$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8213d664-792b-4c63-8698-33aa542f3ec3/b9a42202-488c-3a13-b661-9f2c7679d9e0.roa File: b9a42202-488c-3a13-b661-9f2c7679d9e0.roa (raw, json) Hash identifier: 6duKIRxKJyBMYOi2C6khuyJ1QNOMX93RDb3qyS61ylw= Subject key identifier: 86:DB:DE:40:E6:58:D9:E2:CD:8A:92:E7:32:4C:8F:74:A0:91:6B:64 Certificate issuer: /CN=8213d664-792b-4c63-8698-33aa542f3ec3 Certificate serial: 010D0C9F4328584EB2B1A1F536C67ADD57FEFB80 Authority key identifier: 26:6A:15:1F:40:1B:F6:1C:03:9B:64:C1:0D:1A:86:AE:AD:FC:A8:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8213d664-792b-4c63-8698-33aa542f3ec3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8213d664-792b-4c63-8698-33aa542f3ec3/b9a42202-488c-3a13-b661-9f2c7679d9e0.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 36283 IP address blocks: 23.154.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8213d664-792b-4c63-8698-33aa542f3ec3/8213d664-792b-4c63-8698-33aa542f3ec3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8213d664-792b-4c63-8698-33aa542f3ec3/8213d664-792b-4c63-8698-33aa542f3ec3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8213d664-792b-4c63-8698-33aa542f3ec3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 25 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:a1:f5:36:c6:7a:dd:57:fe:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8213d664-792b-4c63-8698-33aa542f3ec3 Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=32b2c8b3-11f3-4ed4-b778-4e2a29e3c2de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:18:6f:f5:0f:8f:d5:cf:84:66:8f:75:b7:5f: 8c:25:12:29:b1:d7:d9:b9:2b:e6:f0:5d:8c:3f:1c: 6e:b9:13:99:da:fb:c8:d7:e9:e5:43:f0:fc:c0:d2: 8e:5c:ed:1b:72:49:7a:cf:78:f9:d3:fd:24:aa:67: 4d:15:b3:ba:3c:0d:54:c3:bc:7d:eb:f7:74:77:20: 0e:4a:35:3f:a3:2a:13:83:6c:a8:4f:fe:82:b0:38: 8d:27:6b:4b:fa:cb:e3:3e:ab:8e:49:b1:ee:4a:00: fa:41:ff:aa:be:20:c6:d5:9f:59:3b:b9:5c:90:95: e4:42:df:a7:77:a0:97:2d:18:80:03:27:a7:56:46: 84:15:10:3c:67:2b:7e:0a:3d:e8:09:30:63:8c:3c: 88:d4:17:ac:1f:c2:54:e6:83:42:96:e6:bd:aa:8c: dc:ce:75:49:df:dd:37:75:33:53:68:73:04:7b:11: 7b:0c:bf:0f:95:32:e4:bc:5c:93:20:00:f4:1a:6f: d0:5c:eb:3c:1f:ba:68:9f:a8:36:9a:57:6d:27:06: 8b:8b:88:1c:95:59:ec:2b:b7:5a:71:42:fa:60:e6: 20:bd:b5:10:74:23:6b:56:28:4d:23:80:ab:40:dc: 86:68:ea:63:1e:bc:7e:12:9e:d7:ba:3b:a4:98:51: 0a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:DB:DE:40:E6:58:D9:E2:CD:8A:92:E7:32:4C:8F:74:A0:91:6B:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8213d664-792b-4c63-8698-33aa542f3ec3/b9a42202-488c-3a13-b661-9f2c7679d9e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8213d664-792b-4c63-8698-33aa542f3ec3/8213d664-792b-4c63-8698-33aa542f3ec3.crl X509v3 Authority Key Identifier: keyid:26:6A:15:1F:40:1B:F6:1C:03:9B:64:C1:0D:1A:86:AE:AD:FC:A8:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8213d664-792b-4c63-8698-33aa542f3ec3.cer sbgp-ipAddrBlock: critical IPv4: 23.154.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:84:34:bd:f9:03:16:22:7c:af:53:ec:7a:13:73:a0:9c:d1: f7:60:60:a2:1a:f8:c3:76:d4:43:82:d5:a8:ab:54:d0:8b:ca: 4c:3e:80:b3:71:de:97:58:d9:85:d3:b4:92:43:5b:a8:06:6d: 0d:51:a1:0f:29:c8:e6:fa:3d:33:22:31:7c:14:53:1e:4b:52: e5:d3:50:44:4b:d8:27:37:e1:de:aa:c9:86:f4:5e:2e:8c:14: 2f:ac:dd:6b:6f:f7:e1:a0:0b:cb:74:6c:ad:c5:d5:62:64:6c: e3:2a:bd:2d:c2:72:d1:07:2e:1b:07:70:e3:18:93:91:fa:65: 67:13:f8:9e:04:a7:18:ca:29:dd:3b:64:0a:0c:b5:b0:fa:54: ff:c8:95:ad:89:86:c8:ec:a5:7a:7b:ac:0b:bd:0a:5f:65:bd: 45:8c:29:e1:da:44:18:b9:7a:48:82:4d:ac:98:77:0c:da:f7: 8a:c5:1a:cd:cb:b2:7f:ca:bb:7d:24:b0:6b:21:21:2a:f8:33: 77:9f:1e:46:a0:43:cf:70:ae:53:58:d3:93:c7:1a:e3:64:b0: 3f:20:a2:bb:bf:f5:bd:e2:b4:ad:8b:de:2c:fc:d5:2b:44:1c: 5a:0f:30:9f:11:63:84:30:b1:26:fb:74:34:50:9c:62:1e:03: 35:b5:59:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ysaH1NsZ63Vf++4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODIxM2Q2NjQtNzkyYi00YzYzLTg2OTgtMzNhYTU0MmYz ZWMzMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk MzJiMmM4YjMtMTFmMy00ZWQ0LWI3NzgtNGUyYTI5ZTNjMmRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghhv9Q+P1c+EZo91t1+MJRIpsdfZuSvm8F2M PxxuuROZ2vvI1+nlQ/D8wNKOXO0bckl6z3j50/0kqmdNFbO6PA1Uw7x96/d0dyAO SjU/oyoTg2yoT/6CsDiNJ2tL+svjPquOSbHuSgD6Qf+qviDG1Z9ZO7lckJXkQt+n d6CXLRiAAyenVkaEFRA8Zyt+Cj3oCTBjjDyI1BesH8JU5oNClua9qozcznVJ3903 dTNTaHMEexF7DL8PlTLkvFyTIAD0Gm/QXOs8H7pon6g2mldtJwaLi4gclVnsK7da cUL6YOYgvbUQdCNrVihNI4CrQNyGaOpjHrx+Ep7XujukmFEKkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIbb3kDmWNnizYqS5zJMj3SgkWtkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84MjEz ZDY2NC03OTJiLTRjNjMtODY5OC0zM2FhNTQyZjNlYzMvYjlhNDIyMDItNDg4Yy0z YTEzLWI2NjEtOWYyYzc2NzlkOWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvODIxM2Q2NjQtNzkyYi00YzYzLTg2 OTgtMzNhYTU0MmYzZWMzLzgyMTNkNjY0LTc5MmItNGM2My04Njk4LTMzYWE1NDJm M2VjMy5jcmwwHwYDVR0jBBgwFoAUJmoVH0Ab9hwDm2TBDRqGrq38qIswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84MjEzZDY2NC03OTJiLTRjNjMtODY5OC0zM2Fh NTQyZjNlYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5qsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACOENL35AxYifK9T7HoTc6Cc0fdgYKIa+MN21EOC1airVNCLykw+gLNx 3pdY2YXTtJJDW6gGbQ1RoQ8pyOb6PTMiMXwUUx5LUuXTUERL2Cc34d6qyYb0Xi6M FC+s3Wtv9+GgC8t0bK3F1WJkbOMqvS3CctEHLhsHcOMYk5H6ZWcT+J4EpxjKKd07 ZAoMtbD6VP/Ila2JhsjspXp7rAu9Cl9lvUWMKeHaRBi5ekiCTayYdwza94rFGs3L sn/Ku30ksGshISr4M3efHkagQ89wrlNY05PHGuNksD8goru/9b3itK2L3iz81StE HFoPMJ8RY4QwsSb7dDRQnGIeAzW1Wes= -----END CERTIFICATE-----Generated at Mon Aug 24 10:13:54 2026 by rpki-client