$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/dacc3826-a49a-31ce-8af8-aff620dec6e2.roa File: dacc3826-a49a-31ce-8af8-aff620dec6e2.roa (raw, json) Hash identifier: c/hrdr4J8VCyHIZ8NznJ1RM63DgKstzJeLa4jSgL96w= Subject key identifier: 40:72:51:B1:14:A3:37:6F:4C:81:AC:0D:CC:59:9D:AC:D5:74:F0:28 Certificate issuer: /CN=c3927d26-c229-496a-8940-c88a834f5196 Certificate serial: 010D0C9F4328584E9BE519CBB7FBB9DDAE1AE040 Authority key identifier: DE:20:BB:65:C8:A2:DD:8C:6D:02:8C:C9:24:31:D9:0C:60:C5:E7:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/dacc3826-a49a-31ce-8af8-aff620dec6e2.roa Signing time: Fri 24 Jul 2026 21:00:12 +0000 ROA not before: Fri 24 Jul 2026 21:00:12 +0000 ROA not after: Thu 22 Oct 2026 21:00:12 +0000 asID: 12119 IP address blocks: 140.177.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/c3927d26-c229-496a-8940-c88a834f5196.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/c3927d26-c229-496a-8940-c88a834f5196.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 09 Aug 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9b:e5:19:cb:b7:fb:b9:dd:ae:1a:e0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3927d26-c229-496a-8940-c88a834f5196 Validity Not Before: Jul 24 21:00:12 2026 GMT Not After : Oct 22 21:00:12 2026 GMT Subject: CN=57eb8995-fec2-44f6-8825-4323d74d9001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:9b:38:75:09:90:41:3f:bb:e5:f8:b6:68:16: 80:bb:d4:38:ad:9e:7a:f5:01:94:48:f0:50:92:33: 46:1a:03:45:dc:89:18:2d:99:4a:f8:0e:ae:26:2d: ca:fe:19:fc:67:9b:c6:10:12:d2:e9:a3:4f:bb:ec: 72:e7:fd:8a:14:fa:fd:7e:b1:2f:fd:55:ea:67:7c: 84:0a:ad:a6:d6:95:0a:2a:cf:d9:92:a2:14:a3:10: 4a:7a:b9:ef:62:cc:1c:8b:08:e4:1a:58:09:94:d6: ea:00:1e:6d:cd:4a:b8:f3:00:30:92:ad:9c:cf:5a: 98:87:a1:f4:62:88:27:d2:28:76:28:e2:91:e4:51: f9:8b:f0:11:56:b7:e3:dc:e1:13:ca:81:0e:78:62: a8:e2:8e:5e:1d:36:84:f3:97:27:cc:93:0b:96:1b: c4:53:85:55:9a:f1:36:2e:19:e5:a0:b8:94:a3:58: 34:a2:56:47:a7:bc:1e:28:68:bf:55:9a:6d:4f:8c: 61:71:10:0c:26:88:88:48:24:93:01:b3:47:a6:46: d7:57:9b:cd:3b:f5:2f:95:28:c8:c3:78:be:4f:33: fd:eb:53:1d:36:5d:9c:dc:27:78:45:0f:68:f2:5e: c6:bd:12:62:f8:d6:60:9c:cd:f6:3c:3e:61:fe:f3: e0:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:72:51:B1:14:A3:37:6F:4C:81:AC:0D:CC:59:9D:AC:D5:74:F0:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/dacc3826-a49a-31ce-8af8-aff620dec6e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/c3927d26-c229-496a-8940-c88a834f5196.crl X509v3 Authority Key Identifier: keyid:DE:20:BB:65:C8:A2:DD:8C:6D:02:8C:C9:24:31:D9:0C:60:C5:E7:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196.cer sbgp-ipAddrBlock: critical IPv4: 140.177.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:3a:80:cd:bc:08:65:08:b5:88:77:cf:2c:9d:e4:21:04:bc: ab:14:bb:db:8a:f7:3b:fd:5f:ef:b2:94:33:1e:51:c7:92:1c: 0b:71:43:67:f2:5a:f0:5d:d2:45:3f:42:b5:aa:b8:b2:07:99: a6:56:28:51:05:4e:26:5b:39:70:32:7e:a8:59:f6:b0:f9:85: 29:4d:27:5a:27:c8:7b:e1:3e:70:0b:37:26:40:0f:00:92:9c: 96:b6:ba:77:5c:15:28:68:8d:1e:2d:19:09:39:52:c9:bf:74: 2f:36:5f:de:9d:e1:6d:66:93:d5:e4:c3:df:f6:09:87:d8:75: ea:0a:0f:4c:bf:fb:74:0e:1e:8c:a8:c1:44:8d:bf:35:58:55: c6:85:da:c7:58:91:f5:2c:d8:1b:17:10:af:a1:6e:f6:46:e2: a3:f7:08:e7:c9:1d:62:cf:82:ea:e8:5e:83:57:88:97:5b:7a: ea:4c:f1:92:f8:1d:ae:7d:48:2e:fd:ab:45:66:ca:23:d2:e9: 20:6b:a5:df:54:f9:28:0e:48:cf:af:b3:f6:c6:5b:57:67:0e: 0d:9a:4d:e1:0a:34:82:5d:74:2d:57:f7:1d:dd:e8:fc:0e:03: 96:cb:81:24:1d:34:2f:4a:cc:59:1f:45:5b:78:f3:f1:8d:78: 36:48:88:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6b5RnLt/u53a4a4EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzM5MjdkMjYtYzIyOS00OTZhLTg5NDAtYzg4YTgzNGY1 MTk2MB4XDTI2MDcyNDIxMDAxMloXDTI2MTAyMjIxMDAxMlowLzEtMCsGA1UEAxMk NTdlYjg5OTUtZmVjMi00NGY2LTg4MjUtNDMyM2Q3NGQ5MDAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJs4dQmQQT+75fi2aBaAu9Q4rZ569QGUSPBQ kjNGGgNF3IkYLZlK+A6uJi3K/hn8Z5vGEBLS6aNPu+xy5/2KFPr9frEv/VXqZ3yE Cq2m1pUKKs/ZkqIUoxBKernvYswciwjkGlgJlNbqAB5tzUq48wAwkq2cz1qYh6H0 Yogn0ih2KOKR5FH5i/ARVrfj3OETyoEOeGKo4o5eHTaE85cnzJMLlhvEU4VVmvE2 LhnloLiUo1g0olZHp7weKGi/VZptT4xhcRAMJoiISCSTAbNHpkbXV5vNO/UvlSjI w3i+TzP961MdNl2c3Cd4RQ9o8l7GvRJi+NZgnM32PD5h/vPgQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEByUbEUozdvTIGsDcxZnazVdPAoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jMzky N2QyNi1jMjI5LTQ5NmEtODk0MC1jODhhODM0ZjUxOTYvZGFjYzM4MjYtYTQ5YS0z MWNlLThhZjgtYWZmNjIwZGVjNmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzM5MjdkMjYtYzIyOS00OTZhLTg5 NDAtYzg4YTgzNGY1MTk2L2MzOTI3ZDI2LWMyMjktNDk2YS04OTQwLWM4OGE4MzRm NTE5Ni5jcmwwHwYDVR0jBBgwFoAU3iC7Zcii3YxtAozJJDHZDGDF51owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jMzkyN2QyNi1jMjI5LTQ5NmEtODk0MC1jODhh ODM0ZjUxOTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHjLGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHU6gM28CGUItYh3zyyd5CEEvKsUu9uK9zv9X++ylDMeUceSHAtxQ2fy WvBd0kU/QrWquLIHmaZWKFEFTiZbOXAyfqhZ9rD5hSlNJ1onyHvhPnALNyZADwCS nJa2undcFShojR4tGQk5Usm/dC82X96d4W1mk9Xkw9/2CYfYdeoKD0y/+3QOHoyo wUSNvzVYVcaF2sdYkfUs2BsXEK+hbvZG4qP3COfJHWLPguroXoNXiJdbeupM8ZL4 Ha59SC79q0VmyiPS6SBrpd9U+SgOSM+vs/bGW1dnDg2aTeEKNIJddC1X9x3d6PwO A5bLgSQdNC9KzFkfRVt48/GNeDZIiOo= -----END CERTIFICATE-----Generated at Sat Aug 8 04:30:21 2026 by rpki-client