$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/3f4977f5-1b5e-37fd-bf6c-5586f2d9a4ef.roa File: 3f4977f5-1b5e-37fd-bf6c-5586f2d9a4ef.roa (raw, json) Hash identifier: 36BEiXn+zu17slUxh6klqKV/F5hlTzJvqaCMUApynd4= Subject key identifier: A2:AE:A9:BB:D3:41:96:16:7A:CC:B3:36:1D:49:7B:3D:3F:DB:8B:53 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584E8DA230E89D7A4B095EB79900 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/3f4977f5-1b5e-37fd-bf6c-5586f2d9a4ef.roa Signing time: Sun 19 Jul 2026 18:24:17 +0000 ROA not before: Sun 19 Jul 2026 18:24:17 +0000 ROA not after: Sat 17 Oct 2026 18:24:17 +0000 asID: 11404 IP address blocks: 174.127.128.0/17 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8d:a2:30:e8:9d:7a:4b:09:5e:b7:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Jul 19 18:24:17 2026 GMT Not After : Oct 17 18:24:17 2026 GMT Subject: CN=2aa30046-f3bc-4618-a7d4-6a434cbc3b8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:be:bb:0d:9f:4b:ee:30:d1:8f:0d:d3:fa:48: 4f:e0:2a:45:fe:4b:a4:ba:56:3c:b6:96:0e:d0:8c: aa:36:45:fd:fe:a6:e4:37:f7:3e:cb:be:65:c8:15: 74:52:7b:52:6b:07:49:f7:2c:d6:28:85:b7:62:73: 49:6f:08:37:ba:55:19:4c:51:46:9e:9c:26:13:b2: 36:e7:25:d4:5f:bc:65:a6:52:fc:1b:9d:ed:c6:43: 86:ab:f8:a8:cc:9b:26:d0:c0:43:3f:e2:26:8c:c1: dd:db:43:bc:4a:10:8c:41:b7:2a:35:a8:ce:5a:62: 9f:d1:5f:56:c4:08:27:af:e6:5a:33:3d:9a:84:25: 0f:1e:ff:e8:bc:36:fd:6d:70:20:16:5d:00:b8:71: 45:b8:91:e1:8c:24:59:1d:46:46:9b:05:25:00:d8: 97:a0:9d:10:7d:fb:d4:c1:27:de:b5:48:54:91:14: 36:16:d0:96:b1:2d:cd:63:81:e5:4a:15:ff:71:e1: 06:35:5d:20:2a:90:ac:cf:b5:70:70:43:0a:68:7e: 1c:cb:9a:0a:47:8f:fa:5d:82:0f:b2:c0:d2:29:70: ad:e0:67:75:68:37:5d:fe:9b:08:9c:35:74:98:29: 3e:af:e8:e3:21:62:c1:b1:40:33:79:99:69:68:4a: 3a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:AE:A9:BB:D3:41:96:16:7A:CC:B3:36:1D:49:7B:3D:3F:DB:8B:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/3f4977f5-1b5e-37fd-bf6c-5586f2d9a4ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 174.127.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:74:f3:f9:4f:3c:45:6e:63:7c:96:3f:34:20:47:17:3f:22: 5e:f0:a1:30:b5:49:8d:15:5e:6b:84:d5:c8:dd:ce:8f:31:a6: d1:63:b2:fb:08:11:12:c3:21:0f:0b:7e:82:a1:cf:44:7e:13: e3:a4:ad:df:ad:9a:95:ae:68:85:e0:89:1d:cc:ae:5b:bf:9b: 0a:ed:99:db:bf:f7:3f:58:ed:e9:bc:8f:f1:4f:ce:2a:1c:65: b4:96:86:b9:9c:2b:9c:06:ed:fb:ff:2a:e9:c4:e0:c3:35:11: 16:60:9d:ff:bd:10:c3:ad:d7:06:35:17:c9:e2:c8:23:e3:95: ba:0b:51:9f:93:6d:c1:9d:62:de:ed:18:52:6c:99:4b:5a:7d: 6b:74:7d:c4:d6:3d:2c:fc:7f:1b:eb:06:20:c0:8d:1c:73:34: 0b:fe:01:7e:49:73:45:b1:c4:e8:b3:95:25:32:53:80:ad:fb: 95:bd:63:d7:93:a4:5b:14:79:49:9c:68:6d:08:20:81:54:3d: 08:4c:76:a1:f2:f8:86:2d:97:83:86:db:0a:2c:d5:77:18:6d: 76:44:ef:97:d2:29:64:ff:32:87:31:01:c9:d6:97:f3:e1:05: 13:61:77:1a:52:05:cc:33:b2:60:56:78:a6:38:b5:99:6f:f0: c0:42:10:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6NojDonXpLCV63mQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI2MDcxOTE4MjQxN1oXDTI2MTAxNzE4MjQxN1owLzEtMCsGA1UEAxMk MmFhMzAwNDYtZjNiYy00NjE4LWE3ZDQtNmE0MzRjYmMzYjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmL67DZ9L7jDRjw3T+khP4CpF/kukulY8tpYO 0IyqNkX9/qbkN/c+y75lyBV0UntSawdJ9yzWKIW3YnNJbwg3ulUZTFFGnpwmE7I2 5yXUX7xlplL8G53txkOGq/iozJsm0MBDP+ImjMHd20O8ShCMQbcqNajOWmKf0V9W xAgnr+ZaMz2ahCUPHv/ovDb9bXAgFl0AuHFFuJHhjCRZHUZGmwUlANiXoJ0QffvU wSfetUhUkRQ2FtCWsS3NY4HlShX/ceEGNV0gKpCsz7VwcEMKaH4cy5oKR4/6XYIP ssDSKXCt4Gd1aDdd/psInDV0mCk+r+jjIWLBsUAzeZlpaEo6bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKKuqbvTQZYWesyzNh1Jez0/24tTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvM2Y0OTc3ZjUtMWI1ZS0z N2ZkLWJmNmMtNTU4NmYyZDlhNGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHrn+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAB08/lPPEVuY3yWPzQgRxc/Il7woTC1SY0VXmuE1cjdzo8xptFjsvsI ERLDIQ8LfoKhz0R+E+Okrd+tmpWuaIXgiR3Mrlu/mwrtmdu/9z9Y7em8j/FPzioc ZbSWhrmcK5wG7fv/KunE4MM1ERZgnf+9EMOt1wY1F8niyCPjlboLUZ+TbcGdYt7t GFJsmUtafWt0fcTWPSz8fxvrBiDAjRxzNAv+AX5Jc0WxxOizlSUyU4Ct+5W9Y9eT pFsUeUmcaG0IIIFUPQhMdqHy+IYtl4OG2wos1XcYbXZE75fSKWT/MocxAcnWl/Ph BRNhdxpSBcwzsmBWeKY4tZlv8MBCELc= -----END CERTIFICATE-----Generated at Tue Jul 21 22:36:53 2026 by rpki-client