$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/c8de8597-366b-31fd-87f0-b43e807fba68.roa File: c8de8597-366b-31fd-87f0-b43e807fba68.roa (raw, json) Hash identifier: 2b0reIenzfyEL898QFHQOMkxy5omTgTktE7C2Z0Rejo= Subject key identifier: DD:6C:F2:D0:70:CC:72:BF:6F:6A:70:56:BC:AE:D5:69:AA:4D:11:58 Certificate issuer: /CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2 Certificate serial: 010D0C9F4328584EC20C6077D49CA5A2B4B95800 Authority key identifier: AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/c8de8597-366b-31fd-87f0-b43e807fba68.roa Signing time: Fri 07 Aug 2026 13:00:11 +0000 ROA not before: Fri 07 Aug 2026 13:00:11 +0000 ROA not after: Thu 05 Nov 2026 14:00:11 +0000 asID: 62943 IP address blocks: 65.255.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 11 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c2:0c:60:77:d4:9c:a5:a2:b4:b9:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2 Validity Not Before: Aug 7 13:00:11 2026 GMT Not After : Nov 5 14:00:11 2026 GMT Subject: CN=ae006b2c-5039-4eda-a755-16df8f0f52e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:45:e0:ca:2e:73:47:ac:09:bd:05:66:b0:28: 7e:63:1c:2c:50:f4:1d:03:57:46:3b:f6:0d:0c:74: 15:97:78:74:9e:1a:f5:bf:5b:97:8b:ce:f0:58:d4: 66:5d:34:d7:7b:8d:22:ad:39:10:dd:23:ff:dd:86: b2:74:32:1a:d8:76:ac:ae:9b:55:58:1a:86:54:f1: 86:4c:df:c9:bc:7b:59:76:45:c7:f6:15:de:45:d5: e1:60:a6:45:43:e7:79:03:d0:8e:48:4e:74:67:a5: 66:48:b1:04:73:8c:38:75:e2:74:45:5e:6f:70:68: f6:fa:67:dc:43:05:6c:7e:93:a3:39:b3:39:cb:8d: be:d1:64:6f:21:a7:9e:b5:5d:b3:33:12:d2:5a:62: 75:7f:34:74:31:9a:d8:55:58:ef:38:13:de:f9:f4: 2b:bf:7d:27:d8:f0:63:36:06:a8:75:5f:1a:0d:be: f2:64:3c:45:a1:7e:db:7f:c3:6b:0b:26:40:b3:5e: 08:b3:d2:86:a9:fb:e1:34:34:5f:63:a8:fd:8e:7e: 8d:f4:4c:5f:b3:09:d4:36:ac:4f:7e:5d:8c:ee:87: 73:fa:ca:8d:20:e8:1b:76:81:49:c5:d9:65:56:6a: 85:33:37:12:5f:32:b7:02:46:03:c6:3e:83:99:f7: 88:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:6C:F2:D0:70:CC:72:BF:6F:6A:70:56:BC:AE:D5:69:AA:4D:11:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/c8de8597-366b-31fd-87f0-b43e807fba68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl X509v3 Authority Key Identifier: keyid:AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer sbgp-ipAddrBlock: critical IPv4: 65.255.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:c4:6b:15:00:2d:c7:05:c5:b0:99:9c:e1:05:d2:cd:33:b2: cf:2d:de:09:85:75:50:d0:90:d1:c2:9c:e3:e6:e7:52:20:1a: c7:36:0a:f5:49:08:dc:36:b2:b9:10:62:f9:41:20:42:51:21: f3:51:89:88:8d:24:57:99:ce:89:c1:88:92:45:9d:3b:20:68: 3b:d1:86:2c:3d:ab:10:e8:fd:19:74:e9:f4:67:72:d6:c7:b1: d2:64:99:84:43:d6:68:42:7a:3b:34:e3:38:ad:7f:9e:76:24: a0:04:39:98:f9:6c:4f:68:0e:7b:7d:7f:11:04:ec:50:ef:52: 61:b8:d4:c8:eb:32:08:fb:6d:24:3f:d2:f4:f5:59:f5:e8:78: cf:ae:6a:74:2a:e4:8a:98:1c:75:cd:4a:3c:63:f5:93:5e:1b: aa:32:a7:af:4d:57:16:f1:ec:93:9c:06:b3:0b:a3:d1:5e:ee: 54:d3:26:b5:14:22:14:a0:a3:a6:89:95:58:09:2d:52:92:bd: d0:74:67:61:3b:c4:3e:d3:22:cf:79:85:47:67:0d:b6:8a:da: 56:6c:7d:8a:cd:47:95:3d:0c:0c:c1:bb:ea:f2:a1:62:3e:9f: 4a:82:01:02:eb:7d:39:27:92:ab:21:ab:f4:ef:9c:6b:1f:01: d1:c7:0f:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7CDGB31JylorS5WAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjdlNDM1N2UtMTcwZi00ZmI5LTg4NDktM2M4NDI1N2Yy YWQyMB4XDTI2MDgwNzEzMDAxMVoXDTI2MTEwNTE0MDAxMVowLzEtMCsGA1UEAxMk YWUwMDZiMmMtNTAzOS00ZWRhLWE3NTUtMTZkZjhmMGY1MmU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0Xgyi5zR6wJvQVmsCh+YxwsUPQdA1dGO/YN DHQVl3h0nhr1v1uXi87wWNRmXTTXe40irTkQ3SP/3YaydDIa2HasrptVWBqGVPGG TN/JvHtZdkXH9hXeRdXhYKZFQ+d5A9COSE50Z6VmSLEEc4w4deJ0RV5vcGj2+mfc QwVsfpOjObM5y42+0WRvIaeetV2zMxLSWmJ1fzR0MZrYVVjvOBPe+fQrv30n2PBj NgaodV8aDb7yZDxFoX7bf8NrCyZAs14Is9KGqfvhNDRfY6j9jn6N9ExfswnUNqxP fl2M7odz+sqNIOgbdoFJxdllVmqFMzcSXzK3AkYDxj6DmfeIewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN1s8tBwzHK/b2pwVryu1WmqTRFYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iN2U0 MzU3ZS0xNzBmLTRmYjktODg0OS0zYzg0MjU3ZjJhZDIvYzhkZTg1OTctMzY2Yi0z MWZkLTg3ZjAtYjQzZTgwN2ZiYTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYjdlNDM1N2UtMTcwZi00ZmI5LTg4 NDktM2M4NDI1N2YyYWQyL2I3ZTQzNTdlLTE3MGYtNGZiOS04ODQ5LTNjODQyNTdm MmFkMi5jcmwwHwYDVR0jBBgwFoAUqvQvX1cKAqH2YCqWDn5tkZT8Nh4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iN2U0MzU3ZS0xNzBmLTRmYjktODg0OS0zYzg0 MjU3ZjJhZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQf+LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIrEaxUALccFxbCZnOEF0s0zss8t3gmFdVDQkNHCnOPm51IgGsc2CvVJ CNw2srkQYvlBIEJRIfNRiYiNJFeZzonBiJJFnTsgaDvRhiw9qxDo/Rl06fRnctbH sdJkmYRD1mhCejs04zitf552JKAEOZj5bE9oDnt9fxEE7FDvUmG41MjrMgj7bSQ/ 0vT1WfXoeM+uanQq5IqYHHXNSjxj9ZNeG6oyp69NVxbx7JOcBrMLo9Fe7lTTJrUU IhSgo6aJlVgJLVKSvdB0Z2E7xD7TIs95hUdnDbaK2lZsfYrNR5U9DAzBu+ryoWI+ n0qCAQLrfTknkqshq/TvnGsfAdHHDyE= -----END CERTIFICATE-----Generated at Sun Aug 9 19:22:19 2026 by rpki-client