458fb5.crl X509v3 Authority Key Identifier: keyid:44:9D:B2:B5:1C:CA:4C:8C:77:44:9C:66:77:47:66:84:A2:C6:5F:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44e39417-e931-4514-89dc-a42b5b458fb5.cer sbgp-ipAddrBlock: critical IPv4: 168.137.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:73:c3:bb:7e:af:95:06:f7:f3:dd:c2:c9:8c:f4:72:fa:3f: a6:d8:68:64:e5:44:c7:26:54:dd:31:7b:4c:0a:19:cf:9b:6a: 84:e1:3b:7d:83:41:1a:ba:55:6f:af:d1:8e:8f:47:34:42:cb: 57:a3:6f:86:6d:9b:e0:c3:65:01:f6:ea:ed:56:46:50:54:9d: e9:53:42:3e:a9:a1:4f:1b:9e:41:11:ff:fc:0d:d3:87:1c:b2: 01:54:0c:93:4c:4f:e2:12:ee:47:23:f9:af:ca:81:a1:8a:03: cf:14:17:9f:2c:09:63:f0:5f:5b:ff:a6:e5:77:e5:d6:81:6b: d5:7d:4f:3f:78:f8:2a:b7:3b:06:c8:42:12:f3:44:dd:01:92: 80:4e:da:f4:fc:a3:60:f9:3e:c1:6d:57:13:ad:05:1f:ef:0f: bd:87:2b:ee:49:df:71:46:e2:91:0f:bc:11:60:d2:ce:66:86: 56:bd:4e:b7:97:1c:70:22:3b:a6:4a:5c:b1:24:7e:25:b8:dc: 46:d8:53:7e:32:73:67:ec:ed:fb:69:ea:a1:d3:28:90:77:d0: 1e:a5:46:3f:cd:91:30:fd:22:1e:ce:00:b1:90:01:8f:80:37: 95:00:15:1d:ca:aa:bb:a4:d8:8c:f0:c5:43:be:5d:f5:a4:d4: 28:b2:f3:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE57yi+qFXvEqmi+i8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDRlMzk0MTctZTkzMS00NTE0LTg5ZGMtYTQyYjViNDU4 ZmI1MB4XDTI2MDcxMzA5MDAxMloXDTI2MTAxMTA5MDAxMlowLzEtMCsGA1UEAxMk MTI4NDk0YjktYmYxZC00ZDlkLWEyNjYtNGM0MDM2MDQ0NThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfFbm9GJIZLjbkHra5/6KBluoGvQejANUvn5 kY1X8Nz+xRA7KhaUBMY1U2Sm2hDFVdYjkfE1olviLJK2sTs7chL7pkLA6QjQSwi5 dSL69d10TH69+kh7OPmaKRD8XN6QtTU2rTUx2iyZ+cylBA7boSmNqKItWlr4zmH2 1rXG+rf3x0O9X0ImVrnCWt6fp6LNxbZGLkbTAHKZWj9u1sOGqkVxfosoy7CxIp5r 3pRMb9+bjjTnLEKWEHbBeoO7jFLOU46g61ZTaigBmFIHP5NLhXCRem5/EtVreyta dIt+e+j60YpFkngiUrFEu+0vBEKM7dhViVywFw3yL5BZVKqa2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFonNK6teNZ1g+oJhcCVkvl6sXMSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80NGUz OTQxNy1lOTMxLTQ1MTQtODlkYy1hNDJiNWI0NThmYjUvODMyZTljZjMtNzY3Ni0z YjM5LWFmOTMtYTdlYjc0Mjc1YThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNDRlMzk0MTctZTkzMS00NTE0LTg5 ZGMtYTQyYjViNDU4ZmI1LzQ0ZTM5NDE3LWU5MzEtNDUxNC04OWRjLWE0MmI1YjQ1 OGZiNS5jcmwwHwYDVR0jBBgwFoAURJ2ytRzKTIx3RJxmd0dmhKLGX/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80NGUzOTQxNy1lOTMxLTQ1MTQtODlkYy1hNDJi NWI0NThmYjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqIlIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABVzw7t+r5UG9/PdwsmM9HL6P6bYaGTlRMcmVN0xe0wKGc+baoThO32D QRq6VW+v0Y6PRzRCy1ejb4Ztm+DDZQH26u1WRlBUnelTQj6poU8bnkER//wN04cc sgFUDJNMT+IS7kcj+a/KgaGKA88UF58sCWPwX1v/puV35daBa9V9Tz94+Cq3OwbI QhLzRN0BkoBO2vT8o2D5PsFtVxOtBR/vD72HK+5J33FG4pEPvBFg0s5mhla9TreX HHAiO6ZKXLEkfiW43EbYU34yc2fs7ftp6qHTKJB30B6lRj/NkTD9Ih7OALGQAY+A N5UAFR3Kqruk2IzwxUO+XfWk1Ciy80w= -----END CERTIFICATE-----Generated at Tue Jul 21 04:54:40 2026 by rpki-client