$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/df99f080-3f81-3a55-969f-3784b59f95b1.roa File: df99f080-3f81-3a55-969f-3784b59f95b1.roa (raw, json) Hash identifier: vW+mF3AikLCNfECv3yVEoXMG26/JidIlG6AXftzVZZY= Subject key identifier: B9:A6:2F:22:05:3E:CB:F7:66:5E:1B:F4:18:A9:0D:BB:A3:00:25:8C Certificate issuer: /CN=a7840f46-b135-4a45-8c47-daede4b0b707 Certificate serial: 010D0C9F4328584E7204DC89A8C947630F674A00 Authority key identifier: 91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/df99f080-3f81-3a55-969f-3784b59f95b1.roa Signing time: Thu 09 Jul 2026 21:00:11 +0000 ROA not before: Thu 09 Jul 2026 21:00:11 +0000 ROA not after: Wed 07 Oct 2026 21:00:11 +0000 asID: 398014 IP address blocks: 24.170.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:72:04:dc:89:a8:c9:47:63:0f:67:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7840f46-b135-4a45-8c47-daede4b0b707 Validity Not Before: Jul 9 21:00:11 2026 GMT Not After : Oct 7 21:00:11 2026 GMT Subject: CN=7f998791-e6cb-41d1-b03e-ffe317a990d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:70:39:81:e2:db:ac:95:99:2b:b9:14:a7:1a: c7:03:90:40:a5:cc:3d:1b:9a:88:b9:90:cd:d6:b3: f0:35:91:38:1a:08:29:c0:b4:4a:df:f8:40:5a:3f: 8d:2b:91:fa:1f:4b:ba:95:11:49:67:72:bf:f0:91: b3:cc:34:12:60:3d:93:b0:5f:14:a4:d3:b8:af:ac: de:e4:4a:62:b0:5e:0c:d7:e6:63:b4:b1:33:58:78: d3:ce:9d:52:4a:49:a3:3f:51:ab:44:1b:20:50:57: cb:49:71:77:60:ef:01:fe:8a:21:7b:36:88:28:a7: 24:6d:d6:48:af:a2:55:70:1a:88:be:73:5f:ca:bc: 74:8e:41:fa:4b:2d:62:5a:4e:ca:a4:5f:d9:eb:af: e0:2a:6e:7d:b9:9e:ff:ac:23:5c:38:f5:3e:d4:98: 04:fa:1c:8e:9d:78:1c:85:6a:31:f9:0e:bb:4f:68: 61:65:e5:4a:6b:d6:60:31:41:10:66:71:2d:26:c8: f6:8a:98:a6:6c:13:71:6f:71:da:22:a2:12:6b:6f: dc:77:dc:c9:a8:96:2a:ce:48:e1:9f:63:7a:61:1f: 96:3a:59:2c:8e:a6:e4:1e:38:43:d5:2d:91:2f:4a: 12:9d:dd:d6:4c:bc:46:a9:f7:f1:11:dc:6e:1d:36: 4f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:A6:2F:22:05:3E:CB:F7:66:5E:1B:F4:18:A9:0D:BB:A3:00:25:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/df99f080-3f81-3a55-969f-3784b59f95b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl X509v3 Authority Key Identifier: keyid:91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer sbgp-ipAddrBlock: critical IPv4: 24.170.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:89:c6:a7:6d:9c:9b:68:69:84:26:11:03:1f:66:1e:92:a4: 10:f2:ac:7b:6d:cc:e2:a8:2d:15:fb:d3:a6:2a:a7:d2:2a:3b: 93:29:3e:50:15:05:72:9a:f3:48:df:a8:96:0b:d9:b0:ad:09: 4f:ce:b5:f1:eb:c4:94:b2:8b:b7:f9:9f:d3:5f:62:94:8d:ae: bd:0a:42:01:02:f2:68:a7:0b:43:60:3b:d2:da:60:1b:24:a2: c3:1c:25:8c:d1:75:1f:d3:d5:d9:73:33:5b:4f:46:0c:d1:94: 1e:29:64:23:93:8d:ff:f6:58:f6:bc:03:6d:4e:b8:91:ad:a8: ed:50:49:51:92:86:37:d0:6b:e1:cd:e9:ad:fe:0e:aa:c9:bb: bf:1f:b5:db:3e:2d:b8:2c:82:2c:e6:1d:0c:77:93:03:97:36: 82:ae:38:22:43:b2:c5:1d:54:6c:b7:39:92:75:2b:84:ea:dc: b8:00:44:57:f0:23:a2:e4:1f:c8:9c:22:9b:bf:5a:2c:09:db: e1:07:29:6b:13:70:e0:82:5b:cf:7e:26:76:ed:3e:be:e8:74: e0:4e:88:b7:a2:2f:10:e0:35:6c:88:f8:e0:d5:48:ab:ae:ba: 8e:0d:8b:6d:93:4b:0d:64:05:dc:24:0c:49:66:3c:74:4b:6c: ca:a5:f7:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5yBNyJqMlHYw9nSgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc4NDBmNDYtYjEzNS00YTQ1LThjNDctZGFlZGU0YjBi NzA3MB4XDTI2MDcwOTIxMDAxMVoXDTI2MTAwNzIxMDAxMVowLzEtMCsGA1UEAxMk N2Y5OTg3OTEtZTZjYi00MWQxLWIwM2UtZmZlMzE3YTk5MGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXA5geLbrJWZK7kUpxrHA5BApcw9G5qIuZDN 1rPwNZE4GggpwLRK3/hAWj+NK5H6H0u6lRFJZ3K/8JGzzDQSYD2TsF8UpNO4r6ze 5EpisF4M1+ZjtLEzWHjTzp1SSkmjP1GrRBsgUFfLSXF3YO8B/oohezaIKKckbdZI r6JVcBqIvnNfyrx0jkH6Sy1iWk7KpF/Z66/gKm59uZ7/rCNcOPU+1JgE+hyOnXgc hWox+Q67T2hhZeVKa9ZgMUEQZnEtJsj2ipimbBNxb3HaIqISa2/cd9zJqJYqzkjh n2N6YR+WOlksjqbkHjhD1S2RL0oSnd3WTLxGqffxEdxuHTZP9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLmmLyIFPsv3Zl4b9BipDbujACWMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hNzg0 MGY0Ni1iMTM1LTRhNDUtOGM0Ny1kYWVkZTRiMGI3MDcvZGY5OWYwODAtM2Y4MS0z YTU1LTk2OWYtMzc4NGI1OWY5NWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTc4NDBmNDYtYjEzNS00YTQ1LThj NDctZGFlZGU0YjBiNzA3L2E3ODQwZjQ2LWIxMzUtNGE0NS04YzQ3LWRhZWRlNGIw YjcwNy5jcmwwHwYDVR0jBBgwFoAUkXwZ6lZt7d6ge9kx5g0uw1oWE84wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hNzg0MGY0Ni1iMTM1LTRhNDUtOGM0Ny1kYWVk ZTRiMGI3MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGGKqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqJxqdtnJtoaYQmEQMfZh6SpBDyrHttzOKoLRX706Yqp9IqO5MpPlAV BXKa80jfqJYL2bCtCU/OtfHrxJSyi7f5n9NfYpSNrr0KQgEC8minC0NgO9LaYBsk osMcJYzRdR/T1dlzM1tPRgzRlB4pZCOTjf/2WPa8A21OuJGtqO1QSVGShjfQa+HN 6a3+DqrJu78ftds+LbgsgizmHQx3kwOXNoKuOCJDssUdVGy3OZJ1K4Tq3LgARFfw I6LkH8icIpu/WiwJ2+EHKWsTcOCCW89+JnbtPr7odOBOiLeiLxDgNWyI+ODVSKuu uo4Ni22TSw1kBdwkDElmPHRLbMql99s= -----END CERTIFICATE-----Generated at Fri Jul 24 07:18:03 2026 by rpki-client