$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2d0063f8-538a-4717-85ee-7ef9ee52bde3/ce99c46c-fd46-386f-a921-40b8d93d366b.roa File: ce99c46c-fd46-386f-a921-40b8d93d366b.roa (raw, json) Hash identifier: o5Ma7wQfgpvMcwwNuZvp61wWkyZWaRuVmwSlTKCBLcc= Subject key identifier: 67:7C:B6:7B:5A:FF:1D:7C:D2:83:B4:B9:F9:77:0F:EC:34:9A:C7:D5 Certificate issuer: /CN=2d0063f8-538a-4717-85ee-7ef9ee52bde3 Certificate serial: 010D0C9F4328584ED6173FED52B013DB2F208180 Authority key identifier: 35:F9:B9:DB:1F:CC:09:4C:6F:E6:82:C3:4A:83:20:2A:F7:84:27:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2d0063f8-538a-4717-85ee-7ef9ee52bde3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2d0063f8-538a-4717-85ee-7ef9ee52bde3/ce99c46c-fd46-386f-a921-40b8d93d366b.roa Signing time: Fri 14 Aug 2026 17:18:21 +0000 ROA not before: Fri 14 Aug 2026 17:18:21 +0000 ROA not after: Thu 12 Nov 2026 18:18:21 +0000 asID: 3507 IP address blocks: 23.128.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2d0063f8-538a-4717-85ee-7ef9ee52bde3/2d0063f8-538a-4717-85ee-7ef9ee52bde3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2d0063f8-538a-4717-85ee-7ef9ee52bde3/2d0063f8-538a-4717-85ee-7ef9ee52bde3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2d0063f8-538a-4717-85ee-7ef9ee52bde3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d6:17:3f:ed:52:b0:13:db:2f:20:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d0063f8-538a-4717-85ee-7ef9ee52bde3 Validity Not Before: Aug 14 17:18:21 2026 GMT Not After : Nov 12 18:18:21 2026 GMT Subject: CN=8982ad17-3103-42cc-a2ff-2cae14dc0d7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:26:73:64:f1:30:75:4f:06:3d:b0:33:7c:38: 9b:16:4e:88:b3:8f:5d:27:49:47:70:03:e7:b0:a4: 87:2d:2e:1e:68:90:9a:ef:e3:0d:eb:15:67:4d:36: 66:41:17:a7:23:0c:dc:a2:0c:59:50:48:2b:4b:14: 18:ba:71:be:80:e2:a0:f6:3c:93:b1:88:42:18:2a: 27:b1:8f:af:10:e0:9e:ac:7c:f0:34:83:29:04:b2: e7:d8:93:ae:8f:e9:78:8a:38:23:23:fc:65:d9:4a: 2e:23:23:8f:01:8b:57:fc:84:86:c6:6d:2e:89:54: 68:d5:3e:24:b1:db:7e:eb:80:2f:db:07:4d:9c:86: 8e:22:d4:9a:1c:c8:66:58:1a:f9:83:87:15:7e:aa: 07:32:f5:4b:64:df:11:1c:4f:38:66:54:db:44:bc: 3b:64:e4:aa:e2:76:cc:09:64:f2:bd:72:e2:92:dd: 55:d2:07:bd:4b:f5:20:94:41:47:e4:ac:bc:5d:da: 68:cb:ea:15:e0:49:04:b2:5a:88:97:4f:87:a0:22: ac:af:ec:d1:a4:05:14:4e:69:0d:39:b3:29:00:64: 73:48:cc:1e:27:65:91:47:54:cd:27:70:59:17:98: 94:36:1d:c4:bf:0b:88:ec:d7:3a:d2:3b:d0:d7:1c: 36:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:7C:B6:7B:5A:FF:1D:7C:D2:83:B4:B9:F9:77:0F:EC:34:9A:C7:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2d0063f8-538a-4717-85ee-7ef9ee52bde3/ce99c46c-fd46-386f-a921-40b8d93d366b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2d0063f8-538a-4717-85ee-7ef9ee52bde3/2d0063f8-538a-4717-85ee-7ef9ee52bde3.crl X509v3 Authority Key Identifier: keyid:35:F9:B9:DB:1F:CC:09:4C:6F:E6:82:C3:4A:83:20:2A:F7:84:27:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2d0063f8-538a-4717-85ee-7ef9ee52bde3.cer sbgp-ipAddrBlock: critical IPv4: 23.128.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:d0:cb:e2:b0:41:f3:9a:05:51:80:62:bc:a4:53:5a:19:fd: c7:4d:1c:5e:ef:47:52:ec:bf:68:7d:94:88:88:ec:c5:66:58: 40:c8:0f:24:8e:c2:ec:89:4b:61:4e:1d:e8:87:bc:11:13:27: 25:b8:95:49:12:14:5f:7c:42:3a:0a:a6:51:04:75:11:f8:e1: 0f:28:22:8c:a5:ab:7a:a9:8a:2e:a7:90:29:21:28:3b:3e:49: ab:c2:d5:44:87:b3:3f:ce:8e:9a:08:8b:47:56:0f:c3:31:fa: cb:34:90:10:24:55:63:5e:9b:a2:e4:ad:19:d8:46:1e:eb:16: 05:59:17:33:14:3b:e7:c5:eb:da:b0:1d:40:86:a9:ec:ce:d3: 0c:42:5e:89:33:d6:dd:c3:28:77:4b:04:30:45:af:cf:f0:8a: 54:1e:16:d0:9b:d0:8d:5b:42:18:92:43:6e:d1:b5:4e:20:8d: 9d:61:58:92:81:9e:f2:2f:8b:ca:79:3a:68:e6:dc:a0:88:67: 99:7c:38:f6:6c:9f:9c:fb:b8:6e:0d:07:51:6a:04:ed:f8:a8: dc:ac:48:96:a1:b1:26:8c:ee:51:e4:bd:ed:cf:9d:ae:2c:30: 7e:94:52:3d:1b:04:2b:dd:9d:89:dd:e4:f3:76:2a:9a:30:3f: 34:09:67:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7WFz/tUrAT2y8ggYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQwMDYzZjgtNTM4YS00NzE3LTg1ZWUtN2VmOWVlNTJi ZGUzMB4XDTI2MDgxNDE3MTgyMVoXDTI2MTExMjE4MTgyMVowLzEtMCsGA1UEAxMk ODk4MmFkMTctMzEwMy00MmNjLWEyZmYtMmNhZTE0ZGMwZDdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiZzZPEwdU8GPbAzfDibFk6Is49dJ0lHcAPn sKSHLS4eaJCa7+MN6xVnTTZmQRenIwzcogxZUEgrSxQYunG+gOKg9jyTsYhCGCon sY+vEOCerHzwNIMpBLLn2JOuj+l4ijgjI/xl2UouIyOPAYtX/ISGxm0uiVRo1T4k sdt+64Av2wdNnIaOItSaHMhmWBr5g4cVfqoHMvVLZN8RHE84ZlTbRLw7ZOSq4nbM CWTyvXLikt1V0ge9S/UglEFH5Ky8Xdpoy+oV4EkEslqIl0+HoCKsr+zRpAUUTmkN ObMpAGRzSMweJ2WRR1TNJ3BZF5iUNh3EvwuI7Nc60jvQ1xw2IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGd8tnta/x180oO0ufl3D+w0msfVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yZDAw NjNmOC01MzhhLTQ3MTctODVlZS03ZWY5ZWU1MmJkZTMvY2U5OWM0NmMtZmQ0Ni0z ODZmLWE5MjEtNDBiOGQ5M2QzNjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMmQwMDYzZjgtNTM4YS00NzE3LTg1 ZWUtN2VmOWVlNTJiZGUzLzJkMDA2M2Y4LTUzOGEtNDcxNy04NWVlLTdlZjllZTUy YmRlMy5jcmwwHwYDVR0jBBgwFoAUNfm52x/MCUxv5oLDSoMgKveEJ80wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yZDAwNjNmOC01MzhhLTQ3MTctODVlZS03ZWY5 ZWU1MmJkZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4AwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFTQy+KwQfOaBVGAYrykU1oZ/cdNHF7vR1Lsv2h9lIiI7MVmWEDIDySO wuyJS2FOHeiHvBETJyW4lUkSFF98QjoKplEEdRH44Q8oIoylq3qpii6nkCkhKDs+ SavC1USHsz/OjpoIi0dWD8Mx+ss0kBAkVWNem6LkrRnYRh7rFgVZFzMUO+fF69qw HUCGqezO0wxCXokz1t3DKHdLBDBFr8/wilQeFtCb0I1bQhiSQ27RtU4gjZ1hWJKB nvIvi8p5Omjm3KCIZ5l8OPZsn5z7uG4NB1FqBO34qNysSJahsSaM7lHkve3Pna4s MH6UUj0bBCvdnYnd5PN2KpowPzQJZy8= -----END CERTIFICATE-----Generated at Tue Sep 1 03:33:29 2026 by rpki-client