$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d/7388a857-6a24-35a6-b537-daa459258a2e.roa File: 7388a857-6a24-35a6-b537-daa459258a2e.roa (raw, json) Hash identifier: P7YV61u/PGDVqKMsgBSR23dK87bXx0vLlaqsHPcutkM= Subject key identifier: 5C:93:D0:83:8D:0A:EB:EF:83:A0:51:82:97:25:2B:E3:73:40:E7:8F Certificate issuer: /CN=7054e196-fda1-4988-82d5-4d2f5013150d Certificate serial: 010D0C9F4328584EF2E75B46C7837612371C2FC0 Authority key identifier: 52:46:E6:08:EF:68:90:03:56:03:88:76:FC:E9:A7:67:C1:E4:B4:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d/7388a857-6a24-35a6-b537-daa459258a2e.roa Signing time: Tue 25 Aug 2026 01:00:12 +0000 ROA not before: Tue 25 Aug 2026 01:00:12 +0000 ROA not after: Mon 23 Nov 2026 02:00:12 +0000 asID: 16509 IP address blocks: 170.39.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d/7054e196-fda1-4988-82d5-4d2f5013150d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d/7054e196-fda1-4988-82d5-4d2f5013150d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f2:e7:5b:46:c7:83:76:12:37:1c:2f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7054e196-fda1-4988-82d5-4d2f5013150d Validity Not Before: Aug 25 01:00:12 2026 GMT Not After : Nov 23 02:00:12 2026 GMT Subject: CN=4effc559-fced-4520-8450-32b5e5795234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:9e:cd:33:80:02:50:1c:fa:97:36:90:fc:96: b9:2e:58:fb:33:68:05:a2:00:83:e9:26:81:d4:cc: c2:d1:26:c4:60:14:84:54:ee:2a:b6:0b:1e:6c:70: 72:69:06:e2:0b:f2:07:42:10:01:98:00:0b:c7:2e: f1:c2:76:cd:51:cc:a7:04:0d:2a:b2:8b:53:05:e2: 11:30:6a:cb:34:92:86:e9:31:d9:d2:35:6d:60:7d: 4e:52:5c:09:14:de:a6:a9:67:1f:6c:c0:39:d2:1a: 1e:e8:4e:9d:0e:e1:2c:b0:da:b5:21:6d:d5:b8:39: 86:a9:93:94:92:3a:75:5d:67:4b:e5:70:8e:ff:e4: bb:af:58:5f:1b:14:b6:9b:96:d1:5a:90:6f:01:11: 07:f0:b6:6d:36:3e:e4:16:92:9e:68:17:99:62:2f: cd:5b:53:fa:1b:b7:ee:5d:fd:e9:fd:53:fc:58:8d: dc:38:b8:08:3b:f8:7f:ad:cd:f0:43:96:05:06:8b: 1a:f7:97:4f:b2:8a:80:4c:f6:c3:25:de:25:8d:7b: 69:be:2a:81:f2:da:33:be:9f:19:81:a5:33:6a:84: 84:17:0e:0d:25:60:df:f3:29:5d:c0:01:94:e8:8c: f9:95:d2:73:e5:4b:39:e5:3b:31:f5:c8:13:06:5b: 9d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:93:D0:83:8D:0A:EB:EF:83:A0:51:82:97:25:2B:E3:73:40:E7:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d/7388a857-6a24-35a6-b537-daa459258a2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d/7054e196-fda1-4988-82d5-4d2f5013150d.crl X509v3 Authority Key Identifier: keyid:52:46:E6:08:EF:68:90:03:56:03:88:76:FC:E9:A7:67:C1:E4:B4:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d.cer sbgp-ipAddrBlock: critical IPv4: 170.39.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:5a:7f:e8:a3:65:9e:69:49:72:9b:f9:bc:f0:65:16:6d:e5: 14:61:09:c4:f7:32:e9:fd:cc:61:c5:1f:b4:f2:fd:cd:f6:e8: e7:27:3c:51:7a:37:eb:b6:7d:19:f0:e2:d8:de:7f:cd:b7:f9: 5a:dd:04:08:68:8f:81:da:ea:63:30:81:b8:6b:4c:f8:7d:5e: b5:1c:c4:4b:c8:9f:1d:b9:4d:cb:2b:0a:11:9c:69:7c:60:55: 93:32:af:78:b2:5f:5c:6e:9e:75:d3:fe:83:a4:bf:e6:7f:11: 00:12:ea:66:9c:b7:bb:5d:d4:30:b1:29:c1:62:14:6c:e0:8e: ce:06:32:c2:a0:25:f4:4b:33:09:31:28:97:22:b9:b0:a0:9a: 3b:53:4b:61:a5:55:23:65:ad:47:fa:06:85:99:0a:04:c9:cf: c3:65:ba:68:ab:04:23:a6:95:40:05:49:6c:c6:16:4d:68:03: c8:39:af:8b:54:d4:b5:d2:a4:09:63:19:b6:79:08:cf:6a:ae: 22:0c:71:c5:1b:78:5a:fe:14:d1:29:c3:18:4d:ec:08:57:6f: 93:17:f4:62:4c:74:ec:cb:7c:8c:f9:57:0f:1f:8a:d1:2c:ae: fc:cf:a4:d4:85:8b:ec:12:9c:30:ad:d6:b8:ea:93:29:ab:e6: 70:d8:28:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7y51tGx4N2EjccL8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzA1NGUxOTYtZmRhMS00OTg4LTgyZDUtNGQyZjUwMTMx NTBkMB4XDTI2MDgyNTAxMDAxMloXDTI2MTEyMzAyMDAxMlowLzEtMCsGA1UEAxMk NGVmZmM1NTktZmNlZC00NTIwLTg0NTAtMzJiNWU1Nzk1MjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+57NM4ACUBz6lzaQ/Ja5Llj7M2gFogCD6SaB 1MzC0SbEYBSEVO4qtgsebHByaQbiC/IHQhABmAALxy7xwnbNUcynBA0qsotTBeIR MGrLNJKG6THZ0jVtYH1OUlwJFN6mqWcfbMA50hoe6E6dDuEssNq1IW3VuDmGqZOU kjp1XWdL5XCO/+S7r1hfGxS2m5bRWpBvAREH8LZtNj7kFpKeaBeZYi/NW1P6G7fu Xf3p/VP8WI3cOLgIO/h/rc3wQ5YFBosa95dPsoqATPbDJd4ljXtpviqB8tozvp8Z gaUzaoSEFw4NJWDf8yldwAGU6Iz5ldJz5Us55Tsx9cgTBludLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFyT0IONCuvvg6BRgpclK+NzQOePMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83MDU0 ZTE5Ni1mZGExLTQ5ODgtODJkNS00ZDJmNTAxMzE1MGQvNzM4OGE4NTctNmEyNC0z NWE2LWI1MzctZGFhNDU5MjU4YTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzA1NGUxOTYtZmRhMS00OTg4LTgy ZDUtNGQyZjUwMTMxNTBkLzcwNTRlMTk2LWZkYTEtNDk4OC04MmQ1LTRkMmY1MDEz MTUwZC5jcmwwHwYDVR0jBBgwFoAUUkbmCO9okANWA4h2/OmnZ8HktKwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83MDU0ZTE5Ni1mZGExLTQ5ODgtODJkNS00ZDJm NTAxMzE1MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqieJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJaf+ijZZ5pSXKb+bzwZRZt5RRhCcT3Mun9zGHFH7Ty/c326OcnPFF6 N+u2fRnw4tjef823+VrdBAhoj4Ha6mMwgbhrTPh9XrUcxEvInx25TcsrChGcaXxg VZMyr3iyX1xunnXT/oOkv+Z/EQAS6mact7td1DCxKcFiFGzgjs4GMsKgJfRLMwkx KJciubCgmjtTS2GlVSNlrUf6BoWZCgTJz8NlumirBCOmlUAFSWzGFk1oA8g5r4tU 1LXSpAljGbZ5CM9qriIMccUbeFr+FNEpwxhN7AhXb5MX9GJMdOzLfIz5Vw8fitEs rvzPpNSFi+wSnDCt1rjqkymr5nDYKFI= -----END CERTIFICATE-----Generated at Wed Aug 26 20:28:28 2026 by rpki-client