$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/befaf999-ed8e-39d7-83c2-dc2315bcb26d.roa File: befaf999-ed8e-39d7-83c2-dc2315bcb26d.roa (raw, json) Hash identifier: lNLwczdMDP9W7dVG8bAszQ4FP+Kq3zT+jaEASp7LEbw= Subject key identifier: FC:48:59:4B:21:EF:7C:2B:02:F1:39:24:75:E4:65:2B:D4:45:A5:21 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584E858F8EA056A032AECE8E43C0 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/befaf999-ed8e-39d7-83c2-dc2315bcb26d.roa Signing time: Thu 16 Jul 2026 21:00:12 +0000 ROA not before: Thu 16 Jul 2026 21:00:12 +0000 ROA not after: Wed 14 Oct 2026 21:00:12 +0000 asID: 11928 IP address blocks: 206.34.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:85:8f:8e:a0:56:a0:32:ae:ce:8e:43:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Jul 16 21:00:12 2026 GMT Not After : Oct 14 21:00:12 2026 GMT Subject: CN=fcf1684e-5838-43d9-9eef-a7e7d9d36b45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:53:16:f8:a0:f3:62:bc:b4:c3:92:da:e3:ba: 00:e8:2f:3f:4b:3a:20:d5:1d:92:7b:31:ec:a6:2b: c1:20:34:ea:7f:16:da:fe:72:d9:51:6a:c0:1b:06: 4f:34:fa:bc:1c:5f:72:34:99:c6:23:f7:b8:ae:40: 62:f7:8a:12:67:3d:8a:d1:82:33:34:ae:a4:5e:b6: 97:c2:22:4d:e4:ed:09:d1:c3:14:6f:5d:52:ff:2e: 89:a2:5b:b3:af:32:c5:c6:31:f8:52:1d:05:b1:57: 14:c5:b5:38:34:f3:23:a7:75:47:72:a6:da:50:e2: c3:7e:e8:db:51:47:f1:83:c6:dd:13:20:a4:ff:83: 22:be:e4:16:9f:47:98:2f:51:bc:e9:ec:88:07:ce: 57:41:13:28:7d:e2:e0:a6:05:fc:3e:54:d3:7b:d3: e0:ba:28:fb:ed:4d:e1:f2:41:93:2b:7c:a5:ec:ae: 6f:25:5c:45:41:8b:6f:cc:f4:96:ab:62:03:63:34: 17:b9:f0:26:e9:c6:f4:2d:fd:60:57:38:ec:01:40: 25:8d:d2:54:e1:cf:6f:a2:5b:15:4a:f9:5f:f5:f6: e7:57:52:cf:ee:e8:bc:71:e3:3d:90:95:9c:d3:49: 89:43:b2:48:d4:12:51:45:b4:7a:ce:2f:ab:4a:25: 35:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:48:59:4B:21:EF:7C:2B:02:F1:39:24:75:E4:65:2B:D4:45:A5:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/befaf999-ed8e-39d7-83c2-dc2315bcb26d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 206.34.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:cf:06:fc:d7:eb:36:95:f9:d1:4a:3d:8c:cf:06:70:61:ef: 54:53:85:26:69:34:24:bf:b2:53:2c:8c:09:10:90:e8:6d:31: d5:a4:44:3c:aa:c7:88:26:cc:59:a8:57:1b:5f:99:dd:46:ca: 19:54:c1:e5:39:97:a9:1d:7c:ab:5d:3a:2c:cf:0f:9d:11:41: 1f:59:e4:6b:6c:4f:0d:52:b3:01:78:0d:1e:1d:9e:43:09:88: 9a:a8:ac:3c:9d:e4:eb:9c:78:c8:ce:e4:15:9d:df:0c:31:d3: 5f:e8:a1:85:a7:e4:37:ee:ec:e4:9b:46:c8:40:14:6a:b2:89: 5c:df:24:9a:da:a2:81:4e:3c:f3:2e:35:7f:f7:95:36:93:47: 0c:70:5f:e3:18:8a:58:36:bc:ee:b7:5e:30:76:00:03:ca:c0: 6f:75:2f:d6:b8:ed:71:75:29:46:80:08:02:e9:bb:76:0e:ed: d6:12:5f:96:6a:e1:b4:65:90:a9:c5:54:2d:bf:c3:f0:a5:c8: df:21:15:37:76:4b:38:e8:e7:c7:f5:71:85:29:45:d1:01:c9: 11:00:a1:d2:df:cf:38:68:62:a5:98:10:1c:cf:4a:de:8c:61: 23:e5:cf:dd:a9:48:06:e1:67:7d:b0:ef:a4:56:08:42:51:26: 92:dd:98:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6Fj46gVqAyrs6OQ8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDcxNjIxMDAxMloXDTI2MTAxNDIxMDAxMlowLzEtMCsGA1UEAxMk ZmNmMTY4NGUtNTgzOC00M2Q5LTllZWYtYTdlN2Q5ZDM2YjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFMW+KDzYry0w5La47oA6C8/Szog1R2SezHs pivBIDTqfxba/nLZUWrAGwZPNPq8HF9yNJnGI/e4rkBi94oSZz2K0YIzNK6kXraX wiJN5O0J0cMUb11S/y6JoluzrzLFxjH4Uh0FsVcUxbU4NPMjp3VHcqbaUOLDfujb UUfxg8bdEyCk/4MivuQWn0eYL1G86eyIB85XQRMofeLgpgX8PlTTe9Pguij77U3h 8kGTK3yl7K5vJVxFQYtvzPSWq2IDYzQXufAm6cb0Lf1gVzjsAUAljdJU4c9volsV Svlf9fbnV1LP7ui8ceM9kJWc00mJQ7JI1BJRRbR6zi+rSiU1AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPxIWUsh73wrAvE5JHXkZSvURaUhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvYmVmYWY5OTktZWQ4ZS0z OWQ3LTgzYzItZGMyMzE1YmNiMjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAziJ4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACrPBvzX6zaV+dFKPYzPBnBh71RThSZpNCS/slMsjAkQkOhtMdWkRDyq x4gmzFmoVxtfmd1GyhlUweU5l6kdfKtdOizPD50RQR9Z5GtsTw1SswF4DR4dnkMJ iJqorDyd5OuceMjO5BWd3wwx01/ooYWn5Dfu7OSbRshAFGqyiVzfJJraooFOPPMu NX/3lTaTRwxwX+MYilg2vO63XjB2AAPKwG91L9a47XF1KUaACALpu3YO7dYSX5Zq 4bRlkKnFVC2/w/ClyN8hFTd2Szjo58f1cYUpRdEByREAodLfzzhoYqWYEBzPSt6M YSPlz92pSAbhZ32w76RWCEJRJpLdmAw= -----END CERTIFICATE-----Generated at Wed Jul 22 03:35:27 2026 by rpki-client