$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/5b0f7ce6-9e65-3027-ace5-5004e591656b.roa File: 5b0f7ce6-9e65-3027-ace5-5004e591656b.roa (raw, json) Hash identifier: Wu7uyV3JA41ILgXfMUWl8HtOuH8ZZ1sJkDqpvwrr4A4= Subject key identifier: 7E:B5:A3:05:95:1E:E5:1F:6D:3A:D6:6B:FB:1B:F0:15:EF:9C:B6:2F Certificate issuer: /CN=0f19373b-2cc5-40f4-a6d0-7ccacc634857 Certificate serial: 010D0C9F4328584E6F3A22CFD84FBF2E64DDA220 Authority key identifier: A7:8E:91:58:FC:B9:59:F7:9B:89:3D:4B:D5:FB:0C:7F:90:02:FD:33 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/5b0f7ce6-9e65-3027-ace5-5004e591656b.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 141776 IP address blocks: 174.136.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/0f19373b-2cc5-40f4-a6d0-7ccacc634857.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/0f19373b-2cc5-40f4-a6d0-7ccacc634857.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3a:22:cf:d8:4f:bf:2e:64:dd:a2:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f19373b-2cc5-40f4-a6d0-7ccacc634857 Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=257127d5-7496-4a06-812b-93edbeab498a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:3c:46:55:51:02:21:00:fe:9e:dd:3d:86:a9: 88:e4:84:2a:dd:da:31:d8:fe:c1:bb:8a:65:f3:61: 86:14:fc:2c:7d:da:32:f7:12:db:7a:ba:34:bf:5f: a8:71:7d:f5:1a:da:42:47:73:39:a3:fc:2b:a0:54: 18:8c:ed:2a:2d:7a:b2:76:ad:45:05:a3:ee:5d:bf: a7:5b:4b:d3:24:b1:d2:11:cb:0f:e1:e9:8d:22:ca: 6b:e1:91:2f:fd:1e:7a:a9:75:ac:e2:51:79:75:be: d3:a9:f0:3c:db:f1:2d:64:87:22:57:b4:db:b3:b1: 60:47:ce:05:00:43:69:aa:d7:27:5e:3a:37:bb:24: 09:fd:a4:4f:50:f6:95:30:dc:6d:ba:0d:1d:0b:c9: 3a:66:1a:04:0c:a5:e8:37:73:34:df:0b:a9:e1:1a: ca:30:de:56:9c:96:67:c9:1c:67:71:ff:85:71:aa: 52:d3:84:dc:ab:99:94:28:6f:84:37:c9:69:cc:a4: ab:9f:6e:01:c0:03:94:28:ab:c2:ee:1d:ad:f2:c3: ce:51:32:c2:32:22:8b:0a:bf:6b:a1:36:f7:39:00: 64:13:54:21:88:6a:ff:71:48:03:6e:b5:c4:b5:a4: 83:b9:a3:e3:6f:a2:f3:30:27:4d:07:f2:33:a1:40: 17:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:B5:A3:05:95:1E:E5:1F:6D:3A:D6:6B:FB:1B:F0:15:EF:9C:B6:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/5b0f7ce6-9e65-3027-ace5-5004e591656b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/0f19373b-2cc5-40f4-a6d0-7ccacc634857.crl X509v3 Authority Key Identifier: keyid:A7:8E:91:58:FC:B9:59:F7:9B:89:3D:4B:D5:FB:0C:7F:90:02:FD:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857.cer sbgp-ipAddrBlock: critical IPv4: 174.136.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:7f:82:fd:c7:21:7b:9e:32:bc:83:8f:26:94:99:51:bb:62: 27:f9:ff:86:ab:a5:59:bb:91:b0:b9:10:71:1a:1d:11:a5:14: 33:91:d6:ce:56:57:e1:97:3e:5d:3d:e2:9e:72:8e:09:c7:8b: 25:f5:6c:97:c2:c1:d3:2e:0c:fd:76:c3:98:d6:df:8c:9d:da: 62:35:c7:61:ab:d7:74:90:b0:0d:0f:a9:c3:69:bc:20:d1:02: d9:1b:9b:d1:10:4e:fd:56:10:be:c4:cb:21:d4:ea:17:b2:94: 96:6e:ac:17:64:40:a8:f1:8a:0b:44:06:c6:af:26:9d:0a:08: af:a1:56:02:07:90:aa:7b:cc:f0:91:f0:e5:7e:4a:28:d6:82: 79:8e:56:f3:0b:a9:91:35:61:5b:f0:3c:b6:f5:99:0c:75:4f: a8:5e:d1:5b:0e:cb:ab:fc:69:f8:52:e6:0d:1e:70:cd:02:00: 4a:24:46:c5:b7:52:2f:cd:3c:09:f9:e2:f6:e5:fe:5d:3a:b4: d7:c4:46:cd:8f:5a:f4:0a:5f:34:8b:14:ac:9f:e7:ab:8c:b1: 45:a2:e4:e9:fc:77:1b:af:7a:f3:28:4e:1a:82:2d:e4:dc:29: f6:88:15:c5:8b:7e:73:d7:58:14:42:59:f8:c6:26:66:7a:87: a8:57:af:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vOiLP2E+/LmTdoiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGYxOTM3M2ItMmNjNS00MGY0LWE2ZDAtN2NjYWNjNjM0 ODU3MB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk MjU3MTI3ZDUtNzQ5Ni00YTA2LTgxMmItOTNlZGJlYWI0OThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzxGVVECIQD+nt09hqmI5IQq3dox2P7Bu4pl 82GGFPwsfdoy9xLbero0v1+ocX31GtpCR3M5o/wroFQYjO0qLXqydq1FBaPuXb+n W0vTJLHSEcsP4emNIspr4ZEv/R56qXWs4lF5db7TqfA82/EtZIciV7Tbs7FgR84F AENpqtcnXjo3uyQJ/aRPUPaVMNxtug0dC8k6ZhoEDKXoN3M03wup4RrKMN5WnJZn yRxncf+FcapS04Tcq5mUKG+EN8lpzKSrn24BwAOUKKvC7h2t8sPOUTLCMiKLCr9r oTb3OQBkE1QhiGr/cUgDbrXEtaSDuaPjb6LzMCdNB/IzoUAXDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH61owWVHuUfbTrWa/sb8BXvnLYvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wZjE5 MzczYi0yY2M1LTQwZjQtYTZkMC03Y2NhY2M2MzQ4NTcvNWIwZjdjZTYtOWU2NS0z MDI3LWFjZTUtNTAwNGU1OTE2NTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGYxOTM3M2ItMmNjNS00MGY0LWE2 ZDAtN2NjYWNjNjM0ODU3LzBmMTkzNzNiLTJjYzUtNDBmNC1hNmQwLTdjY2FjYzYz NDg1Ny5jcmwwHwYDVR0jBBgwFoAUp46RWPy5WfebiT1L1fsMf5AC/TMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wZjE5MzczYi0yY2M1LTQwZjQtYTZkMC03Y2Nh Y2M2MzQ4NTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArojvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACV/gv3HIXueMryDjyaUmVG7Yif5/4arpVm7kbC5EHEaHRGlFDOR1s5W V+GXPl094p5yjgnHiyX1bJfCwdMuDP12w5jW34yd2mI1x2Gr13SQsA0PqcNpvCDR Atkbm9EQTv1WEL7EyyHU6heylJZurBdkQKjxigtEBsavJp0KCK+hVgIHkKp7zPCR 8OV+SijWgnmOVvMLqZE1YVvwPLb1mQx1T6he0VsOy6v8afhS5g0ecM0CAEokRsW3 Ui/NPAn54vbl/l06tNfERs2PWvQKXzSLFKyf56uMsUWi5On8dxuvevMoThqCLeTc KfaIFcWLfnPXWBRCWfjGJmZ6h6hXr1o= -----END CERTIFICATE-----Generated at Tue Jul 21 20:48:11 2026 by rpki-client