$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f7a0b9a5-0700-4c1e-93db-74254d55b68c/03d78e1f-8c24-3102-8e98-5995cd8aad8b.roa File: 03d78e1f-8c24-3102-8e98-5995cd8aad8b.roa (raw, json) Hash identifier: sNhC8G3bkJmKwrSp2mPAy5oDoE2lILF0VajyXOWvAp4= Subject key identifier: C5:26:C5:90:8B:9D:6A:9D:0C:11:13:53:E3:09:A1:DF:BB:70:A9:05 Certificate issuer: /CN=f7a0b9a5-0700-4c1e-93db-74254d55b68c Certificate serial: 010D0C9F4328584E779A33EF6EEF98958A84C040 Authority key identifier: 61:1D:89:78:38:F5:4C:DF:79:EB:20:51:9B:9E:00:A6:43:48:CE:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f7a0b9a5-0700-4c1e-93db-74254d55b68c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f7a0b9a5-0700-4c1e-93db-74254d55b68c/03d78e1f-8c24-3102-8e98-5995cd8aad8b.roa Signing time: Sat 11 Jul 2026 21:00:11 +0000 ROA not before: Sat 11 Jul 2026 21:00:11 +0000 ROA not after: Fri 09 Oct 2026 21:00:11 +0000 asID: 32806 IP address blocks: 64.39.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f7a0b9a5-0700-4c1e-93db-74254d55b68c/f7a0b9a5-0700-4c1e-93db-74254d55b68c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f7a0b9a5-0700-4c1e-93db-74254d55b68c/f7a0b9a5-0700-4c1e-93db-74254d55b68c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f7a0b9a5-0700-4c1e-93db-74254d55b68c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:77:9a:33:ef:6e:ef:98:95:8a:84:c0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7a0b9a5-0700-4c1e-93db-74254d55b68c Validity Not Before: Jul 11 21:00:11 2026 GMT Not After : Oct 9 21:00:11 2026 GMT Subject: CN=50d6b904-be67-4ff9-a2f4-cd36958a6446 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e0:75:41:9f:14:17:3d:a9:68:3a:50:50:4a: a6:03:d3:9d:37:3c:77:ca:e3:28:7e:f8:f3:09:d3: 13:93:d5:82:50:9c:9d:48:ff:6d:7f:e7:c2:be:f6: e6:8e:e9:2e:75:ea:23:11:8a:3e:d6:3d:22:ef:71: c1:83:4a:9f:da:f6:6f:6c:24:d6:99:53:ed:4c:b8: ce:29:56:9f:d5:af:13:29:81:b3:5f:78:31:5c:8a: b3:ee:c3:e0:8b:f9:07:4f:37:01:a6:1f:64:97:b4: aa:64:bd:de:a7:52:1d:8a:89:96:ba:ec:ce:11:c3: df:94:97:a6:a2:c7:7a:f2:f7:b3:5c:01:43:8c:68: 62:d0:54:e5:d8:10:c1:64:19:95:e3:79:4e:85:1b: 2b:0b:4e:db:37:2b:f3:ea:5e:1f:4f:9a:31:c7:6c: a9:fb:24:fd:2d:be:e2:f1:8d:b3:2e:23:37:5c:11: 8f:bf:46:f1:98:83:76:ba:f9:69:73:5a:84:82:eb: bb:1a:59:b4:ea:78:81:7e:bd:cc:09:0b:91:c7:67: f8:6a:9a:03:ab:6e:04:05:97:d1:b5:41:c1:fa:a0: 9b:17:89:ab:0b:34:79:84:b5:14:17:cb:fa:0b:b5: 30:a5:13:50:95:b9:eb:95:43:60:4f:da:82:98:06: dc:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:26:C5:90:8B:9D:6A:9D:0C:11:13:53:E3:09:A1:DF:BB:70:A9:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f7a0b9a5-0700-4c1e-93db-74254d55b68c/03d78e1f-8c24-3102-8e98-5995cd8aad8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f7a0b9a5-0700-4c1e-93db-74254d55b68c/f7a0b9a5-0700-4c1e-93db-74254d55b68c.crl X509v3 Authority Key Identifier: keyid:61:1D:89:78:38:F5:4C:DF:79:EB:20:51:9B:9E:00:A6:43:48:CE:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f7a0b9a5-0700-4c1e-93db-74254d55b68c.cer sbgp-ipAddrBlock: critical IPv4: 64.39.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:41:d0:ab:dc:3f:20:11:bb:42:cc:16:dc:6f:8f:da:a7:67: 61:7a:f6:04:64:73:22:33:69:4d:7f:ff:e7:e5:12:30:b3:3a: 4c:40:33:3e:18:8d:22:20:66:13:47:96:19:a7:3b:f1:59:e6: fa:37:77:b0:a9:d9:a9:f7:1d:24:80:3a:46:06:76:af:0a:27: 44:f6:5c:77:fb:17:0f:83:8c:77:71:4b:bd:21:cf:cf:0f:3d: 14:72:40:81:e2:39:2a:cb:3c:1e:58:10:b2:43:2c:c1:e3:07: 23:2f:6e:7c:99:ed:fd:e0:33:94:58:b9:8d:b0:72:a3:f0:63: 6a:e3:20:15:23:10:32:ff:14:30:2e:cc:9c:d5:4c:37:de:fb: 1f:dd:ce:66:c3:7b:1f:71:01:50:58:99:3d:b0:27:27:38:d8: 7a:65:e9:41:89:ca:77:d9:70:cf:21:fc:03:06:f9:c0:af:1f: 6f:a3:b2:2a:c2:2d:9f:93:87:88:ca:c8:8c:13:2a:3a:37:58: 63:4c:8d:af:8b:76:80:9a:63:cb:03:a8:5b:dc:05:bc:6f:31: fc:c9:64:5c:da:26:f0:10:4f:f8:3a:d7:cc:f4:f3:60:02:83: 90:5f:45:a1:f7:cb:93:02:8a:a0:ee:01:77:a2:4e:3d:b8:0e: 9d:24:70:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE53mjPvbu+YlYqEwEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjdhMGI5YTUtMDcwMC00YzFlLTkzZGItNzQyNTRkNTVi NjhjMB4XDTI2MDcxMTIxMDAxMVoXDTI2MTAwOTIxMDAxMVowLzEtMCsGA1UEAxMk NTBkNmI5MDQtYmU2Ny00ZmY5LWEyZjQtY2QzNjk1OGE2NDQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+B1QZ8UFz2paDpQUEqmA9OdNzx3yuMofvjz CdMTk9WCUJydSP9tf+fCvvbmjukudeojEYo+1j0i73HBg0qf2vZvbCTWmVPtTLjO KVaf1a8TKYGzX3gxXIqz7sPgi/kHTzcBph9kl7SqZL3ep1IdiomWuuzOEcPflJem osd68vezXAFDjGhi0FTl2BDBZBmV43lOhRsrC07bNyvz6l4fT5oxx2yp+yT9Lb7i 8Y2zLiM3XBGPv0bxmIN2uvlpc1qEguu7Glm06niBfr3MCQuRx2f4apoDq24EBZfR tUHB+qCbF4mrCzR5hLUUF8v6C7UwpRNQlbnrlUNgT9qCmAbctwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMUmxZCLnWqdDBETU+MJod+7cKkFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9mN2Ew YjlhNS0wNzAwLTRjMWUtOTNkYi03NDI1NGQ1NWI2OGMvMDNkNzhlMWYtOGMyNC0z MTAyLThlOTgtNTk5NWNkOGFhZDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZjdhMGI5YTUtMDcwMC00YzFlLTkz ZGItNzQyNTRkNTViNjhjL2Y3YTBiOWE1LTA3MDAtNGMxZS05M2RiLTc0MjU0ZDU1 YjY4Yy5jcmwwHwYDVR0jBBgwFoAUYR2JeDj1TN956yBRm54ApkNIzqcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9mN2EwYjlhNS0wNzAwLTRjMWUtOTNkYi03NDI1 NGQ1NWI2OGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCfqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALpB0KvcPyARu0LMFtxvj9qnZ2F69gRkcyIzaU1//+flEjCzOkxAMz4Y jSIgZhNHlhmnO/FZ5vo3d7Cp2an3HSSAOkYGdq8KJ0T2XHf7Fw+DjHdxS70hz88P PRRyQIHiOSrLPB5YELJDLMHjByMvbnyZ7f3gM5RYuY2wcqPwY2rjIBUjEDL/FDAu zJzVTDfe+x/dzmbDex9xAVBYmT2wJyc42Hpl6UGJynfZcM8h/AMG+cCvH2+jsirC LZ+Th4jKyIwTKjo3WGNMja+LdoCaY8sDqFvcBbxvMfzJZFzaJvAQT/g618z082AC g5BfRaH3y5MCiqDuAXeiTj24Dp0kcLQ= -----END CERTIFICATE-----Generated at Fri Jul 24 06:34:04 2026 by rpki-client