$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/87c7e4fc-eb16-4b70-8970-c603ca2c3547/e560b09c-8594-32b4-a2de-7c8c848455b6.roa File: e560b09c-8594-32b4-a2de-7c8c848455b6.roa (raw, json) Hash identifier: QMJuMV7rEAJzR5f0XD2jPQfih31TW/872kne/k7jQ5w= Subject key identifier: 12:87:AF:3D:2F:DB:7C:05:E4:98:A0:4A:D3:F4:89:A1:2D:36:2C:3F Certificate issuer: /CN=87c7e4fc-eb16-4b70-8970-c603ca2c3547 Certificate serial: 010D0C9F4328584EA793810017002EBDC0458E80 Authority key identifier: 2F:51:D4:89:0C:06:43:9C:61:72:78:18:70:DC:AF:0C:B6:67:8C:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/87c7e4fc-eb16-4b70-8970-c603ca2c3547.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/87c7e4fc-eb16-4b70-8970-c603ca2c3547/e560b09c-8594-32b4-a2de-7c8c848455b6.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 19695 IP address blocks: 142.249.104.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/87c7e4fc-eb16-4b70-8970-c603ca2c3547/87c7e4fc-eb16-4b70-8970-c603ca2c3547.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/87c7e4fc-eb16-4b70-8970-c603ca2c3547/87c7e4fc-eb16-4b70-8970-c603ca2c3547.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/87c7e4fc-eb16-4b70-8970-c603ca2c3547.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:93:81:00:17:00:2e:bd:c0:45:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87c7e4fc-eb16-4b70-8970-c603ca2c3547 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=6434796d-e565-4c77-8148-730e2ead1f1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:2b:ec:c4:d2:2a:e2:f0:da:37:45:20:93:a9: a1:ff:86:9d:74:aa:3f:27:3c:8d:6a:13:70:61:f4: ff:2a:c5:80:09:bd:13:fe:a3:1e:67:74:80:ac:f5: ee:53:00:31:af:b3:5d:3c:c1:ac:79:db:9e:9b:92: bf:72:5c:7c:70:d6:21:c3:a1:ea:3d:b5:47:a4:9d: 43:cb:b0:d6:ed:fc:58:42:98:b6:98:d4:c7:c6:88: 15:a9:55:42:41:6a:92:22:c8:52:b7:90:0b:f3:a7: c5:dc:d0:03:39:76:0a:a6:c3:47:a7:c7:f7:53:b5: 03:af:8c:56:6b:b5:51:05:03:92:be:c1:d8:d0:1c: 90:20:50:16:07:2f:9c:73:ab:6a:99:57:e5:e7:8d: 1b:59:6c:20:9b:5f:6c:a7:a0:d6:99:6a:8d:7d:32: 06:77:22:6a:60:2e:89:46:8f:f4:c4:14:82:a2:06: 6c:90:e8:38:80:1f:98:b5:c8:94:13:b5:08:22:e2: 5f:17:4c:2b:81:a1:99:ed:82:a9:31:c4:b3:a3:c7: fe:f3:ac:a9:ef:af:a5:e8:b6:f6:0b:fa:6a:3d:1a: d4:f2:06:5e:94:b7:f0:65:77:5d:82:a9:0a:9a:ed: d2:88:1a:65:c1:95:38:f3:5f:f9:49:0f:39:45:43: e6:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:87:AF:3D:2F:DB:7C:05:E4:98:A0:4A:D3:F4:89:A1:2D:36:2C:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/87c7e4fc-eb16-4b70-8970-c603ca2c3547/e560b09c-8594-32b4-a2de-7c8c848455b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/87c7e4fc-eb16-4b70-8970-c603ca2c3547/87c7e4fc-eb16-4b70-8970-c603ca2c3547.crl X509v3 Authority Key Identifier: keyid:2F:51:D4:89:0C:06:43:9C:61:72:78:18:70:DC:AF:0C:B6:67:8C:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/87c7e4fc-eb16-4b70-8970-c603ca2c3547.cer sbgp-ipAddrBlock: critical IPv4: 142.249.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:81:c6:70:f8:e0:d0:2e:ce:2f:ec:f3:00:1a:bd:13:db:bb: 2b:fd:e1:51:e2:05:85:9f:ca:64:95:fe:9a:e5:56:3c:c0:d3: 5d:48:24:b1:2b:a9:7e:26:53:2f:d5:94:d5:05:45:cb:c1:f3: d1:e6:50:3e:15:30:06:9c:61:9c:a1:ca:84:d2:13:5a:31:ba: ea:d1:29:6a:a9:0c:55:07:d8:96:72:8c:ca:09:5f:5f:c6:f6: f5:d2:97:da:24:ec:36:2e:7f:61:38:54:60:c4:1f:aa:4e:6e: 22:aa:77:0b:26:71:6f:65:fb:25:09:3d:26:eb:35:ed:5c:46: 94:c1:da:3c:db:6e:4c:60:e5:cb:db:80:a9:68:25:4f:ae:11: 76:11:82:42:de:eb:f1:b5:4a:c1:60:b0:1f:9e:ad:f0:5a:f3: c7:6a:3b:71:1d:ce:1d:f2:81:36:79:7e:0f:7d:7c:94:fa:d3: 8b:55:28:92:66:1b:9b:e7:83:e7:e8:6c:12:91:c0:00:cc:5c: ed:ad:7c:02:2e:cd:92:ba:2d:af:64:ae:be:13:85:c1:86:36: 36:59:c4:36:1f:b3:7f:63:f8:a5:d3:72:b1:4b:18:2f:a7:69: 82:a7:0c:2f:0b:5d:af:a9:79:8b:f1:26:9b:3d:4e:5b:52:3b: a8:d1:5c:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nk4EAFwAuvcBFjoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODdjN2U0ZmMtZWIxNi00YjcwLTg5NzAtYzYwM2NhMmMz NTQ3MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NjQzNDc5NmQtZTU2NS00Yzc3LTgxNDgtNzMwZTJlYWQxZjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCvsxNIq4vDaN0Ugk6mh/4addKo/JzyNahNw YfT/KsWACb0T/qMeZ3SArPXuUwAxr7NdPMGseduem5K/clx8cNYhw6HqPbVHpJ1D y7DW7fxYQpi2mNTHxogVqVVCQWqSIshSt5AL86fF3NADOXYKpsNHp8f3U7UDr4xW a7VRBQOSvsHY0ByQIFAWBy+cc6tqmVfl540bWWwgm19sp6DWmWqNfTIGdyJqYC6J Ro/0xBSCogZskOg4gB+YtciUE7UIIuJfF0wrgaGZ7YKpMcSzo8f+86yp76+l6Lb2 C/pqPRrU8gZelLfwZXddgqkKmu3SiBplwZU481/5SQ85RUPmWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBKHrz0v23wF5JigStP0iaEtNiw/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84N2M3 ZTRmYy1lYjE2LTRiNzAtODk3MC1jNjAzY2EyYzM1NDcvZTU2MGIwOWMtODU5NC0z MmI0LWEyZGUtN2M4Yzg0ODQ1NWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvODdjN2U0ZmMtZWIxNi00YjcwLTg5 NzAtYzYwM2NhMmMzNTQ3Lzg3YzdlNGZjLWViMTYtNGI3MC04OTcwLWM2MDNjYTJj MzU0Ny5jcmwwHwYDVR0jBBgwFoAUL1HUiQwGQ5xhcngYcNyvDLZnjPYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84N2M3ZTRmYy1lYjE2LTRiNzAtODk3MC1jNjAz Y2EyYzM1NDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjvloMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGGBxnD44NAuzi/s8wAavRPbuyv94VHiBYWfymSV/prlVjzA011IJLEr qX4mUy/VlNUFRcvB89HmUD4VMAacYZyhyoTSE1oxuurRKWqpDFUH2JZyjMoJX1/G 9vXSl9ok7DYuf2E4VGDEH6pObiKqdwsmcW9l+yUJPSbrNe1cRpTB2jzbbkxg5cvb gKloJU+uEXYRgkLe6/G1SsFgsB+erfBa88dqO3Edzh3ygTZ5fg99fJT604tVKJJm G5vng+fobBKRwADMXO2tfAIuzZK6La9krr4ThcGGNjZZxDYfs39j+KXTcrFLGC+n aYKnDC8LXa+peYvxJps9TltSO6jRXPQ= -----END CERTIFICATE-----Generated at Fri Sep 4 21:05:48 2026 by rpki-client