$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0649be86-b5a4-4814-9f95-9a7f71de1d50/e82bbb73-20a9-3169-a22a-a9011b5a8001.roa File: e82bbb73-20a9-3169-a22a-a9011b5a8001.roa (raw, json) Hash identifier: hW2jjJPrCiO8wUleac1w4xLWMWuqvhzxBq9SWvPNmuQ= Subject key identifier: 8A:24:9D:5C:27:77:5A:D8:E2:8E:6E:73:33:86:E3:CB:64:2E:AB:29 Certificate issuer: /CN=0649be86-b5a4-4814-9f95-9a7f71de1d50 Certificate serial: 010D0C9F4328584E9337468C08D6EAFA7EECF980 Authority key identifier: 48:07:CE:94:71:1C:AE:04:FE:D1:A1:E9:75:FA:71:19:BC:EB:E7:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0649be86-b5a4-4814-9f95-9a7f71de1d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0649be86-b5a4-4814-9f95-9a7f71de1d50/e82bbb73-20a9-3169-a22a-a9011b5a8001.roa Signing time: Tue 21 Jul 2026 18:23:43 +0000 ROA not before: Tue 21 Jul 2026 18:23:43 +0000 ROA not after: Mon 19 Oct 2026 18:23:43 +0000 asID: 812 IP address blocks: 142.146.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0649be86-b5a4-4814-9f95-9a7f71de1d50/0649be86-b5a4-4814-9f95-9a7f71de1d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0649be86-b5a4-4814-9f95-9a7f71de1d50/0649be86-b5a4-4814-9f95-9a7f71de1d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0649be86-b5a4-4814-9f95-9a7f71de1d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:93:37:46:8c:08:d6:ea:fa:7e:ec:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0649be86-b5a4-4814-9f95-9a7f71de1d50 Validity Not Before: Jul 21 18:23:43 2026 GMT Not After : Oct 19 18:23:43 2026 GMT Subject: CN=abbd3301-f4ef-41b3-be89-17ebb06b17da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:67:e9:ed:6b:d7:b6:ac:83:95:81:3c:40:c8: 9e:12:c6:36:78:58:00:c4:2b:a1:d3:93:46:9f:8a: 3d:25:69:99:c1:3f:68:ca:05:21:a5:04:2a:34:90: 22:ac:4a:cc:66:07:61:86:da:ed:96:77:e6:37:38: c7:17:5e:1f:ff:ab:e9:a8:c5:e7:99:f4:1e:52:ad: 89:f3:28:e1:4c:69:41:ce:ef:aa:49:ae:3d:be:7e: 7b:ed:18:38:af:f1:d4:cc:d0:7e:fa:b3:48:b3:e3: 00:c0:44:bb:d0:9b:da:1b:88:3f:c1:2f:3c:7d:80: 09:87:6e:c9:b7:cb:c1:d6:14:36:e8:2d:41:e9:54: 4b:73:bb:f6:63:cc:e4:47:1b:bc:81:b8:c2:36:5d: 12:b7:c4:2b:68:47:68:6e:7f:7d:91:83:a4:d4:2f: 9b:73:89:8d:2d:42:05:a4:92:55:70:c3:a6:94:d7: 0d:bf:c4:46:fa:bc:27:fc:d5:0e:5e:dd:fe:ff:cd: 5d:48:e9:fc:e2:cf:0e:7b:50:d0:ef:89:6f:90:05: d1:09:fc:7a:88:bc:f9:de:35:c9:49:8d:cb:4f:0d: 66:7d:39:d8:d2:53:6b:7e:75:fe:a3:29:37:49:e4: ef:d7:81:2f:79:77:1b:e5:e5:3f:23:cf:70:4d:c3: d3:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:24:9D:5C:27:77:5A:D8:E2:8E:6E:73:33:86:E3:CB:64:2E:AB:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0649be86-b5a4-4814-9f95-9a7f71de1d50/e82bbb73-20a9-3169-a22a-a9011b5a8001.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0649be86-b5a4-4814-9f95-9a7f71de1d50/0649be86-b5a4-4814-9f95-9a7f71de1d50.crl X509v3 Authority Key Identifier: keyid:48:07:CE:94:71:1C:AE:04:FE:D1:A1:E9:75:FA:71:19:BC:EB:E7:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0649be86-b5a4-4814-9f95-9a7f71de1d50.cer sbgp-ipAddrBlock: critical IPv4: 142.146.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:cd:64:db:7d:83:72:58:6f:0a:99:f1:a4:22:cc:6a:91:00: 61:31:1b:0e:d0:b6:44:52:7a:75:40:19:01:56:60:c0:fa:44: 8d:d5:0c:e5:f8:3b:81:66:6f:c4:12:0f:ac:f8:4a:1a:9d:6d: 6c:3b:54:c6:17:8a:ed:bf:a8:bb:f3:1f:a0:75:36:ea:8a:02: f1:37:18:ac:10:bd:1f:35:29:98:3f:a7:54:15:b4:4f:c6:f8: 53:ca:04:0b:cb:6b:78:50:31:cb:50:eb:f4:e4:ef:b3:80:a3: d5:49:6f:8d:51:44:ee:e1:e5:70:c7:22:e3:9e:b2:80:8c:7f: 35:9f:7d:1d:cd:24:31:62:4e:b0:19:c7:a5:33:7a:93:c7:2c: ae:a4:ec:50:92:fb:2b:72:9c:71:ef:39:d7:b7:84:cb:cd:9a: f0:4a:61:2f:8f:84:78:0d:a2:d4:17:d8:47:86:ce:8d:61:ca: a3:3d:f0:5b:82:19:02:72:d2:2a:bf:b4:ab:86:d8:29:6c:11: e5:7c:a3:61:1d:76:d5:7f:9b:8c:73:c2:b4:a7:45:a1:df:2d: 67:25:e9:f9:a0:1d:10:73:0b:a4:6d:73:9f:94:11:d0:7b:bc: 74:e3:4f:f0:7e:95:9d:ab:00:48:ab:7e:cc:47:a4:e0:47:0d: b7:0e:fe:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6TN0aMCNbq+n7s+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDY0OWJlODYtYjVhNC00ODE0LTlmOTUtOWE3ZjcxZGUx ZDUwMB4XDTI2MDcyMTE4MjM0M1oXDTI2MTAxOTE4MjM0M1owLzEtMCsGA1UEAxMk YWJiZDMzMDEtZjRlZi00MWIzLWJlODktMTdlYmIwNmIxN2RhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmfp7WvXtqyDlYE8QMieEsY2eFgAxCuh05NG n4o9JWmZwT9oygUhpQQqNJAirErMZgdhhtrtlnfmNzjHF14f/6vpqMXnmfQeUq2J 8yjhTGlBzu+qSa49vn577Rg4r/HUzNB++rNIs+MAwES70JvaG4g/wS88fYAJh27J t8vB1hQ26C1B6VRLc7v2Y8zkRxu8gbjCNl0St8QraEdobn99kYOk1C+bc4mNLUIF pJJVcMOmlNcNv8RG+rwn/NUOXt3+/81dSOn84s8Oe1DQ74lvkAXRCfx6iLz53jXJ SY3LTw1mfTnY0lNrfnX+oyk3SeTv14EveXcb5eU/I89wTcPTJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIoknVwnd1rY4o5uczOG48tkLqspMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8wNjQ5 YmU4Ni1iNWE0LTQ4MTQtOWY5NS05YTdmNzFkZTFkNTAvZTgyYmJiNzMtMjBhOS0z MTY5LWEyMmEtYTkwMTFiNWE4MDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMDY0OWJlODYtYjVhNC00ODE0LTlm OTUtOWE3ZjcxZGUxZDUwLzA2NDliZTg2LWI1YTQtNDgxNC05Zjk1LTlhN2Y3MWRl MWQ1MC5jcmwwHwYDVR0jBBgwFoAUSAfOlHEcrgT+0aHpdfpxGbzr56swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8wNjQ5YmU4Ni1iNWE0LTQ4MTQtOWY5NS05YTdm NzFkZTFkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjpIIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKbNZNt9g3JYbwqZ8aQizGqRAGExGw7QtkRSenVAGQFWYMD6RI3VDOX4 O4Fmb8QSD6z4ShqdbWw7VMYXiu2/qLvzH6B1NuqKAvE3GKwQvR81KZg/p1QVtE/G +FPKBAvLa3hQMctQ6/Tk77OAo9VJb41RRO7h5XDHIuOesoCMfzWffR3NJDFiTrAZ x6UzepPHLK6k7FCS+ytynHHvOde3hMvNmvBKYS+PhHgNotQX2EeGzo1hyqM98FuC GQJy0iq/tKuG2ClsEeV8o2EddtV/m4xzwrSnRaHfLWcl6fmgHRBzC6Rtc5+UEdB7 vHTjT/B+lZ2rAEirfsxHpOBHDbcO/gw= -----END CERTIFICATE-----Generated at Fri Jul 24 16:08:26 2026 by rpki-client