$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/2ed04e60-1e97-3647-b39a-9a93be9e3ceb.roa File: 2ed04e60-1e97-3647-b39a-9a93be9e3ceb.roa (raw, json) Hash identifier: oUavXY3VJA3Valu5nrF+htafyndzPtWH5uxedzbpEmU= Subject key identifier: EE:1B:7D:A3:34:E4:FC:D9:22:CC:96:66:75:D3:E7:07:13:05:6A:C5 Certificate issuer: /CN=3a636afd-ece5-4e23-a54f-c43e0fc08124 Certificate serial: 010D0C9F4328584E66DA0962AFF6C70E26B04D20 Authority key identifier: 8B:CE:40:F1:5E:3E:E3:95:3C:35:42:B6:04:3C:3E:D1:61:07:37:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/2ed04e60-1e97-3647-b39a-9a93be9e3ceb.roa Signing time: Sun 05 Jul 2026 21:00:11 +0000 ROA not before: Sun 05 Jul 2026 21:00:11 +0000 ROA not after: Sat 03 Oct 2026 21:00:11 +0000 asID: 16509 IP address blocks: 148.59.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:66:da:09:62:af:f6:c7:0e:26:b0:4d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a636afd-ece5-4e23-a54f-c43e0fc08124 Validity Not Before: Jul 5 21:00:11 2026 GMT Not After : Oct 3 21:00:11 2026 GMT Subject: CN=00897768-9370-4e32-b347-e204a874e6f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:fc:23:bb:ab:74:d5:ca:9a:1e:d0:01:f7:9a: 6b:82:60:4c:15:68:98:37:30:34:48:99:aa:37:8c: 31:62:6c:3d:1f:b7:04:e3:07:4d:91:ec:55:8e:44: 23:45:09:25:18:ae:4f:7c:93:36:a7:48:30:12:61: 78:38:b1:84:bf:79:e1:25:0b:73:01:18:a6:38:c7: 94:c3:04:79:e0:0b:b4:81:2c:fb:c3:40:eb:77:a8: 37:b9:b8:4e:12:38:72:3e:ce:22:cb:40:48:29:77: 2d:09:2f:99:13:71:13:03:1e:61:9d:e0:35:8e:1f: 9e:1a:e6:a8:20:8f:9a:37:5f:30:d7:87:21:27:5a: ac:26:72:1f:95:d2:77:81:20:1b:57:a6:e8:20:28: 70:f6:12:36:f1:62:92:de:97:d5:70:35:6c:19:97: 38:41:00:7d:11:4e:5c:b2:72:6b:75:de:e0:4d:35: 5c:89:6a:5c:8f:96:1e:f5:67:83:05:44:78:1e:1e: 70:aa:91:50:0c:af:d5:77:97:61:bf:e7:3a:a9:a4: d8:6b:f0:cb:99:40:5c:01:cf:43:9d:e1:f4:52:45: 9d:f8:5b:ba:37:0a:2e:b2:f2:f8:ef:87:44:54:e8: 29:4c:39:09:7e:cb:39:c0:b3:a8:07:3d:78:14:ef: d7:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:1B:7D:A3:34:E4:FC:D9:22:CC:96:66:75:D3:E7:07:13:05:6A:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/2ed04e60-1e97-3647-b39a-9a93be9e3ceb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.crl X509v3 Authority Key Identifier: keyid:8B:CE:40:F1:5E:3E:E3:95:3C:35:42:B6:04:3C:3E:D1:61:07:37:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124.cer sbgp-ipAddrBlock: critical IPv4: 148.59.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:57:b4:b5:e2:b8:77:2b:a3:44:5e:73:7d:fc:f4:87:f6:33: e1:4f:15:45:be:d4:fc:de:9c:ef:5e:6b:7a:70:f2:69:79:67: 74:06:30:0e:11:04:66:bb:6d:f8:30:53:c3:f1:36:1e:ae:35: f0:6d:98:d5:86:f9:90:ad:cb:23:1d:fa:a7:f1:62:cb:f3:e8: 7b:a4:a0:2b:7f:da:c4:3b:ff:06:25:a2:ee:72:2d:05:ac:ea: 49:2e:57:15:9d:8e:36:b8:61:47:dd:06:50:34:13:85:fa:20: 4a:84:bf:bd:36:bc:7c:f2:4f:fc:9a:d8:c7:40:2a:ca:30:3c: 40:50:60:0a:90:89:a6:08:3d:a2:6d:e5:31:2a:4c:47:95:cc: 5e:f5:e7:60:ad:86:86:39:55:88:ea:ff:8b:72:44:e4:c7:10: 21:bf:d0:ff:19:dd:ca:71:1f:83:e3:26:c4:65:b5:8c:d2:ce: cd:2d:ed:60:12:f9:8d:77:dc:30:dc:a7:2e:ea:18:42:e8:5e: 20:2c:b8:8f:e6:d9:75:a0:cd:fd:78:06:a6:21:e6:52:cc:5d: a4:a7:c4:c9:3c:5f:1f:af:7d:b9:c1:7b:7e:50:e8:19:6b:b4: e9:46:1d:27:2b:b7:eb:ff:19:8a:cc:b6:32:36:6a:22:23:ae: 53:9a:75:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5m2glir/bHDiawTSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E2MzZhZmQtZWNlNS00ZTIzLWE1NGYtYzQzZTBmYzA4 MTI0MB4XDTI2MDcwNTIxMDAxMVoXDTI2MTAwMzIxMDAxMVowLzEtMCsGA1UEAxMk MDA4OTc3NjgtOTM3MC00ZTMyLWIzNDctZTIwNGE4NzRlNmYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPwju6t01cqaHtAB95prgmBMFWiYNzA0SJmq N4wxYmw9H7cE4wdNkexVjkQjRQklGK5PfJM2p0gwEmF4OLGEv3nhJQtzARimOMeU wwR54Au0gSz7w0Drd6g3ubhOEjhyPs4iy0BIKXctCS+ZE3ETAx5hneA1jh+eGuao II+aN18w14chJ1qsJnIfldJ3gSAbV6boIChw9hI28WKS3pfVcDVsGZc4QQB9EU5c snJrdd7gTTVciWpcj5Ye9WeDBUR4Hh5wqpFQDK/Vd5dhv+c6qaTYa/DLmUBcAc9D neH0UkWd+Fu6NwousvL474dEVOgpTDkJfss5wLOoBz14FO/XtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO4bfaM05PzZIsyWZnXT5wcTBWrFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYTYz NmFmZC1lY2U1LTRlMjMtYTU0Zi1jNDNlMGZjMDgxMjQvMmVkMDRlNjAtMWU5Ny0z NjQ3LWIzOWEtOWE5M2JlOWUzY2ViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2E2MzZhZmQtZWNlNS00ZTIzLWE1 NGYtYzQzZTBmYzA4MTI0LzNhNjM2YWZkLWVjZTUtNGUyMy1hNTRmLWM0M2UwZmMw ODEyNC5jcmwwHwYDVR0jBBgwFoAUi85A8V4+45U8NUK2BDw+0WEHNyMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYTYzNmFmZC1lY2U1LTRlMjMtYTU0Zi1jNDNl MGZjMDgxMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlDtOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ5XtLXiuHcro0Rec3389If2M+FPFUW+1PzenO9ea3pw8ml5Z3QGMA4R BGa7bfgwU8PxNh6uNfBtmNWG+ZCtyyMd+qfxYsvz6HukoCt/2sQ7/wYlou5yLQWs 6kkuVxWdjja4YUfdBlA0E4X6IEqEv702vHzyT/ya2MdAKsowPEBQYAqQiaYIPaJt 5TEqTEeVzF7152CthoY5VYjq/4tyROTHECG/0P8Z3cpxH4PjJsRltYzSzs0t7WAS +Y133DDcpy7qGELoXiAsuI/m2XWgzf14BqYh5lLMXaSnxMk8Xx+vfbnBe35Q6Blr tOlGHScrt+v/GYrMtjI2aiIjrlOadTs= -----END CERTIFICATE-----Generated at Fri Jul 24 16:56:33 2026 by rpki-client