$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/23168d98-beae-3197-8375-14702f665631.roa File: 23168d98-beae-3197-8375-14702f665631.roa (raw, json) Hash identifier: TAP+HoAkxdPnLfedf4yTY2dSAOd2HcoSQl5CuNoxew8= Subject key identifier: 84:A9:8D:AA:C0:39:18:C7:12:29:1A:C1:86:FD:58:A9:C3:CB:01:E2 Certificate issuer: /CN=603ec9c3-6a7f-4455-baee-5999e253e735 Certificate serial: 010D0C9F4328584EC20C6C6E1F2CD225A24AD100 Authority key identifier: 8E:2C:C0:E0:03:39:DF:F9:32:13:AA:61:21:F8:AB:2D:67:F8:BA:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/23168d98-beae-3197-8375-14702f665631.roa Signing time: Fri 07 Aug 2026 13:00:11 +0000 ROA not before: Fri 07 Aug 2026 13:00:11 +0000 ROA not after: Thu 05 Nov 2026 14:00:11 +0000 asID: 3676 IP address blocks: 128.255.0.0/16 maxlen: 24 129.255.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/603ec9c3-6a7f-4455-baee-5999e253e735.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/603ec9c3-6a7f-4455-baee-5999e253e735.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c2:0c:6c:6e:1f:2c:d2:25:a2:4a:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=603ec9c3-6a7f-4455-baee-5999e253e735 Validity Not Before: Aug 7 13:00:11 2026 GMT Not After : Nov 5 14:00:11 2026 GMT Subject: CN=5a35a63b-5931-4e19-8261-7923a21df143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2b:e1:24:99:8d:c2:0c:a5:d7:e6:52:6b:a7: 3a:f1:2b:62:8d:0e:0e:ce:6a:b2:00:43:4a:d9:cb: 64:c5:19:bc:00:66:ba:df:ef:61:f3:9d:9b:ac:78: e5:9f:02:fc:36:12:6d:41:9c:22:00:f0:ca:3b:40: c6:b7:e2:4d:4f:47:08:f7:06:a4:e0:af:6b:c4:79: b7:8f:0a:0a:88:63:f4:b1:55:c1:a0:58:0d:0d:dd: 0a:18:8b:7b:7f:66:e8:08:b9:b5:ea:de:c6:f3:31: dc:f9:80:b2:21:0f:8e:2d:bd:f6:99:f4:f6:bf:86: 0f:dd:4b:95:32:ef:3b:22:e6:6b:7a:29:a6:c1:f1: ae:a9:8d:02:fb:44:00:c3:64:6c:17:f3:c5:67:48: 5b:0c:5e:2f:55:f7:5d:6d:69:c5:2c:fe:94:19:e6: e8:14:01:d1:b1:1b:f5:3a:6e:24:e4:af:c6:18:93: 1a:f2:1e:e0:4c:24:44:37:27:46:0a:f7:f6:f2:55: 8a:6e:8b:97:06:98:2d:fc:d5:0e:74:04:bc:8a:c8: 88:0f:47:e5:44:02:3c:a1:ad:59:de:41:78:25:a8: 67:f5:4a:60:44:c1:f6:71:8c:ce:9c:c4:ce:90:21: cc:ed:b0:99:23:bd:3d:f9:ef:ae:f0:f9:1d:57:f6: 53:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:A9:8D:AA:C0:39:18:C7:12:29:1A:C1:86:FD:58:A9:C3:CB:01:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/23168d98-beae-3197-8375-14702f665631.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/603ec9c3-6a7f-4455-baee-5999e253e735.crl X509v3 Authority Key Identifier: keyid:8E:2C:C0:E0:03:39:DF:F9:32:13:AA:61:21:F8:AB:2D:67:F8:BA:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735.cer sbgp-ipAddrBlock: critical IPv4: 128.255.0.0/16 129.255.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:16:a5:dd:51:a0:84:29:37:1d:83:5d:b0:59:d3:6e:7b:f6: ee:25:00:da:8e:96:46:b4:c4:63:82:a2:a1:90:ed:02:77:4c: e9:39:e3:d6:71:34:c0:0f:49:d0:50:72:f1:84:d3:00:7b:1f: 5b:40:19:63:a3:55:13:4b:f3:94:0b:6d:1d:74:fd:1e:73:21: 19:2f:90:bb:c6:33:7f:18:0d:fc:71:86:9d:03:38:12:3f:5d: 50:22:1a:06:fb:f8:27:e6:d0:94:62:2a:13:21:36:f4:14:23: 14:4a:d8:11:cc:ca:77:97:1a:2d:25:ab:77:e8:2e:13:d4:73: fe:a3:3a:49:ba:f7:35:28:6f:11:4e:84:07:5d:25:99:c1:8a: ee:bb:17:dc:c1:fc:a5:8a:42:56:17:3b:86:eb:16:d7:2a:19: d7:16:7b:c1:7b:1c:08:b2:7f:26:ee:4f:18:85:89:67:80:dc: 3e:ed:e7:02:0d:a8:b3:ad:33:3e:39:95:94:a4:c2:0f:ab:27: c3:47:b0:05:56:13:a8:6f:d5:04:fb:77:92:4b:78:67:82:ed: 60:a2:56:77:72:98:21:3a:47:81:13:35:2c:30:d7:68:24:a8: 25:4b:ca:c8:fc:eb:fb:bf:09:19:6c:fd:84:8e:5c:24:49:3d: bb:d3:e7:42 -----BEGIN CERTIFICATE----- MIIGRzCCBS+gAwIBAgIUAQ0Mn0MoWE7CDGxuHyzSJaJK0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAzZWM5YzMtNmE3Zi00NDU1LWJhZWUtNTk5OWUyNTNl NzM1MB4XDTI2MDgwNzEzMDAxMVoXDTI2MTEwNTE0MDAxMVowLzEtMCsGA1UEAxMk NWEzNWE2M2ItNTkzMS00ZTE5LTgyNjEtNzkyM2EyMWRmMTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSvhJJmNwgyl1+ZSa6c68StijQ4OzmqyAENK 2ctkxRm8AGa63+9h852brHjlnwL8NhJtQZwiAPDKO0DGt+JNT0cI9wak4K9rxHm3 jwoKiGP0sVXBoFgNDd0KGIt7f2boCLm16t7G8zHc+YCyIQ+OLb32mfT2v4YP3UuV Mu87IuZreimmwfGuqY0C+0QAw2RsF/PFZ0hbDF4vVfddbWnFLP6UGeboFAHRsRv1 Om4k5K/GGJMa8h7gTCRENydGCvf28lWKbouXBpgt/NUOdAS8isiID0flRAI8oa1Z 3kF4Jahn9UpgRMH2cYzOnMTOkCHM7bCZI709+e+u8PkdV/ZTywIDAQABo4IDWTCC A1UwHQYDVR0OBBYEFISpjarAORjHEikawYb9WKnDywHiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82MDNl YzljMy02YTdmLTQ0NTUtYmFlZS01OTk5ZTI1M2U3MzUvMjMxNjhkOTgtYmVhZS0z MTk3LTgzNzUtMTQ3MDJmNjY1NjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjAzZWM5YzMtNmE3Zi00NDU1LWJh ZWUtNTk5OWUyNTNlNzM1LzYwM2VjOWMzLTZhN2YtNDQ1NS1iYWVlLTU5OTllMjUz ZTczNS5jcmwwHwYDVR0jBBgwFoAUjizA4AM53/kyE6phIfirLWf4uvEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82MDNlYzljMy02YTdmLTQ0NTUtYmFlZS01OTk5 ZTI1M2U3MzUuY2VyMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAATAKAwMAgP8DAwCB /zBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQANFqXdUaCEKTcdg12wWdNue/buJQDajpZGtMRjgqKhkO0Cd0zp OePWcTTAD0nQUHLxhNMAex9bQBljo1UTS/OUC20ddP0ecyEZL5C7xjN/GA38cYad AzgSP11QIhoG+/gn5tCUYioTITb0FCMUStgRzMp3lxotJat36C4T1HP+ozpJuvc1 KG8RToQHXSWZwYruuxfcwfylikJWFzuG6xbXKhnXFnvBexwIsn8m7k8YhYlngNw+ 7ecCDaizrTM+OZWUpMIPqyfDR7AFVhOob9UE+3eSS3hngu1golZ3cpghOkeBEzUs MNdoJKglS8rI/Ov7vwkZbP2EjlwkST270+dC -----END CERTIFICATE-----Generated at Fri Aug 21 21:22:07 2026 by rpki-client