$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/b939e3a2-b88f-3888-aa78-728ece0ca29b.roa File: b939e3a2-b88f-3888-aa78-728ece0ca29b.roa (raw, json) Hash identifier: xzn3Ubl1hI1sFQyNWoXOU+PC4nVA6UVFkvmqsOopd+s= Subject key identifier: 2D:AD:2B:EB:4E:73:91:00:22:3D:30:61:51:1D:DB:AD:93:D4:A5:A9 Certificate issuer: /CN=e39425c5-52e8-4eac-9e1d-b07079c84d7b Certificate serial: 010D0C9F4328584E4D2E6D42B3A556F6B6426200 Authority key identifier: 06:21:87:7B:4F:EF:91:DA:86:4D:F7:17:D1:1F:D1:18:D2:B2:53:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/b939e3a2-b88f-3888-aa78-728ece0ca29b.roa Signing time: Fri 26 Jun 2026 16:19:18 +0000 ROA not before: Fri 26 Jun 2026 16:19:18 +0000 ROA not after: Thu 24 Sep 2026 16:19:18 +0000 asID: 16509 IP address blocks: 165.224.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4d:2e:6d:42:b3:a5:56:f6:b6:42:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e39425c5-52e8-4eac-9e1d-b07079c84d7b Validity Not Before: Jun 26 16:19:18 2026 GMT Not After : Sep 24 16:19:18 2026 GMT Subject: CN=072af0c6-4b97-4694-b2de-8ba02e74b725 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5c:8d:3c:ce:50:80:f8:cf:4b:65:d7:27:33: 3c:30:eb:62:d1:61:56:93:52:cb:5f:27:15:c8:20: 97:06:b1:57:08:e1:95:9e:42:fc:a6:2b:66:fa:cd: a9:7f:72:32:d5:97:62:0f:50:72:e8:72:be:e8:1a: 86:a5:fc:0d:cc:36:75:d8:eb:89:38:94:49:eb:0a: 37:94:8b:4e:ee:1c:28:2d:f4:6e:b4:b9:2b:da:4f: ef:14:b0:ee:95:8e:19:1f:4a:56:4a:b8:31:42:ea: d2:6e:e4:01:55:a7:9c:63:82:87:97:0e:85:b8:f7: 82:73:82:ed:12:ff:9a:6e:b9:ea:49:9d:45:32:5b: 32:ca:27:c2:b6:2f:11:26:65:2e:8c:55:8b:e2:1f: 20:93:05:b2:1f:7c:a5:b6:f4:1f:6b:09:0a:e9:50: 4e:ab:6f:47:27:5a:bf:0a:e9:49:c7:81:cc:08:9f: fb:92:21:30:87:55:b5:e7:a5:49:8d:1e:49:9b:39: 0d:f4:fb:18:f3:b9:58:75:96:ad:9f:6c:52:d8:1d: df:8d:4b:89:ad:3b:8d:44:e6:0b:78:72:30:db:96: 1c:3d:29:31:53:4e:09:ec:a3:dc:06:7d:18:2e:52: 42:4d:fb:ba:6a:cf:a0:d7:d7:50:9c:e7:6d:ac:1d: 0c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:AD:2B:EB:4E:73:91:00:22:3D:30:61:51:1D:DB:AD:93:D4:A5:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/b939e3a2-b88f-3888-aa78-728ece0ca29b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.crl X509v3 Authority Key Identifier: keyid:06:21:87:7B:4F:EF:91:DA:86:4D:F7:17:D1:1F:D1:18:D2:B2:53:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer sbgp-ipAddrBlock: critical IPv4: 165.224.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:4c:aa:a9:f4:e2:20:86:eb:42:fc:7e:6d:75:0d:1a:41:e9: 31:44:a9:d4:ed:44:3e:89:53:e4:bd:f4:fa:6b:2c:fc:d6:5d: 4d:ab:02:25:f6:0f:01:57:6f:33:bd:81:b5:27:ab:9d:19:b0: 48:f5:fd:94:f2:42:68:64:19:24:b3:ef:bf:92:d9:a1:98:60: 22:94:31:92:f2:fb:f0:38:7a:39:b7:24:a0:0d:3b:cc:c2:ac: 2a:4f:e2:7c:3a:72:48:8a:8b:4a:78:c3:10:81:d2:7e:45:f1: bf:a3:49:52:e6:49:d5:0b:06:f6:1f:38:9c:fe:aa:f3:e6:58: f6:74:5e:19:6a:00:d3:45:a1:fe:d7:b1:4a:ef:90:73:1b:e1: c7:02:eb:69:96:98:29:94:7d:e9:f2:39:11:c5:53:6e:0a:d1: 08:eb:b4:31:61:02:72:de:da:e3:cb:71:46:c1:75:d1:d9:dc: 94:c3:53:74:7e:2e:dd:4c:5e:1e:6f:d4:51:5f:34:16:6a:3b: 07:c0:b5:4f:18:b3:91:37:b8:a1:c2:aa:83:c2:0c:ab:90:06: 4f:05:f7:c1:07:04:43:3a:00:50:6c:4a:a3:fb:a8:0b:56:6f: b7:19:85:e2:17:dd:90:c2:f6:da:4f:88:28:cf:11:c5:27:6a: 19:58:8d:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5NLm1Cs6VW9rZCYgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTM5NDI1YzUtNTJlOC00ZWFjLTllMWQtYjA3MDc5Yzg0 ZDdiMB4XDTI2MDYyNjE2MTkxOFoXDTI2MDkyNDE2MTkxOFowLzEtMCsGA1UEAxMk MDcyYWYwYzYtNGI5Ny00Njk0LWIyZGUtOGJhMDJlNzRiNzI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFyNPM5QgPjPS2XXJzM8MOti0WFWk1LLXycV yCCXBrFXCOGVnkL8pitm+s2pf3Iy1ZdiD1By6HK+6BqGpfwNzDZ12OuJOJRJ6wo3 lItO7hwoLfRutLkr2k/vFLDulY4ZH0pWSrgxQurSbuQBVaecY4KHlw6FuPeCc4Lt Ev+abrnqSZ1FMlsyyifCti8RJmUujFWL4h8gkwWyH3yltvQfawkK6VBOq29HJ1q/ CulJx4HMCJ/7kiEwh1W156VJjR5JmzkN9PsY87lYdZatn2xS2B3fjUuJrTuNROYL eHIw25YcPSkxU04J7KPcBn0YLlJCTfu6as+g19dQnOdtrB0MeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC2tK+tOc5EAIj0wYVEd262T1KWpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lMzk0 MjVjNS01MmU4LTRlYWMtOWUxZC1iMDcwNzljODRkN2IvYjkzOWUzYTItYjg4Zi0z ODg4LWFhNzgtNzI4ZWNlMGNhMjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTM5NDI1YzUtNTJlOC00ZWFjLTll MWQtYjA3MDc5Yzg0ZDdiL2UzOTQyNWM1LTUyZTgtNGVhYy05ZTFkLWIwNzA3OWM4 NGQ3Yi5jcmwwHwYDVR0jBBgwFoAUBiGHe0/vkdqGTfcX0R/RGNKyU6swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lMzk0MjVjNS01MmU4LTRlYWMtOWUxZC1iMDcw NzljODRkN2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApeDMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9Mqqn04iCG60L8fm11DRpB6TFEqdTtRD6JU+S99PprLPzWXU2rAiX2 DwFXbzO9gbUnq50ZsEj1/ZTyQmhkGSSz77+S2aGYYCKUMZLy+/A4ejm3JKANO8zC rCpP4nw6ckiKi0p4wxCB0n5F8b+jSVLmSdULBvYfOJz+qvPmWPZ0XhlqANNFof7X sUrvkHMb4ccC62mWmCmUfenyORHFU24K0QjrtDFhAnLe2uPLcUbBddHZ3JTDU3R+ Lt1MXh5v1FFfNBZqOwfAtU8Ys5E3uKHCqoPCDKuQBk8F98EHBEM6AFBsSqP7qAtW b7cZheIX3ZDC9tpPiCjPEcUnahlYjac= -----END CERTIFICATE-----Generated at Mon Jul 20 01:09:14 2026 by rpki-client