$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/5c3108b3-4900-35c3-86a1-e25092452588.roa File: 5c3108b3-4900-35c3-86a1-e25092452588.roa (raw, json) Hash identifier: Q3Fzg2WNPlI+tlqeHpSZ+YTMMkJDSjTpKbt34+TBy2Y= Subject key identifier: EA:FB:D1:FA:B5:51:A0:0B:BF:33:07:55:A8:BB:1F:74:DA:2E:79:E8 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584EA79B61F02D3A40C486135F20 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/5c3108b3-4900-35c3-86a1-e25092452588.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 931 IP address blocks: 170.39.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9b:61:f0:2d:3a:40:c4:86:13:5f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=aa4675fd-0224-4b5a-858a-61d3ca6cd67f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d2:44:43:5f:61:8f:e7:60:08:02:55:39:f0: e3:e0:3a:f5:4f:dd:a8:58:48:a3:1a:01:5a:d3:a9: 4f:86:85:c4:2e:de:8a:56:39:23:f1:d4:68:25:7c: 33:3a:3e:dd:e7:40:af:47:5b:c2:b4:3b:ce:50:ae: 61:a3:98:b3:27:e8:c7:20:ef:a3:aa:44:fc:97:08: 29:87:55:cb:51:8f:ee:1d:5b:d9:35:c8:78:69:8d: 70:d0:a3:cb:c8:e2:ce:cf:09:5e:ff:5f:13:c1:ee: b6:96:61:ea:8b:58:3e:01:47:c6:d8:18:ee:37:46: 72:1b:67:6c:b4:bd:63:59:7d:2b:01:c5:c2:90:90: ff:2a:1c:54:86:7f:10:3b:b4:2e:a9:68:73:12:8c: 35:cc:9d:8c:d9:95:ff:fc:1b:38:83:27:68:32:c3: 46:d7:cb:a3:48:78:77:99:a5:d0:b5:b0:5d:4c:26: 8c:6a:18:86:6e:99:78:1a:fa:75:9b:8d:67:c7:a2: 79:67:2e:00:61:98:51:1a:51:fd:19:5b:d7:80:92: ed:d7:f4:8f:57:e0:4f:26:e3:05:09:d0:d4:ab:0d: c1:33:92:e5:eb:5f:ad:05:49:92:63:26:88:fe:24: 74:3a:74:47:e4:4f:23:54:0a:ee:eb:a3:c5:78:64: 6d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:FB:D1:FA:B5:51:A0:0B:BF:33:07:55:A8:BB:1F:74:DA:2E:79:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/5c3108b3-4900-35c3-86a1-e25092452588.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 170.39.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:23:18:1b:f8:ef:1c:06:2d:22:c7:53:09:ca:fb:ab:99:ac: 06:f9:7c:7e:cd:47:ef:28:12:be:79:87:97:c1:16:cc:07:d5: 0a:d7:f3:6e:0b:6c:7e:b5:20:b1:79:b9:c8:34:8a:04:b6:e3: f2:3a:10:7d:ae:c5:f4:a1:bc:3b:65:00:81:10:0b:6d:e5:96: 2f:ad:36:f5:5c:bd:1f:8c:52:f7:35:78:ad:95:21:60:ed:16: e0:5e:6b:05:ee:ea:4e:78:9e:5c:e0:af:c3:d1:48:04:44:81: 3c:7e:39:b4:4d:5c:a8:67:b5:42:0b:2c:12:4e:59:2a:e7:fc: 1d:31:3c:af:2f:38:c8:26:c3:4c:e8:28:13:ad:51:c3:f0:83: 7b:04:b0:db:8f:2e:3d:d9:bd:95:52:00:e7:ed:c4:1c:89:23: 37:93:48:f7:45:e3:14:67:61:7e:4f:fa:f6:17:da:f6:73:6e: 89:71:0d:e3:73:f2:63:24:ce:53:68:72:f1:f3:62:0a:92:75: 9c:fb:78:42:6c:aa:af:c0:62:e7:1d:4c:cc:7c:bf:5d:da:00: e4:05:36:fc:76:e1:79:79:e4:9b:75:d0:46:99:76:8a:02:cc: 1f:8d:c6:4c:3c:18:4c:ea:52:ef:ea:ce:4a:e5:c2:ac:22:27: d2:64:e0:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nm2HwLTpAxIYTXyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YWE0Njc1ZmQtMDIyNC00YjVhLTg1OGEtNjFkM2NhNmNkNjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9JEQ19hj+dgCAJVOfDj4Dr1T92oWEijGgFa 06lPhoXELt6KVjkj8dRoJXwzOj7d50CvR1vCtDvOUK5ho5izJ+jHIO+jqkT8lwgp h1XLUY/uHVvZNch4aY1w0KPLyOLOzwle/18Twe62lmHqi1g+AUfG2BjuN0ZyG2ds tL1jWX0rAcXCkJD/KhxUhn8QO7QuqWhzEow1zJ2M2ZX//Bs4gydoMsNG18ujSHh3 maXQtbBdTCaMahiGbpl4Gvp1m41nx6J5Zy4AYZhRGlH9GVvXgJLt1/SPV+BPJuMF CdDUqw3BM5Ll61+tBUmSYyaI/iR0OnRH5E8jVAru66PFeGRtAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOr70fq1UaALvzMHVai7H3TaLnnoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvNWMzMTA4YjMtNDkwMC0z NWMzLTg2YTEtZTI1MDkyNDUyNTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqie7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAkjGBv47xwGLSLHUwnK+6uZrAb5fH7NR+8oEr55h5fBFswH1QrX824L bH61ILF5ucg0igS24/I6EH2uxfShvDtlAIEQC23lli+tNvVcvR+MUvc1eK2VIWDt FuBeawXu6k54nlzgr8PRSAREgTx+ObRNXKhntUILLBJOWSrn/B0xPK8vOMgmw0zo KBOtUcPwg3sEsNuPLj3ZvZVSAOftxByJIzeTSPdF4xRnYX5P+vYX2vZzbolxDeNz 8mMkzlNocvHzYgqSdZz7eEJsqq/AYucdTMx8v13aAOQFNvx24Xl55Jt10EaZdooC zB+Nxkw8GEzqUu/qzkrlwqwiJ9Jk4GA= -----END CERTIFICATE-----Generated at Wed Jul 29 09:32:51 2026 by rpki-client