$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cd2e63d2-d07f-4959-8fde-569fd1767d7b/3086b157-c965-3cbf-83eb-0124666d9e72.roa File: 3086b157-c965-3cbf-83eb-0124666d9e72.roa (raw, json) Hash identifier: qXcRVNXLkwfh4xzFoyM8Xh3MZ8F550qVx9IPopJJRb0= Subject key identifier: A2:53:1D:01:D1:D8:17:7B:2C:64:41:96:73:A4:EA:F7:28:34:1D:82 Certificate issuer: /CN=cd2e63d2-d07f-4959-8fde-569fd1767d7b Certificate serial: 010D0C9F4328584E69A4B1558B8AF95E73957800 Authority key identifier: 44:1C:55:7C:61:E2:E7:B1:7E:68:1D:03:FC:47:39:9A:F5:A7:12:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cd2e63d2-d07f-4959-8fde-569fd1767d7b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cd2e63d2-d07f-4959-8fde-569fd1767d7b/3086b157-c965-3cbf-83eb-0124666d9e72.roa Signing time: Mon 06 Jul 2026 21:00:13 +0000 ROA not before: Mon 06 Jul 2026 21:00:13 +0000 ROA not after: Sun 04 Oct 2026 21:00:13 +0000 asID: 203090 IP address blocks: 23.142.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cd2e63d2-d07f-4959-8fde-569fd1767d7b/cd2e63d2-d07f-4959-8fde-569fd1767d7b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cd2e63d2-d07f-4959-8fde-569fd1767d7b/cd2e63d2-d07f-4959-8fde-569fd1767d7b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cd2e63d2-d07f-4959-8fde-569fd1767d7b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:69:a4:b1:55:8b:8a:f9:5e:73:95:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd2e63d2-d07f-4959-8fde-569fd1767d7b Validity Not Before: Jul 6 21:00:13 2026 GMT Not After : Oct 4 21:00:13 2026 GMT Subject: CN=cd7e9c86-457d-4a62-872d-232a3d36d495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:47:d7:30:e2:b7:c1:1b:4c:1c:81:b9:b5:36: 55:ca:87:df:ab:3d:68:e0:12:7e:59:f8:8f:42:58: 81:db:ff:1a:ba:5e:23:14:fe:38:0c:d0:f2:fe:dc: 51:f6:a3:98:54:aa:d2:69:ae:5f:80:77:66:4f:59: c9:14:95:b6:67:94:74:ac:74:69:2a:e4:1f:09:c0: 3d:bd:6d:7a:66:db:15:1d:18:ed:e4:ba:55:3c:ba: 81:b7:93:77:ee:09:9b:5f:12:89:74:86:48:16:61: 7b:f2:0e:db:35:34:65:a3:78:4f:c7:eb:22:0c:36: 2a:31:36:94:52:31:70:50:f7:06:09:10:9a:de:2f: 49:e2:d7:53:61:4e:18:b3:41:d3:84:88:be:9b:90: ce:f2:9d:68:88:48:0d:12:7d:8a:1f:18:98:e9:0d: 0c:67:40:fc:70:a1:ee:85:55:30:1f:5a:c6:4a:54: 90:bc:bc:be:70:b2:17:a8:ec:bc:c4:7a:de:00:5d: 8a:28:e7:fb:06:a2:0f:52:b5:e7:49:01:6a:8f:33: e9:33:4f:17:6d:f3:ed:c7:7f:39:36:e8:e0:32:bc: 0c:95:13:e3:9a:68:99:cb:ae:46:7b:5a:cd:aa:60: d5:8e:5f:ef:cf:1b:33:20:12:35:a9:6e:db:85:21: 79:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:53:1D:01:D1:D8:17:7B:2C:64:41:96:73:A4:EA:F7:28:34:1D:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cd2e63d2-d07f-4959-8fde-569fd1767d7b/3086b157-c965-3cbf-83eb-0124666d9e72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cd2e63d2-d07f-4959-8fde-569fd1767d7b/cd2e63d2-d07f-4959-8fde-569fd1767d7b.crl X509v3 Authority Key Identifier: keyid:44:1C:55:7C:61:E2:E7:B1:7E:68:1D:03:FC:47:39:9A:F5:A7:12:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cd2e63d2-d07f-4959-8fde-569fd1767d7b.cer sbgp-ipAddrBlock: critical IPv4: 23.142.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:ca:fd:2c:3a:3a:68:60:c4:ea:93:c9:78:bd:f1:a2:01:7f: 53:10:96:55:bf:8b:8c:e2:50:80:d4:2b:b7:32:ee:ba:2b:eb: db:e6:4c:30:43:82:ee:5d:1a:4a:a3:8d:f0:9e:2f:d5:bb:22: b8:15:d4:55:4c:cd:46:3e:33:42:f4:18:42:76:aa:4b:79:df: 44:6e:2d:d5:88:63:78:89:d6:41:32:7c:b9:af:71:f1:60:f8: e5:8d:dc:9f:f8:a0:7e:93:6e:3d:db:53:3f:d1:31:d6:ae:31: a3:17:d1:b9:8b:92:b4:30:60:65:7e:f4:9a:05:85:80:a6:2e: e2:22:0b:da:8a:1d:23:ac:e5:00:ba:53:ce:df:de:21:15:41: d5:1c:4e:3a:25:0b:25:4c:4e:03:5d:d3:fe:31:8d:df:56:28: d8:f6:2f:73:e9:dc:c6:3d:76:8d:05:ac:6f:61:65:11:e4:85: 98:4b:78:f5:73:03:7d:de:e3:74:e0:8d:f0:5c:d6:52:71:be: 6c:e6:a8:5e:ef:d3:3f:61:41:8d:c3:dd:9d:d9:d9:8c:70:64: ea:53:d3:c9:81:6c:74:62:48:9c:1a:e5:5e:a1:82:2f:5c:b4: 46:be:a7:72:d0:fa:18:85:8f:2d:7b:af:8f:d0:a2:57:ba:77: 02:c2:b7:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5ppLFVi4r5XnOVeAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2QyZTYzZDItZDA3Zi00OTU5LThmZGUtNTY5ZmQxNzY3 ZDdiMB4XDTI2MDcwNjIxMDAxM1oXDTI2MTAwNDIxMDAxM1owLzEtMCsGA1UEAxMk Y2Q3ZTljODYtNDU3ZC00YTYyLTg3MmQtMjMyYTNkMzZkNDk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUfXMOK3wRtMHIG5tTZVyoffqz1o4BJ+WfiP QliB2/8aul4jFP44DNDy/txR9qOYVKrSaa5fgHdmT1nJFJW2Z5R0rHRpKuQfCcA9 vW16ZtsVHRjt5LpVPLqBt5N37gmbXxKJdIZIFmF78g7bNTRlo3hPx+siDDYqMTaU UjFwUPcGCRCa3i9J4tdTYU4Ys0HThIi+m5DO8p1oiEgNEn2KHxiY6Q0MZ0D8cKHu hVUwH1rGSlSQvLy+cLIXqOy8xHreAF2KKOf7BqIPUrXnSQFqjzPpM08XbfPtx385 NujgMrwMlRPjmmiZy65Ge1rNqmDVjl/vzxszIBI1qW7bhSF5KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKJTHQHR2Bd7LGRBlnOk6vcoNB2CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jZDJl NjNkMi1kMDdmLTQ5NTktOGZkZS01NjlmZDE3NjdkN2IvMzA4NmIxNTctYzk2NS0z Y2JmLTgzZWItMDEyNDY2NmQ5ZTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvY2QyZTYzZDItZDA3Zi00OTU5LThm ZGUtNTY5ZmQxNzY3ZDdiL2NkMmU2M2QyLWQwN2YtNDk1OS04ZmRlLTU2OWZkMTc2 N2Q3Yi5jcmwwHwYDVR0jBBgwFoAURBxVfGHi57F+aB0D/Ec5mvWnEh4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jZDJlNjNkMi1kMDdmLTQ5NTktOGZkZS01Njlm ZDE3NjdkN2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF47MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGrK/Sw6OmhgxOqTyXi98aIBf1MQllW/i4ziUIDUK7cy7ror69vmTDBD gu5dGkqjjfCeL9W7IrgV1FVMzUY+M0L0GEJ2qkt530RuLdWIY3iJ1kEyfLmvcfFg +OWN3J/4oH6Tbj3bUz/RMdauMaMX0bmLkrQwYGV+9JoFhYCmLuIiC9qKHSOs5QC6 U87f3iEVQdUcTjolCyVMTgNd0/4xjd9WKNj2L3Pp3MY9do0FrG9hZRHkhZhLePVz A33e43TgjfBc1lJxvmzmqF7v0z9hQY3D3Z3Z2YxwZOpT08mBbHRiSJwa5V6hgi9c tEa+p3LQ+hiFjy17r4/Qole6dwLCt1E= -----END CERTIFICATE-----Generated at Wed Jul 22 23:58:28 2026 by rpki-client