$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/0a3f164c-5f88-301b-adde-657863805f1c.roa File: 0a3f164c-5f88-301b-adde-657863805f1c.roa (raw, json) Hash identifier: q/QpipJ4SPbm3FSxeltFIWsSagTrO7To9+OvILIYRoE= Subject key identifier: 20:E8:45:14:33:BD:8B:DB:35:20:55:87:DF:03:1C:74:20:B1:44:23 Certificate issuer: /CN=dd638a66-157d-4b37-b487-c2b5f4dbe940 Certificate serial: 010D0C9F4328584E66DA0E491FA33A96EDE53780 Authority key identifier: F1:23:25:81:49:02:B4:C7:2A:9C:90:6D:26:C5:90:12:7C:96:B6:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/0a3f164c-5f88-301b-adde-657863805f1c.roa Signing time: Sun 05 Jul 2026 21:00:11 +0000 ROA not before: Sun 05 Jul 2026 21:00:11 +0000 ROA not after: Sat 03 Oct 2026 21:00:11 +0000 asID: 16509 IP address blocks: 144.86.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/dd638a66-157d-4b37-b487-c2b5f4dbe940.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/dd638a66-157d-4b37-b487-c2b5f4dbe940.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:66:da:0e:49:1f:a3:3a:96:ed:e5:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd638a66-157d-4b37-b487-c2b5f4dbe940 Validity Not Before: Jul 5 21:00:11 2026 GMT Not After : Oct 3 21:00:11 2026 GMT Subject: CN=fe169cd9-b642-4de5-8786-72a7d15fe52d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2d:70:05:45:99:0d:7f:7b:ec:3c:a8:89:54: 92:47:c4:da:f7:ec:0a:4e:70:80:e8:8c:9a:44:16: 5f:11:4e:fc:df:26:09:d1:07:1c:c9:fe:d7:a3:86: da:cd:5f:23:07:85:bb:5f:5c:60:41:a0:87:18:50: 6d:87:ac:1b:46:ac:a3:6e:06:d2:0d:bd:a2:8c:e1: 6d:0e:10:48:dc:15:d8:c5:fc:5e:7f:4c:b8:44:98: 44:64:63:1f:bd:ab:20:1a:ca:fe:a7:e6:df:65:9b: 12:b2:e2:75:4f:df:eb:e9:f0:3d:cd:5f:77:eb:24: 61:d8:e7:4a:11:83:9e:2c:da:00:e9:e7:bb:7b:13: 1a:42:95:bf:f5:5d:30:12:01:20:9a:1a:b3:7c:08: 41:e1:c9:d1:f6:bf:ce:82:2b:b7:a2:f0:c8:90:ca: ec:c8:55:80:8a:d8:82:a5:a5:77:56:68:cb:07:51: fe:48:89:1e:c4:a0:2e:0a:97:8f:3c:6d:44:98:fc: 86:53:45:b8:b8:d3:8c:59:5b:99:b4:1e:70:ed:b1: 23:90:87:f7:26:3f:2e:9f:c6:15:80:90:c3:2a:3d: be:6e:d7:57:e7:d8:18:a4:52:53:f0:94:ec:c9:d7: a8:4b:c6:4e:c4:f2:db:60:5a:73:e4:7c:ed:d5:10: 87:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:E8:45:14:33:BD:8B:DB:35:20:55:87:DF:03:1C:74:20:B1:44:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/0a3f164c-5f88-301b-adde-657863805f1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/dd638a66-157d-4b37-b487-c2b5f4dbe940.crl X509v3 Authority Key Identifier: keyid:F1:23:25:81:49:02:B4:C7:2A:9C:90:6D:26:C5:90:12:7C:96:B6:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940.cer sbgp-ipAddrBlock: critical IPv4: 144.86.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:b3:d7:cc:d2:1d:08:28:69:bb:f1:95:3a:bd:59:0c:a6:68: 45:bf:52:26:4b:b9:86:6e:10:35:c4:37:40:95:a3:14:c4:0e: 2e:f1:36:cc:5e:8f:fe:e1:e0:ae:1d:c8:77:39:48:a9:6e:e1: a4:d7:15:eb:a9:f2:0a:0a:31:fe:b6:a0:ff:97:db:68:2d:40: a7:0c:23:df:5a:e8:38:34:f3:98:dc:28:e1:fc:d2:02:ca:6c: 65:ef:38:f7:c1:fa:a6:7e:c6:0f:ea:ce:17:1c:71:f2:ca:be: 21:7f:00:fa:64:91:83:5c:6f:1c:73:e0:0f:54:50:fd:ca:b2: 78:d4:03:f0:2c:bc:52:37:b9:5d:29:6a:d5:0b:54:17:6b:85: 1b:be:b8:72:25:14:10:7d:36:ee:2a:e1:60:c2:f6:e1:2d:9e: fd:0a:88:ac:e0:7d:6c:f9:cb:35:da:11:52:d4:77:cc:a6:63: e7:4b:2a:46:24:1c:c9:24:8f:14:f9:f5:f3:e4:46:cc:33:df: 4a:e3:84:22:d1:cd:df:08:63:a4:ed:2a:cc:9e:68:04:19:1a: 17:af:bb:3e:57:fb:f5:d6:53:24:5f:d5:d4:63:c8:e8:ac:41: 61:43:08:01:d2:16:c1:e2:f4:b6:51:6f:26:3b:38:2d:6e:bd: d9:47:f9:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5m2g5JH6M6lu3lN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGQ2MzhhNjYtMTU3ZC00YjM3LWI0ODctYzJiNWY0ZGJl OTQwMB4XDTI2MDcwNTIxMDAxMVoXDTI2MTAwMzIxMDAxMVowLzEtMCsGA1UEAxMk ZmUxNjljZDktYjY0Mi00ZGU1LTg3ODYtNzJhN2QxNWZlNTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwy1wBUWZDX977DyoiVSSR8Ta9+wKTnCA6Iya RBZfEU783yYJ0Qccyf7Xo4bazV8jB4W7X1xgQaCHGFBth6wbRqyjbgbSDb2ijOFt DhBI3BXYxfxef0y4RJhEZGMfvasgGsr+p+bfZZsSsuJ1T9/r6fA9zV936yRh2OdK EYOeLNoA6ee7exMaQpW/9V0wEgEgmhqzfAhB4cnR9r/Ogiu3ovDIkMrsyFWAitiC paV3VmjLB1H+SIkexKAuCpePPG1EmPyGU0W4uNOMWVuZtB5w7bEjkIf3Jj8un8YV gJDDKj2+btdX59gYpFJT8JTsydeoS8ZOxPLbYFpz5Hzt1RCHawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCDoRRQzvYvbNSBVh98DHHQgsUQjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kZDYz OGE2Ni0xNTdkLTRiMzctYjQ4Ny1jMmI1ZjRkYmU5NDAvMGEzZjE2NGMtNWY4OC0z MDFiLWFkZGUtNjU3ODYzODA1ZjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGQ2MzhhNjYtMTU3ZC00YjM3LWI0 ODctYzJiNWY0ZGJlOTQwL2RkNjM4YTY2LTE1N2QtNGIzNy1iNDg3LWMyYjVmNGRi ZTk0MC5jcmwwHwYDVR0jBBgwFoAU8SMlgUkCtMcqnJBtJsWQEnyWtlIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kZDYzOGE2Ni0xNTdkLTRiMzctYjQ4Ny1jMmI1 ZjRkYmU5NDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkFbKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABmz18zSHQgoabvxlTq9WQymaEW/UiZLuYZuEDXEN0CVoxTEDi7xNsxe j/7h4K4dyHc5SKlu4aTXFeup8goKMf62oP+X22gtQKcMI99a6Dg085jcKOH80gLK bGXvOPfB+qZ+xg/qzhcccfLKviF/APpkkYNcbxxz4A9UUP3KsnjUA/AsvFI3uV0p atULVBdrhRu+uHIlFBB9Nu4q4WDC9uEtnv0KiKzgfWz5yzXaEVLUd8ymY+dLKkYk HMkkjxT59fPkRswz30rjhCLRzd8IY6TtKsyeaAQZGhevuz5X+/XWUyRf1dRjyOis QWFDCAHSFsHi9LZRbyY7OC1uvdlH+eg= -----END CERTIFICATE-----Generated at Fri Jul 24 15:50:49 2026 by rpki-client