$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/3cc7131d-7a60-3712-92dd-3528026436b0.roa File: 3cc7131d-7a60-3712-92dd-3528026436b0.roa (raw, json) Hash identifier: 0GlGB/EPjO56yiMfFSwSBBY0cZLZmWAtjn1lWGNqIkc= Subject key identifier: 2F:A7:89:73:94:B5:C2:FD:14:94:87:E3:E8:A9:31:F4:6D:B3:BA:F6 Certificate issuer: /CN=420f38eb-2683-4b79-8a5c-b16fedaaa9f5 Certificate serial: 010D0C9F4328584E7FFA329A1683AD5E82CC8580 Authority key identifier: 53:58:B3:3F:4B:B8:8D:BD:03:49:18:6B:4A:14:87:BB:D3:EE:67:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/3cc7131d-7a60-3712-92dd-3528026436b0.roa Signing time: Tue 14 Jul 2026 21:00:12 +0000 ROA not before: Tue 14 Jul 2026 21:00:12 +0000 ROA not after: Mon 12 Oct 2026 21:00:12 +0000 asID: 14618 IP address blocks: 148.59.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7f:fa:32:9a:16:83:ad:5e:82:cc:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=420f38eb-2683-4b79-8a5c-b16fedaaa9f5 Validity Not Before: Jul 14 21:00:12 2026 GMT Not After : Oct 12 21:00:12 2026 GMT Subject: CN=a52e7202-0287-4214-a757-85d5e15fbf2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d6:c9:73:fc:44:cd:82:45:d1:c7:e6:64:5f: 39:ca:5c:0b:b3:e6:c1:82:37:82:24:79:e2:e1:ab: 15:47:8c:26:6b:7d:08:dd:58:b7:84:9f:e5:9d:f4: d5:5e:d1:75:16:96:3e:4f:55:f0:07:c3:04:4b:27: 1f:7b:a8:8b:bf:91:54:ee:47:de:bc:47:7f:bf:b2: 4a:48:e1:b0:50:ee:b9:76:14:c1:fb:bb:7c:d6:05: 89:de:8a:d3:9c:d8:6c:59:5a:a4:8f:49:84:c2:e9: 56:b6:64:a4:82:b5:18:bd:47:1e:2f:6b:fc:9a:00: a2:19:ea:45:44:d7:bb:7c:5f:47:3e:36:66:7a:f4: e0:4a:c3:e6:77:43:8c:cf:e0:8a:52:63:9c:55:96: 3a:e7:09:73:3e:cc:c7:d7:d1:b6:2c:76:4a:55:b1: aa:7e:fb:48:1a:ab:72:70:16:ed:20:a9:5a:e0:4e: e6:0e:36:3e:7b:6b:3c:fb:68:a7:4e:a9:c3:2d:b1: c6:3e:57:25:8c:db:46:7f:82:7e:4c:5d:51:b5:6f: 58:50:d2:78:7d:98:81:1b:47:bc:ca:19:5a:b8:04: de:90:84:38:af:41:60:fc:3c:b1:76:f4:f1:2e:63: bd:d7:81:57:c8:03:79:fa:cd:38:bc:14:15:04:b8: fc:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:A7:89:73:94:B5:C2:FD:14:94:87:E3:E8:A9:31:F4:6D:B3:BA:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/3cc7131d-7a60-3712-92dd-3528026436b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.crl X509v3 Authority Key Identifier: keyid:53:58:B3:3F:4B:B8:8D:BD:03:49:18:6B:4A:14:87:BB:D3:EE:67:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.cer sbgp-ipAddrBlock: critical IPv4: 148.59.77.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:a8:77:4b:84:81:6c:77:f0:dd:1b:77:bd:de:94:3d:49:c5: 95:dc:9b:c4:9f:4a:8f:35:ec:3d:5e:de:c0:a6:51:1f:95:46: 79:5b:cf:78:74:30:bc:7b:d8:1a:23:d9:c7:f4:2b:85:bd:b7: 13:a0:9a:88:f3:6d:1a:7c:49:a0:51:59:2f:f8:8a:d0:52:ce: a3:58:05:9f:43:86:f3:d5:78:f2:d3:b3:7a:cc:99:d7:a4:7b: e6:12:07:08:0c:23:f8:3a:69:72:a9:81:88:85:66:2b:79:f6: 3d:0d:63:87:05:37:f6:ca:f4:a3:45:08:12:e2:d8:0c:92:04: 90:09:2b:9b:c4:24:1f:5d:aa:43:07:09:79:51:d3:5d:fa:26: 3b:16:0d:a7:91:b9:83:80:c5:5d:c6:9e:0f:2f:0f:1c:eb:a4: 04:f4:f2:8b:dc:26:37:01:f4:36:d1:2e:c9:c5:d9:23:50:ee: 6d:f9:cc:4f:e2:a2:09:e6:26:6b:da:1c:8d:99:48:cd:5e:96: 92:28:79:20:c9:57:99:31:22:0c:75:e7:09:13:62:5f:9f:e1: d9:f4:f8:44:ec:7c:a0:b7:f6:e3:f7:35:86:12:35:5e:72:64: d5:43:48:a4:4f:10:90:b1:09:72:7a:79:6a:69:e0:7b:2a:86: 01:6b:3e:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5/+jKaFoOtXoLMhYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDIwZjM4ZWItMjY4My00Yjc5LThhNWMtYjE2ZmVkYWFh OWY1MB4XDTI2MDcxNDIxMDAxMloXDTI2MTAxMjIxMDAxMlowLzEtMCsGA1UEAxMk YTUyZTcyMDItMDI4Ny00MjE0LWE3NTctODVkNWUxNWZiZjJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdbJc/xEzYJF0cfmZF85ylwLs+bBgjeCJHni 4asVR4wma30I3Vi3hJ/lnfTVXtF1FpY+T1XwB8MESycfe6iLv5FU7kfevEd/v7JK SOGwUO65dhTB+7t81gWJ3orTnNhsWVqkj0mEwulWtmSkgrUYvUceL2v8mgCiGepF RNe7fF9HPjZmevTgSsPmd0OMz+CKUmOcVZY65wlzPszH19G2LHZKVbGqfvtIGqty cBbtIKla4E7mDjY+e2s8+2inTqnDLbHGPlcljNtGf4J+TF1RtW9YUNJ4fZiBG0e8 yhlauATekIQ4r0Fg/DyxdvTxLmO914FXyAN5+s04vBQVBLj8rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC+niXOUtcL9FJSH4+ipMfRts7r2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MjBm MzhlYi0yNjgzLTRiNzktOGE1Yy1iMTZmZWRhYWE5ZjUvM2NjNzEzMWQtN2E2MC0z NzEyLTkyZGQtMzUyODAyNjQzNmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDIwZjM4ZWItMjY4My00Yjc5LThh NWMtYjE2ZmVkYWFhOWY1LzQyMGYzOGViLTI2ODMtNGI3OS04YTVjLWIxNmZlZGFh YTlmNS5jcmwwHwYDVR0jBBgwFoAUU1izP0u4jb0DSRhrShSHu9PuZ+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80MjBmMzhlYi0yNjgzLTRiNzktOGE1Yy1iMTZm ZWRhYWE5ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlDtNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEKod0uEgWx38N0bd73elD1JxZXcm8SfSo817D1e3sCmUR+VRnlbz3h0 MLx72Boj2cf0K4W9txOgmojzbRp8SaBRWS/4itBSzqNYBZ9DhvPVePLTs3rMmdek e+YSBwgMI/g6aXKpgYiFZit59j0NY4cFN/bK9KNFCBLi2AySBJAJK5vEJB9dqkMH CXlR0136JjsWDaeRuYOAxV3Gng8vDxzrpAT08ovcJjcB9DbRLsnF2SNQ7m35zE/i ognmJmvaHI2ZSM1elpIoeSDJV5kxIgx15wkTYl+f4dn0+ETsfKC39uP3NYYSNV5y ZNVDSKRPEJCxCXJ6eWpp4HsqhgFrPnI= -----END CERTIFICATE-----Generated at Fri Jul 24 00:51:27 2026 by rpki-client