$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6545034b-16a1-3e67-a95f-dbbb6a9ba41c.roa File: 6545034b-16a1-3e67-a95f-dbbb6a9ba41c.roa (raw, json) Hash identifier: QXCichj7wsMzZVWQnaFnKIIPpJsB1FLwU8Y+wh23B0E= Subject key identifier: FC:45:34:57:13:6A:E7:D1:75:AF:D0:A4:CB:80:91:4D:14:0D:CB:F6 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584EA795C387BE86FB9DE6028700 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6545034b-16a1-3e67-a95f-dbbb6a9ba41c.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 20115 IP address blocks: 87.87.0.0/19 maxlen: 24 87.87.32.0/19 maxlen: 24 87.87.64.0/19 maxlen: 24 87.87.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:95:c3:87:be:86:fb:9d:e6:02:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=7adb64cb-fa2a-4c61-87e1-4a85c8268412 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:dd:b6:7c:27:2b:e0:ed:a0:69:94:84:6e:75: 1d:03:72:90:ec:5b:55:ce:30:a2:63:d7:bb:3a:76: 18:28:b5:08:36:9d:a1:ac:ea:b0:f5:a8:25:70:70: ae:66:43:9a:20:e8:bb:1a:0b:de:0b:00:88:8d:f7: 68:f0:1a:7f:d1:bd:da:ae:9c:02:ee:ee:ae:22:c0: 1d:71:9b:55:2a:9d:f7:94:f7:fd:c6:e8:8f:c7:b6: 17:47:28:1b:d8:0b:c1:bb:57:f5:db:73:c7:65:76: 68:52:d2:de:41:79:5a:27:0e:ef:f2:c9:37:8f:b1: f8:58:c6:45:52:35:cf:15:73:44:a2:f7:15:30:73: 47:d1:2e:44:56:5c:a3:98:1a:12:b4:4d:0f:91:de: 93:6f:bd:f8:2d:5a:9c:9f:34:e0:50:23:16:24:40: c4:5e:46:6b:0c:c4:d1:cc:18:5e:67:af:b4:af:02: 1a:c1:d9:3a:52:66:65:b7:d0:dd:01:71:6a:2f:ca: e2:69:c0:87:0d:ec:0d:e2:f9:31:8b:cc:08:a6:4a: d9:45:94:4f:4a:41:71:59:58:e6:20:25:c1:87:6e: 3b:9d:5c:ad:3c:ff:e8:65:5d:fb:c1:d0:7e:d4:50: 9d:6e:30:68:c1:85:5e:e9:23:9a:3b:86:08:8b:3d: 5f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:45:34:57:13:6A:E7:D1:75:AF:D0:A4:CB:80:91:4D:14:0D:CB:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6545034b-16a1-3e67-a95f-dbbb6a9ba41c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 87.87.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:eb:6f:77:d9:03:36:9d:56:8b:0e:45:ee:c8:bc:bb:4b:40: 94:71:ae:a0:5f:5c:9d:72:70:e1:94:a1:9a:5b:71:ea:43:30: 70:ba:aa:3a:c8:93:6d:46:ee:e1:37:ed:5d:3c:e6:50:fb:82: 22:e4:d3:5e:0d:f5:af:4a:37:31:17:06:c2:32:25:12:87:67: d7:26:74:93:cb:8d:85:1b:9a:f8:a4:1b:74:dc:83:78:07:32: 28:81:c3:37:14:6b:e8:e8:23:c6:62:db:b7:11:93:1b:30:d3: 47:6a:41:22:e6:44:6b:7c:fa:ce:23:4a:33:64:2d:4e:02:32: 77:0f:64:5c:8a:9b:b8:1d:38:1c:ef:15:d3:a4:ba:60:a6:00: 1d:13:5a:b0:a8:3c:a7:c4:f6:98:ed:09:52:68:4f:ba:fd:9e: 3d:43:c1:4f:3d:1e:0b:3a:6b:98:90:28:c9:e1:14:de:1f:89: bb:10:52:f5:02:31:e8:98:b3:5a:9d:3d:f2:67:c6:47:50:33: 98:4d:67:e9:16:c8:a2:42:f4:1d:be:8c:b3:48:3c:f6:4d:2f: a0:fc:3c:dd:22:82:4a:e1:4b:3f:43:a5:7a:0c:25:34:e7:fd: a6:b7:b3:f9:55:1d:09:51:09:f8:30:22:41:be:fb:66:5e:63: b7:30:c3:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlcOHvob7neYChwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk N2FkYjY0Y2ItZmEyYS00YzYxLTg3ZTEtNGE4NWM4MjY4NDEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu922fCcr4O2gaZSEbnUdA3KQ7FtVzjCiY9e7 OnYYKLUINp2hrOqw9aglcHCuZkOaIOi7GgveCwCIjfdo8Bp/0b3arpwC7u6uIsAd cZtVKp33lPf9xuiPx7YXRygb2AvBu1f123PHZXZoUtLeQXlaJw7v8sk3j7H4WMZF UjXPFXNEovcVMHNH0S5EVlyjmBoStE0Pkd6Tb734LVqcnzTgUCMWJEDEXkZrDMTR zBheZ6+0rwIawdk6UmZlt9DdAXFqL8riacCHDewN4vkxi8wIpkrZRZRPSkFxWVjm ICXBh247nVytPP/oZV37wdB+1FCdbjBowYVe6SOaO4YIiz1fcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPxFNFcTaufRda/QpMuAkU0UDcv2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNjU0NTAzNGItMTZhMS0z ZTY3LWE5NWYtZGJiYjZhOWJhNDFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHV1cAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGbrb3fZAzadVosORe7IvLtLQJRxrqBfXJ1ycOGUoZpbcepDMHC6qjrI k21G7uE37V085lD7giLk014N9a9KNzEXBsIyJRKHZ9cmdJPLjYUbmvikG3Tcg3gH MiiBwzcUa+joI8Zi27cRkxsw00dqQSLmRGt8+s4jSjNkLU4CMncPZFyKm7gdOBzv FdOkumCmAB0TWrCoPKfE9pjtCVJoT7r9nj1DwU89Hgs6a5iQKMnhFN4fibsQUvUC MeiYs1qdPfJnxkdQM5hNZ+kWyKJC9B2+jLNIPPZNL6D8PN0igkrhSz9DpXoMJTTn /aa3s/lVHQlRCfgwIkG++2ZeY7cww7I= -----END CERTIFICATE-----Generated at Wed Jul 29 19:40:41 2026 by rpki-client