$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/71de2538-1fe8-3684-9e88-3e0c4cae43b8.roa File: 71de2538-1fe8-3684-9e88-3e0c4cae43b8.roa (raw, json) Hash identifier: kA0alcqPbJaURtJd1qZHTD6yRQFzud0tXiz8NDRYcXE= Subject key identifier: 64:98:62:0D:D9:9D:D1:02:7C:B3:53:FC:3B:80:99:71:E5:6B:4A:B1 Certificate issuer: /CN=8cf12337-8eb8-43a2-a75e-2b01ceb95c39 Certificate serial: 010D0C9F4328584E921FAD702C1CA76047D1E700 Authority key identifier: 7C:DF:79:84:75:CE:4F:C7:0C:76:C4:5B:15:5E:91:D9:1C:9A:3E:6C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/71de2538-1fe8-3684-9e88-3e0c4cae43b8.roa Signing time: Tue 21 Jul 2026 09:00:12 +0000 ROA not before: Tue 21 Jul 2026 09:00:12 +0000 ROA not after: Mon 19 Oct 2026 09:00:12 +0000 asID: 14499 IP address blocks: 142.192.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/8cf12337-8eb8-43a2-a75e-2b01ceb95c39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/8cf12337-8eb8-43a2-a75e-2b01ceb95c39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:92:1f:ad:70:2c:1c:a7:60:47:d1:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cf12337-8eb8-43a2-a75e-2b01ceb95c39 Validity Not Before: Jul 21 09:00:12 2026 GMT Not After : Oct 19 09:00:12 2026 GMT Subject: CN=d823bb9a-8b1b-4e02-8e1d-dd30ab92504a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4e:9e:a9:e0:c2:93:08:7a:fc:72:8a:ca:3a: fe:34:98:3e:57:e0:da:9d:ff:84:5b:99:2b:a5:53: f5:58:7e:a9:16:44:95:01:dd:03:f3:09:8d:20:f5: 8a:ff:8b:9a:70:4e:28:e7:bb:f7:b9:15:0b:00:1a: ec:b3:e5:db:9a:cd:2f:23:2e:fc:81:4d:49:d5:33: bc:85:66:a9:a8:b6:d7:18:32:f9:92:19:0a:4d:c5: 02:7f:3f:99:0c:85:9d:a0:d8:a0:9a:ee:ac:22:7c: 18:52:8e:4e:3b:8f:e8:d2:9a:2c:40:b6:c0:6f:07: a8:72:ba:f1:5b:95:7d:76:de:4b:7d:40:01:8f:bf: 5f:28:82:13:2f:e3:99:ff:b3:06:82:e9:bb:93:40: b2:a4:d2:43:ea:7d:4f:8e:9e:54:37:d8:90:78:c6: 65:6a:8e:36:6e:1e:48:aa:fc:6d:05:73:34:a1:f5: 71:56:4b:b2:4b:12:2d:ea:05:d2:ea:58:81:8e:14: de:24:35:05:8d:69:67:a1:fa:bb:94:c3:77:5d:cb: eb:c5:8c:45:99:23:e6:2b:44:ab:ba:d4:3a:0a:71: 8c:4d:19:32:88:a0:af:19:74:90:79:30:65:77:ce: a1:b1:d6:2d:a0:4d:58:f9:87:e4:3d:e7:39:2a:15: c8:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:98:62:0D:D9:9D:D1:02:7C:B3:53:FC:3B:80:99:71:E5:6B:4A:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/71de2538-1fe8-3684-9e88-3e0c4cae43b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/8cf12337-8eb8-43a2-a75e-2b01ceb95c39.crl X509v3 Authority Key Identifier: keyid:7C:DF:79:84:75:CE:4F:C7:0C:76:C4:5B:15:5E:91:D9:1C:9A:3E:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39.cer sbgp-ipAddrBlock: critical IPv4: 142.192.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:a8:53:f5:23:95:e7:32:05:8e:e0:0d:b1:6c:c2:25:60:80: 2e:2a:46:4a:ce:ef:a6:6f:6d:12:c3:43:dd:88:8c:78:70:f9: a3:f5:71:ae:89:62:bb:bb:42:50:c9:7c:14:45:85:a4:58:02: b7:0c:75:ba:70:09:a1:27:51:88:ef:0c:43:41:36:7d:e0:6b: 83:a1:f2:0a:c2:54:05:1e:58:c0:52:4d:1d:42:e8:d3:46:14: e7:47:b5:36:02:31:36:bb:f3:3a:3e:53:ab:2a:e4:2e:df:e0: d4:85:59:9e:01:84:79:01:0c:17:48:f2:7c:71:e5:11:f8:15: 0e:be:ee:04:74:c3:02:58:04:fa:da:00:20:78:dc:59:4f:14: 0c:29:a9:d8:b7:c4:29:81:99:fa:b7:54:b0:97:15:76:a7:43: 20:99:dd:e4:05:9b:9c:f7:d9:de:3e:19:73:77:a0:64:84:5a: a8:4d:f5:90:00:3e:5b:c8:41:68:42:5c:b6:80:19:c9:c2:9e: b2:78:04:65:b1:63:53:df:b4:79:c8:78:3a:8b:70:f4:d6:e3: 24:8c:42:98:ca:c8:ef:44:99:c7:ca:30:47:95:2f:43:c9:0e: 0b:36:1a:6b:5e:94:c6:98:f9:32:8a:65:e8:8d:c2:cf:28:bd: 12:17:b1:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6SH61wLBynYEfR5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGNmMTIzMzctOGViOC00M2EyLWE3NWUtMmIwMWNlYjk1 YzM5MB4XDTI2MDcyMTA5MDAxMloXDTI2MTAxOTA5MDAxMlowLzEtMCsGA1UEAxMk ZDgyM2JiOWEtOGIxYi00ZTAyLThlMWQtZGQzMGFiOTI1MDRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt06eqeDCkwh6/HKKyjr+NJg+V+Danf+EW5kr pVP1WH6pFkSVAd0D8wmNIPWK/4uacE4o57v3uRULABrss+Xbms0vIy78gU1J1TO8 hWapqLbXGDL5khkKTcUCfz+ZDIWdoNigmu6sInwYUo5OO4/o0posQLbAbweocrrx W5V9dt5LfUABj79fKIITL+OZ/7MGgum7k0CypNJD6n1Pjp5UN9iQeMZlao42bh5I qvxtBXM0ofVxVkuySxIt6gXS6liBjhTeJDUFjWlnofq7lMN3XcvrxYxFmSPmK0Sr utQ6CnGMTRkyiKCvGXSQeTBld86hsdYtoE1Y+YfkPec5KhXIHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGSYYg3ZndECfLNT/DuAmXHla0qxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84Y2Yx MjMzNy04ZWI4LTQzYTItYTc1ZS0yYjAxY2ViOTVjMzkvNzFkZTI1MzgtMWZlOC0z Njg0LTllODgtM2UwYzRjYWU0M2I4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOGNmMTIzMzctOGViOC00M2EyLWE3 NWUtMmIwMWNlYjk1YzM5LzhjZjEyMzM3LThlYjgtNDNhMi1hNzVlLTJiMDFjZWI5 NWMzOS5jcmwwHwYDVR0jBBgwFoAUfN95hHXOT8cMdsRbFV6R2RyaPmwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi84Y2YxMjMzNy04ZWI4LTQzYTItYTc1ZS0yYjAx Y2ViOTVjMzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjsDZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIuoU/UjlecyBY7gDbFswiVggC4qRkrO76ZvbRLDQ92IjHhw+aP1ca6J Yru7QlDJfBRFhaRYArcMdbpwCaEnUYjvDENBNn3ga4Oh8grCVAUeWMBSTR1C6NNG FOdHtTYCMTa78zo+U6sq5C7f4NSFWZ4BhHkBDBdI8nxx5RH4FQ6+7gR0wwJYBPra ACB43FlPFAwpqdi3xCmBmfq3VLCXFXanQyCZ3eQFm5z32d4+GXN3oGSEWqhN9ZAA PlvIQWhCXLaAGcnCnrJ4BGWxY1PftHnIeDqLcPTW4ySMQpjKyO9EmcfKMEeVL0PJ Dgs2GmtelMaY+TKKZeiNws8ovRIXses= -----END CERTIFICATE-----Generated at Tue Jul 21 23:00:40 2026 by rpki-client