$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/23b681ff-ef1d-4309-92ea-79d112449bb2/a9084306-f582-31f1-8599-15ec7181d708.roa File: a9084306-f582-31f1-8599-15ec7181d708.roa (raw, json) Hash identifier: eCHLR00KLJyrQEriCkKCMHRfuAyeoR+gAeq6N/1z/3E= Subject key identifier: A5:3C:E6:5A:74:2C:2B:8D:D0:3B:88:A3:E1:D4:52:3C:64:BA:44:D8 Certificate issuer: /CN=23b681ff-ef1d-4309-92ea-79d112449bb2 Certificate serial: 010D0C9F4328584E4A6E12D279A5ADCD512270A0 Authority key identifier: 16:85:6C:04:08:54:F8:C4:96:5A:64:2D:1B:3F:72:D3:FF:39:13:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/23b681ff-ef1d-4309-92ea-79d112449bb2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/23b681ff-ef1d-4309-92ea-79d112449bb2/a9084306-f582-31f1-8599-15ec7181d708.roa Signing time: Thu 25 Jun 2026 16:40:07 +0000 ROA not before: Thu 25 Jun 2026 16:40:07 +0000 ROA not after: Wed 23 Sep 2026 15:17:46 +0000 asID: 33306 IP address blocks: 23.128.12.0/24 maxlen: 24 142.249.84.0/22 maxlen: 24 2602:f7cc::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/23b681ff-ef1d-4309-92ea-79d112449bb2/23b681ff-ef1d-4309-92ea-79d112449bb2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/23b681ff-ef1d-4309-92ea-79d112449bb2/23b681ff-ef1d-4309-92ea-79d112449bb2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/23b681ff-ef1d-4309-92ea-79d112449bb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4a:6e:12:d2:79:a5:ad:cd:51:22:70:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23b681ff-ef1d-4309-92ea-79d112449bb2 Validity Not Before: Jun 25 16:40:07 2026 GMT Not After : Sep 23 15:17:46 2026 GMT Subject: CN=0dc48d02-31ce-454b-bfa5-fec2f20ce7e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a1:03:7a:29:35:9a:7f:7b:82:1d:a6:77:26: 05:f6:b3:dd:ac:38:8c:7f:ac:9e:28:6b:bd:94:de: 7c:c3:ab:63:b4:d1:dd:ee:01:79:05:8c:4d:b7:7b: e4:98:bd:21:80:40:29:97:7d:08:03:ad:12:e1:ed: 38:85:1c:29:0e:ed:50:e8:93:4a:c9:52:33:91:1e: 2a:fc:64:6f:2c:f9:ee:c8:c3:04:a9:fb:00:d2:22: 6d:9f:b4:7c:3d:fb:29:a2:16:ba:c2:14:c2:60:9b: 68:a1:e3:4a:7a:67:76:7c:86:f5:9f:b5:12:6e:f7: 3c:2f:5e:00:2c:f9:51:92:68:8b:49:1b:b7:a9:f8: b2:46:9b:00:77:a2:cc:da:f0:51:e0:79:3d:10:9b: f7:6f:b3:d8:8d:94:26:da:82:49:78:58:26:c5:3f: 2a:13:3e:ae:e8:b0:ac:f5:5c:1a:f0:91:7f:cf:98: a7:3a:85:0d:63:ee:18:b4:e1:b2:b7:40:22:9f:a2: c0:5f:6b:ae:dc:e9:2b:a1:60:dc:b8:07:14:ce:aa: a0:1f:45:91:e5:a7:7f:2c:8a:ab:7d:35:f0:70:69: 03:d3:b0:2c:eb:15:f1:04:9a:d8:50:7c:db:95:24: ac:dc:a7:40:9b:2e:98:17:df:dc:bc:8d:a8:99:4e: 7e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:3C:E6:5A:74:2C:2B:8D:D0:3B:88:A3:E1:D4:52:3C:64:BA:44:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/23b681ff-ef1d-4309-92ea-79d112449bb2/a9084306-f582-31f1-8599-15ec7181d708.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/23b681ff-ef1d-4309-92ea-79d112449bb2/23b681ff-ef1d-4309-92ea-79d112449bb2.crl X509v3 Authority Key Identifier: keyid:16:85:6C:04:08:54:F8:C4:96:5A:64:2D:1B:3F:72:D3:FF:39:13:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/23b681ff-ef1d-4309-92ea-79d112449bb2.cer sbgp-ipAddrBlock: critical IPv4: 23.128.12.0/24 142.249.84.0/22 IPv6: 2602:f7cc::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:c6:c4:6c:9c:a9:f5:a4:30:4e:12:99:e0:c1:b8:cb:91:99: f7:67:d4:83:d8:79:f3:46:3a:bf:e9:37:02:1c:3c:c3:14:ff: 98:d9:3a:fe:dc:db:51:c7:ac:ef:7e:47:2e:67:12:de:6b:2f: d5:d9:39:f6:12:e5:06:d8:94:e6:81:98:8d:ac:47:f8:92:4e: db:d8:ae:48:55:d0:b8:31:b6:31:7c:4a:13:4b:28:fd:f0:18: 7a:c5:40:4e:3d:ea:08:68:03:6d:06:5e:c4:1a:b2:6a:cd:c5: 52:ae:a5:a8:4c:28:3c:9c:0f:df:f9:26:60:bc:5b:74:02:04: 41:7e:6a:0e:4d:ca:20:a3:59:83:4b:24:3a:f0:00:df:69:27: 75:a7:2f:30:d1:53:6d:56:6b:a1:83:6e:e9:f3:b4:0b:6d:e5: 82:7f:c0:48:9c:ba:9f:8e:7f:b0:a0:ae:c4:3f:ec:6b:dc:72: 90:ad:fe:22:7f:fd:a3:57:41:71:86:43:aa:29:ac:fd:f4:41: 4d:67:13:cc:64:52:b1:f1:aa:93:32:bd:b3:9f:61:b7:e5:bf: 1a:a6:a3:7c:a4:5b:0a:10:8d:88:c4:1c:0a:03:e6:68:fe:a0: e2:6b:a6:02:3c:b6:06:da:50:de:7a:e6:5d:80:16:e5:41:7f: a7:68:e8:9f -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWE5KbhLSeaWtzVEicKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNiNjgxZmYtZWYxZC00MzA5LTkyZWEtNzlkMTEyNDQ5 YmIyMB4XDTI2MDYyNTE2NDAwN1oXDTI2MDkyMzE1MTc0NlowLzEtMCsGA1UEAxMk MGRjNDhkMDItMzFjZS00NTRiLWJmYTUtZmVjMmYyMGNlN2U2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6EDeik1mn97gh2mdyYF9rPdrDiMf6yeKGu9 lN58w6tjtNHd7gF5BYxNt3vkmL0hgEApl30IA60S4e04hRwpDu1Q6JNKyVIzkR4q /GRvLPnuyMMEqfsA0iJtn7R8Pfspoha6whTCYJtooeNKemd2fIb1n7USbvc8L14A LPlRkmiLSRu3qfiyRpsAd6LM2vBR4Hk9EJv3b7PYjZQm2oJJeFgmxT8qEz6u6LCs 9Vwa8JF/z5inOoUNY+4YtOGyt0Ain6LAX2uu3OkroWDcuAcUzqqgH0WR5ad/LIqr fTXwcGkD07As6xXxBJrYUHzblSSs3KdAmy6YF9/cvI2omU5+1wIDAQABo4IDajCC A2YwHQYDVR0OBBYEFKU85lp0LCuN0DuIo+HUUjxkukTYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yM2I2 ODFmZi1lZjFkLTQzMDktOTJlYS03OWQxMTI0NDliYjIvYTkwODQzMDYtZjU4Mi0z MWYxLTg1OTktMTVlYzcxODFkNzA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjNiNjgxZmYtZWYxZC00MzA5LTky ZWEtNzlkMTEyNDQ5YmIyLzIzYjY4MWZmLWVmMWQtNDMwOS05MmVhLTc5ZDExMjQ0 OWJiMi5jcmwwHwYDVR0jBBgwFoAUFoVsBAhU+MSWWmQtGz9y0/85E1MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yM2I2ODFmZi1lZjFkLTQzMDktOTJlYS03OWQx MTI0NDliYjIuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAF4AMAwQC jvlUMA0EAgACMAcDBQAmAvfMMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHbGxGycqfWkME4SmeDBuMuRmfdn 1IPYefNGOr/pNwIcPMMU/5jZOv7c21HHrO9+Ry5nEt5rL9XZOfYS5QbYlOaBmI2s R/iSTtvYrkhV0LgxtjF8ShNLKP3wGHrFQE496ghoA20GXsQasmrNxVKupahMKDyc D9/5JmC8W3QCBEF+ag5NyiCjWYNLJDrwAN9pJ3WnLzDRU21Wa6GDbunztAtt5YJ/ wEicup+Of7CgrsQ/7GvccpCt/iJ//aNXQXGGQ6oprP30QU1nE8xkUrHxqpMyvbOf Ybflvxqmo3ykWwoQjYjEHAoD5mj+oOJrpgI8tgbaUN565l2AFuVBf6do6J8= -----END CERTIFICATE-----Generated at Tue Jul 21 20:12:51 2026 by rpki-client