$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/86ce795d-c584-310b-9693-21cb26b6e90a.roa File: 86ce795d-c584-310b-9693-21cb26b6e90a.roa (raw, json) Hash identifier: jjR2c/dTMaGK+3nNpXmO3yehNoSSE5eSga4emj48bwo= Subject key identifier: B4:6F:FC:C7:3E:6E:61:54:29:36:5B:EC:63:B7:C8:42:E8:02:E4:B8 Certificate issuer: /CN=3a636afd-ece5-4e23-a54f-c43e0fc08124 Certificate serial: 010D0C9F4328584E66DA0970430DF398904C7E80 Authority key identifier: 8B:CE:40:F1:5E:3E:E3:95:3C:35:42:B6:04:3C:3E:D1:61:07:37:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/86ce795d-c584-310b-9693-21cb26b6e90a.roa Signing time: Sun 05 Jul 2026 21:00:11 +0000 ROA not before: Sun 05 Jul 2026 21:00:11 +0000 ROA not after: Sat 03 Oct 2026 21:00:11 +0000 asID: 14618 IP address blocks: 148.59.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:66:da:09:70:43:0d:f3:98:90:4c:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a636afd-ece5-4e23-a54f-c43e0fc08124 Validity Not Before: Jul 5 21:00:11 2026 GMT Not After : Oct 3 21:00:11 2026 GMT Subject: CN=b2021d16-ddd8-414b-9580-fc16ba1693c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:e8:21:49:42:3a:04:fe:a1:31:3b:9c:f9:6d: 85:d2:60:4b:a9:8e:26:24:e6:db:ea:3d:68:4d:d0: 61:c5:9d:d3:e0:01:92:95:2f:eb:f7:bd:4a:62:67: 3e:63:74:62:25:40:1a:da:9f:10:6e:37:4d:b1:da: 52:70:63:7a:a5:d2:4d:36:08:cf:f7:1d:2e:75:49: 7c:6f:77:44:37:9e:3e:b9:65:3a:b6:25:25:9b:da: 2d:6e:00:33:a2:b1:71:5a:e4:7a:dd:da:b0:e6:bb: b1:17:b8:61:ad:38:f5:95:f4:83:4d:f2:c8:ff:8a: 3b:5a:3b:aa:5b:7d:5b:01:ba:6a:50:5a:14:e7:80: 04:87:44:a5:82:8e:2c:7c:33:1a:d2:6a:17:a9:57: 83:f1:ae:2c:18:21:b2:11:60:4b:f2:8c:52:ae:75: b8:8b:27:cc:71:dc:82:d5:1c:58:57:a7:bc:52:37: a5:8f:cf:53:d5:c1:d6:36:50:3c:29:f4:46:4d:45: ea:b8:c7:cd:af:fe:2c:78:c7:5c:5b:48:32:c8:e3: 25:dc:59:32:f5:d5:51:8c:64:bb:26:5c:56:b8:72: b8:52:1d:be:bd:e1:1b:79:d2:bc:1c:56:fc:95:c5: 82:54:46:c3:73:bc:b0:3f:89:52:e3:f1:23:d3:ea: f0:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:6F:FC:C7:3E:6E:61:54:29:36:5B:EC:63:B7:C8:42:E8:02:E4:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/86ce795d-c584-310b-9693-21cb26b6e90a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.crl X509v3 Authority Key Identifier: keyid:8B:CE:40:F1:5E:3E:E3:95:3C:35:42:B6:04:3C:3E:D1:61:07:37:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124.cer sbgp-ipAddrBlock: critical IPv4: 148.59.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:0a:25:95:e2:98:c3:d6:82:73:12:45:fc:73:1f:13:3a:95: 0e:98:e3:e6:4f:f2:2e:c7:ed:b9:8d:bc:88:86:02:28:7d:33: eb:55:28:00:70:9b:cd:c2:ee:c8:ca:df:c3:bd:d9:52:e1:7b: dc:ab:d6:51:19:3b:93:6a:ab:45:ac:9a:13:31:c0:84:84:8b: 1b:40:ed:5f:7f:35:fe:0a:0c:53:e3:ce:50:b2:9c:2e:ba:0d: 46:d7:3f:92:79:2a:d8:87:29:77:32:ef:cd:1c:af:ff:fb:d0: 30:f6:29:98:ad:6e:7d:c6:48:6a:1e:11:60:01:4d:85:0d:ad: 80:16:1c:21:1d:51:a8:5a:15:20:60:db:1c:b7:b4:c5:51:20: 44:ed:38:69:ff:a1:28:45:11:e0:7b:ed:47:6d:e2:b4:7f:b1: 7e:2b:81:3d:71:6a:78:fa:fd:22:17:81:b8:65:05:19:a7:69: d0:cb:2d:7d:8c:b2:1b:ec:2a:de:10:ad:22:88:a6:0e:e1:c9: 57:df:a2:00:a2:ec:1c:fa:f9:9e:e8:c4:aa:da:18:61:f0:72: a6:2d:fc:f7:82:18:42:3d:10:49:d6:b9:94:8f:8d:f0:c0:9b: 68:6c:15:74:db:ca:09:c5:5f:43:9c:ce:c0:ee:b1:77:94:14: a0:31:f5:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5m2glwQw3zmJBMfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E2MzZhZmQtZWNlNS00ZTIzLWE1NGYtYzQzZTBmYzA4 MTI0MB4XDTI2MDcwNTIxMDAxMVoXDTI2MTAwMzIxMDAxMVowLzEtMCsGA1UEAxMk YjIwMjFkMTYtZGRkOC00MTRiLTk1ODAtZmMxNmJhMTY5M2MzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+ghSUI6BP6hMTuc+W2F0mBLqY4mJObb6j1o TdBhxZ3T4AGSlS/r971KYmc+Y3RiJUAa2p8QbjdNsdpScGN6pdJNNgjP9x0udUl8 b3dEN54+uWU6tiUlm9otbgAzorFxWuR63dqw5ruxF7hhrTj1lfSDTfLI/4o7Wjuq W31bAbpqUFoU54AEh0Slgo4sfDMa0moXqVeD8a4sGCGyEWBL8oxSrnW4iyfMcdyC 1RxYV6e8Ujelj89T1cHWNlA8KfRGTUXquMfNr/4seMdcW0gyyOMl3Fky9dVRjGS7 JlxWuHK4Uh2+veEbedK8HFb8lcWCVEbDc7ywP4lS4/Ej0+rwawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLRv/Mc+bmFUKTZb7GO3yELoAuS4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYTYz NmFmZC1lY2U1LTRlMjMtYTU0Zi1jNDNlMGZjMDgxMjQvODZjZTc5NWQtYzU4NC0z MTBiLTk2OTMtMjFjYjI2YjZlOTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2E2MzZhZmQtZWNlNS00ZTIzLWE1 NGYtYzQzZTBmYzA4MTI0LzNhNjM2YWZkLWVjZTUtNGUyMy1hNTRmLWM0M2UwZmMw ODEyNC5jcmwwHwYDVR0jBBgwFoAUi85A8V4+45U8NUK2BDw+0WEHNyMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYTYzNmFmZC1lY2U1LTRlMjMtYTU0Zi1jNDNl MGZjMDgxMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlDtOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI8KJZXimMPWgnMSRfxzHxM6lQ6Y4+ZP8i7H7bmNvIiGAih9M+tVKABw m83C7sjK38O92VLhe9yr1lEZO5Nqq0WsmhMxwISEixtA7V9/Nf4KDFPjzlCynC66 DUbXP5J5KtiHKXcy780cr//70DD2KZitbn3GSGoeEWABTYUNrYAWHCEdUahaFSBg 2xy3tMVRIETtOGn/oShFEeB77Udt4rR/sX4rgT1xanj6/SIXgbhlBRmnadDLLX2M shvsKt4QrSKIpg7hyVffogCi7Bz6+Z7oxKraGGHwcqYt/PeCGEI9EEnWuZSPjfDA m2hsFXTbygnFX0OczsDusXeUFKAx9co= -----END CERTIFICATE-----Generated at Fri Jul 24 02:09:17 2026 by rpki-client