$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/bd706a23-0d52-3069-8efc-b247735d9c39.roa File: bd706a23-0d52-3069-8efc-b247735d9c39.roa (raw, json) Hash identifier: 8fXKx44bEQXnB6SLg+fV7NBF5wOKpNK0ZHxqJIWJF9Q= Subject key identifier: 31:8A:94:8B:EB:E4:7B:31:B6:03:42:69:DF:35:BD:0F:E0:FD:F5:F6 Certificate issuer: /CN=3efd7529-38b1-472c-9d5b-d87382d088a0 Certificate serial: 010D0C9F4328584E8C8A4814CAE3D38CA60151D8 Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/bd706a23-0d52-3069-8efc-b247735d9c39.roa Signing time: Sun 19 Jul 2026 09:00:11 +0000 ROA not before: Sun 19 Jul 2026 09:00:11 +0000 ROA not after: Sat 17 Oct 2026 09:00:11 +0000 asID: 394285 IP address blocks: 174.137.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8c:8a:48:14:ca:e3:d3:8c:a6:01:51:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0 Validity Not Before: Jul 19 09:00:11 2026 GMT Not After : Oct 17 09:00:11 2026 GMT Subject: CN=a5f2a8e6-03bc-4021-b343-73ea927c1377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:25:66:16:50:97:fe:d9:a3:d0:a3:ce:3e:ab: 68:8d:b2:cf:24:e9:e3:9b:68:04:79:eb:63:77:95: ca:f1:bb:b2:bb:c1:7b:06:14:d4:97:3e:c4:cc:25: df:1f:21:89:25:a8:95:ff:b7:89:2b:98:c5:e2:4e: b4:a1:19:96:bb:34:41:7f:38:52:41:32:1d:79:62: dc:b3:af:11:5c:39:88:0b:2a:2d:a1:2e:09:45:71: 1f:6c:60:67:78:e2:3d:03:6b:70:70:74:8f:33:ac: 15:b5:e2:52:f4:33:5b:3f:3f:ee:a5:4c:da:3c:d4: 94:de:60:52:b8:3a:77:47:90:28:eb:47:a0:4a:31: 9f:24:75:1a:52:8f:ae:ae:a3:bb:fa:e5:63:0c:78: 48:d8:40:15:f8:53:99:5f:9d:2a:a7:c4:87:31:17: fc:f0:b0:16:05:5e:15:03:be:66:00:4d:36:43:27: 22:96:d2:fd:aa:62:2d:8c:17:81:0f:59:29:31:34: 1b:31:da:de:67:2d:13:c8:c3:d3:9d:58:4d:5b:9a: b5:12:d8:38:7a:52:6d:ef:d3:f0:17:66:b1:37:f5: 32:f4:6b:f5:2e:0b:e3:b2:28:58:37:f5:c1:00:2c: 6b:b6:70:9e:c1:4e:fb:a8:b2:42:57:26:09:18:07: 69:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:8A:94:8B:EB:E4:7B:31:B6:03:42:69:DF:35:BD:0F:E0:FD:F5:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/bd706a23-0d52-3069-8efc-b247735d9c39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl X509v3 Authority Key Identifier: keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer sbgp-ipAddrBlock: critical IPv4: 174.137.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:65:18:d4:03:d5:2d:ed:f8:c2:66:c4:73:36:d7:19:8c:c6: 10:0d:0c:6b:bc:34:3e:01:c4:67:99:0c:64:56:bc:db:b6:d2: b4:4e:9f:f3:b1:f7:4a:e3:cd:c0:9d:1f:4f:68:db:77:a8:a9: c5:88:ae:fc:87:94:de:99:15:f0:e0:26:35:e0:b6:17:5a:f8: bf:4e:3a:da:c2:5c:0e:a7:5a:c6:b4:27:5f:05:1f:ec:2c:18: db:ba:69:60:1d:21:31:67:3f:f1:1b:e0:29:02:55:46:40:5b: 86:e0:de:d2:d5:2f:78:b8:b4:e9:68:f4:2d:46:de:93:c8:59: 11:ab:f8:72:f7:dc:fe:b3:0c:93:35:c2:f3:53:69:95:6e:02: 89:18:12:d6:68:e5:d0:f3:60:5b:64:75:ae:62:c9:f9:e0:5b: 68:e9:82:c0:bf:a5:8b:c3:ad:ea:2b:48:2d:cc:4f:44:d9:49: e6:04:16:15:f3:e3:d2:c9:f5:37:c6:2f:b2:a8:00:86:29:56: 9c:cc:82:a7:9d:c5:ee:ad:c3:19:2b:f7:85:e8:5e:8c:cf:82: 8d:a6:05:73:f2:3d:59:4e:94:f8:f9:b4:39:a4:34:e6:ad:09: 93:8f:81:68:4d:5b:14:d1:70:ba:c6:d4:e1:1a:9c:22:57:a4: 73:19:67:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6MikgUyuPTjKYBUdgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2VmZDc1MjktMzhiMS00NzJjLTlkNWItZDg3MzgyZDA4 OGEwMB4XDTI2MDcxOTA5MDAxMVoXDTI2MTAxNzA5MDAxMVowLzEtMCsGA1UEAxMk YTVmMmE4ZTYtMDNiYy00MDIxLWIzNDMtNzNlYTkyN2MxMzc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryVmFlCX/tmj0KPOPqtojbLPJOnjm2gEeetj d5XK8buyu8F7BhTUlz7EzCXfHyGJJaiV/7eJK5jF4k60oRmWuzRBfzhSQTIdeWLc s68RXDmICyotoS4JRXEfbGBneOI9A2twcHSPM6wVteJS9DNbPz/upUzaPNSU3mBS uDp3R5Ao60egSjGfJHUaUo+urqO7+uVjDHhI2EAV+FOZX50qp8SHMRf88LAWBV4V A75mAE02QyciltL9qmItjBeBD1kpMTQbMdreZy0TyMPTnVhNW5q1Etg4elJt79Pw F2axN/Uy9Gv1LgvjsihYN/XBACxrtnCewU77qLJCVyYJGAdpZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDGKlIvr5HsxtgNCad81vQ/g/fX2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZk NzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODczODJkMDg4YTAvYmQ3MDZhMjMtMGQ1Mi0z MDY5LThlZmMtYjI0NzczNWQ5YzM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2VmZDc1MjktMzhiMS00NzJjLTlk NWItZDg3MzgyZDA4OGEwLzNlZmQ3NTI5LTM4YjEtNDcyYy05ZDViLWQ4NzM4MmQw ODhhMC5jcmwwHwYDVR0jBBgwFoAUW4MicpSIqXhZmzrb3eBIKYdqlAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZkNzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODcz ODJkMDg4YTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArolhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKVlGNQD1S3t+MJmxHM21xmMxhANDGu8ND4BxGeZDGRWvNu20rROn/Ox 90rjzcCdH09o23eoqcWIrvyHlN6ZFfDgJjXgthda+L9OOtrCXA6nWsa0J18FH+ws GNu6aWAdITFnP/Eb4CkCVUZAW4bg3tLVL3i4tOlo9C1G3pPIWRGr+HL33P6zDJM1 wvNTaZVuAokYEtZo5dDzYFtkda5iyfngW2jpgsC/pYvDreorSC3MT0TZSeYEFhXz 49LJ9TfGL7KoAIYpVpzMgqedxe6twxkr94XoXozPgo2mBXPyPVlOlPj5tDmkNOat CZOPgWhNWxTRcLrG1OEanCJXpHMZZ5k= -----END CERTIFICATE-----Generated at Fri Jul 24 09:33:16 2026 by rpki-client