$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/00bdc54c-4822-4df3-99e6-85920125a480/d4de7f8d-d4fb-3c2f-b3e9-955aeb77c13a.roa File: d4de7f8d-d4fb-3c2f-b3e9-955aeb77c13a.roa (raw, json) Hash identifier: KQllGDu7fybKODLp2HlwuUNAbK6rlgFi33lJpDOhu64= Subject key identifier: 91:5F:23:C3:87:15:C7:DA:71:5A:D7:25:9C:87:88:37:56:41:24:03 Certificate issuer: /CN=00bdc54c-4822-4df3-99e6-85920125a480 Certificate serial: 010D0C9F4328584EAA80FDA6F2284C9A439BEC80 Authority key identifier: 20:2A:BB:48:A9:FF:D2:35:2A:49:42:73:FE:3B:E1:13:4E:BC:BD:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/00bdc54c-4822-4df3-99e6-85920125a480.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/00bdc54c-4822-4df3-99e6-85920125a480/d4de7f8d-d4fb-3c2f-b3e9-955aeb77c13a.roa Signing time: Thu 30 Jul 2026 02:35:50 +0000 ROA not before: Thu 30 Jul 2026 02:35:50 +0000 ROA not after: Wed 28 Oct 2026 02:35:50 +0000 asID: 402456 IP address blocks: 23.161.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/00bdc54c-4822-4df3-99e6-85920125a480/00bdc54c-4822-4df3-99e6-85920125a480.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/00bdc54c-4822-4df3-99e6-85920125a480/00bdc54c-4822-4df3-99e6-85920125a480.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/00bdc54c-4822-4df3-99e6-85920125a480.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:aa:80:fd:a6:f2:28:4c:9a:43:9b:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00bdc54c-4822-4df3-99e6-85920125a480 Validity Not Before: Jul 30 02:35:50 2026 GMT Not After : Oct 28 02:35:50 2026 GMT Subject: CN=8eede2d4-7e0b-4a08-b2a2-235f97c486f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:2d:bf:49:c1:d3:b2:13:24:37:80:88:9d:54: a0:6a:8e:26:5e:4d:e5:ef:bf:e0:67:51:03:66:83: 54:88:15:a3:df:9d:d5:81:dc:1c:5d:65:14:f3:d5: 9d:21:ec:be:f6:d5:65:18:d3:d5:73:58:a8:5f:88: f3:c5:67:f8:63:4f:3b:97:41:a1:e9:85:df:52:3c: 53:a8:01:57:a8:dd:9b:c0:78:47:33:68:3c:93:2a: 48:18:96:b6:c2:ea:9b:b8:b9:68:98:07:e6:b0:b9: d3:07:8c:73:91:9a:b8:16:85:ff:c1:30:2b:e9:cb: 6a:3e:24:85:ac:63:62:f0:78:05:28:e0:73:25:9f: 7a:60:fb:ad:7a:a0:19:53:12:e9:90:ba:c3:fe:1b: cb:60:b9:5e:ed:37:ec:09:75:aa:8d:d9:c9:36:56: 52:b2:42:eb:4d:c5:a9:5f:85:01:30:0a:a8:4b:66: 82:e1:ba:ac:7f:71:77:ad:00:37:92:48:b3:a1:a3: 62:7c:1f:88:bc:6a:a5:dd:ef:ee:2f:2a:4e:1c:46: 3d:35:42:d4:03:2d:17:e5:3c:fd:5f:44:2e:c4:82: 04:06:a2:79:6c:b6:6e:43:90:89:c5:14:ca:8d:6b: 44:d0:ef:22:82:09:af:69:e0:38:d7:41:fb:df:9f: c0:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:5F:23:C3:87:15:C7:DA:71:5A:D7:25:9C:87:88:37:56:41:24:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/00bdc54c-4822-4df3-99e6-85920125a480/d4de7f8d-d4fb-3c2f-b3e9-955aeb77c13a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/00bdc54c-4822-4df3-99e6-85920125a480/00bdc54c-4822-4df3-99e6-85920125a480.crl X509v3 Authority Key Identifier: keyid:20:2A:BB:48:A9:FF:D2:35:2A:49:42:73:FE:3B:E1:13:4E:BC:BD:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/00bdc54c-4822-4df3-99e6-85920125a480.cer sbgp-ipAddrBlock: critical IPv4: 23.161.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:a2:b4:e3:a7:8b:86:14:a6:99:23:f3:41:45:ca:f9:03:70: cb:5c:66:26:c5:f7:42:16:05:dc:22:54:98:65:b5:7a:53:63: 5b:cf:76:55:3a:bb:76:84:32:ba:e5:72:e3:86:95:53:29:91: ad:93:d0:90:79:52:cd:fb:a7:81:f8:e2:fb:5d:28:47:cc:91: 36:de:81:ae:41:cd:6c:33:db:a4:2d:15:41:9f:79:e8:14:04: 41:98:4d:b6:6a:ad:4b:8d:1d:97:47:ae:54:7b:98:52:76:36: b7:73:9f:08:14:66:2b:45:74:c1:aa:88:3e:c5:48:00:f3:03: 6d:14:16:c9:61:2c:92:9c:35:81:11:93:95:73:10:10:4b:d8: a5:13:35:bb:fc:f0:e0:98:f5:3c:5d:ae:b3:65:c9:b8:01:f9: b3:2a:b3:b3:d8:46:65:51:cf:00:53:68:16:4f:5b:22:dd:9f: 3a:0b:e8:c0:1c:59:34:fb:72:58:2b:54:11:32:7d:58:ae:05: c5:11:42:94:30:e9:16:17:e4:05:fe:73:f0:a3:43:cc:7a:fd: 66:5c:ec:7c:77:ee:3e:e8:a0:39:bc:5d:04:70:cb:58:46:79: c9:f4:88:76:67:b2:32:3d:29:93:10:ac:e3:30:01:6a:4b:97: dd:bb:10:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6qgP2m8ihMmkOb7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDBiZGM1NGMtNDgyMi00ZGYzLTk5ZTYtODU5MjAxMjVh NDgwMB4XDTI2MDczMDAyMzU1MFoXDTI2MTAyODAyMzU1MFowLzEtMCsGA1UEAxMk OGVlZGUyZDQtN2UwYi00YTA4LWIyYTItMjM1Zjk3YzQ4NmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmC2/ScHTshMkN4CInVSgao4mXk3l77/gZ1ED ZoNUiBWj353VgdwcXWUU89WdIey+9tVlGNPVc1ioX4jzxWf4Y087l0Gh6YXfUjxT qAFXqN2bwHhHM2g8kypIGJa2wuqbuLlomAfmsLnTB4xzkZq4FoX/wTAr6ctqPiSF rGNi8HgFKOBzJZ96YPuteqAZUxLpkLrD/hvLYLle7TfsCXWqjdnJNlZSskLrTcWp X4UBMAqoS2aC4bqsf3F3rQA3kkizoaNifB+IvGql3e/uLypOHEY9NULUAy0X5Tz9 X0QuxIIEBqJ5bLZuQ5CJxRTKjWtE0O8iggmvaeA410H735/AvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJFfI8OHFcfacVrXJZyHiDdWQSQDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8wMGJk YzU0Yy00ODIyLTRkZjMtOTllNi04NTkyMDEyNWE0ODAvZDRkZTdmOGQtZDRmYi0z YzJmLWIzZTktOTU1YWViNzdjMTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMDBiZGM1NGMtNDgyMi00ZGYzLTk5 ZTYtODU5MjAxMjVhNDgwLzAwYmRjNTRjLTQ4MjItNGRmMy05OWU2LTg1OTIwMTI1 YTQ4MC5jcmwwHwYDVR0jBBgwFoAUICq7SKn/0jUqSUJz/jvhE068vWswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8wMGJkYzU0Yy00ODIyLTRkZjMtOTllNi04NTky MDEyNWE0ODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6H0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACuitOOni4YUppkj80FFyvkDcMtcZibF90IWBdwiVJhltXpTY1vPdlU6 u3aEMrrlcuOGlVMpka2T0JB5Us37p4H44vtdKEfMkTbega5BzWwz26QtFUGfeegU BEGYTbZqrUuNHZdHrlR7mFJ2NrdznwgUZitFdMGqiD7FSADzA20UFslhLJKcNYER k5VzEBBL2KUTNbv88OCY9TxdrrNlybgB+bMqs7PYRmVRzwBTaBZPWyLdnzoL6MAc WTT7clgrVBEyfViuBcURQpQw6RYX5AX+c/CjQ8x6/WZc7Hx37j7ooDm8XQRwy1hG ecn0iHZnsjI9KZMQrOMwAWpLl927EFw= -----END CERTIFICATE-----Generated at Sat Sep 5 03:52:28 2026 by rpki-client