$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/c118e230-bad5-32c0-9043-a0b819d10476.roa File: c118e230-bad5-32c0-9043-a0b819d10476.roa (raw, json) Hash identifier: T5utvzDgaN6GcICMFfWi5sLsMSAq0kGD0TjQY+t3C40= Subject key identifier: B7:4C:BA:14:E7:45:6B:60:EE:DA:30:03:5C:3E:78:69:3C:D5:9A:8F Certificate issuer: /CN=d409bef0-b6e9-492d-adf9-0bd8a5610c35 Certificate serial: 010D0C9F4328584EA79A514C1B6C402E2E4C395A Authority key identifier: 3B:89:AF:36:6D:D2:02:F7:FC:DA:FA:4D:86:6E:9E:74:D2:2A:8B:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/c118e230-bad5-32c0-9043-a0b819d10476.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 16509 IP address blocks: 144.86.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/d409bef0-b6e9-492d-adf9-0bd8a5610c35.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/d409bef0-b6e9-492d-adf9-0bd8a5610c35.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9a:51:4c:1b:6c:40:2e:2e:4c:39:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d409bef0-b6e9-492d-adf9-0bd8a5610c35 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=37dd0f67-cd1e-4945-a5ff-b8a5fdb26044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:44:d2:c1:e6:c0:f6:75:2a:b0:1b:e3:c2:0f: 3d:3d:5f:5d:6c:5a:be:78:95:c0:ec:15:23:f7:99: c3:b0:c2:a3:8a:84:17:02:e8:6a:e9:69:c7:db:8d: bf:6f:39:16:b9:eb:57:72:d6:d8:68:84:bc:82:72: a6:bb:29:d8:cd:b4:82:ec:03:d5:0d:27:7d:c6:03: 31:f5:db:92:1b:d7:ce:01:99:e6:46:ae:69:64:c5: 86:c7:8d:41:4f:4d:bd:ee:8c:cd:8b:92:c5:3d:70: 11:86:ec:39:dc:3d:a8:1c:9e:4f:2b:12:94:7a:d4: be:ef:2c:a7:96:87:fb:3e:47:df:07:4e:bd:e6:8d: 3c:b8:6a:57:47:7d:7d:5e:cf:0d:7c:67:b0:6e:72: 5e:da:57:c7:40:08:21:ff:93:d6:3d:ba:57:13:f5: 2d:f8:b4:c7:5f:04:e4:db:1d:b8:21:1d:22:16:dc: 95:35:ac:90:69:61:99:fe:9d:09:62:05:0d:fc:83: 9f:d3:29:77:35:a8:f1:c8:4d:76:81:c5:fb:ce:95: 4c:86:31:d8:72:de:08:ed:59:39:8a:5b:6e:87:5f: 48:9b:41:03:41:68:fe:0b:9a:49:05:f6:32:50:77: 88:fa:9d:b9:b1:e6:52:31:b2:ed:ff:b5:ad:7c:45: 5b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:4C:BA:14:E7:45:6B:60:EE:DA:30:03:5C:3E:78:69:3C:D5:9A:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/c118e230-bad5-32c0-9043-a0b819d10476.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/d409bef0-b6e9-492d-adf9-0bd8a5610c35.crl X509v3 Authority Key Identifier: keyid:3B:89:AF:36:6D:D2:02:F7:FC:DA:FA:4D:86:6E:9E:74:D2:2A:8B:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35.cer sbgp-ipAddrBlock: critical IPv4: 144.86.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:a7:87:4d:59:88:c8:06:79:db:ac:6c:29:65:1a:2b:e4:86: 9b:9a:13:2d:1b:04:0d:bd:b6:03:f6:c2:89:7c:66:88:cd:c8: 56:2b:e3:63:e5:ea:aa:c5:55:99:2b:0a:ef:62:b4:f9:65:e5: 89:27:78:15:b5:36:c0:b0:ca:9f:f1:e4:48:d5:55:da:ec:4d: 48:6d:60:e2:0b:3b:8c:8e:05:3b:a3:64:42:7e:e6:47:33:95: d3:3e:3f:b5:8a:a3:4b:c1:92:5f:82:51:f1:a0:a8:9d:8c:2f: b6:af:98:65:fc:a2:86:27:f2:c3:e1:13:71:2e:0f:3d:bc:1d: a3:4d:d8:7c:13:bc:0e:84:9e:a0:cc:56:30:68:91:b2:4a:89: 16:fb:c0:9e:87:8c:58:90:ad:ac:57:11:9e:63:ad:20:11:d4: ce:af:2c:88:c8:ea:27:dc:18:0b:ff:69:dd:e6:df:4f:ba:e6: 82:6b:6e:fc:45:19:e3:f9:b2:86:56:da:51:db:ff:a7:e1:cd: fb:ac:0a:68:65:8b:59:7f:3c:e7:61:0e:8a:75:2c:69:02:8f: b7:ea:f5:d6:be:7e:a2:b2:73:11:bb:9a:56:e5:b8:73:5f:9c: d0:5f:06:78:65:3b:af:d3:12:d3:2b:d7:75:57:88:49:8b:0e: 8b:08:a4:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmlFMG2xALi5MOVowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwOWJlZjAtYjZlOS00OTJkLWFkZjktMGJkOGE1NjEw YzM1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MzdkZDBmNjctY2QxZS00OTQ1LWE1ZmYtYjhhNWZkYjI2MDQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUTSwebA9nUqsBvjwg89PV9dbFq+eJXA7BUj 95nDsMKjioQXAuhq6WnH242/bzkWuetXctbYaIS8gnKmuynYzbSC7APVDSd9xgMx 9duSG9fOAZnmRq5pZMWGx41BT0297ozNi5LFPXARhuw53D2oHJ5PKxKUetS+7yyn lof7PkffB0695o08uGpXR319Xs8NfGewbnJe2lfHQAgh/5PWPbpXE/Ut+LTHXwTk 2x24IR0iFtyVNayQaWGZ/p0JYgUN/IOf0yl3NajxyE12gcX7zpVMhjHYct4I7Vk5 iltuh19Im0EDQWj+C5pJBfYyUHeI+p25seZSMbLt/7WtfEVbLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLdMuhTnRWtg7towA1w+eGk81ZqPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kNDA5 YmVmMC1iNmU5LTQ5MmQtYWRmOS0wYmQ4YTU2MTBjMzUvYzExOGUyMzAtYmFkNS0z MmMwLTkwNDMtYTBiODE5ZDEwNDc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZDQwOWJlZjAtYjZlOS00OTJkLWFk ZjktMGJkOGE1NjEwYzM1L2Q0MDliZWYwLWI2ZTktNDkyZC1hZGY5LTBiZDhhNTYx MGMzNS5jcmwwHwYDVR0jBBgwFoAUO4mvNm3SAvf82vpNhm6edNIqi8QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9kNDA5YmVmMC1iNmU5LTQ5MmQtYWRmOS0wYmQ4 YTU2MTBjMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkFa4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHenh01ZiMgGedusbCllGivkhpuaEy0bBA29tgP2wol8ZojNyFYr42Pl 6qrFVZkrCu9itPll5YkneBW1NsCwyp/x5EjVVdrsTUhtYOILO4yOBTujZEJ+5kcz ldM+P7WKo0vBkl+CUfGgqJ2ML7avmGX8ooYn8sPhE3EuDz28HaNN2HwTvA6EnqDM VjBokbJKiRb7wJ6HjFiQraxXEZ5jrSAR1M6vLIjI6ifcGAv/ad3m30+65oJrbvxF GeP5soZW2lHb/6fhzfusCmhli1l/POdhDop1LGkCj7fq9da+fqKycxG7mlbluHNf nNBfBnhlO6/TEtMr13VXiEmLDosIpBY= -----END CERTIFICATE-----Generated at Wed Jul 29 09:53:56 2026 by rpki-client