$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/78b3d770-5faa-388a-a628-512ab2ceaa32.roa File: 78b3d770-5faa-388a-a628-512ab2ceaa32.roa (raw, json) Hash identifier: WFwK1NGAPD/HU2+3ydoEJ37uaH7wpTvcsDlCor7aE4w= Subject key identifier: 7D:87:F3:A1:52:DC:EE:59:B4:70:F7:19:7D:29:27:5A:A7:44:B9:F7 Certificate issuer: /CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2 Certificate serial: 010D0C9F4328584E66DA39E041617EA100033B40 Authority key identifier: 19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/78b3d770-5faa-388a-a628-512ab2ceaa32.roa Signing time: Sun 05 Jul 2026 21:00:11 +0000 ROA not before: Sun 05 Jul 2026 21:00:11 +0000 ROA not after: Sat 03 Oct 2026 21:00:11 +0000 asID: 2914 IP address blocks: 142.147.128.0/22 maxlen: 22 142.147.132.0/23 maxlen: 23 142.147.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:66:da:39:e0:41:61:7e:a1:00:03:3b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2 Validity Not Before: Jul 5 21:00:11 2026 GMT Not After : Oct 3 21:00:11 2026 GMT Subject: CN=43dc7182-0e40-46fa-8c65-45cc69656d70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:78:2c:93:7c:26:f3:e6:18:97:fe:82:ca:46: 98:94:10:d4:57:7b:54:b4:9a:93:45:db:45:54:4a: 96:1c:9b:ad:bc:79:6d:e5:28:ca:f7:17:03:69:0a: c0:4a:f3:70:71:dc:57:a4:07:49:9b:e9:b2:c5:56: 37:c3:44:db:d7:11:2e:7b:af:2b:09:8c:f3:d7:de: 9b:4f:db:e2:0b:b2:ce:10:7f:bc:3f:7f:af:f0:5f: d6:35:88:bb:a4:86:53:7a:67:59:4d:ab:09:40:3a: cd:40:04:9b:bb:c9:24:23:57:69:7d:7a:04:4e:b5: 0c:1c:28:60:78:68:e6:b7:f8:9c:10:05:d7:cb:76: 59:ee:44:4f:c6:3a:d8:c8:5a:36:28:fc:bd:29:70: 24:45:d5:96:c0:d7:05:d2:c7:1d:4d:c9:e0:8c:34: 5a:75:7a:1f:76:67:dd:97:ac:03:81:31:b7:7a:ee: 4f:0a:3e:a4:15:2f:53:df:e4:99:ed:11:34:5f:b1: 6b:e7:70:07:69:ab:c5:05:f8:e7:61:54:21:1b:c9: 16:77:a7:be:ca:ee:c7:bd:f1:1d:a1:e5:f1:a1:df: 06:cc:42:c1:ac:0f:3b:b0:e5:6d:d3:92:1e:10:05: 6e:37:70:b3:c5:f4:ec:ef:8b:93:05:43:07:41:ff: 92:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:87:F3:A1:52:DC:EE:59:B4:70:F7:19:7D:29:27:5A:A7:44:B9:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/78b3d770-5faa-388a-a628-512ab2ceaa32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl X509v3 Authority Key Identifier: keyid:19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer sbgp-ipAddrBlock: critical IPv4: 142.147.128.0-142.147.133.255 142.147.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:b0:e0:0e:b8:09:6d:cf:13:e0:a0:a6:6b:ff:50:53:e0:47: 55:91:e9:8a:6f:91:ec:4e:35:1d:b5:56:c3:f4:2f:db:d0:5e: 68:f9:2b:46:48:95:34:4c:b0:d2:75:98:47:79:11:f2:c1:17: 34:a6:09:8a:d9:b7:20:74:c2:c0:96:e4:b5:ba:85:b8:e4:38: 1f:5b:27:4a:88:8d:bf:f8:2e:97:9a:3a:a0:14:14:59:4b:01: 47:57:68:3d:3f:1d:2b:f4:3d:f5:86:2f:5d:67:05:43:ac:02: 42:59:79:ab:81:dd:c5:42:f3:3a:ea:15:bd:56:5c:69:7e:ef: 57:ea:b0:1a:e2:d7:54:2e:f9:0a:22:8f:d7:10:21:bc:9c:45: c8:02:87:3f:73:04:8d:8c:b6:99:67:a6:44:18:ff:4a:5d:2a: bd:f6:44:2b:5d:54:22:5d:b5:35:c1:35:ae:75:17:aa:b5:2a: 4f:bb:cc:e6:25:f8:9f:49:3b:17:e8:ee:c0:4c:11:93:92:94: 0f:b8:ae:d5:ec:16:6c:72:a9:9a:b5:b9:6b:56:fe:a5:14:f1: 00:c4:fc:5f:a3:bc:2e:7f:fd:f9:a0:2a:28:a8:1a:48:5d:9e: ba:ae:30:1a:82:ad:58:b6:b5:7a:af:69:64:0f:ce:66:2e:86: ff:5e:81:53 -----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWE5m2jngQWF+oQADO0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGY3OTk5YzgtZTRhNS00NWZjLTljYzItYzRmZTdmMThi ZmUyMB4XDTI2MDcwNTIxMDAxMVoXDTI2MTAwMzIxMDAxMVowLzEtMCsGA1UEAxMk NDNkYzcxODItMGU0MC00NmZhLThjNjUtNDVjYzY5NjU2ZDcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxngsk3wm8+YYl/6CykaYlBDUV3tUtJqTRdtF VEqWHJutvHlt5SjK9xcDaQrASvNwcdxXpAdJm+myxVY3w0Tb1xEue68rCYzz196b T9viC7LOEH+8P3+v8F/WNYi7pIZTemdZTasJQDrNQASbu8kkI1dpfXoETrUMHChg eGjmt/icEAXXy3ZZ7kRPxjrYyFo2KPy9KXAkRdWWwNcF0scdTcngjDRadXofdmfd l6wDgTG3eu5PCj6kFS9T3+SZ7RE0X7Fr53AHaavFBfjnYVQhG8kWd6e+yu7HvfEd oeXxod8GzELBrA87sOVt05IeEAVuN3CzxfTs74uTBUMHQf+SLwIDAQABo4IDYzCC A18wHQYDVR0OBBYEFH2H86FS3O5ZtHD3GX0pJ1qnRLn3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kZjc5 OTljOC1lNGE1LTQ1ZmMtOWNjMi1jNGZlN2YxOGJmZTIvNzhiM2Q3NzAtNWZhYS0z ODhhLWE2MjgtNTEyYWIyY2VhYTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZGY3OTk5YzgtZTRhNS00NWZjLTlj YzItYzRmZTdmMThiZmUyL2RmNzk5OWM4LWU0YTUtNDVmYy05Y2MyLWM0ZmU3ZjE4 YmZlMi5jcmwwHwYDVR0jBBgwFoAUGekERPSo9doFk24jLmU0Yzeeu6swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kZjc5OTljOC1lNGE1LTQ1ZmMtOWNjMi1jNGZl N2YxOGJmZTIuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAeOk4AD BAGOk4QDBAOOk/AwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEASrDgDrgJbc8T4KCma/9QU+BHVZHpim+R7E41 HbVWw/Qv29BeaPkrRkiVNEyw0nWYR3kR8sEXNKYJitm3IHTCwJbktbqFuOQ4H1sn SoiNv/gul5o6oBQUWUsBR1doPT8dK/Q99YYvXWcFQ6wCQll5q4HdxULzOuoVvVZc aX7vV+qwGuLXVC75CiKP1xAhvJxFyAKHP3MEjYy2mWemRBj/Sl0qvfZEK11UIl21 NcE1rnUXqrUqT7vM5iX4n0k7F+juwEwRk5KUD7iu1ewWbHKpmrW5a1b+pRTxAMT8 X6O8Ln/9+aAqKKgaSF2euq4wGoKtWLa1eq9pZA/OZi6G/16BUw== -----END CERTIFICATE-----Generated at Tue Jul 21 14:30:18 2026 by rpki-client