$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/ad91d305-1aea-3fc6-af03-bcc976c10995.roa File: ad91d305-1aea-3fc6-af03-bcc976c10995.roa (raw, json) Hash identifier: dBEJ+FZJnaCa1OP7CO6Yg+1u2tmJpGE67kvP0B4SqY4= Subject key identifier: FB:07:B0:45:0D:E6:CA:A4:47:66:E6:0E:8C:7B:CF:F0:0B:EC:E7:35 Certificate issuer: /CN=34592396-ac3d-4a48-97f1-caed65436525 Certificate serial: 010D0C9F4328584E5619EA7590D715C6B741EC80 Authority key identifier: E0:F9:1F:E1:0F:59:EE:87:BC:BA:61:8A:CE:E9:74:C9:83:E1:41:41 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/ad91d305-1aea-3fc6-af03-bcc976c10995.roa Signing time: Mon 29 Jun 2026 21:00:12 +0000 ROA not before: Mon 29 Jun 2026 21:00:12 +0000 ROA not after: Sun 27 Sep 2026 21:00:12 +0000 asID: 40818 IP address blocks: 23.131.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:56:19:ea:75:90:d7:15:c6:b7:41:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34592396-ac3d-4a48-97f1-caed65436525 Validity Not Before: Jun 29 21:00:12 2026 GMT Not After : Sep 27 21:00:12 2026 GMT Subject: CN=68572c28-00b4-4761-9e03-a1af739f478f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f7:ee:40:9d:bc:36:3d:b4:ff:56:b2:3d:e4: 0f:21:24:e6:e2:89:59:0d:59:80:94:bf:a8:a3:79: 7a:51:73:d2:45:d8:48:89:2e:83:e9:3d:a4:24:70: a0:53:41:08:a0:a1:dc:19:f4:3e:d5:f0:0f:df:2a: a8:22:03:9b:af:09:36:1c:f9:bb:84:d1:a5:61:17: a8:1a:14:d1:85:4c:7c:6a:c3:41:23:8c:53:51:eb: 02:4e:ec:0f:64:42:7c:2f:ec:1b:a5:9f:48:38:0c: 1a:47:f7:f9:bf:f1:bb:f7:13:3c:b7:ac:7a:3e:7f: 35:2c:f7:3b:c1:bc:86:3d:d9:89:06:03:47:07:bc: 7c:12:d0:81:f9:15:f4:8b:0e:c2:1b:6e:da:70:bc: 20:57:97:c1:18:c2:7a:df:18:8f:3c:e2:42:44:19: 51:bd:5e:34:94:75:e8:37:45:17:a2:02:46:3d:20: 30:0f:dc:51:9e:1b:11:00:b5:5e:39:be:19:34:6c: 0a:06:d4:b7:0e:93:29:e6:10:a9:3a:55:bb:7d:1d: cc:73:e3:65:e6:d9:1a:6e:45:59:25:fe:c9:ef:e5: 4f:c6:7b:b8:96:de:a6:08:95:2a:0e:e8:a7:df:77: fd:33:5b:e3:77:89:54:2d:f4:f5:3a:f1:87:58:97: 2b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:07:B0:45:0D:E6:CA:A4:47:66:E6:0E:8C:7B:CF:F0:0B:EC:E7:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/ad91d305-1aea-3fc6-af03-bcc976c10995.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.crl X509v3 Authority Key Identifier: keyid:E0:F9:1F:E1:0F:59:EE:87:BC:BA:61:8A:CE:E9:74:C9:83:E1:41:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer sbgp-ipAddrBlock: critical IPv4: 23.131.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:f4:01:e4:b0:aa:5e:07:6f:18:9e:aa:e9:40:98:57:c5:64: 3d:37:78:47:f5:53:b2:cd:d8:40:a6:e1:ae:5f:d6:2b:0b:25: bb:c1:13:cc:ae:02:ff:5f:9b:be:3d:4e:6f:43:7b:1a:4e:98: db:63:81:0e:da:bd:6e:60:46:b0:96:58:31:14:84:56:8e:a8: ba:b2:52:61:3e:63:69:9e:71:10:6e:2e:dd:a4:ec:af:84:dd: 58:7e:82:7c:44:dc:29:e5:69:b0:2e:bc:29:90:6c:24:c8:75: 9c:5b:c7:4e:28:8a:d4:7b:5d:8d:8c:08:7a:98:82:42:d9:a2: 6e:dd:84:79:1f:61:f9:42:4e:42:b8:76:92:5e:5d:75:28:84: b1:63:8e:f0:1f:6a:50:f5:18:c8:d8:9f:31:91:14:d5:0e:29: ae:1f:26:88:3d:da:dd:bb:54:5f:e0:a4:71:6f:24:8b:91:9c: cf:71:c1:e4:64:9b:11:65:ff:21:08:23:06:78:18:e8:81:f7: a3:46:43:45:2d:f5:88:ed:53:cd:77:1e:98:7d:a9:5d:a8:b0: da:e2:ce:03:a5:c5:98:f9:a6:40:0a:e8:8e:3e:62:fe:fb:e9: b2:9d:44:dd:e8:83:40:11:92:b3:48:a4:f0:eb:e0:46:13:4f: 70:e4:4f:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5WGep1kNcVxrdB7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzQ1OTIzOTYtYWMzZC00YTQ4LTk3ZjEtY2FlZDY1NDM2 NTI1MB4XDTI2MDYyOTIxMDAxMloXDTI2MDkyNzIxMDAxMlowLzEtMCsGA1UEAxMk Njg1NzJjMjgtMDBiNC00NzYxLTllMDMtYTFhZjczOWY0NzhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvfuQJ28Nj20/1ayPeQPISTm4olZDVmAlL+o o3l6UXPSRdhIiS6D6T2kJHCgU0EIoKHcGfQ+1fAP3yqoIgObrwk2HPm7hNGlYReo GhTRhUx8asNBI4xTUesCTuwPZEJ8L+wbpZ9IOAwaR/f5v/G79xM8t6x6Pn81LPc7 wbyGPdmJBgNHB7x8EtCB+RX0iw7CG27acLwgV5fBGMJ63xiPPOJCRBlRvV40lHXo N0UXogJGPSAwD9xRnhsRALVeOb4ZNGwKBtS3DpMp5hCpOlW7fR3Mc+Nl5tkabkVZ Jf7J7+VPxnu4lt6mCJUqDuin33f9M1vjd4lULfT1OvGHWJcrawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPsHsEUN5sqkR2bmDox7z/AL7Oc1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNDU5 MjM5Ni1hYzNkLTRhNDgtOTdmMS1jYWVkNjU0MzY1MjUvYWQ5MWQzMDUtMWFlYS0z ZmM2LWFmMDMtYmNjOTc2YzEwOTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzQ1OTIzOTYtYWMzZC00YTQ4LTk3 ZjEtY2FlZDY1NDM2NTI1LzM0NTkyMzk2LWFjM2QtNGE0OC05N2YxLWNhZWQ2NTQz NjUyNS5jcmwwHwYDVR0jBBgwFoAU4Pkf4Q9Z7oe8umGKzul0yYPhQUEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNDU5MjM5Ni1hYzNkLTRhNDgtOTdmMS1jYWVk NjU0MzY1MjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4OQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACr0AeSwql4HbxiequlAmFfFZD03eEf1U7LN2ECm4a5f1isLJbvBE8yu Av9fm749Tm9DexpOmNtjgQ7avW5gRrCWWDEUhFaOqLqyUmE+Y2mecRBuLt2k7K+E 3Vh+gnxE3CnlabAuvCmQbCTIdZxbx04oitR7XY2MCHqYgkLZom7dhHkfYflCTkK4 dpJeXXUohLFjjvAfalD1GMjYnzGRFNUOKa4fJog92t27VF/gpHFvJIuRnM9xweRk mxFl/yEIIwZ4GOiB96NGQ0Ut9YjtU813Hph9qV2osNrizgOlxZj5pkAK6I4+Yv77 6bKdRN3og0ARkrNIpPDr4EYTT3DkTyg= -----END CERTIFICATE-----Generated at Tue Jul 21 19:38:43 2026 by rpki-client