$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/821a0569-8066-38ee-93e4-5886d8c8db35.roa File: 821a0569-8066-38ee-93e4-5886d8c8db35.roa (raw, json) Hash identifier: pBXyjOHaxeRQCJriEPTwp2DHIRRsp0O886sqDHbpH4Q= Subject key identifier: 60:BA:3D:83:B0:2A:E1:7B:9D:FB:BF:69:06:57:66:63:6A:8D:2F:E8 Certificate issuer: /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Certificate serial: 010D0C9F4328584EA788A5962ED2805E2555AA40 Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/821a0569-8066-38ee-93e4-5886d8c8db35.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 16509 IP address blocks: 94.140.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:a5:96:2e:d2:80:5e:25:55:aa:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=8e37cd34-6594-442e-8fef-f5ac7a358f06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ce:fb:97:6d:da:24:95:1f:73:54:35:f0:7e: 17:ef:9b:4c:cc:56:80:b3:62:87:bf:d4:ad:67:f3: 20:4b:06:af:6a:39:77:72:38:24:64:8d:21:c0:f3: c4:8b:7a:34:cf:06:cf:99:43:d8:4c:c3:e9:17:c0: d0:9c:2d:81:66:91:61:3f:35:8e:b0:4c:97:7a:fe: fe:f2:ce:6b:81:19:6a:46:78:71:ca:2d:22:00:c2: e8:b8:31:61:1b:52:6f:2b:92:ed:ef:82:06:1d:09: 81:07:72:36:8b:30:44:63:1d:4a:4e:02:82:90:e1: 42:fe:6e:4a:d9:f2:4e:d7:d0:cc:ad:30:75:f7:3d: d9:9b:e2:ac:04:7a:c4:a3:3f:83:96:1f:c9:53:8c: bc:fe:61:d0:d5:34:2b:e4:a8:6c:3a:85:77:ac:94: 74:d1:02:ed:b3:09:26:a9:db:4e:4a:90:e8:d4:bf: ca:a5:64:bc:aa:22:fe:d7:38:ca:42:3c:58:89:58: e0:bb:49:76:c2:3c:fe:df:00:c8:cc:96:89:2e:b2: f7:ab:2c:2a:e1:37:80:be:9a:19:d7:f3:22:08:43: 27:50:8c:5d:72:1f:5e:e6:8e:be:e6:52:e0:e4:91: a9:7c:7f:4d:87:8b:6c:c7:46:80:c6:4b:01:9c:98: 5f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:BA:3D:83:B0:2A:E1:7B:9D:FB:BF:69:06:57:66:63:6A:8D:2F:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/821a0569-8066-38ee-93e4-5886d8c8db35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl X509v3 Authority Key Identifier: keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer sbgp-ipAddrBlock: critical IPv4: 94.140.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:5b:c4:21:af:f4:af:41:25:85:1f:3d:2c:66:27:19:02:9f: dd:65:a8:f2:d0:d0:81:3d:5e:b5:c6:b1:5b:7b:4f:2e:9b:48: 38:4b:45:cf:af:f3:7f:85:b0:08:e1:5e:ed:68:66:43:67:00: 74:c0:78:51:22:6f:23:34:e1:83:94:ae:33:87:89:94:81:a6: 99:09:f8:b4:15:0b:9a:c8:01:7d:24:83:81:04:d4:a8:4e:b2: c0:06:c4:e5:34:bf:73:34:c6:b0:b2:a3:17:c2:ff:7e:a7:1b: 61:16:8e:11:82:ba:b2:4a:8a:7b:27:c1:54:8c:36:d0:99:8e: 4f:b3:4f:1d:a3:a7:79:84:76:31:8d:b6:78:49:39:c0:2e:57: 10:1b:07:03:ba:89:6f:33:db:4b:b2:5b:27:f3:ac:b0:fd:15: 06:14:a0:ac:a3:29:30:6d:c2:b4:b8:fd:24:6a:f1:f7:ed:63: 6a:f9:c0:6a:34:36:ea:53:32:56:46:11:53:9f:51:f4:e4:9f: 20:e7:5b:d7:8f:8c:df:24:76:9a:7d:cc:4d:57:30:be:cd:60: 97:44:72:a1:70:8d:49:9d:0c:d9:e6:58:63:1f:c0:30:9d:36: 27:37:7f:e1:55:6b:f2:ce:4a:30:5e:82:f2:40:ce:3c:8f:69: 2e:f2:07:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niKWWLtKAXiVVqkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjBmYWNjYjQtNDBhOS00MTY4LWFhM2QtNTlkMTkwZWI1 YTA0MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OGUzN2NkMzQtNjU5NC00NDJlLThmZWYtZjVhYzdhMzU4ZjA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAks77l23aJJUfc1Q18H4X75tMzFaAs2KHv9St Z/MgSwavajl3cjgkZI0hwPPEi3o0zwbPmUPYTMPpF8DQnC2BZpFhPzWOsEyXev7+ 8s5rgRlqRnhxyi0iAMLouDFhG1JvK5Lt74IGHQmBB3I2izBEYx1KTgKCkOFC/m5K 2fJO19DMrTB19z3Zm+KsBHrEoz+Dlh/JU4y8/mHQ1TQr5KhsOoV3rJR00QLtswkm qdtOSpDo1L/KpWS8qiL+1zjKQjxYiVjgu0l2wjz+3wDIzJaJLrL3qywq4TeAvpoZ 1/MiCEMnUIxdch9e5o6+5lLg5JGpfH9Nh4tsx0aAxksBnJhffQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGC6PYOwKuF7nfu/aQZXZmNqjS/oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZh Y2NiNC00MGE5LTQxNjgtYWEzZC01OWQxOTBlYjVhMDQvODIxYTA1NjktODA2Ni0z OGVlLTkzZTQtNTg4NmQ4YzhkYjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjBmYWNjYjQtNDBhOS00MTY4LWFh M2QtNTlkMTkwZWI1YTA0L2YwZmFjY2I0LTQwYTktNDE2OC1hYTNkLTU5ZDE5MGVi NWEwNC5jcmwwHwYDVR0jBBgwFoAUrZAUzWRWZcDhdzVyttqYfTlVJJYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZhY2NiNC00MGE5LTQxNjgtYWEzZC01OWQx OTBlYjVhMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXowSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABBbxCGv9K9BJYUfPSxmJxkCn91lqPLQ0IE9XrXGsVt7Ty6bSDhLRc+v 83+FsAjhXu1oZkNnAHTAeFEibyM04YOUrjOHiZSBppkJ+LQVC5rIAX0kg4EE1KhO ssAGxOU0v3M0xrCyoxfC/36nG2EWjhGCurJKinsnwVSMNtCZjk+zTx2jp3mEdjGN tnhJOcAuVxAbBwO6iW8z20uyWyfzrLD9FQYUoKyjKTBtwrS4/SRq8fftY2r5wGo0 NupTMlZGEVOfUfTknyDnW9ePjN8kdpp9zE1XML7NYJdEcqFwjUmdDNnmWGMfwDCd Nic3f+FVa/LOSjBegvJAzjyPaS7yB90= -----END CERTIFICATE-----Generated at Wed Jul 29 06:29:28 2026 by rpki-client