$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88/cd4a3507-c0fd-3e09-808f-b10a3bd75e1d.roa File: cd4a3507-c0fd-3e09-808f-b10a3bd75e1d.roa (raw, json) Hash identifier: iSvU/XftUza2+8dBhia5IF/z4Z1r7dYXoYI7WDuSV8o= Subject key identifier: 5E:72:3C:19:F8:89:A7:85:DF:91:3D:73:F2:62:B2:5B:23:21:48:F6 Certificate issuer: /CN=70a36240-104b-454c-b230-bf415e356e88 Certificate serial: 010D0C9F4328584E9D774E6FD992B78C7D3096C0 Authority key identifier: 60:31:9D:80:02:90:58:C3:7E:6A:A4:E6:DB:D7:B7:CA:4E:8C:7B:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88/cd4a3507-c0fd-3e09-808f-b10a3bd75e1d.roa Signing time: Sat 25 Jul 2026 10:30:49 +0000 ROA not before: Sat 25 Jul 2026 10:30:49 +0000 ROA not after: Fri 23 Oct 2026 10:30:49 +0000 asID: 219309 IP address blocks: 142.249.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88/70a36240-104b-454c-b230-bf415e356e88.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88/70a36240-104b-454c-b230-bf415e356e88.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9d:77:4e:6f:d9:92:b7:8c:7d:30:96:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70a36240-104b-454c-b230-bf415e356e88 Validity Not Before: Jul 25 10:30:49 2026 GMT Not After : Oct 23 10:30:49 2026 GMT Subject: CN=d468b867-842e-4bdf-904f-04745242e4c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:00:58:07:35:4c:76:2a:ba:c7:ad:45:9d:3b: 29:c2:0a:38:ff:56:36:5a:9c:e6:34:5f:1f:4f:6e: 27:45:ff:2a:05:02:da:c5:96:8a:f8:8c:09:5b:49: d0:e1:7c:35:9b:49:dd:2e:58:19:9a:72:d4:f2:e1: 52:e5:e4:d4:6e:f2:42:fb:bd:38:f4:85:5b:8f:c5: b9:b6:1a:7b:dd:88:ce:01:9b:67:de:97:fa:f1:6f: 7b:4d:7b:83:44:4a:ea:d6:57:ee:02:34:ac:85:9a: 34:c8:a2:02:46:2d:e5:9c:54:09:a7:11:b4:34:28: a4:81:48:1a:b6:c3:27:d4:55:2c:6f:84:c7:33:55: e7:26:25:13:a2:03:c9:46:8c:39:44:38:fd:cf:a5: 1d:1d:65:00:39:b1:5c:64:ce:d7:50:01:07:87:75: 24:31:95:94:55:dc:ed:49:5c:63:88:21:bd:e5:3b: e5:a6:7d:70:23:62:e5:08:c4:c8:48:3f:cb:b2:59: a2:78:09:a3:94:8f:79:69:80:b3:30:dd:e9:48:c9: ea:9d:dd:44:9d:9d:16:ee:2e:e9:c6:45:e3:70:4c: 3c:a2:d7:44:c4:62:83:28:25:3c:e7:f6:6f:66:44: f3:f1:9a:15:01:00:53:bd:0b:37:07:3d:80:7e:84: 9c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:72:3C:19:F8:89:A7:85:DF:91:3D:73:F2:62:B2:5B:23:21:48:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88/cd4a3507-c0fd-3e09-808f-b10a3bd75e1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88/70a36240-104b-454c-b230-bf415e356e88.crl X509v3 Authority Key Identifier: keyid:60:31:9D:80:02:90:58:C3:7E:6A:A4:E6:DB:D7:B7:CA:4E:8C:7B:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88.cer sbgp-ipAddrBlock: critical IPv4: 142.249.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:8b:d6:94:3f:e4:44:67:f2:3c:c6:84:6a:cb:58:75:9e:7a: 0a:b4:a1:40:56:f1:88:bf:6f:64:80:77:e1:f0:63:c7:43:d8: 20:99:96:e9:9d:26:9c:65:a6:0a:24:89:fa:36:68:26:89:36: 9b:2a:5b:71:6c:27:d3:2a:dd:0f:eb:f5:36:39:1d:88:72:50: 00:9a:a2:08:f4:06:08:26:16:68:27:7a:e6:5c:68:07:10:e4: 46:67:f5:8c:97:b5:85:1c:ca:6d:c2:aa:dc:09:46:a8:d4:08: 70:fc:71:a5:0b:91:00:c1:5c:b0:b0:94:da:4a:06:48:9a:fb: a9:4d:32:51:0d:76:42:c3:c3:2d:4e:6a:cb:b4:ea:87:2c:69: 46:25:19:fe:e7:28:87:91:d4:05:1e:7a:2f:8a:98:20:68:c2: 08:b9:0b:5c:ca:87:20:50:5c:c6:09:64:d9:23:11:3e:1c:63: 5f:66:90:99:c4:fb:42:28:59:c2:74:ed:a0:fb:2b:3f:23:84: d2:81:aa:df:93:81:5b:76:0a:16:a3:d0:60:23:37:17:d2:69: d7:f8:96:cd:c8:68:84:be:80:02:87:41:3b:c2:a4:81:18:e9: 0d:0e:b1:ee:2c:56:a1:fa:31:18:ce:88:19:bd:ce:1f:52:85: 6f:ce:35:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6dd05v2ZK3jH0wlsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzBhMzYyNDAtMTA0Yi00NTRjLWIyMzAtYmY0MTVlMzU2 ZTg4MB4XDTI2MDcyNTEwMzA0OVoXDTI2MTAyMzEwMzA0OVowLzEtMCsGA1UEAxMk ZDQ2OGI4NjctODQyZS00YmRmLTkwNGYtMDQ3NDUyNDJlNGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwBYBzVMdiq6x61FnTspwgo4/1Y2WpzmNF8f T24nRf8qBQLaxZaK+IwJW0nQ4Xw1m0ndLlgZmnLU8uFS5eTUbvJC+7049IVbj8W5 thp73YjOAZtn3pf68W97TXuDRErq1lfuAjSshZo0yKICRi3lnFQJpxG0NCikgUga tsMn1FUsb4THM1XnJiUTogPJRow5RDj9z6UdHWUAObFcZM7XUAEHh3UkMZWUVdzt SVxjiCG95Tvlpn1wI2LlCMTISD/LslmieAmjlI95aYCzMN3pSMnqnd1EnZ0W7i7p xkXjcEw8otdExGKDKCU85/ZvZkTz8ZoVAQBTvQs3Bz2AfoScLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF5yPBn4iaeF35E9c/JislsjIUj2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83MGEz NjI0MC0xMDRiLTQ1NGMtYjIzMC1iZjQxNWUzNTZlODgvY2Q0YTM1MDctYzBmZC0z ZTA5LTgwOGYtYjEwYTNiZDc1ZTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNzBhMzYyNDAtMTA0Yi00NTRjLWIy MzAtYmY0MTVlMzU2ZTg4LzcwYTM2MjQwLTEwNGItNDU0Yy1iMjMwLWJmNDE1ZTM1 NmU4OC5jcmwwHwYDVR0jBBgwFoAUYDGdgAKQWMN+aqTm29e3yk6Me+kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi83MGEzNjI0MC0xMDRiLTQ1NGMtYjIzMC1iZjQx NWUzNTZlODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvk7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH2L1pQ/5ERn8jzGhGrLWHWeegq0oUBW8Yi/b2SAd+HwY8dD2CCZlumd Jpxlpgokifo2aCaJNpsqW3FsJ9Mq3Q/r9TY5HYhyUACaogj0BggmFmgneuZcaAcQ 5EZn9YyXtYUcym3CqtwJRqjUCHD8caULkQDBXLCwlNpKBkia+6lNMlENdkLDwy1O asu06ocsaUYlGf7nKIeR1AUeei+KmCBowgi5C1zKhyBQXMYJZNkjET4cY19mkJnE +0IoWcJ07aD7Kz8jhNKBqt+TgVt2Chaj0GAjNxfSadf4ls3IaIS+gAKHQTvCpIEY 6Q0Ose4sVqH6MRjOiBm9zh9ShW/ONak= -----END CERTIFICATE-----Generated at Wed Jul 29 00:38:07 2026 by rpki-client