$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/1874f955-17d1-3887-9a8e-47cc98129e03.roa File: 1874f955-17d1-3887-9a8e-47cc98129e03.roa (raw, json) Hash identifier: evK8kL5x3CY9BNvujiiR0xVM8wT7+eY9rZ3prsSPO10= Subject key identifier: 0F:79:D2:01:7E:06:53:00:80:6B:01:C1:CB:5A:A8:FB:EA:F1:40:8E Certificate issuer: /CN=ff8cfb76-d3cf-4da6-bfe0-361d7750c902 Certificate serial: 010D0C9F4328584E736A1F928635F3C3E40FC000 Authority key identifier: 71:37:FE:CB:C1:74:3F:E3:2B:47:1B:A9:5E:1E:A2:6A:27:0E:48:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/1874f955-17d1-3887-9a8e-47cc98129e03.roa Signing time: Fri 10 Jul 2026 09:00:12 +0000 ROA not before: Fri 10 Jul 2026 09:00:12 +0000 ROA not after: Thu 08 Oct 2026 09:00:12 +0000 asID: 397026 IP address blocks: 139.64.168.0/22 maxlen: 22 139.64.168.0/23 maxlen: 23 139.64.170.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:73:6a:1f:92:86:35:f3:c3:e4:0f:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff8cfb76-d3cf-4da6-bfe0-361d7750c902 Validity Not Before: Jul 10 09:00:12 2026 GMT Not After : Oct 8 09:00:12 2026 GMT Subject: CN=384f1cdf-6fe0-44e8-a953-b5778e2af967 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:66:19:ca:19:16:f4:6f:57:2e:9a:27:63:ee: af:39:27:eb:94:d8:55:ea:8a:bb:9f:cd:e8:ba:9a: 1d:b1:76:88:89:2c:25:fd:d7:8d:0d:7b:4c:46:88: db:13:75:80:8e:06:2e:83:6e:6a:30:ca:3e:5f:66: 87:9a:b0:ec:64:60:a4:b0:72:e6:57:f9:7e:f5:af: 33:ae:e7:db:f2:1c:f5:07:e1:51:81:0f:48:27:ae: 04:9e:ca:4a:1d:fd:c6:46:6b:64:ca:35:37:5c:5c: 1c:d9:5f:09:93:81:f7:fc:89:34:7d:7b:ff:ba:cf: 2f:06:bf:9c:64:ad:9c:ad:a9:bb:c2:9e:dc:20:0c: bc:c5:f4:08:8e:5a:c4:02:f2:9a:30:d1:3f:38:7f: 72:8a:09:1e:be:46:e0:75:db:aa:fb:e3:f2:21:5c: c0:dd:79:a0:e7:85:c4:96:e2:dd:b6:57:75:64:30: 40:44:e7:0a:02:f6:dc:d1:e1:59:08:3f:82:08:36: ab:77:d1:89:e2:5f:a2:0c:29:10:46:34:21:55:ae: bc:20:12:d4:14:8f:61:2a:5a:58:d3:66:d3:72:df: b1:1e:c6:25:81:d5:05:f7:a1:4c:26:b9:dd:85:55: b5:a6:f3:a6:20:b6:3e:a8:0d:68:bc:8e:29:41:4a: bb:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:79:D2:01:7E:06:53:00:80:6B:01:C1:CB:5A:A8:FB:EA:F1:40:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/1874f955-17d1-3887-9a8e-47cc98129e03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.crl X509v3 Authority Key Identifier: keyid:71:37:FE:CB:C1:74:3F:E3:2B:47:1B:A9:5E:1E:A2:6A:27:0E:48:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.cer sbgp-ipAddrBlock: critical IPv4: 139.64.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:30:6e:d3:d3:2d:be:41:2a:a0:b8:49:50:ac:2c:f9:cf:91: 78:b5:2e:3c:31:fe:76:11:8a:71:67:47:cd:06:47:24:6e:e1: 7e:f5:b2:dc:8c:a9:41:59:f4:56:bf:a9:67:ac:34:a4:f9:35: d1:40:a5:e9:a4:35:55:fa:73:3a:4d:ed:2d:99:a3:5b:38:f2: 17:7b:a4:94:93:2f:8a:2d:45:32:21:c6:99:8b:0c:95:ab:48: 08:33:8c:fe:2d:46:ef:ea:c7:c8:53:60:29:3e:81:51:d3:76: bf:c0:7d:f4:17:8b:69:d6:9e:f9:3e:1e:48:24:8e:fe:ff:67: 3a:53:b8:c3:79:37:d8:2a:7f:7a:90:b3:08:5f:6b:cd:9a:ac: a8:d3:d0:0d:4c:8c:a2:28:fc:26:24:c3:47:d6:d7:dc:da:e0: 98:fe:12:85:fe:fc:09:60:bb:7e:d9:a9:1e:99:bf:29:b6:29: 3a:d2:ca:b3:dc:60:b2:cc:2a:42:45:e7:15:f3:f7:fa:a9:fb: ea:eb:02:4d:25:bb:c8:9c:6d:2c:45:1c:45:cc:45:60:5e:d3: 79:7d:7a:d5:a6:b9:34:27:11:0a:f8:e0:61:70:c8:a0:19:d1: 9c:ee:e4:8d:28:ad:8f:5b:d5:a7:ae:de:74:e1:62:f6:40:d1: 02:52:be:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5zah+ShjXzw+QPwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY4Y2ZiNzYtZDNjZi00ZGE2LWJmZTAtMzYxZDc3NTBj OTAyMB4XDTI2MDcxMDA5MDAxMloXDTI2MTAwODA5MDAxMlowLzEtMCsGA1UEAxMk Mzg0ZjFjZGYtNmZlMC00NGU4LWE5NTMtYjU3NzhlMmFmOTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmYZyhkW9G9XLponY+6vOSfrlNhV6oq7n83o upodsXaIiSwl/deNDXtMRojbE3WAjgYug25qMMo+X2aHmrDsZGCksHLmV/l+9a8z rufb8hz1B+FRgQ9IJ64EnspKHf3GRmtkyjU3XFwc2V8Jk4H3/Ik0fXv/us8vBr+c ZK2cram7wp7cIAy8xfQIjlrEAvKaMNE/OH9yigkevkbgdduq++PyIVzA3Xmg54XE luLdtld1ZDBAROcKAvbc0eFZCD+CCDard9GJ4l+iDCkQRjQhVa68IBLUFI9hKlpY 02bTct+xHsYlgdUF96FMJrndhVW1pvOmILY+qA1ovI4pQUq7LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA950gF+BlMAgGsBwctaqPvq8UCOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mZjhj ZmI3Ni1kM2NmLTRkYTYtYmZlMC0zNjFkNzc1MGM5MDIvMTg3NGY5NTUtMTdkMS0z ODg3LTlhOGUtNDdjYzk4MTI5ZTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmY4Y2ZiNzYtZDNjZi00ZGE2LWJm ZTAtMzYxZDc3NTBjOTAyL2ZmOGNmYjc2LWQzY2YtNGRhNi1iZmUwLTM2MWQ3NzUw YzkwMi5jcmwwHwYDVR0jBBgwFoAUcTf+y8F0P+MrRxupXh6iaicOSMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mZjhjZmI3Ni1kM2NmLTRkYTYtYmZlMC0zNjFk Nzc1MGM5MDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCi0CoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACgwbtPTLb5BKqC4SVCsLPnPkXi1Ljwx/nYRinFnR80GRyRu4X71styM qUFZ9Fa/qWesNKT5NdFApemkNVX6czpN7S2Zo1s48hd7pJSTL4otRTIhxpmLDJWr SAgzjP4tRu/qx8hTYCk+gVHTdr/AffQXi2nWnvk+Hkgkjv7/ZzpTuMN5N9gqf3qQ swhfa82arKjT0A1MjKIo/CYkw0fW19za4Jj+EoX+/Algu37ZqR6Zvym2KTrSyrPc YLLMKkJF5xXz9/qp++rrAk0lu8icbSxFHEXMRWBe03l9etWmuTQnEQr44GFwyKAZ 0Zzu5I0orY9b1aeu3nThYvZA0QJSvoU= -----END CERTIFICATE-----Generated at Fri Jul 24 11:35:52 2026 by rpki-client