$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/86f8c834-2c80-3069-adb4-87db93e6cc48.roa File: 86f8c834-2c80-3069-adb4-87db93e6cc48.roa (raw, json) Hash identifier: 8DlZtOXHORasXz7iWqAh1LY28/GlzMIaSebALcN91as= Subject key identifier: 17:DF:0F:5B:2A:24:64:D6:EB:2E:F6:F8:C9:45:4A:EB:49:CD:70:D1 Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Certificate serial: 010D0C9F4328584E8DEF9E565E596EC501708D00 Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/86f8c834-2c80-3069-adb4-87db93e6cc48.roa Signing time: Sun 19 Jul 2026 21:00:12 +0000 ROA not before: Sun 19 Jul 2026 21:00:12 +0000 ROA not after: Sat 17 Oct 2026 21:00:12 +0000 asID: 62610 IP address blocks: 128.1.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8d:ef:9e:56:5e:59:6e:c5:01:70:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Validity Not Before: Jul 19 21:00:12 2026 GMT Not After : Oct 17 21:00:12 2026 GMT Subject: CN=4c359a24-229b-4ce2-8956-5d8859a9d855 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:9a:f3:0e:06:bb:1b:54:16:cd:03:41:75:95: ae:d8:b4:f9:be:0c:8d:f7:cc:22:79:45:2b:63:ed: fb:47:dc:05:40:1a:20:83:44:bf:2e:95:d5:45:1c: c6:44:2a:f2:c3:a1:79:30:1c:40:2e:ce:e8:c8:54: 3f:77:96:c8:e6:36:76:96:75:d5:e8:88:80:88:2c: 23:a8:1a:4e:bd:a4:ac:69:8e:c7:5c:51:27:49:3a: 07:9d:76:19:c1:57:1d:c8:63:ea:f6:c6:83:fe:8b: 54:55:35:64:ff:7c:b2:ef:01:e9:0a:f0:a0:fa:97: 76:06:e7:e7:d8:2f:5c:25:ce:6d:85:0b:cc:97:a2: e3:af:42:21:08:06:b7:77:23:ff:c4:55:e8:9a:16: 65:00:6c:d8:f7:b8:a2:cb:04:93:93:17:19:c7:92: 00:15:04:fa:fb:e9:3f:f3:4f:a5:87:52:69:46:63: a1:ce:f5:81:8f:3c:61:42:e8:03:27:9a:4e:eb:0c: 09:f0:f2:77:4e:a4:52:45:4b:5a:02:71:0b:8a:d0: 6d:4d:e3:6c:45:4e:e8:34:01:cd:62:c5:ae:af:35: 61:d3:ca:4f:cd:88:bb:d1:3b:ec:fb:9f:42:17:3e: f6:25:28:ac:73:4e:b5:b6:fa:d2:30:98:46:bb:7d: fb:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:DF:0F:5B:2A:24:64:D6:EB:2E:F6:F8:C9:45:4A:EB:49:CD:70:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/86f8c834-2c80-3069-adb4-87db93e6cc48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl X509v3 Authority Key Identifier: keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer sbgp-ipAddrBlock: critical IPv4: 128.1.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:40:08:98:b1:16:5f:1c:31:14:1b:dd:43:73:e4:79:bd:83: e5:0f:7a:ac:af:ef:60:89:aa:19:c4:90:ba:c4:d8:84:4f:9d: b1:43:7b:c0:46:e5:dc:7c:4e:eb:b5:dc:67:29:4c:49:c6:2f: 6a:5a:e1:ad:37:c1:6b:a8:fa:27:c4:f5:a0:13:1a:60:b8:28: 13:71:7f:45:4a:07:0c:bc:7d:c3:07:fa:1d:96:72:64:1d:78: 8c:e7:87:3a:89:f1:68:01:5f:1c:77:da:2c:b7:d2:37:ae:5c: 3e:69:a9:ba:dc:8e:95:90:dd:59:15:b7:6a:8a:48:a7:be:d8: 30:34:b3:b2:52:a2:f2:47:44:c1:aa:b4:99:2e:5a:12:81:c6: df:05:a2:cc:1c:cd:cd:37:09:50:bf:38:11:57:72:5a:d6:f8: 96:96:01:02:f3:96:c8:f5:9d:c6:dc:84:bf:71:c8:e2:cb:a1: 42:6c:d5:00:29:c9:6a:66:86:01:7a:f1:fb:26:38:ae:ac:02: 9d:20:4d:31:6e:35:9b:d5:f2:72:84:ed:52:80:9d:38:71:c8: 70:ff:58:6c:61:3c:bd:f0:12:d6:c1:2c:aa:3e:9a:93:78:cc: 7e:2a:e1:31:9a:25:2d:7c:09:b9:23:03:41:5e:25:71:aa:1c: af:77:ef:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6N755WXlluxQFwjQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm M2E1MB4XDTI2MDcxOTIxMDAxMloXDTI2MTAxNzIxMDAxMlowLzEtMCsGA1UEAxMk NGMzNTlhMjQtMjI5Yi00Y2UyLTg5NTYtNWQ4ODU5YTlkODU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJrzDga7G1QWzQNBdZWu2LT5vgyN98wieUUr Y+37R9wFQBogg0S/LpXVRRzGRCryw6F5MBxALs7oyFQ/d5bI5jZ2lnXV6IiAiCwj qBpOvaSsaY7HXFEnSToHnXYZwVcdyGPq9saD/otUVTVk/3yy7wHpCvCg+pd2Bufn 2C9cJc5thQvMl6Ljr0IhCAa3dyP/xFXomhZlAGzY97iiywSTkxcZx5IAFQT6++k/ 80+lh1JpRmOhzvWBjzxhQugDJ5pO6wwJ8PJ3TqRSRUtaAnELitBtTeNsRU7oNAHN YsWurzVh08pPzYi70Tvs+59CFz72JSisc061tvrSMJhGu337AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBffD1sqJGTW6y72+MlFSutJzXDRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvODZmOGM4MzQtMmM4MC0z MDY5LWFkYjQtODdkYjkzZTZjYzQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgAFxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEFACJixFl8cMRQb3UNz5Hm9g+UPeqyv72CJqhnEkLrE2IRPnbFDe8BG 5dx8Tuu13GcpTEnGL2pa4a03wWuo+ifE9aATGmC4KBNxf0VKBwy8fcMH+h2WcmQd eIznhzqJ8WgBXxx32iy30jeuXD5pqbrcjpWQ3VkVt2qKSKe+2DA0s7JSovJHRMGq tJkuWhKBxt8Foswczc03CVC/OBFXclrW+JaWAQLzlsj1ncbchL9xyOLLoUJs1QAp yWpmhgF68fsmOK6sAp0gTTFuNZvV8nKE7VKAnThxyHD/WGxhPL3wEtbBLKo+mpN4 zH4q4TGaJS18CbkjA0FeJXGqHK9372w= -----END CERTIFICATE-----Generated at Tue Jul 21 14:58:18 2026 by rpki-client