$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e/cca3d96b-3f8b-3542-807d-2f334bfa86b5.roa File: cca3d96b-3f8b-3542-807d-2f334bfa86b5.roa (raw, json) Hash identifier: 1yG6UGyyqC1XfrSpJcuVm5oIWj12SoOd8OAK4R3Hh3M= Subject key identifier: 81:57:97:5F:B5:AE:E7:58:57:94:69:0E:1A:6C:36:48:6B:E3:C1:DB Certificate issuer: /CN=1cca3c9b-1147-4e91-8480-37ed1becb13e Certificate serial: 010D0C9F4328584EA79A48F9AFC9B66E6C162500 Authority key identifier: E5:94:82:D9:C4:5D:CB:E1:04:02:F2:BF:BF:5A:61:A7:8C:A2:2E:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e/cca3d96b-3f8b-3542-807d-2f334bfa86b5.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 20014 IP address blocks: 140.235.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e/1cca3c9b-1147-4e91-8480-37ed1becb13e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e/1cca3c9b-1147-4e91-8480-37ed1becb13e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9a:48:f9:af:c9:b6:6e:6c:16:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cca3c9b-1147-4e91-8480-37ed1becb13e Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=4dd9e8b3-613b-4eff-a56f-8926a23571f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:28:da:f3:6b:ea:87:e5:ee:32:b3:04:68:e7: 73:34:fa:88:06:d8:de:3b:43:9f:3f:5f:1a:bc:f3: 94:2e:1f:6f:c3:85:a3:25:29:3c:c8:a3:81:6f:8e: fe:92:b3:29:71:55:e7:58:36:47:84:f6:6c:32:97: a0:49:2e:61:9d:d9:d7:c4:d7:3f:1c:c1:7a:1f:70: 92:18:1a:d6:1b:fc:ff:5d:5b:c9:37:9d:59:ef:2f: 31:a2:8f:1b:c5:6e:3a:83:5b:4a:01:1c:96:cb:75: f4:20:07:11:0c:92:d4:5a:0e:b4:48:09:1d:2e:4a: 02:62:2c:3c:1d:bc:21:55:3f:3b:72:f9:df:fb:57: 8a:b4:13:3e:c4:89:39:49:dd:97:8e:39:2a:6f:7f: 1d:42:0d:a1:f2:f9:15:d1:8a:63:81:6c:36:cf:21: 1f:4e:34:2a:77:27:0b:03:f7:be:05:47:07:34:ae: 7a:fb:5a:6a:74:37:09:e2:9a:5f:22:77:ea:50:88: 31:0d:a7:aa:5c:68:52:30:7e:1f:a4:72:d5:5d:96: 63:3f:94:eb:6d:42:17:4b:18:1f:4e:72:9c:7c:2e: 58:04:21:82:e9:0d:25:bb:cd:49:90:be:b7:21:5e: 94:9e:5a:63:fd:91:41:9f:16:04:a0:77:16:51:47: 25:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:57:97:5F:B5:AE:E7:58:57:94:69:0E:1A:6C:36:48:6B:E3:C1:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e/cca3d96b-3f8b-3542-807d-2f334bfa86b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e/1cca3c9b-1147-4e91-8480-37ed1becb13e.crl X509v3 Authority Key Identifier: keyid:E5:94:82:D9:C4:5D:CB:E1:04:02:F2:BF:BF:5A:61:A7:8C:A2:2E:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e.cer sbgp-ipAddrBlock: critical IPv4: 140.235.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:61:b9:9f:ff:3c:95:1f:af:b1:e0:c0:1b:65:f9:ae:4a:84: 92:14:ee:eb:16:b5:5a:18:8d:22:3e:3b:95:57:f6:5c:ab:3e: 3f:90:7c:48:71:fb:d0:f6:49:80:f7:99:d1:e6:f8:41:78:29: c1:b5:68:0b:6c:05:b4:cf:74:99:b6:2e:f9:fb:f7:6f:bb:79: 39:cf:18:f1:c0:82:e8:57:05:63:22:38:4c:8a:eb:fa:ef:81: 25:d0:4f:f4:71:3b:ff:e7:5f:a3:c4:63:97:d6:50:8a:09:8a: 86:bf:fe:70:c6:f9:18:2e:5a:71:52:17:63:2e:1c:d7:fb:3d: 30:c8:3b:d6:68:72:7d:07:3c:f8:36:f5:de:70:71:3d:b2:5b: 73:78:85:8a:ec:80:0e:54:bc:21:09:d6:3a:3f:90:15:a2:23: 73:38:ce:a8:ea:2c:bd:6f:86:0b:61:93:f4:27:14:ae:40:ec: d1:4c:27:52:30:a1:53:d3:3f:e2:4d:a4:52:3c:97:68:89:96: ff:06:b1:a8:89:d1:c2:e9:9d:28:f5:82:bb:e6:3a:57:d4:1c: f1:6c:4d:a8:97:82:a1:8d:fc:06:3d:ea:e9:22:63:80:70:48: 88:85:e4:ba:4a:3c:1e:8d:ae:c6:34:70:9d:25:a2:a4:12:68: c7:39:4c:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmkj5r8m2bmwWJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWNjYTNjOWItMTE0Ny00ZTkxLTg0ODAtMzdlZDFiZWNi MTNlMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NGRkOWU4YjMtNjEzYi00ZWZmLWE1NmYtODkyNmEyMzU3MWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCja82vqh+XuMrMEaOdzNPqIBtjeO0OfP18a vPOULh9vw4WjJSk8yKOBb47+krMpcVXnWDZHhPZsMpegSS5hndnXxNc/HMF6H3CS GBrWG/z/XVvJN51Z7y8xoo8bxW46g1tKARyWy3X0IAcRDJLUWg60SAkdLkoCYiw8 HbwhVT87cvnf+1eKtBM+xIk5Sd2Xjjkqb38dQg2h8vkV0YpjgWw2zyEfTjQqdycL A/e+BUcHNK56+1pqdDcJ4ppfInfqUIgxDaeqXGhSMH4fpHLVXZZjP5TrbUIXSxgf TnKcfC5YBCGC6Q0lu81JkL63IV6Unlpj/ZFBnxYEoHcWUUcllwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIFXl1+1rudYV5RpDhpsNkhr48HbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xY2Nh M2M5Yi0xMTQ3LTRlOTEtODQ4MC0zN2VkMWJlY2IxM2UvY2NhM2Q5NmItM2Y4Yi0z NTQyLTgwN2QtMmYzMzRiZmE4NmI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWNjYTNjOWItMTE0Ny00ZTkxLTg0 ODAtMzdlZDFiZWNiMTNlLzFjY2EzYzliLTExNDctNGU5MS04NDgwLTM3ZWQxYmVj YjEzZS5jcmwwHwYDVR0jBBgwFoAU5ZSC2cRdy+EEAvK/v1php4yiLqIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xY2NhM2M5Yi0xMTQ3LTRlOTEtODQ4MC0zN2Vk MWJlY2IxM2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjOsgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEVhuZ//PJUfr7HgwBtl+a5KhJIU7usWtVoYjSI+O5VX9lyrPj+QfEhx +9D2SYD3mdHm+EF4KcG1aAtsBbTPdJm2Lvn792+7eTnPGPHAguhXBWMiOEyK6/rv gSXQT/RxO//nX6PEY5fWUIoJioa//nDG+RguWnFSF2MuHNf7PTDIO9Zocn0HPPg2 9d5wcT2yW3N4hYrsgA5UvCEJ1jo/kBWiI3M4zqjqLL1vhgthk/QnFK5A7NFMJ1Iw oVPTP+JNpFI8l2iJlv8GsaiJ0cLpnSj1grvmOlfUHPFsTaiXgqGN/AY96ukiY4Bw SIiF5LpKPB6NrsY0cJ0loqQSaMc5TAI= -----END CERTIFICATE-----Generated at Wed Jul 29 12:28:58 2026 by rpki-client