$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0ca7346d-fe29-4c44-aeef-2693f005a12d/0fa69968-fdce-37b5-a023-28d1f3870b91.roa File: 0fa69968-fdce-37b5-a023-28d1f3870b91.roa (raw, json) Hash identifier: ecMtnuMsuNheNB3dGf9oMP/pweJjehlW+4ZTyCCEOJ0= Subject key identifier: C4:DD:78:52:E3:BA:68:DE:EE:4D:C5:2E:11:0E:C7:E2:02:37:1F:D2 Certificate issuer: /CN=0ca7346d-fe29-4c44-aeef-2693f005a12d Certificate serial: 010D0C9F4328584EFE120FC9829E38B153FBC180 Authority key identifier: 41:81:00:FB:EF:F6:A6:ED:EC:6F:04:F6:40:65:7A:B4:9A:B1:BE:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0ca7346d-fe29-4c44-aeef-2693f005a12d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0ca7346d-fe29-4c44-aeef-2693f005a12d/0fa69968-fdce-37b5-a023-28d1f3870b91.roa Signing time: Sat 29 Aug 2026 01:00:12 +0000 ROA not before: Sat 29 Aug 2026 01:00:12 +0000 ROA not after: Fri 27 Nov 2026 02:00:12 +0000 asID: 7361 IP address blocks: 23.158.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0ca7346d-fe29-4c44-aeef-2693f005a12d/0ca7346d-fe29-4c44-aeef-2693f005a12d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0ca7346d-fe29-4c44-aeef-2693f005a12d/0ca7346d-fe29-4c44-aeef-2693f005a12d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0ca7346d-fe29-4c44-aeef-2693f005a12d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 30 Aug 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fe:12:0f:c9:82:9e:38:b1:53:fb:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ca7346d-fe29-4c44-aeef-2693f005a12d Validity Not Before: Aug 29 01:00:12 2026 GMT Not After : Nov 27 02:00:12 2026 GMT Subject: CN=11a303d8-3d56-49e7-9530-bf817eda4047 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4c:d3:06:ed:b3:f1:08:d6:a3:ff:dc:2e:a0: 86:f5:c2:73:e8:83:ee:9e:53:de:c9:91:11:88:72: ab:71:f3:f3:7e:88:36:2f:80:ef:62:95:43:57:9d: 8b:c4:da:11:f0:a7:e7:9e:97:df:77:3e:ae:37:bc: d4:1c:c4:ad:f9:4d:8e:3f:69:4f:76:63:50:76:dd: 1f:6e:54:19:19:1b:c8:16:c6:ae:16:83:f4:92:bc: 1b:cb:ef:ed:4b:78:e0:c7:b3:5b:33:4d:c3:2d:13: 0e:ac:8d:6c:37:ee:ad:a5:8b:1f:5c:1b:80:c6:73: 58:82:1a:77:3e:80:04:15:d9:dd:6c:c1:b6:f5:cf: 8a:1c:26:83:7e:97:42:12:5c:ed:4b:66:e7:0c:47: 9e:bb:45:dd:79:65:18:e8:75:42:eb:9f:ec:59:6c: ad:ac:04:2e:5e:13:b9:03:06:3d:d9:5e:c1:f1:a6: 75:e2:61:75:dc:ce:d3:64:65:30:18:ad:e5:d9:6b: da:da:bf:6b:31:53:d2:d7:5e:e0:ba:2f:91:e2:3c: 18:f9:a4:1d:ad:56:4d:ad:60:23:51:d9:03:a6:98: d5:6b:94:a1:e4:6b:bf:45:84:b3:e4:d6:18:b5:2a: a4:b1:ef:af:26:b0:c5:2e:23:7e:07:f2:b3:0a:82: 85:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:DD:78:52:E3:BA:68:DE:EE:4D:C5:2E:11:0E:C7:E2:02:37:1F:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0ca7346d-fe29-4c44-aeef-2693f005a12d/0fa69968-fdce-37b5-a023-28d1f3870b91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0ca7346d-fe29-4c44-aeef-2693f005a12d/0ca7346d-fe29-4c44-aeef-2693f005a12d.crl X509v3 Authority Key Identifier: keyid:41:81:00:FB:EF:F6:A6:ED:EC:6F:04:F6:40:65:7A:B4:9A:B1:BE:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0ca7346d-fe29-4c44-aeef-2693f005a12d.cer sbgp-ipAddrBlock: critical IPv4: 23.158.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:1b:c2:d6:85:4d:f2:9e:90:9f:62:04:34:d5:3c:61:09:b2: cf:7c:2d:2d:fb:7a:8c:d7:49:c6:f7:45:37:ca:17:42:df:06: fe:2f:db:4b:e4:f5:f4:9c:b4:c5:73:d8:76:4e:59:46:79:68: 55:d4:e2:88:17:96:a7:c6:7b:23:c1:c6:2d:18:04:60:87:06: 22:4a:df:32:1a:8a:99:e7:3f:e7:93:dd:95:d0:e4:04:57:51: 55:fb:98:65:0c:a7:0c:71:45:ec:45:c4:89:f8:a5:64:90:fa: 87:6c:15:d3:a7:33:1a:d6:da:32:f8:87:99:09:56:25:aa:7a: af:bf:4a:0f:a0:45:f2:81:4d:d7:c1:e1:61:17:d6:92:57:8b: f0:5b:7b:f7:3f:c9:76:fe:a4:f5:f5:f8:dd:e0:e1:2d:92:af: 22:87:1e:5f:4e:30:d9:e1:2f:56:02:f1:0c:4b:78:b7:b9:07: a1:64:cd:c7:f6:79:e7:b8:60:0a:48:36:ff:55:fe:7e:76:c6: 70:39:40:a6:dc:67:8f:ae:72:bc:ab:26:db:bf:61:f1:01:84: 5e:5c:d5:f8:c1:0c:e9:18:11:44:0e:fb:32:40:56:58:51:df: b8:ee:5e:ec:e5:55:34:dc:00:82:db:7e:a1:aa:89:f5:d5:77: 34:78:ef:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7+Eg/Jgp44sVP7wYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGNhNzM0NmQtZmUyOS00YzQ0LWFlZWYtMjY5M2YwMDVh MTJkMB4XDTI2MDgyOTAxMDAxMloXDTI2MTEyNzAyMDAxMlowLzEtMCsGA1UEAxMk MTFhMzAzZDgtM2Q1Ni00OWU3LTk1MzAtYmY4MTdlZGE0MDQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUzTBu2z8QjWo//cLqCG9cJz6IPunlPeyZER iHKrcfPzfog2L4DvYpVDV52LxNoR8Kfnnpffdz6uN7zUHMSt+U2OP2lPdmNQdt0f blQZGRvIFsauFoP0krwby+/tS3jgx7NbM03DLRMOrI1sN+6tpYsfXBuAxnNYghp3 PoAEFdndbMG29c+KHCaDfpdCElztS2bnDEeeu0XdeWUY6HVC65/sWWytrAQuXhO5 AwY92V7B8aZ14mF13M7TZGUwGK3l2Wva2r9rMVPS117gui+R4jwY+aQdrVZNrWAj UdkDppjVa5Sh5Gu/RYSz5NYYtSqkse+vJrDFLiN+B/KzCoKFLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMTdeFLjumje7k3FLhEOx+ICNx/SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8wY2E3 MzQ2ZC1mZTI5LTRjNDQtYWVlZi0yNjkzZjAwNWExMmQvMGZhNjk5NjgtZmRjZS0z N2I1LWEwMjMtMjhkMWYzODcwYjkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMGNhNzM0NmQtZmUyOS00YzQ0LWFl ZWYtMjY5M2YwMDVhMTJkLzBjYTczNDZkLWZlMjktNGM0NC1hZWVmLTI2OTNmMDA1 YTEyZC5jcmwwHwYDVR0jBBgwFoAUQYEA++/2pu3sbwT2QGV6tJqxvsMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8wY2E3MzQ2ZC1mZTI5LTRjNDQtYWVlZi0yNjkz ZjAwNWExMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF57cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJAbwtaFTfKekJ9iBDTVPGEJss98LS37eozXScb3RTfKF0LfBv4v20vk 9fSctMVz2HZOWUZ5aFXU4ogXlqfGeyPBxi0YBGCHBiJK3zIaipnnP+eT3ZXQ5ARX UVX7mGUMpwxxRexFxIn4pWSQ+odsFdOnMxrW2jL4h5kJViWqeq+/Sg+gRfKBTdfB 4WEX1pJXi/Bbe/c/yXb+pPX1+N3g4S2SryKHHl9OMNnhL1YC8QxLeLe5B6Fkzcf2 eee4YApINv9V/n52xnA5QKbcZ4+ucryrJtu/YfEBhF5c1fjBDOkYEUQO+zJAVlhR 37juXuzlVTTcAILbfqGqifXVdzR470o= -----END CERTIFICATE-----Generated at Sat Aug 29 08:47:19 2026 by rpki-client