$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/aa23f28c-5ddd-3ae7-870b-1bd38021c84e.roa File: aa23f28c-5ddd-3ae7-870b-1bd38021c84e.roa (raw, json) Hash identifier: 7W9oAmXwIzatpfwjCPu0JmMwHE0PSlQ6vCxkszOk+c0= Subject key identifier: 02:89:28:AC:EE:6D:8E:1C:50:56:41:66:8D:B2:4D:96:2E:50:A6:08 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584E5FDF61A2C3B797B195D7AE80 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/aa23f28c-5ddd-3ae7-870b-1bd38021c84e.roa Signing time: Fri 03 Jul 2026 09:00:12 +0000 ROA not before: Fri 03 Jul 2026 09:00:12 +0000 ROA not after: Thu 01 Oct 2026 09:00:12 +0000 asID: 40934 IP address blocks: 140.174.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5f:df:61:a2:c3:b7:97:b1:95:d7:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Jul 3 09:00:12 2026 GMT Not After : Oct 1 09:00:12 2026 GMT Subject: CN=69fe015e-d8ca-4741-a1b9-7164a6163b8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:fe:2c:49:28:4b:c4:82:cb:73:16:75:40:27: 9f:dc:19:9a:d4:be:92:4e:24:d2:a5:38:03:93:cc: 9a:ca:2f:0c:5a:8a:71:ed:36:64:bb:73:f9:46:70: 21:2d:b9:2f:81:42:62:c6:ec:87:a3:c0:e2:0e:0a: 8d:79:5b:d6:84:51:d5:99:a1:27:6d:42:11:aa:60: 1f:1d:8c:4e:ae:98:d4:f6:3a:20:4a:61:44:31:6f: 04:b3:f5:c9:a9:25:1a:2d:0f:02:68:35:32:e2:4b: b4:56:32:45:00:c6:ec:dc:48:ef:ad:82:3a:b3:ed: 9e:a0:34:97:a2:ba:09:93:ee:bd:f6:31:16:22:e2: 1e:f7:8d:5c:49:32:db:ac:0b:37:b2:d9:6b:2e:f9: 69:0c:6e:a1:d4:42:26:3b:39:ce:42:5b:cf:1e:20: 57:fa:b7:55:86:a8:bc:75:56:4c:a3:af:95:ef:d3: 49:1f:36:e4:b2:2f:94:ce:54:80:53:04:31:0a:75: f1:ce:5b:17:73:05:cf:d7:c0:a3:28:c3:82:ba:f9: 30:ac:e8:f0:92:d1:d1:43:03:dc:e0:71:31:f5:57: 50:2b:8b:ec:67:af:88:35:76:cc:f5:89:2f:22:a2: a9:a5:c6:75:31:10:33:fc:4c:96:0c:e0:03:16:26: 40:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:89:28:AC:EE:6D:8E:1C:50:56:41:66:8D:B2:4D:96:2E:50:A6:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/aa23f28c-5ddd-3ae7-870b-1bd38021c84e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 140.174.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:37:2e:74:e7:75:d3:53:63:d1:19:1f:bb:38:ee:87:58:a0: bd:c4:f3:65:05:dc:dd:aa:d4:72:04:f4:6c:7c:39:b8:2b:aa: 17:81:1e:f1:0b:f4:77:80:c6:22:3a:d3:c1:1f:0b:ff:2f:0a: 65:9d:49:01:ee:fe:46:ed:db:ff:1e:21:5a:43:47:11:5f:91: 5e:4f:9d:ba:23:36:d7:f3:59:94:e6:02:5a:74:55:c4:85:2b: 07:80:59:46:2a:a0:77:13:ff:f6:5b:e7:bc:7f:85:ef:90:7c: 60:64:7d:9d:ce:d7:f1:7c:69:af:30:3e:3c:76:9d:8c:79:2b: 4d:09:ba:86:ce:66:5d:84:3c:d2:e5:a7:4c:00:82:e3:4b:fc: 0c:9c:b5:62:e1:f0:92:c5:75:01:e8:7c:b2:1f:9d:bb:d4:ed: 1f:b3:c5:60:da:47:9a:aa:6b:1f:8e:94:08:b8:08:4b:c1:9b: 3a:cc:64:e4:1f:be:22:f8:1b:2b:31:e0:c6:7e:23:7d:32:44: af:63:c1:fb:6c:df:76:df:89:a2:be:f0:bb:e9:62:43:0e:7b: 80:99:3e:66:ab:89:5b:ff:76:bb:4b:f8:09:0e:0f:08:b5:6e: ab:7d:08:b3:8d:a3:88:2a:90:92:46:14:60:f7:f1:c5:d5:0f: cd:2f:c2:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5f32Giw7eXsZXXroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDcwMzA5MDAxMloXDTI2MTAwMTA5MDAxMlowLzEtMCsGA1UEAxMk NjlmZTAxNWUtZDhjYS00NzQxLWExYjktNzE2NGE2MTYzYjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAov4sSShLxILLcxZ1QCef3Bma1L6STiTSpTgD k8yayi8MWopx7TZku3P5RnAhLbkvgUJixuyHo8DiDgqNeVvWhFHVmaEnbUIRqmAf HYxOrpjU9jogSmFEMW8Es/XJqSUaLQ8CaDUy4ku0VjJFAMbs3EjvrYI6s+2eoDSX oroJk+699jEWIuIe941cSTLbrAs3stlrLvlpDG6h1EImOznOQlvPHiBX+rdVhqi8 dVZMo6+V79NJHzbksi+UzlSAUwQxCnXxzlsXcwXP18CjKMOCuvkwrOjwktHRQwPc 4HEx9VdQK4vsZ6+INXbM9YkvIqKppcZ1MRAz/EyWDOADFiZAKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAKJKKzubY4cUFZBZo2yTZYuUKYIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYWEyM2YyOGMtNWRkZC0z YWU3LTg3MGItMWJkMzgwMjFjODRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjK4XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGI3LnTnddNTY9EZH7s47odYoL3E82UF3N2q1HIE9Gx8ObgrqheBHvEL 9HeAxiI608EfC/8vCmWdSQHu/kbt2/8eIVpDRxFfkV5PnbojNtfzWZTmAlp0VcSF KweAWUYqoHcT//Zb57x/he+QfGBkfZ3O1/F8aa8wPjx2nYx5K00JuobOZl2EPNLl p0wAguNL/AyctWLh8JLFdQHofLIfnbvU7R+zxWDaR5qqax+OlAi4CEvBmzrMZOQf viL4Gysx4MZ+I30yRK9jwfts33bfiaK+8LvpYkMOe4CZPmariVv/drtL+AkODwi1 bqt9CLONo4gqkJJGFGD38cXVD80vwno= -----END CERTIFICATE-----Generated at Thu Jul 9 02:34:57 2026 by rpki-client