$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2b535b7-fbed-4c14-8ac0-7c5f32020c09/2e09892f-2ac6-3953-a44d-f0dbf181b866.roa File: 2e09892f-2ac6-3953-a44d-f0dbf181b866.roa (raw, json) Hash identifier: 6d1OGrzTnstKtOtag4Ej5AosADhtH2+iTM9aZGqZ6Qk= Subject key identifier: FC:96:2A:65:06:D6:2D:38:B4:54:52:21:47:FD:CF:45:4B:96:4E:11 Certificate issuer: /CN=a2b535b7-fbed-4c14-8ac0-7c5f32020c09 Certificate serial: 010D0C9F4328584E6B0A323E0FDE617810FCABE0 Authority key identifier: 4C:9A:3C:37:5A:3C:37:6C:56:67:CF:06:66:93:00:59:D0:DE:F7:06 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2b535b7-fbed-4c14-8ac0-7c5f32020c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2b535b7-fbed-4c14-8ac0-7c5f32020c09/2e09892f-2ac6-3953-a44d-f0dbf181b866.roa Signing time: Tue 07 Jul 2026 09:00:12 +0000 ROA not before: Tue 07 Jul 2026 09:00:12 +0000 ROA not after: Mon 05 Oct 2026 09:00:12 +0000 asID: 60439 IP address blocks: 23.147.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2b535b7-fbed-4c14-8ac0-7c5f32020c09/a2b535b7-fbed-4c14-8ac0-7c5f32020c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2b535b7-fbed-4c14-8ac0-7c5f32020c09/a2b535b7-fbed-4c14-8ac0-7c5f32020c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2b535b7-fbed-4c14-8ac0-7c5f32020c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6b:0a:32:3e:0f:de:61:78:10:fc:ab:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2b535b7-fbed-4c14-8ac0-7c5f32020c09 Validity Not Before: Jul 7 09:00:12 2026 GMT Not After : Oct 5 09:00:12 2026 GMT Subject: CN=68c83557-2f82-4996-86d1-3b2cd58e0c41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d1:25:f2:e2:e8:12:1e:c4:f5:b3:c2:48:25: 15:2b:7a:ad:02:74:84:3e:19:97:78:29:21:93:c7: b4:b6:8e:b3:d0:92:de:f4:ca:11:fa:ec:4d:de:b3: 8d:c8:8f:3b:aa:e4:8b:6b:aa:03:ec:cd:de:4f:fe: b2:c6:a8:d4:7a:6c:e6:eb:d1:39:fd:a9:73:e5:95: 11:72:57:9f:1b:da:37:28:46:fa:4d:a6:82:a3:4b: d3:17:30:31:b3:7b:7b:87:0b:fd:b8:f1:90:1c:72: 2b:90:86:51:75:c4:95:07:51:b0:b7:78:47:21:97: ef:fb:b8:e0:21:fd:0a:3f:e7:a2:96:f3:3c:42:b8: 2f:dc:8a:6e:98:d9:00:33:5a:f2:7c:2c:02:11:18: f1:1f:75:47:a0:05:39:1c:47:5a:d6:73:69:e3:b8: 50:00:4a:05:e6:c4:de:a3:d8:c6:73:90:da:8c:2c: af:7c:10:9f:99:98:69:e4:d5:48:cc:81:e8:35:5a: f9:01:c1:78:b3:e0:21:85:24:f2:85:74:55:b2:2a: 5c:a6:81:e3:ba:d0:47:de:50:55:39:c4:23:6e:87: 93:c4:3a:f7:ae:44:88:1e:fc:6e:ff:2a:da:38:5a: 97:9c:2e:0b:92:42:bf:87:0b:83:65:d3:da:c2:bc: 77:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:96:2A:65:06:D6:2D:38:B4:54:52:21:47:FD:CF:45:4B:96:4E:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2b535b7-fbed-4c14-8ac0-7c5f32020c09/2e09892f-2ac6-3953-a44d-f0dbf181b866.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2b535b7-fbed-4c14-8ac0-7c5f32020c09/a2b535b7-fbed-4c14-8ac0-7c5f32020c09.crl X509v3 Authority Key Identifier: keyid:4C:9A:3C:37:5A:3C:37:6C:56:67:CF:06:66:93:00:59:D0:DE:F7:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2b535b7-fbed-4c14-8ac0-7c5f32020c09.cer sbgp-ipAddrBlock: critical IPv4: 23.147.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d5:25:98:58:50:36:fb:fd:df:18:ee:7d:3e:65:96:03:0c:65: 8b:7c:63:26:db:f0:cc:eb:bb:2e:3b:3e:4b:ca:ba:51:57:72: a0:e8:83:4f:9b:28:41:7f:89:02:c6:20:fd:69:70:46:65:7b: e9:00:e5:1d:1e:f8:a0:9f:5d:a8:7c:51:cd:1e:35:e3:5e:e3: 56:c3:94:2b:06:94:96:f7:db:69:a5:9b:f9:ad:37:3c:ae:16: be:95:cf:b6:07:95:13:d7:bd:91:15:fe:29:04:44:e5:40:1f: 3a:a9:9d:eb:29:71:fb:39:d6:66:ab:70:86:47:86:66:24:c3: f4:08:54:53:74:99:99:a2:da:42:cb:5c:cd:d2:15:2f:d2:e9: c0:13:ee:e9:85:9b:15:7c:a9:56:ee:13:7c:2c:1b:a8:5f:b2: 80:7f:08:49:d1:66:f7:b1:7c:1f:38:7c:b1:52:f0:d0:78:9b: 3c:cc:6d:d2:f2:0d:10:a4:82:4f:5a:2c:76:7a:a6:89:b9:cf: ae:a7:f5:5c:16:e8:4d:4b:23:09:61:71:35:2d:62:47:70:50: 94:a0:42:3a:57:98:27:53:04:66:12:04:98:d8:e0:65:ad:0b: a3:ab:60:4b:45:15:68:eb:5e:f9:22:37:2a:af:26:78:4f:43: b6:b6:02:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5rCjI+D95heBD8q+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTJiNTM1YjctZmJlZC00YzE0LThhYzAtN2M1ZjMyMDIw YzA5MB4XDTI2MDcwNzA5MDAxMloXDTI2MTAwNTA5MDAxMlowLzEtMCsGA1UEAxMk NjhjODM1NTctMmY4Mi00OTk2LTg2ZDEtM2IyY2Q1OGUwYzQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztEl8uLoEh7E9bPCSCUVK3qtAnSEPhmXeCkh k8e0to6z0JLe9MoR+uxN3rONyI87quSLa6oD7M3eT/6yxqjUemzm69E5/alz5ZUR clefG9o3KEb6TaaCo0vTFzAxs3t7hwv9uPGQHHIrkIZRdcSVB1Gwt3hHIZfv+7jg If0KP+eilvM8Qrgv3IpumNkAM1ryfCwCERjxH3VHoAU5HEda1nNp47hQAEoF5sTe o9jGc5DajCyvfBCfmZhp5NVIzIHoNVr5AcF4s+AhhSTyhXRVsipcpoHjutBH3lBV OcQjboeTxDr3rkSIHvxu/yraOFqXnC4LkkK/hwuDZdPawrx33wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPyWKmUG1i04tFRSIUf9z0VLlk4RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hMmI1 MzViNy1mYmVkLTRjMTQtOGFjMC03YzVmMzIwMjBjMDkvMmUwOTg5MmYtMmFjNi0z OTUzLWE0NGQtZjBkYmYxODFiODY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTJiNTM1YjctZmJlZC00YzE0LThh YzAtN2M1ZjMyMDIwYzA5L2EyYjUzNWI3LWZiZWQtNGMxNC04YWMwLTdjNWYzMjAy MGMwOS5jcmwwHwYDVR0jBBgwFoAUTJo8N1o8N2xWZ88GZpMAWdDe9wYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hMmI1MzViNy1mYmVkLTRjMTQtOGFjMC03YzVm MzIwMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5PsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANUlmFhQNvv93xjufT5llgMMZYt8Yybb8Mzruy47PkvKulFXcqDog0+b KEF/iQLGIP1pcEZle+kA5R0e+KCfXah8Uc0eNeNe41bDlCsGlJb322mlm/mtNzyu Fr6Vz7YHlRPXvZEV/ikEROVAHzqpnespcfs51marcIZHhmYkw/QIVFN0mZmi2kLL XM3SFS/S6cAT7umFmxV8qVbuE3wsG6hfsoB/CEnRZvexfB84fLFS8NB4mzzMbdLy DRCkgk9aLHZ6pom5z66n9VwW6E1LIwlhcTUtYkdwUJSgQjpXmCdTBGYSBJjY4GWt C6OrYEtFFWjrXvkiNyqvJnhPQ7a2Am4= -----END CERTIFICATE-----Generated at Tue Jul 21 12:35:57 2026 by rpki-client