$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5c55b5af-970c-3f95-a381-4d9948e52241.roa File: 5c55b5af-970c-3f95-a381-4d9948e52241.roa (raw, json) Hash identifier: Zz6oyF1xGQ78EDfIFa0lvzz5vkAm3uHCj+Isp3cFNeM= Subject key identifier: 25:03:97:5B:B0:B0:02:76:87:F5:A6:1C:7D:66:DC:F1:33:3F:FA:5A Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584E66DA13B56BC0071414B10CD0 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5c55b5af-970c-3f95-a381-4d9948e52241.roa Signing time: Sun 05 Jul 2026 21:00:11 +0000 ROA not before: Sun 05 Jul 2026 21:00:11 +0000 ROA not after: Sat 03 Oct 2026 21:00:11 +0000 asID: 399145 IP address blocks: 140.174.19.0/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:66:da:13:b5:6b:c0:07:14:14:b1:0c:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Jul 5 21:00:11 2026 GMT Not After : Oct 3 21:00:11 2026 GMT Subject: CN=dce7262e-8c00-42d0-ae4c-08fbb40dc2a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c2:b7:3b:49:30:b8:ec:2d:eb:8c:d2:79:10: 44:46:8e:5d:f7:c1:5b:41:1f:ba:48:1d:a3:a6:09: 72:54:de:a6:70:97:d9:ad:61:1d:03:c7:95:61:13: f6:d0:98:b0:96:d6:c7:53:2d:3c:33:76:12:5f:e4: a6:cf:55:f4:02:cd:8f:d6:83:ab:01:e0:77:24:5e: 98:1f:cf:70:b6:ee:b9:96:74:8f:08:94:d0:4e:af: a6:39:a7:b7:94:12:61:5a:74:f0:e8:07:2e:a9:77: 95:74:f9:4c:24:ba:cd:81:50:5d:cb:27:db:70:02: 4c:95:b5:4b:67:e9:f8:e5:7c:3d:6b:35:09:01:d2: c6:e4:29:7f:7b:0d:a7:1a:a3:6f:ca:5b:07:bf:66: a6:ae:65:f9:6e:1c:1f:a5:e1:8e:4a:4f:d6:c7:cd: 30:08:06:eb:5c:93:cd:46:1f:df:43:74:63:82:e4: 6a:2e:fb:fd:80:51:50:bc:44:0a:52:ed:bb:b9:03: 77:ed:80:1c:da:68:cc:e9:24:f5:b6:54:33:e0:19: 0a:a3:8f:95:01:21:a2:7f:f8:f1:f2:8d:c2:6f:75: 47:9d:c6:f5:a0:fb:18:26:55:10:ea:d8:df:0f:83: bc:29:31:19:11:00:68:6c:92:64:e6:c4:9a:d3:f7: 25:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:03:97:5B:B0:B0:02:76:87:F5:A6:1C:7D:66:DC:F1:33:3F:FA:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5c55b5af-970c-3f95-a381-4d9948e52241.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 140.174.19.0/25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:b6:bc:bc:04:80:57:6b:51:e0:86:ee:15:b0:38:fb:6e:bb: c2:fc:dc:aa:2d:27:fc:f4:82:59:ad:a1:8c:a4:0f:dc:7d:68: 9e:ee:0d:02:7d:33:79:52:d4:b6:9f:3f:dd:f5:fb:66:35:a8: 65:99:2d:64:ce:a2:d1:9c:13:55:08:8c:eb:64:10:63:79:94: ea:72:51:94:ba:e2:69:50:36:5a:34:62:00:c0:5a:63:fa:05: 36:6a:31:e5:27:07:76:f5:80:f1:6d:4a:8b:54:e7:7e:68:c5: 04:53:20:52:0d:be:7d:04:6d:c1:a3:93:71:ac:20:3d:19:0c: c1:24:80:a1:b3:67:89:39:52:e7:48:53:84:30:a6:c6:5a:d3: c1:0e:82:0b:4e:92:bc:46:1d:9c:40:7b:46:a2:7a:c6:c1:d7: f4:71:66:23:91:6d:bb:a8:49:86:0b:1f:87:c5:5f:79:2b:4c: ef:55:8d:94:69:7d:88:48:1f:5f:2a:0c:77:2b:25:26:7e:65: 3f:83:7e:27:30:a5:3a:86:03:61:51:3f:5c:95:d5:aa:f7:07: e0:2f:41:b7:84:9f:da:d1:c2:8b:72:a5:61:90:39:e5:ce:67: 9f:49:6e:d3:d7:17:55:ac:e9:aa:ab:32:0f:a6:aa:ae:0f:b1: 92:b3:de:f4 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE5m2hO1a8AHFBSxDNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDcwNTIxMDAxMVoXDTI2MTAwMzIxMDAxMVowLzEtMCsGA1UEAxMk ZGNlNzI2MmUtOGMwMC00MmQwLWFlNGMtMDhmYmI0MGRjMmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocK3O0kwuOwt64zSeRBERo5d98FbQR+6SB2j pglyVN6mcJfZrWEdA8eVYRP20JiwltbHUy08M3YSX+Smz1X0As2P1oOrAeB3JF6Y H89wtu65lnSPCJTQTq+mOae3lBJhWnTw6AcuqXeVdPlMJLrNgVBdyyfbcAJMlbVL Z+n45Xw9azUJAdLG5Cl/ew2nGqNvylsHv2amrmX5bhwfpeGOSk/Wx80wCAbrXJPN Rh/fQ3RjguRqLvv9gFFQvEQKUu27uQN37YAc2mjM6ST1tlQz4BkKo4+VASGif/jx 8o3Cb3VHncb1oPsYJlUQ6tjfD4O8KTEZEQBobJJk5sSa0/cljQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCUDl1uwsAJ2h/WmHH1m3PEzP/paMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNWM1NWI1YWYtOTcwYy0z Zjk1LWEzODEtNGQ5OTQ4ZTUyMjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHjK4TADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAztry8BIBXa1Hghu4VsDj7brvC/NyqLSf89IJZraGMpA/cfWie7g0C fTN5UtS2nz/d9ftmNahlmS1kzqLRnBNVCIzrZBBjeZTqclGUuuJpUDZaNGIAwFpj +gU2ajHlJwd29YDxbUqLVOd+aMUEUyBSDb59BG3Bo5NxrCA9GQzBJIChs2eJOVLn SFOEMKbGWtPBDoILTpK8Rh2cQHtGonrGwdf0cWYjkW27qEmGCx+HxV95K0zvVY2U aX2ISB9fKgx3KyUmfmU/g34nMKU6hgNhUT9cldWq9wfgL0G3hJ/a0cKLcqVhkDnl zmefSW7T1xdVrOmqqzIPpqquD7GSs970 -----END CERTIFICATE-----Generated at Thu Jul 16 03:05:56 2026 by rpki-client