$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf/b8f1b0d4-5487-3c51-9f61-4e97726e3695.roa File: b8f1b0d4-5487-3c51-9f61-4e97726e3695.roa (raw, json) Hash identifier: 2BXTKQtliq5dhne97q82hgk8YPhjU/mZMm7Vb2YqbDE= Subject key identifier: 39:EE:F9:96:6F:6B:F9:E1:C8:B0:D0:70:D9:DC:D6:8F:9A:70:36:AA Certificate issuer: /CN=580e739b-bb2f-4e02-9a24-4813328e39cf Certificate serial: 010D0C9F4328584EA7887E2EC6BA486A85062100 Authority key identifier: E7:79:6E:D4:0C:02:40:FD:99:B7:72:46:72:82:E5:A1:D4:89:C8:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf/b8f1b0d4-5487-3c51-9f61-4e97726e3695.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 3736 IP address blocks: 204.138.71.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf/580e739b-bb2f-4e02-9a24-4813328e39cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf/580e739b-bb2f-4e02-9a24-4813328e39cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:7e:2e:c6:ba:48:6a:85:06:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=580e739b-bb2f-4e02-9a24-4813328e39cf Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=9786253f-f599-4155-b773-324d9ccf7b4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9f:8a:9a:c6:6a:fe:3f:13:ee:4a:e4:73:26: f1:ae:16:c5:4d:b7:24:1b:43:9a:0a:47:fe:f7:d3: 92:35:13:f8:ff:be:2c:e0:e6:7f:13:67:f1:1d:e5: 02:82:2e:46:a8:9c:f3:c4:13:d7:31:02:a1:2f:df: 8a:ed:a0:8f:41:94:0b:de:66:92:54:48:a9:20:aa: 15:92:10:2d:82:cf:3c:91:f6:36:89:33:57:7b:95: c8:12:8a:69:88:ff:40:9c:28:36:d6:7b:33:49:2c: 8e:ed:f4:aa:a7:07:df:0c:4f:1c:0d:9c:62:96:44: 76:d7:8d:a1:bb:b6:f5:73:b7:1d:a5:b0:55:67:27: 3b:8c:1d:d0:03:d6:53:8c:72:a0:42:c0:d5:ac:53: ac:7c:a2:e7:ae:81:55:8c:94:b5:50:5c:ee:0c:63: e9:e9:d5:1a:e7:f4:68:a8:bc:a2:e4:4c:5f:54:cd: f4:c5:f2:d0:c2:67:00:a6:aa:67:78:d8:41:05:51: a6:40:72:9a:dc:01:9a:2b:fb:42:f4:65:9d:13:11: de:44:b2:2e:3a:99:eb:b7:8b:06:bd:c4:7b:3e:d0: 41:09:b8:18:30:d7:22:a3:ad:b9:ba:5a:6f:ef:11: d6:03:12:35:84:19:a4:d2:85:08:72:f6:c5:a9:4f: d5:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:EE:F9:96:6F:6B:F9:E1:C8:B0:D0:70:D9:DC:D6:8F:9A:70:36:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf/b8f1b0d4-5487-3c51-9f61-4e97726e3695.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf/580e739b-bb2f-4e02-9a24-4813328e39cf.crl X509v3 Authority Key Identifier: keyid:E7:79:6E:D4:0C:02:40:FD:99:B7:72:46:72:82:E5:A1:D4:89:C8:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf.cer sbgp-ipAddrBlock: critical IPv4: 204.138.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:1e:25:7b:40:11:bd:8c:3a:83:c5:43:ca:27:21:d6:e2:d1: 43:d2:ba:30:45:e7:4c:91:50:bd:4c:8b:ff:62:f6:94:2a:32: 73:89:b8:c2:e0:cb:d6:91:c2:46:6b:0f:e8:e0:9b:de:9b:25: 7d:fd:84:0d:16:d1:2a:33:3c:c1:08:7a:2b:4e:85:53:2d:0e: 22:f8:62:ef:aa:46:7a:54:f8:4c:c6:f9:7a:52:8f:ff:d3:40: 59:21:cd:8b:fc:0e:46:b7:34:85:84:f0:c3:76:d4:4c:58:8b: 4b:bc:4e:36:cd:27:f2:cb:b5:57:f0:75:8c:72:1b:a5:21:03: 69:93:f4:03:74:cf:25:72:b7:d3:4d:02:3b:af:33:b3:cd:18: f2:ed:f0:70:10:c6:68:0f:cf:e2:80:36:30:7c:1e:ed:2f:98: 70:9d:dc:ef:f7:7e:3c:07:42:bd:5e:1a:9c:a3:0e:72:cd:d7: bf:c2:2a:56:bc:c6:7b:d6:db:2c:f6:af:99:d5:63:3f:5c:1f: 56:fd:a0:ea:26:a7:55:09:c4:85:08:a0:f6:bc:3e:3e:74:d1: a0:1e:a7:83:25:6b:94:6e:14:c9:e7:c6:77:52:cf:73:9c:31: ed:de:04:95:1e:86:1b:ab:60:44:71:d2:b0:07:dd:ab:79:a2: 0b:cd:97:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niH4uxrpIaoUGIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTgwZTczOWItYmIyZi00ZTAyLTlhMjQtNDgxMzMyOGUz OWNmMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OTc4NjI1M2YtZjU5OS00MTU1LWI3NzMtMzI0ZDljY2Y3YjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJ+KmsZq/j8T7krkcybxrhbFTbckG0OaCkf+ 99OSNRP4/74s4OZ/E2fxHeUCgi5GqJzzxBPXMQKhL9+K7aCPQZQL3maSVEipIKoV khAtgs88kfY2iTNXe5XIEoppiP9AnCg21nszSSyO7fSqpwffDE8cDZxilkR2142h u7b1c7cdpbBVZyc7jB3QA9ZTjHKgQsDVrFOsfKLnroFVjJS1UFzuDGPp6dUa5/Ro qLyi5ExfVM30xfLQwmcApqpneNhBBVGmQHKa3AGaK/tC9GWdExHeRLIuOpnrt4sG vcR7PtBBCbgYMNcio625ulpv7xHWAxI1hBmk0oUIcvbFqU/VrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDnu+ZZva/nhyLDQcNnc1o+acDaqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS81ODBl NzM5Yi1iYjJmLTRlMDItOWEyNC00ODEzMzI4ZTM5Y2YvYjhmMWIwZDQtNTQ4Ny0z YzUxLTlmNjEtNGU5NzcyNmUzNjk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNTgwZTczOWItYmIyZi00ZTAyLTlh MjQtNDgxMzMyOGUzOWNmLzU4MGU3MzliLWJiMmYtNGUwMi05YTI0LTQ4MTMzMjhl MzljZi5jcmwwHwYDVR0jBBgwFoAU53lu1AwCQP2Zt3JGcoLlodSJyLUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS81ODBlNzM5Yi1iYjJmLTRlMDItOWEyNC00ODEz MzI4ZTM5Y2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzIpHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHweJXtAEb2MOoPFQ8onIdbi0UPSujBF50yRUL1Mi/9i9pQqMnOJuMLg y9aRwkZrD+jgm96bJX39hA0W0SozPMEIeitOhVMtDiL4Yu+qRnpU+EzG+XpSj//T QFkhzYv8Dka3NIWE8MN21ExYi0u8TjbNJ/LLtVfwdYxyG6UhA2mT9AN0zyVyt9NN AjuvM7PNGPLt8HAQxmgPz+KANjB8Hu0vmHCd3O/3fjwHQr1eGpyjDnLN17/CKla8 xnvW2yz2r5nVYz9cH1b9oOomp1UJxIUIoPa8Pj500aAep4Mla5RuFMnnxndSz3Oc Me3eBJUehhurYERx0rAH3at5ogvNl2Y= -----END CERTIFICATE-----Generated at Mon Aug 31 11:10:52 2026 by rpki-client