$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/d3d577df-aa74-3b9d-bb87-1860cb344c0e.roa File: d3d577df-aa74-3b9d-bb87-1860cb344c0e.roa (raw, json) Hash identifier: E5zMZWTRtrm7EugU+aHJW684Hyt7ipoL3vwQXxT/OSI= Subject key identifier: 03:7F:D6:15:FD:3C:14:B4:76:62:E0:B4:05:F8:A9:B1:1C:83:5A:43 Certificate issuer: /CN=0f19373b-2cc5-40f4-a6d0-7ccacc634857 Certificate serial: 010D0C9F4328584EC0A71BEBE06F97E131161880 Authority key identifier: A7:8E:91:58:FC:B9:59:F7:9B:89:3D:4B:D5:FB:0C:7F:90:02:FD:33 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/d3d577df-aa74-3b9d-bb87-1860cb344c0e.roa Signing time: Fri 07 Aug 2026 01:00:12 +0000 ROA not before: Fri 07 Aug 2026 01:00:12 +0000 ROA not after: Thu 05 Nov 2026 02:00:12 +0000 asID: 140731 IP address blocks: 174.136.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/0f19373b-2cc5-40f4-a6d0-7ccacc634857.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/0f19373b-2cc5-40f4-a6d0-7ccacc634857.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c0:a7:1b:eb:e0:6f:97:e1:31:16:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f19373b-2cc5-40f4-a6d0-7ccacc634857 Validity Not Before: Aug 7 01:00:12 2026 GMT Not After : Nov 5 02:00:12 2026 GMT Subject: CN=472ce0d9-8322-4b3c-ab97-9e5bd9b2d909 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:00:c8:55:08:bc:e7:98:5c:c3:b2:d8:41:b7: ff:c0:4d:80:d1:20:13:a6:bd:5b:ff:6b:6f:97:92: 7e:ea:c1:0c:28:8a:22:20:80:09:85:ba:22:dd:d8: 52:49:07:c9:bb:cb:d3:b0:5d:b2:2a:c9:49:f5:1b: 4f:63:79:c9:b6:17:aa:94:80:0f:f4:c9:5a:8a:ab: c3:95:c5:19:a3:0a:1d:28:68:6c:66:2c:a3:4c:21: ad:18:2a:bd:99:25:8c:60:78:3e:63:fc:c3:2f:62: 2f:c2:3d:2a:cd:17:23:a3:7a:c7:67:4b:c9:1a:73: 68:77:e2:71:8c:53:5d:95:3e:7b:48:a7:7c:68:de: 13:d5:1c:58:df:2a:9c:a9:6b:17:d3:ab:c5:3a:16: c5:fe:10:0e:bd:1a:a3:1c:19:8b:7a:17:70:11:3e: d4:27:90:1f:b2:9a:66:7d:ca:51:88:57:98:6e:a8: 97:a9:13:01:26:75:9c:99:cc:be:14:8f:53:70:96: 11:75:b6:22:a1:c5:75:76:a9:16:f5:87:7b:0a:88: 29:99:81:d7:79:7a:48:15:c6:de:11:3d:86:51:7d: 7c:e3:22:1c:2f:cb:5b:39:d5:18:51:ab:23:33:dc: 84:94:fd:6b:c0:b9:dd:af:e8:21:aa:9d:85:f1:c9: d8:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:7F:D6:15:FD:3C:14:B4:76:62:E0:B4:05:F8:A9:B1:1C:83:5A:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/d3d577df-aa74-3b9d-bb87-1860cb344c0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/0f19373b-2cc5-40f4-a6d0-7ccacc634857.crl X509v3 Authority Key Identifier: keyid:A7:8E:91:58:FC:B9:59:F7:9B:89:3D:4B:D5:FB:0C:7F:90:02:FD:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857.cer sbgp-ipAddrBlock: critical IPv4: 174.136.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:f4:30:4a:7d:31:f8:88:5c:a7:bc:cc:65:c3:c8:21:f9:65: 62:67:2c:61:8a:a9:52:96:41:e2:f7:00:9e:c1:8d:d5:5b:63: aa:2d:3d:3e:0a:fd:2a:aa:50:d2:e9:cb:dc:2e:ad:a5:11:fa: 91:22:2e:db:fc:51:fa:78:02:b8:84:be:a1:bb:dc:78:e1:8d: 6c:b7:70:13:0e:44:34:f6:3a:5e:c5:f5:3a:22:1a:c2:08:cc: 62:44:64:98:f0:39:44:8e:45:4f:45:c4:53:78:d1:3c:ed:7e: d4:b8:ca:a3:f3:5e:9e:56:24:4c:67:2d:6f:0b:5f:b3:c1:47: 21:3b:6e:56:61:02:1c:17:28:6d:c6:94:95:01:b9:f5:29:c1: 06:40:0b:64:3e:3f:2f:fd:b9:2a:6b:dc:43:e1:b2:fa:7c:06: f9:1e:79:85:a3:0d:55:6e:36:15:64:8e:ec:ee:e4:a4:e2:62: d6:5e:fe:39:4a:9f:f3:4a:c2:db:cb:60:28:4d:6e:df:f8:1f: 85:75:14:b9:6b:9c:02:d8:68:6d:8c:54:3b:01:f8:11:08:c7: be:97:d7:22:0b:c2:5d:4e:fc:ae:01:b8:d8:26:46:b2:c8:69: 47:23:9b:ec:b9:81:58:73:ff:53:7a:17:24:e0:53:c8:1f:43: be:af:dc:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Apxvr4G+X4TEWGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGYxOTM3M2ItMmNjNS00MGY0LWE2ZDAtN2NjYWNjNjM0 ODU3MB4XDTI2MDgwNzAxMDAxMloXDTI2MTEwNTAyMDAxMlowLzEtMCsGA1UEAxMk NDcyY2UwZDktODMyMi00YjNjLWFiOTctOWU1YmQ5YjJkOTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQDIVQi855hcw7LYQbf/wE2A0SATpr1b/2tv l5J+6sEMKIoiIIAJhboi3dhSSQfJu8vTsF2yKslJ9RtPY3nJtheqlIAP9MlaiqvD lcUZowodKGhsZiyjTCGtGCq9mSWMYHg+Y/zDL2Ivwj0qzRcjo3rHZ0vJGnNod+Jx jFNdlT57SKd8aN4T1RxY3yqcqWsX06vFOhbF/hAOvRqjHBmLehdwET7UJ5Afsppm fcpRiFeYbqiXqRMBJnWcmcy+FI9TcJYRdbYiocV1dqkW9Yd7CogpmYHXeXpIFcbe ET2GUX184yIcL8tbOdUYUasjM9yElP1rwLndr+ghqp2F8cnYLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAN/1hX9PBS0dmLgtAX4qbEcg1pDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wZjE5 MzczYi0yY2M1LTQwZjQtYTZkMC03Y2NhY2M2MzQ4NTcvZDNkNTc3ZGYtYWE3NC0z YjlkLWJiODctMTg2MGNiMzQ0YzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGYxOTM3M2ItMmNjNS00MGY0LWE2 ZDAtN2NjYWNjNjM0ODU3LzBmMTkzNzNiLTJjYzUtNDBmNC1hNmQwLTdjY2FjYzYz NDg1Ny5jcmwwHwYDVR0jBBgwFoAUp46RWPy5WfebiT1L1fsMf5AC/TMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wZjE5MzczYi0yY2M1LTQwZjQtYTZkMC03Y2Nh Y2M2MzQ4NTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArojtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFD0MEp9MfiIXKe8zGXDyCH5ZWJnLGGKqVKWQeL3AJ7BjdVbY6otPT4K /SqqUNLpy9wuraUR+pEiLtv8Ufp4AriEvqG73HjhjWy3cBMORDT2Ol7F9ToiGsII zGJEZJjwOUSORU9FxFN40TztftS4yqPzXp5WJExnLW8LX7PBRyE7blZhAhwXKG3G lJUBufUpwQZAC2Q+Py/9uSpr3EPhsvp8BvkeeYWjDVVuNhVkjuzu5KTiYtZe/jlK n/NKwtvLYChNbt/4H4V1FLlrnALYaG2MVDsB+BEIx76X1yILwl1O/K4BuNgmRrLI aUcjm+y5gVhz/1N6FyTgU8gfQ76v3GE= -----END CERTIFICATE-----Generated at Thu Sep 10 08:21:33 2026 by rpki-client