$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/d97f986e-cea3-3138-8288-1c3a31bda324.roa File: d97f986e-cea3-3138-8288-1c3a31bda324.roa (raw, json) Hash identifier: ahYjxtSpHS0KMP6ajlX2V8rG7Bwy2ty4S3EyxZIBd9w= Subject key identifier: 44:EF:76:38:80:89:C0:3F:DD:1D:09:43:68:A3:25:CB:E1:C9:DE:26 Certificate issuer: /CN=3d318897-eed6-4fd9-a18c-91026968b3e2 Certificate serial: 010D0C9F4328584E9BE50FE089C086CEA4261CC0 Authority key identifier: 73:C4:D0:2C:36:91:A3:EA:9F:CC:FE:D5:AA:C0:E0:22:88:C3:3C:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/d97f986e-cea3-3138-8288-1c3a31bda324.roa Signing time: Fri 24 Jul 2026 21:00:12 +0000 ROA not before: Fri 24 Jul 2026 21:00:12 +0000 ROA not after: Thu 22 Oct 2026 21:00:12 +0000 asID: 800 IP address blocks: 162.120.72.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/3d318897-eed6-4fd9-a18c-91026968b3e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/3d318897-eed6-4fd9-a18c-91026968b3e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9b:e5:0f:e0:89:c0:86:ce:a4:26:1c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d318897-eed6-4fd9-a18c-91026968b3e2 Validity Not Before: Jul 24 21:00:12 2026 GMT Not After : Oct 22 21:00:12 2026 GMT Subject: CN=740fc780-99ba-4fbc-af4b-fd515ec59a19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:48:aa:cb:9f:b6:a8:ed:eb:fd:fc:ec:69:69: b4:45:a2:6b:b6:1b:9f:1d:15:28:16:94:97:c8:04: f8:5e:1e:72:a5:0f:7c:f8:d9:49:c4:5d:b8:5e:4d: 65:a5:47:0d:99:41:63:ea:fc:58:3d:7c:1b:7e:42: 1c:77:73:70:55:fd:03:5c:de:27:db:aa:0a:b4:fd: 1c:8f:8e:82:79:2a:3a:29:58:fb:d0:fe:76:8e:b2: d2:20:63:77:7d:16:58:8e:e5:16:51:c3:9d:2d:0b: 7b:10:70:71:7a:ce:49:8e:75:d7:31:e9:ec:ac:92: 14:35:9a:29:02:6d:2b:6d:63:62:08:83:c7:3e:3c: 4b:8f:f1:ff:f0:de:d4:b3:bf:1f:a0:c6:5b:9d:c6: d5:55:e9:36:a3:96:50:5d:f5:b2:88:79:a4:35:b2: c8:12:dc:d5:07:59:5e:a3:b2:6a:58:5b:8d:b1:6b: c7:24:91:03:cc:38:aa:e7:da:c5:25:70:63:fa:a6: aa:3d:80:d7:7e:be:a0:51:c0:a2:a3:a1:3c:29:dd: cc:7b:7a:63:54:ae:c7:02:c3:af:8c:5e:d1:ee:02: 78:cb:19:8e:5c:84:0d:41:b3:d2:9e:5d:f5:2c:62: a6:c8:bd:91:1b:71:24:ab:7f:6c:1d:73:7c:fe:0d: 34:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:EF:76:38:80:89:C0:3F:DD:1D:09:43:68:A3:25:CB:E1:C9:DE:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/d97f986e-cea3-3138-8288-1c3a31bda324.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/3d318897-eed6-4fd9-a18c-91026968b3e2.crl X509v3 Authority Key Identifier: keyid:73:C4:D0:2C:36:91:A3:EA:9F:CC:FE:D5:AA:C0:E0:22:88:C3:3C:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2.cer sbgp-ipAddrBlock: critical IPv4: 162.120.72.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:14:26:66:99:0f:3d:a3:1a:73:8f:4c:a0:87:ae:d0:c2:c8: 5d:7a:e0:32:e5:67:1a:16:a8:da:fc:8c:ed:80:ed:19:48:2e: 34:83:73:89:d7:d7:48:31:57:1b:51:cd:5e:cc:3f:9a:7d:43: 8e:dd:a7:f4:6c:e8:11:dc:82:e9:34:29:0a:00:c3:51:a4:91: a4:21:ba:e3:d2:59:87:51:ae:d1:41:02:e7:8a:18:9e:69:ee: 12:a6:b2:79:08:b4:57:14:82:83:00:e9:08:e4:a9:a0:ce:fc: 42:20:50:03:da:fd:c4:73:6b:72:3f:f1:e0:f7:c3:ce:4d:a4: a6:7a:aa:7a:25:cc:73:f9:e4:d4:ea:45:2f:a4:24:2b:cb:10: 77:62:25:e2:78:31:e0:df:86:33:48:61:cf:bb:b7:ea:f5:09: f4:9d:e4:fb:fa:10:e8:43:63:6f:57:95:d4:05:e9:ae:3f:11: 4f:38:c8:ca:29:a0:2f:fb:4f:9f:fd:fe:55:ac:8f:6a:b9:0c: ae:d2:5a:76:91:fe:9d:03:35:f5:85:5c:8a:f1:4b:29:28:47: 2b:ce:80:56:1c:d4:0a:28:d6:b2:df:67:0c:e6:a4:e7:81:51: 49:cf:5e:49:a8:56:ca:b1:12:ce:7f:af:10:cf:86:56:e8:0c: 05:e0:a9:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6b5Q/gicCGzqQmHMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QzMTg4OTctZWVkNi00ZmQ5LWExOGMtOTEwMjY5Njhi M2UyMB4XDTI2MDcyNDIxMDAxMloXDTI2MTAyMjIxMDAxMlowLzEtMCsGA1UEAxMk NzQwZmM3ODAtOTliYS00ZmJjLWFmNGItZmQ1MTVlYzU5YTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0iqy5+2qO3r/fzsaWm0RaJrthufHRUoFpSX yAT4Xh5ypQ98+NlJxF24Xk1lpUcNmUFj6vxYPXwbfkIcd3NwVf0DXN4n26oKtP0c j46CeSo6KVj70P52jrLSIGN3fRZYjuUWUcOdLQt7EHBxes5JjnXXMensrJIUNZop Am0rbWNiCIPHPjxLj/H/8N7Us78foMZbncbVVek2o5ZQXfWyiHmkNbLIEtzVB1le o7JqWFuNsWvHJJEDzDiq59rFJXBj+qaqPYDXfr6gUcCio6E8Kd3Me3pjVK7HAsOv jF7R7gJ4yxmOXIQNQbPSnl31LGKmyL2RG3Ekq39sHXN8/g00fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFETvdjiAicA/3R0JQ2ijJcvhyd4mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zZDMx ODg5Ny1lZWQ2LTRmZDktYTE4Yy05MTAyNjk2OGIzZTIvZDk3Zjk4NmUtY2VhMy0z MTM4LTgyODgtMWMzYTMxYmRhMzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvM2QzMTg4OTctZWVkNi00ZmQ5LWEx OGMtOTEwMjY5NjhiM2UyLzNkMzE4ODk3LWVlZDYtNGZkOS1hMThjLTkxMDI2OTY4 YjNlMi5jcmwwHwYDVR0jBBgwFoAUc8TQLDaRo+qfzP7VqsDgIojDPKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zZDMxODg5Ny1lZWQ2LTRmZDktYTE4Yy05MTAy Njk2OGIzZTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBonhIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADkUJmaZDz2jGnOPTKCHrtDCyF164DLlZxoWqNr8jO2A7RlILjSDc4nX 10gxVxtRzV7MP5p9Q47dp/Rs6BHcguk0KQoAw1GkkaQhuuPSWYdRrtFBAueKGJ5p 7hKmsnkItFcUgoMA6QjkqaDO/EIgUAPa/cRza3I/8eD3w85NpKZ6qnolzHP55NTq RS+kJCvLEHdiJeJ4MeDfhjNIYc+7t+r1CfSd5Pv6EOhDY29XldQF6a4/EU84yMop oC/7T5/9/lWsj2q5DK7SWnaR/p0DNfWFXIrxSykoRyvOgFYc1Aoo1rLfZwzmpOeB UUnPXkmoVsqxEs5/rxDPhlboDAXgqfs= -----END CERTIFICATE-----Generated at Wed Jul 29 06:48:47 2026 by rpki-client