$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc672add-9928-494f-862b-73d618c8d940/c4fb4054-eaa4-39fc-b010-d008d5751881.roa File: c4fb4054-eaa4-39fc-b010-d008d5751881.roa (raw, json) Hash identifier: H+ek3Wkm2Yc0mtNVuHXqcAogsDf/1RwyFwpsUIasEZI= Subject key identifier: 4F:25:25:04:5C:9E:BB:07:EF:0D:AF:FB:58:1F:DD:86:C6:87:16:09 Certificate issuer: /CN=fc672add-9928-494f-862b-73d618c8d940 Certificate serial: 010D0C9F4328584E8C8A4F420445AAC6938D2300 Authority key identifier: B5:EB:80:A5:B2:F4:C6:B3:84:46:B2:7D:73:67:0A:D2:0B:F7:DA:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc672add-9928-494f-862b-73d618c8d940.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc672add-9928-494f-862b-73d618c8d940/c4fb4054-eaa4-39fc-b010-d008d5751881.roa Signing time: Sun 19 Jul 2026 09:00:11 +0000 ROA not before: Sun 19 Jul 2026 09:00:11 +0000 ROA not after: Sat 17 Oct 2026 09:00:11 +0000 asID: 53356 IP address blocks: 140.235.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc672add-9928-494f-862b-73d618c8d940/fc672add-9928-494f-862b-73d618c8d940.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc672add-9928-494f-862b-73d618c8d940/fc672add-9928-494f-862b-73d618c8d940.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc672add-9928-494f-862b-73d618c8d940.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8c:8a:4f:42:04:45:aa:c6:93:8d:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc672add-9928-494f-862b-73d618c8d940 Validity Not Before: Jul 19 09:00:11 2026 GMT Not After : Oct 17 09:00:11 2026 GMT Subject: CN=196145b2-46e6-477a-8f71-00d32f01c673 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:1b:15:c5:61:b4:21:7d:08:ca:bc:44:93:2d: 1d:9b:41:21:8f:4b:f6:62:7b:ba:b5:a4:fb:90:21: 66:98:9a:2f:ae:53:80:d7:43:87:82:8b:fc:ff:56: 44:44:f8:9f:e4:ba:ce:7f:43:c7:cd:62:48:46:0f: ae:07:e3:51:0f:bd:5d:f6:ef:4d:48:8f:25:93:6d: 59:3d:74:e8:67:67:33:b2:26:df:58:b8:fa:5e:b3: 16:8d:e8:24:1d:3e:3d:b3:3d:b5:ea:0f:71:9e:36: 41:f4:bd:86:60:dc:89:c6:20:be:04:ad:d1:8d:2d: 03:39:34:5d:16:f2:eb:12:3e:ca:af:17:ad:ca:ad: d8:4a:d6:da:f0:7d:f0:5f:fd:61:68:99:47:1a:6b: 7d:ea:dc:46:6e:5f:93:1a:99:f2:69:77:54:8d:97: c5:28:e3:f4:93:07:e6:ac:ba:ed:eb:b5:45:66:e0: ae:9c:ef:75:c5:6e:b9:df:22:a8:46:60:93:56:07: 27:05:75:d0:50:9a:58:01:5a:60:1f:a2:b3:c1:80: ab:cb:51:6e:13:1e:3d:96:0f:d3:18:0f:60:45:4b: f6:1d:93:c9:77:e4:d0:15:33:e7:a1:68:d1:82:ed: a2:6b:12:8f:1e:1d:d6:f3:fa:1a:bc:10:64:e6:bf: b6:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:25:25:04:5C:9E:BB:07:EF:0D:AF:FB:58:1F:DD:86:C6:87:16:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc672add-9928-494f-862b-73d618c8d940/c4fb4054-eaa4-39fc-b010-d008d5751881.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc672add-9928-494f-862b-73d618c8d940/fc672add-9928-494f-862b-73d618c8d940.crl X509v3 Authority Key Identifier: keyid:B5:EB:80:A5:B2:F4:C6:B3:84:46:B2:7D:73:67:0A:D2:0B:F7:DA:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc672add-9928-494f-862b-73d618c8d940.cer sbgp-ipAddrBlock: critical IPv4: 140.235.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:03:b6:fa:76:ac:9c:fb:82:c3:29:44:7e:fd:f9:0b:54:2e: 82:6b:b4:1f:d6:50:14:22:9f:73:f1:b5:8a:89:ab:07:8d:b6: ae:19:2d:17:a9:7a:55:b3:91:82:d7:29:ce:2b:d8:81:5a:3a: fc:44:78:78:b0:e5:31:1c:0b:d4:7b:43:5f:65:a6:a6:c2:35: c3:b4:d3:24:ae:87:51:9c:85:08:c5:de:26:7e:60:93:c3:f8: 95:af:77:ab:c7:84:a6:c7:53:df:16:25:29:13:82:53:7f:ef: 7b:d9:a3:3c:24:a8:69:1f:e6:13:73:12:0a:08:3d:d5:24:45: 7b:6a:3b:e5:ba:e1:23:19:a9:36:2f:4f:82:8a:ec:9d:37:03: 97:21:69:39:31:ea:c5:7a:5f:12:4e:10:9e:6e:c8:d1:dc:59: a0:dd:23:b6:86:5f:ef:b2:ca:82:57:af:c6:4b:5a:bc:b0:1c: aa:35:76:e1:9d:a8:3b:b4:91:1f:69:97:2a:8f:70:41:91:29: 1e:15:ea:f8:75:b0:d1:79:eb:df:c5:b1:e7:32:4d:8f:21:e3: 9f:0b:06:fd:d8:d1:7c:b5:37:4d:db:9d:fd:6e:9a:c6:0e:f6: 08:ef:3f:c7:3a:3d:72:04:e7:f9:d9:48:cf:a5:fb:2b:ee:3c: 58:2c:8a:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6Mik9CBEWqxpONIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmM2NzJhZGQtOTkyOC00OTRmLTg2MmItNzNkNjE4Yzhk OTQwMB4XDTI2MDcxOTA5MDAxMVoXDTI2MTAxNzA5MDAxMVowLzEtMCsGA1UEAxMk MTk2MTQ1YjItNDZlNi00NzdhLThmNzEtMDBkMzJmMDFjNjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RsVxWG0IX0IyrxEky0dm0Ehj0v2Ynu6taT7 kCFmmJovrlOA10OHgov8/1ZERPif5LrOf0PHzWJIRg+uB+NRD71d9u9NSI8lk21Z PXToZ2czsibfWLj6XrMWjegkHT49sz216g9xnjZB9L2GYNyJxiC+BK3RjS0DOTRd FvLrEj7Krxetyq3YStba8H3wX/1haJlHGmt96txGbl+TGpnyaXdUjZfFKOP0kwfm rLrt67VFZuCunO91xW653yKoRmCTVgcnBXXQUJpYAVpgH6KzwYCry1FuEx49lg/T GA9gRUv2HZPJd+TQFTPnoWjRgu2iaxKPHh3W8/oavBBk5r+2hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE8lJQRcnrsH7w2v+1gf3YbGhxYJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mYzY3 MmFkZC05OTI4LTQ5NGYtODYyYi03M2Q2MThjOGQ5NDAvYzRmYjQwNTQtZWFhNC0z OWZjLWIwMTAtZDAwOGQ1NzUxODgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmM2NzJhZGQtOTkyOC00OTRmLTg2 MmItNzNkNjE4YzhkOTQwL2ZjNjcyYWRkLTk5MjgtNDk0Zi04NjJiLTczZDYxOGM4 ZDk0MC5jcmwwHwYDVR0jBBgwFoAUteuApbL0xrOERrJ9c2cK0gv32oEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mYzY3MmFkZC05OTI4LTQ5NGYtODYyYi03M2Q2 MThjOGQ5NDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjOtkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFMDtvp2rJz7gsMpRH79+QtULoJrtB/WUBQin3PxtYqJqweNtq4ZLRep elWzkYLXKc4r2IFaOvxEeHiw5TEcC9R7Q19lpqbCNcO00ySuh1GchQjF3iZ+YJPD +JWvd6vHhKbHU98WJSkTglN/73vZozwkqGkf5hNzEgoIPdUkRXtqO+W64SMZqTYv T4KK7J03A5chaTkx6sV6XxJOEJ5uyNHcWaDdI7aGX++yyoJXr8ZLWrywHKo1duGd qDu0kR9plyqPcEGRKR4V6vh1sNF569/FsecyTY8h458LBv3Y0Xy1N03bnf1umsYO 9gjvP8c6PXIE5/nZSM+l+yvuPFgsitU= -----END CERTIFICATE-----Generated at Tue Jul 21 01:36:19 2026 by rpki-client