$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/74c8279c-10f7-3816-846a-e6ac1996b71b.roa File: 74c8279c-10f7-3816-846a-e6ac1996b71b.roa (raw, json) Hash identifier: IiXD0axQe2yCbdgE0v1hwfJtkhsbIO0gTb0JHyFc9os= Subject key identifier: 24:95:1E:43:F0:96:6A:2A:71:8F:47:85:DB:6E:66:D7:00:89:D7:9B Certificate issuer: /CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345 Certificate serial: 010D0C9F4328584F4973BAA001C3CC2D12E540A0 Authority key identifier: D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/74c8279c-10f7-3816-846a-e6ac1996b71b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 139.177.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:ba:a0:01:c3:cc:2d:12:e5:40:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=2de45364-0041-4d1f-ab61-accd681b4247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:14:c1:8c:01:42:a1:61:c2:31:fb:98:99:84: 0b:aa:f2:92:1a:2a:12:bd:ef:bd:56:8a:64:e6:be: 87:ed:0d:85:25:90:d7:1a:15:41:0f:fc:72:3f:69: 95:3f:6b:7f:7d:e2:1f:b8:85:e8:3e:34:6e:50:aa: ed:ef:a1:cf:bd:ca:8b:f0:cd:19:e9:bf:43:72:44: b1:c4:d5:f0:5e:19:ef:02:8f:9a:42:68:df:bb:f3: 95:be:dc:5e:79:3f:96:0f:18:80:fe:cd:82:fb:d6: c7:52:bc:42:b5:69:ac:47:31:68:fc:69:1e:59:7c: 6b:24:bc:c1:e8:33:3e:d8:1a:7a:31:01:8c:c9:e7: 39:48:cf:06:ef:aa:23:bd:fa:f9:a2:de:f1:7f:bf: 77:9f:2f:7a:8a:8e:86:2f:3a:c7:03:b7:df:23:c1: 4f:a1:98:3a:c4:8c:4b:68:b2:9f:38:18:41:95:67: 1b:60:f2:7f:0e:49:72:4c:eb:89:ba:06:d7:78:05: 7b:bc:69:95:70:f4:24:87:4a:d0:b8:68:eb:e6:5e: f8:cd:f8:9b:82:04:9b:19:c1:75:8e:2a:49:25:45: 9f:96:ac:d0:1f:df:da:6e:65:0f:a0:33:a5:00:05: fc:a8:9a:aa:7e:28:b6:7b:d8:48:8b:7e:63:fe:6d: 4d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:95:1E:43:F0:96:6A:2A:71:8F:47:85:DB:6E:66:D7:00:89:D7:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/74c8279c-10f7-3816-846a-e6ac1996b71b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl X509v3 Authority Key Identifier: keyid:D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer sbgp-ipAddrBlock: critical IPv4: 139.177.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:e6:2a:c0:60:cc:fe:80:b0:72:32:ed:ac:f2:93:2d:a1:b4: 79:58:e1:6a:0b:07:ca:49:18:c3:de:64:38:5d:2a:4c:d4:6c: d1:2c:ef:ef:b7:e9:44:4d:d8:38:98:fb:75:b6:4e:0e:02:09: 43:48:32:0a:a4:03:d1:1d:b1:45:99:ef:f1:e6:4a:cd:92:a0: 52:c1:88:f1:4b:c3:e1:47:6e:a7:ba:cb:81:b5:20:6d:5f:3e: 48:c6:54:5a:dd:91:0d:41:cc:63:56:d1:2a:08:b6:e8:81:70: 9a:46:3f:69:9a:f1:57:dd:19:51:ca:0b:d1:55:c4:41:b2:8a: 25:ef:19:5b:94:7d:ba:d3:c2:e7:f3:b2:8e:7c:bc:8e:3d:6b: d1:af:6d:74:43:4e:da:d7:87:17:82:89:2a:ee:5b:a2:65:d0: d6:d0:5c:0b:8e:25:6a:17:9f:bf:78:47:d0:f3:41:8a:40:ba: da:d0:9c:0f:68:41:17:3c:10:d8:8e:4f:0c:59:3d:ad:36:7c: 5d:47:21:ad:d3:40:01:4f:7a:24:3e:17:dc:c0:5e:79:b5:b5: 3a:b3:91:ce:3d:0e:7c:ba:db:56:44:d0:ad:f6:32:13:96:97: 5d:f4:0a:b0:57:fb:76:bd:ec:82:29:15:57:9f:67:3c:70:28: 4d:16:a9:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc7qgAcPMLRLlQKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQ2MzM4YTUtN2M2MC00ZGM1LWIxZDgtMWM1MDRhNGVm MzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MmRlNDUzNjQtMDA0MS00ZDFmLWFiNjEtYWNjZDY4MWI0MjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshTBjAFCoWHCMfuYmYQLqvKSGioSve+9Vopk 5r6H7Q2FJZDXGhVBD/xyP2mVP2t/feIfuIXoPjRuUKrt76HPvcqL8M0Z6b9DckSx xNXwXhnvAo+aQmjfu/OVvtxeeT+WDxiA/s2C+9bHUrxCtWmsRzFo/GkeWXxrJLzB 6DM+2Bp6MQGMyec5SM8G76ojvfr5ot7xf793ny96io6GLzrHA7ffI8FPoZg6xIxL aLKfOBhBlWcbYPJ/DklyTOuJugbXeAV7vGmVcPQkh0rQuGjr5l74zfibggSbGcF1 jipJJUWflqzQH9/abmUPoDOlAAX8qJqqfii2e9hIi35j/m1NvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCSVHkPwlmoqcY9HhdtuZtcAidebMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xZDYz MzhhNS03YzYwLTRkYzUtYjFkOC0xYzUwNGE0ZWYzNDUvNzRjODI3OWMtMTBmNy0z ODE2LTg0NmEtZTZhYzE5OTZiNzFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWQ2MzM4YTUtN2M2MC00ZGM1LWIx ZDgtMWM1MDRhNGVmMzQ1LzFkNjMzOGE1LTdjNjAtNGRjNS1iMWQ4LTFjNTA0YTRl ZjM0NS5jcmwwHwYDVR0jBBgwFoAU2d97ozrzBBGTcYJwMlTvgkEtX1MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xZDYzMzhhNS03YzYwLTRkYzUtYjFkOC0xYzUw NGE0ZWYzNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi7H8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFfmKsBgzP6AsHIy7azyky2htHlY4WoLB8pJGMPeZDhdKkzUbNEs7++3 6URN2DiY+3W2Tg4CCUNIMgqkA9EdsUWZ7/HmSs2SoFLBiPFLw+FHbqe6y4G1IG1f PkjGVFrdkQ1BzGNW0SoItuiBcJpGP2ma8VfdGVHKC9FVxEGyiiXvGVuUfbrTwufz so58vI49a9GvbXRDTtrXhxeCiSruW6Jl0NbQXAuOJWoXn794R9DzQYpAutrQnA9o QRc8ENiOTwxZPa02fF1HIa3TQAFPeiQ+F9zAXnm1tTqzkc49Dny621ZE0K32MhOW l130CrBX+3a97IIpFVefZzxwKE0WqTw= -----END CERTIFICATE-----Generated at Fri Sep 25 18:47:45 2026 by rpki-client