$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e562ad4-986c-42b2-bce3-9cc48f5f64de/9afa84bd-048d-391e-a763-87af06db7f3c.roa File: 9afa84bd-048d-391e-a763-87af06db7f3c.roa (raw, json) Hash identifier: wCXd6HGEGxUYCNz7RxwX5Wb6kgW2rjuA47Xu+TVrEyU= Subject key identifier: BB:70:18:04:11:83:E5:00:0B:07:8B:AC:70:F7:0C:35:56:E6:63:41 Certificate issuer: /CN=8e562ad4-986c-42b2-bce3-9cc48f5f64de Certificate serial: 010D0C9F4328584E89BF94F068B89D9BE505C620 Authority key identifier: 98:7C:66:96:69:F8:0F:38:D6:A3:B4:70:DF:0F:0D:51:08:B1:87:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e562ad4-986c-42b2-bce3-9cc48f5f64de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e562ad4-986c-42b2-bce3-9cc48f5f64de/9afa84bd-048d-391e-a763-87af06db7f3c.roa Signing time: Sat 18 Jul 2026 09:00:12 +0000 ROA not before: Sat 18 Jul 2026 09:00:12 +0000 ROA not after: Fri 16 Oct 2026 09:00:12 +0000 asID: 153771 IP address blocks: 23.130.100.0/24 maxlen: 24 2602:f778::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e562ad4-986c-42b2-bce3-9cc48f5f64de/8e562ad4-986c-42b2-bce3-9cc48f5f64de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e562ad4-986c-42b2-bce3-9cc48f5f64de/8e562ad4-986c-42b2-bce3-9cc48f5f64de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e562ad4-986c-42b2-bce3-9cc48f5f64de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:89:bf:94:f0:68:b8:9d:9b:e5:05:c6:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e562ad4-986c-42b2-bce3-9cc48f5f64de Validity Not Before: Jul 18 09:00:12 2026 GMT Not After : Oct 16 09:00:12 2026 GMT Subject: CN=ddc09c0f-485b-4282-a218-faace785d45a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:5d:71:f0:7a:ee:28:a8:9a:09:a9:b1:34:32: 22:d0:43:24:68:01:34:4e:95:ec:2c:ea:b1:4c:cf: 57:8f:aa:52:19:41:4a:7f:d1:4c:a2:84:e2:1f:f5: 17:ce:8b:dc:19:0f:8f:4b:02:57:5b:3e:a2:5d:e5: 7d:b7:a9:69:17:99:aa:48:3c:a3:16:73:23:1f:0c: 1e:58:fa:1a:3d:fb:fe:99:b6:d5:ad:18:6a:82:a4: b0:b4:ed:7b:d7:f9:80:0d:a3:c6:b3:b1:d6:73:c1: da:85:b4:cf:ec:90:e4:0a:90:28:fa:1e:bc:80:39: ef:b2:83:d5:d7:ae:89:4a:bc:55:84:72:9d:4e:9b: de:ed:3d:8d:53:11:7f:d8:e1:ff:e1:bf:e8:26:a4: 29:75:40:f4:82:46:86:db:4a:a1:44:ee:6f:fc:4f: 0e:d5:db:06:fe:a3:98:45:7d:c2:86:33:79:6f:2b: db:de:93:2a:79:cd:15:ef:e5:3d:a7:8f:52:f8:91: 56:ba:55:1a:04:d6:05:2f:6c:0e:bd:f9:db:8b:2a: f4:3a:04:e0:d8:f5:79:30:47:32:7b:fb:f3:87:34: f2:86:ab:f3:e2:95:50:35:c1:a6:d0:5b:cb:01:9b: 2c:11:ac:ac:79:df:11:6f:15:cc:13:83:f4:60:96: ec:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:70:18:04:11:83:E5:00:0B:07:8B:AC:70:F7:0C:35:56:E6:63:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e562ad4-986c-42b2-bce3-9cc48f5f64de/9afa84bd-048d-391e-a763-87af06db7f3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e562ad4-986c-42b2-bce3-9cc48f5f64de/8e562ad4-986c-42b2-bce3-9cc48f5f64de.crl X509v3 Authority Key Identifier: keyid:98:7C:66:96:69:F8:0F:38:D6:A3:B4:70:DF:0F:0D:51:08:B1:87:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e562ad4-986c-42b2-bce3-9cc48f5f64de.cer sbgp-ipAddrBlock: critical IPv4: 23.130.100.0/24 IPv6: 2602:f778::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:6d:1b:9f:e0:9c:c8:54:a4:d6:09:3a:a5:df:29:e7:a5:f5: 11:50:de:dc:ad:57:2e:c4:2e:fa:0a:bf:89:58:f3:d4:d4:75: 4a:92:ed:a4:14:5b:24:1f:95:c2:ba:05:c8:ce:3f:84:8a:a4: bf:f6:e9:db:57:be:18:8c:ba:2d:4a:db:61:d8:f0:ee:75:c9: 10:c6:23:87:34:e5:0e:07:aa:4f:91:47:06:c5:71:34:c8:b5: 54:10:9e:3a:f0:e6:ce:5a:a0:51:2e:1e:27:8a:02:5e:38:6c: 3e:5e:70:a8:ec:23:55:52:11:c9:6f:2e:2c:22:f5:2b:df:3e: 20:66:8f:43:34:11:97:f4:9b:eb:dc:fc:73:62:f9:36:05:f7: 64:f1:d0:05:4c:e4:63:25:73:84:00:63:9b:83:7f:01:27:04: 8b:a6:a8:a9:bd:08:a6:d6:43:ca:2b:83:28:25:4c:17:18:84: e9:37:e5:20:b0:5f:bb:e4:8b:74:b1:15:1b:b7:77:c9:be:ed: 8b:24:52:c3:06:4b:0d:b4:16:a7:0c:38:6e:7a:53:33:0b:28: 2c:e7:82:c0:09:c9:d4:0e:15:7a:e0:84:89:1e:9b:0f:89:ce: f1:aa:ab:cb:b7:2f:b7:74:9c:e7:1a:d0:4e:48:a5:30:75:d8: 01:7e:a9:b4 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE6Jv5TwaLidm+UFxiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU1NjJhZDQtOTg2Yy00MmIyLWJjZTMtOWNjNDhmNWY2 NGRlMB4XDTI2MDcxODA5MDAxMloXDTI2MTAxNjA5MDAxMlowLzEtMCsGA1UEAxMk ZGRjMDljMGYtNDg1Yi00MjgyLWEyMTgtZmFhY2U3ODVkNDVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkF1x8HruKKiaCamxNDIi0EMkaAE0TpXsLOqx TM9Xj6pSGUFKf9FMooTiH/UXzovcGQ+PSwJXWz6iXeV9t6lpF5mqSDyjFnMjHwwe WPoaPfv+mbbVrRhqgqSwtO171/mADaPGs7HWc8HahbTP7JDkCpAo+h68gDnvsoPV 166JSrxVhHKdTpve7T2NUxF/2OH/4b/oJqQpdUD0gkaG20qhRO5v/E8O1dsG/qOY RX3ChjN5byvb3pMqec0V7+U9p49S+JFWulUaBNYFL2wOvfnbiyr0OgTg2PV5MEcy e/vzhzTyhqvz4pVQNcGm0FvLAZssEaysed8RbxXME4P0YJbsFQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFLtwGAQRg+UACweLrHD3DDVW5mNBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84ZTU2 MmFkNC05ODZjLTQyYjItYmNlMy05Y2M0OGY1ZjY0ZGUvOWFmYTg0YmQtMDQ4ZC0z OTFlLWE3NjMtODdhZjA2ZGI3ZjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOGU1NjJhZDQtOTg2Yy00MmIyLWJj ZTMtOWNjNDhmNWY2NGRlLzhlNTYyYWQ0LTk4NmMtNDJiMi1iY2UzLTljYzQ4ZjVm NjRkZS5jcmwwHwYDVR0jBBgwFoAUmHxmlmn4DzjWo7Rw3w8NUQixhy0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84ZTU2MmFkNC05ODZjLTQyYjItYmNlMy05Y2M0 OGY1ZjY0ZGUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4JkMA4E AgACMAgDBgAmAvd4ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCCbRuf4JzIVKTWCTql3ynnpfURUN7crVcu xC76Cr+JWPPU1HVKku2kFFskH5XCugXIzj+EiqS/9unbV74YjLotStth2PDudckQ xiOHNOUOB6pPkUcGxXE0yLVUEJ468ObOWqBRLh4nigJeOGw+XnCo7CNVUhHJby4s IvUr3z4gZo9DNBGX9Jvr3PxzYvk2Bfdk8dAFTORjJXOEAGObg38BJwSLpqipvQim 1kPKK4MoJUwXGITpN+UgsF+75It0sRUbt3fJvu2LJFLDBksNtBanDDhuelMzCygs 54LACcnUDhV64ISJHpsPic7xqqvLty+3dJznGtBOSKUwddgBfqm0 -----END CERTIFICATE-----Generated at Tue Jul 21 13:00:00 2026 by rpki-client