$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/9350ef68-af73-3548-8377-c2969548bbe2.roa File: 9350ef68-af73-3548-8377-c2969548bbe2.roa (raw, json) Hash identifier: QLI5micRBHKD6fd1OWkVOW944nW06ooiWvnnYiuMV9E= Subject key identifier: 20:EE:01:BC:97:97:9D:2B:C3:DD:05:41:F1:16:8D:AB:A2:82:65:02 Certificate issuer: /CN=d23bf149-3e89-4ca4-b96d-918c2eab87d8 Certificate serial: 010D0C9F4328584E8F5500BCD67592B666DF9880 Authority key identifier: 59:DA:25:1D:FF:DB:09:20:84:C1:22:8B:2F:20:BE:28:0D:90:A2:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/9350ef68-af73-3548-8377-c2969548bbe2.roa Signing time: Mon 20 Jul 2026 09:00:11 +0000 ROA not before: Mon 20 Jul 2026 09:00:11 +0000 ROA not after: Sun 18 Oct 2026 09:00:11 +0000 asID: 22223 IP address blocks: 139.60.104.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/d23bf149-3e89-4ca4-b96d-918c2eab87d8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/d23bf149-3e89-4ca4-b96d-918c2eab87d8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8f:55:00:bc:d6:75:92:b6:66:df:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d23bf149-3e89-4ca4-b96d-918c2eab87d8 Validity Not Before: Jul 20 09:00:11 2026 GMT Not After : Oct 18 09:00:11 2026 GMT Subject: CN=9f79cab9-adc7-4d47-9098-44afb43ef9aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:94:7e:6b:d6:d1:99:76:b3:9b:e6:37:55:60: 7a:ab:82:bf:67:de:f9:a0:ce:a3:7a:76:49:1b:08: 37:0f:ca:84:05:62:3a:29:94:25:73:8c:8d:da:53: fd:65:f0:fd:e2:81:00:60:04:5f:61:c5:b7:ff:1a: 9e:cd:ae:f8:b1:67:1a:5a:a3:70:9c:ba:e3:f6:9f: ec:68:35:60:13:2f:c8:1b:3e:b2:72:87:26:b1:87: 30:8e:3c:94:3d:32:e0:75:a6:a2:9f:55:88:b5:30: 33:02:a1:3a:24:40:ee:6d:c3:92:e2:f1:be:9b:ad: b2:42:10:de:c2:4f:49:63:99:9d:f2:c4:e2:87:f4: 9d:7f:0f:9a:79:e9:ad:a8:6f:1f:14:85:f6:91:0c: 51:98:1b:06:7c:45:e1:a2:bd:89:e1:27:30:36:46: 42:c1:48:2c:59:24:9a:c1:05:f1:b8:5c:0a:1f:99: d6:d0:16:a8:0e:6a:00:87:1b:14:fd:d7:40:15:94: 1a:3b:55:30:ea:47:aa:17:0d:d2:98:64:bb:a3:af: 1e:b9:82:cb:68:b1:42:56:ed:67:a9:c4:26:a7:74: 93:fa:14:0b:5d:ae:43:b2:02:07:a4:15:a4:c0:0b: ee:8a:0d:92:28:b6:53:fc:4d:97:65:4d:a8:5b:67: 1e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:EE:01:BC:97:97:9D:2B:C3:DD:05:41:F1:16:8D:AB:A2:82:65:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/9350ef68-af73-3548-8377-c2969548bbe2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/d23bf149-3e89-4ca4-b96d-918c2eab87d8.crl X509v3 Authority Key Identifier: keyid:59:DA:25:1D:FF:DB:09:20:84:C1:22:8B:2F:20:BE:28:0D:90:A2:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8.cer sbgp-ipAddrBlock: critical IPv4: 139.60.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:c8:25:13:f5:4a:79:54:13:ab:60:29:71:d0:e0:d1:4e:5c: 0b:d6:b9:b6:95:a8:38:c4:eb:b1:43:54:ab:f9:a8:6d:09:f3: 8e:9c:a2:14:fa:a0:31:7b:61:2f:1d:89:fa:65:4b:0a:75:95: d1:4c:b0:fd:65:cb:53:d5:ba:cb:fd:56:f4:b1:f4:f8:12:16: 7b:9c:1c:3f:ff:07:fc:48:d5:ef:62:06:37:38:76:75:1c:94: 4e:f0:7e:af:e5:98:e7:94:85:cb:93:db:43:10:d2:9e:e0:43: 0d:12:20:04:e3:1e:43:36:6b:d5:9a:14:a7:9b:1f:a2:39:24: e1:75:ca:36:4e:93:6f:31:d8:3b:40:f0:f2:a6:54:68:e0:ac: fd:28:2f:f5:af:41:a9:61:4f:77:01:69:49:83:9e:5a:d6:fa: 81:0b:04:77:cc:f5:22:f1:85:b6:64:e4:0c:9c:20:63:67:bc: 94:37:73:85:e9:97:bc:1e:0b:7f:76:c1:37:01:b6:86:18:13: e4:a4:a2:b2:81:49:7d:bc:61:34:e6:56:09:60:16:84:c8:3e: 4d:0c:c2:a6:3a:80:59:8a:e3:d1:8e:ea:db:a0:93:38:36:fa: 58:e9:44:ac:c5:9e:a4:05:0a:42:24:be:57:53:3b:09:5c:7e: c7:dd:c6:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6PVQC81nWStmbfmIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIzYmYxNDktM2U4OS00Y2E0LWI5NmQtOTE4YzJlYWI4 N2Q4MB4XDTI2MDcyMDA5MDAxMVoXDTI2MTAxODA5MDAxMVowLzEtMCsGA1UEAxMk OWY3OWNhYjktYWRjNy00ZDQ3LTkwOTgtNDRhZmI0M2VmOWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZR+a9bRmXazm+Y3VWB6q4K/Z975oM6jenZJ Gwg3D8qEBWI6KZQlc4yN2lP9ZfD94oEAYARfYcW3/xqeza74sWcaWqNwnLrj9p/s aDVgEy/IGz6ycocmsYcwjjyUPTLgdaain1WItTAzAqE6JEDubcOS4vG+m62yQhDe wk9JY5md8sTih/Sdfw+aeemtqG8fFIX2kQxRmBsGfEXhor2J4ScwNkZCwUgsWSSa wQXxuFwKH5nW0BaoDmoAhxsU/ddAFZQaO1Uw6keqFw3SmGS7o68euYLLaLFCVu1n qcQmp3ST+hQLXa5DsgIHpBWkwAvuig2SKLZT/E2XZU2oW2ceswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCDuAbyXl50rw90FQfEWjauigmUCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kMjNi ZjE0OS0zZTg5LTRjYTQtYjk2ZC05MThjMmVhYjg3ZDgvOTM1MGVmNjgtYWY3My0z NTQ4LTgzNzctYzI5Njk1NDhiYmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvZDIzYmYxNDktM2U4OS00Y2E0LWI5 NmQtOTE4YzJlYWI4N2Q4L2QyM2JmMTQ5LTNlODktNGNhNC1iOTZkLTkxOGMyZWFi ODdkOC5jcmwwHwYDVR0jBBgwFoAUWdolHf/bCSCEwSKLLyC+KA2QoukwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9kMjNiZjE0OS0zZTg5LTRjYTQtYjk2ZC05MThj MmVhYjg3ZDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDizxoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFfIJRP1SnlUE6tgKXHQ4NFOXAvWubaVqDjE67FDVKv5qG0J846cohT6 oDF7YS8difplSwp1ldFMsP1ly1PVusv9VvSx9PgSFnucHD//B/xI1e9iBjc4dnUc lE7wfq/lmOeUhcuT20MQ0p7gQw0SIATjHkM2a9WaFKebH6I5JOF1yjZOk28x2DtA 8PKmVGjgrP0oL/WvQalhT3cBaUmDnlrW+oELBHfM9SLxhbZk5AycIGNnvJQ3c4Xp l7weC392wTcBtoYYE+SkorKBSX28YTTmVglgFoTIPk0MwqY6gFmK49GO6tugkzg2 +ljpRKzFnqQFCkIkvldTOwlcfsfdxoQ= -----END CERTIFICATE-----Generated at Fri Jul 24 08:25:07 2026 by rpki-client