$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/d737f2de-eaa1-38b7-9650-44dca4848cdf.roa File: d737f2de-eaa1-38b7-9650-44dca4848cdf.roa (raw, json) Hash identifier: +Ekq7VvEaqfTUpsyf+fWmajNUBr5d6kK07HqnpYHvT8= Subject key identifier: 13:AC:FC:A5:76:4C:35:65:F0:4C:22:41:D2:32:1D:F2:59:FE:86:84 Certificate issuer: /CN=e39425c5-52e8-4eac-9e1d-b07079c84d7b Certificate serial: 010D0C9F4328584E90BA52A5FD006DA42DBFC380 Authority key identifier: 06:21:87:7B:4F:EF:91:DA:86:4D:F7:17:D1:1F:D1:18:D2:B2:53:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/d737f2de-eaa1-38b7-9650-44dca4848cdf.roa Signing time: Mon 20 Jul 2026 21:00:11 +0000 ROA not before: Mon 20 Jul 2026 21:00:11 +0000 ROA not after: Sun 18 Oct 2026 21:00:11 +0000 asID: 8075 IP address blocks: 165.224.66.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:90:ba:52:a5:fd:00:6d:a4:2d:bf:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e39425c5-52e8-4eac-9e1d-b07079c84d7b Validity Not Before: Jul 20 21:00:11 2026 GMT Not After : Oct 18 21:00:11 2026 GMT Subject: CN=da97dbf3-18cc-49d6-9c76-18f1277c029f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:fc:66:40:66:c3:bf:a0:5e:95:aa:cd:de:76: 62:a3:5e:24:e8:8f:24:ba:91:7b:4b:12:9e:13:3b: 99:26:03:38:f1:f1:0c:cf:5f:54:7e:53:f2:99:61: 1c:4f:dd:ac:e0:f9:59:9c:5b:8d:fa:2b:d3:c6:2f: 2e:54:5a:6e:74:fd:42:16:bc:50:1c:80:8d:10:37: ec:37:8d:77:6c:ad:73:05:5a:d8:65:c6:d9:5f:a5: 00:a7:29:23:35:c6:1c:87:2c:bc:0b:5f:d6:51:e1: 75:3e:52:f5:66:5e:60:10:5d:5e:89:f7:6f:72:a2: a5:ff:0c:02:a8:14:1b:e9:5c:2e:eb:9f:25:d6:4b: 24:72:4e:eb:2f:cd:b1:7b:cc:2e:e2:cd:40:8b:50: 8d:69:81:0e:e3:8d:81:c2:36:30:35:e8:a9:53:74: 15:82:90:02:c1:13:f8:ca:f4:6c:8d:d3:79:20:a0: 75:aa:00:c3:c9:ab:0a:b7:27:5f:cd:c3:b5:d5:ad: b2:7c:00:38:ae:45:7f:51:f8:74:b2:79:fe:a3:74: b0:2b:0f:24:85:50:c5:b0:a1:71:10:ac:8e:c4:11: 28:36:ce:8f:4a:1d:77:f1:6d:34:0f:06:a9:b1:ad: 5d:ba:85:41:c3:8d:24:6b:ec:19:21:23:bd:18:96: 77:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:AC:FC:A5:76:4C:35:65:F0:4C:22:41:D2:32:1D:F2:59:FE:86:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/d737f2de-eaa1-38b7-9650-44dca4848cdf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.crl X509v3 Authority Key Identifier: keyid:06:21:87:7B:4F:EF:91:DA:86:4D:F7:17:D1:1F:D1:18:D2:B2:53:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer sbgp-ipAddrBlock: critical IPv4: 165.224.66.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:05:32:7d:ab:3e:d3:a3:cb:1e:05:f8:13:26:8e:8e:1a:e4: 01:70:7e:33:5c:a7:f0:1b:5e:0c:56:2e:3f:6d:b0:3e:df:1c: 1c:a1:15:32:55:9c:a2:5d:18:6f:a3:43:d7:07:f5:29:ec:10: 81:24:cb:ba:b2:a8:0b:3e:ca:a3:9c:64:ca:34:47:99:59:c5: 00:39:5f:07:60:50:28:7f:0d:d0:36:6c:48:80:14:b7:e3:89: 1c:e7:dd:2f:82:6d:65:5d:a1:87:c4:ad:74:96:83:7f:cf:36: 4e:12:2e:5c:80:67:5d:d8:1c:14:88:d5:3b:05:b2:63:3a:a5: 60:67:6a:56:ef:52:5b:88:c3:c4:36:4a:37:46:fe:58:f4:7c: 84:ab:21:0a:4b:27:e9:e6:93:2f:d1:cc:53:02:a1:87:8f:17: df:10:40:d0:7c:62:ee:6e:f9:9a:4d:dd:a5:aa:2e:11:ad:87: e5:14:fa:a4:a3:15:eb:95:71:c6:68:e6:16:b7:1e:7e:c1:30: ee:4f:f3:af:25:3b:15:0a:68:d3:ee:92:08:19:c1:f1:14:85: d1:46:ba:55:ff:9d:87:64:b8:96:e8:3f:c8:eb:58:4d:25:88: 22:2c:45:68:d8:4e:b8:20:26:7a:9f:af:73:45:ef:05:40:d2: f6:83:20:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6QulKl/QBtpC2/w4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTM5NDI1YzUtNTJlOC00ZWFjLTllMWQtYjA3MDc5Yzg0 ZDdiMB4XDTI2MDcyMDIxMDAxMVoXDTI2MTAxODIxMDAxMVowLzEtMCsGA1UEAxMk ZGE5N2RiZjMtMThjYy00OWQ2LTljNzYtMThmMTI3N2MwMjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7vxmQGbDv6BelarN3nZio14k6I8kupF7SxKe EzuZJgM48fEMz19UflPymWEcT92s4PlZnFuN+ivTxi8uVFpudP1CFrxQHICNEDfs N413bK1zBVrYZcbZX6UApykjNcYchyy8C1/WUeF1PlL1Zl5gEF1eifdvcqKl/wwC qBQb6Vwu658l1kskck7rL82xe8wu4s1Ai1CNaYEO442BwjYwNeipU3QVgpACwRP4 yvRsjdN5IKB1qgDDyasKtydfzcO11a2yfAA4rkV/Ufh0snn+o3SwKw8khVDFsKFx EKyOxBEoNs6PSh138W00Dwapsa1duoVBw40ka+wZISO9GJZ3QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBOs/KV2TDVl8EwiQdIyHfJZ/oaEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lMzk0 MjVjNS01MmU4LTRlYWMtOWUxZC1iMDcwNzljODRkN2IvZDczN2YyZGUtZWFhMS0z OGI3LTk2NTAtNDRkY2E0ODQ4Y2RmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTM5NDI1YzUtNTJlOC00ZWFjLTll MWQtYjA3MDc5Yzg0ZDdiL2UzOTQyNWM1LTUyZTgtNGVhYy05ZTFkLWIwNzA3OWM4 NGQ3Yi5jcmwwHwYDVR0jBBgwFoAUBiGHe0/vkdqGTfcX0R/RGNKyU6swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lMzk0MjVjNS01MmU4LTRlYWMtOWUxZC1iMDcw NzljODRkN2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpeBCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGMFMn2rPtOjyx4F+BMmjo4a5AFwfjNcp/AbXgxWLj9tsD7fHByhFTJV nKJdGG+jQ9cH9SnsEIEky7qyqAs+yqOcZMo0R5lZxQA5XwdgUCh/DdA2bEiAFLfj iRzn3S+CbWVdoYfErXSWg3/PNk4SLlyAZ13YHBSI1TsFsmM6pWBnalbvUluIw8Q2 SjdG/lj0fISrIQpLJ+nmky/RzFMCoYePF98QQNB8Yu5u+ZpN3aWqLhGth+UU+qSj FeuVccZo5ha3Hn7BMO5P868lOxUKaNPukggZwfEUhdFGulX/nYdkuJboP8jrWE0l iCIsRWjYTrggJnqfr3NF7wVA0vaDII8= -----END CERTIFICATE-----Generated at Fri Jul 24 07:03:24 2026 by rpki-client