$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/342900a2-b5ea-4a40-a31f-ef2cb2552fc6/133357b4-8693-3ae2-8de6-4feac1c1f686.roa File: 133357b4-8693-3ae2-8de6-4feac1c1f686.roa (raw, json) Hash identifier: dNVgPohvh9Kqs7HDZ2lKmkNF6n1OTvmMD46BUm/iV/M= Subject key identifier: AE:3C:37:4A:9F:D1:1F:B4:C3:63:20:31:16:4E:3F:2A:C8:50:CA:B4 Certificate issuer: /CN=342900a2-b5ea-4a40-a31f-ef2cb2552fc6 Certificate serial: 010D0C9F4328584ED2CC753117FC23727DE262C0 Authority key identifier: 29:0E:5B:DA:D5:2D:43:C6:8E:82:A2:F2:52:51:8D:17:9F:BC:41:A3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/342900a2-b5ea-4a40-a31f-ef2cb2552fc6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/342900a2-b5ea-4a40-a31f-ef2cb2552fc6/133357b4-8693-3ae2-8de6-4feac1c1f686.roa Signing time: Thu 13 Aug 2026 13:00:12 +0000 ROA not before: Thu 13 Aug 2026 13:00:12 +0000 ROA not after: Wed 11 Nov 2026 14:00:12 +0000 asID: 216047 IP address blocks: 23.159.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/342900a2-b5ea-4a40-a31f-ef2cb2552fc6/342900a2-b5ea-4a40-a31f-ef2cb2552fc6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/342900a2-b5ea-4a40-a31f-ef2cb2552fc6/342900a2-b5ea-4a40-a31f-ef2cb2552fc6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/342900a2-b5ea-4a40-a31f-ef2cb2552fc6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d2:cc:75:31:17:fc:23:72:7d:e2:62:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=342900a2-b5ea-4a40-a31f-ef2cb2552fc6 Validity Not Before: Aug 13 13:00:12 2026 GMT Not After : Nov 11 14:00:12 2026 GMT Subject: CN=af2fba39-7396-4d0d-b93f-62e40bb40aee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:47:0e:70:78:8a:32:12:57:6b:b1:63:81:5e: 41:6f:c1:b5:93:a4:ef:63:74:ad:06:fd:fe:85:08: 7a:8a:91:53:ec:05:e7:ad:b4:39:f0:25:ba:7a:8a: 2c:bc:b3:61:94:d5:2d:84:1b:64:55:3d:cd:77:e7: 3b:c2:2f:18:4a:a4:ce:a5:09:49:1b:c0:b8:9f:11: c0:68:f0:97:b7:39:2a:e2:2d:31:0a:70:08:b7:78: dd:42:7d:d7:94:b5:51:05:de:eb:e2:38:d9:45:08: 06:da:dc:46:42:9d:77:2d:b6:84:1c:2a:dc:fd:bf: f6:31:f0:4f:a8:93:0e:8f:82:6e:80:f4:6f:87:6d: c3:f6:59:a9:b9:b4:e4:d5:77:70:34:58:9d:7c:bd: 51:e4:53:f3:60:70:f2:c1:9a:dd:15:57:62:bf:bc: db:20:51:57:8a:b2:5d:d7:38:b9:78:35:7c:a8:67: 05:9f:65:36:61:7a:fb:9b:64:c3:30:71:d0:e9:f6: 7f:64:b6:fe:a1:b6:b0:b0:d3:1d:ef:b1:44:98:e2: 06:2f:3b:c0:b5:53:32:76:37:84:72:bc:ff:b7:18: 93:21:6a:04:0e:be:04:4f:89:80:29:ec:85:b2:d0: 6f:34:9e:da:85:4d:bb:4c:67:87:b2:f7:5a:87:68: c8:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:3C:37:4A:9F:D1:1F:B4:C3:63:20:31:16:4E:3F:2A:C8:50:CA:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/342900a2-b5ea-4a40-a31f-ef2cb2552fc6/133357b4-8693-3ae2-8de6-4feac1c1f686.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/342900a2-b5ea-4a40-a31f-ef2cb2552fc6/342900a2-b5ea-4a40-a31f-ef2cb2552fc6.crl X509v3 Authority Key Identifier: keyid:29:0E:5B:DA:D5:2D:43:C6:8E:82:A2:F2:52:51:8D:17:9F:BC:41:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/342900a2-b5ea-4a40-a31f-ef2cb2552fc6.cer sbgp-ipAddrBlock: critical IPv4: 23.159.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:fb:08:a4:91:14:4c:34:23:79:8c:b8:f5:6c:42:30:f6:81: 68:06:18:c5:42:21:85:0c:ef:79:d0:21:d2:a8:8d:ca:24:98: b1:13:df:b6:47:ba:29:c9:36:97:46:47:5f:41:eb:54:d0:65: 39:4f:70:6e:7b:d7:5e:dd:93:96:0c:4d:93:b0:84:db:1c:c1: cf:3e:54:37:7f:12:f4:92:f8:19:66:f9:cc:db:d5:32:13:0b: b5:da:05:05:89:e5:cb:9a:dd:37:ca:3c:3c:bc:70:d3:85:1c: ef:3c:42:49:6f:7d:39:a3:b3:26:3a:09:19:b4:38:37:00:13: e9:96:f5:b4:2b:da:db:1c:2a:0d:27:aa:8a:ef:02:6b:b6:00: f1:5f:ee:a6:a1:e1:7b:72:9d:4e:66:bd:f1:ca:a4:31:57:77: 34:e9:e2:38:22:09:cb:d8:cd:24:fd:6c:2e:bd:c6:05:c1:c7: 09:f8:85:5a:5b:22:db:e5:5f:20:69:29:53:db:cc:5b:01:b2: dd:13:8f:8d:1f:2b:d2:c8:e3:d6:16:07:a3:94:ce:50:d7:02: 1f:c5:c9:38:6b:4a:91:7e:cb:44:84:5f:bb:b0:5a:8c:d8:2d: 1c:fd:f2:32:75:f0:97:27:5d:9f:b2:63:fc:e9:43:f2:83:26: 51:74:32:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7SzHUxF/wjcn3iYsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzQyOTAwYTItYjVlYS00YTQwLWEzMWYtZWYyY2IyNTUy ZmM2MB4XDTI2MDgxMzEzMDAxMloXDTI2MTExMTE0MDAxMlowLzEtMCsGA1UEAxMk YWYyZmJhMzktNzM5Ni00ZDBkLWI5M2YtNjJlNDBiYjQwYWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkcOcHiKMhJXa7FjgV5Bb8G1k6TvY3StBv3+ hQh6ipFT7AXnrbQ58CW6eoosvLNhlNUthBtkVT3Nd+c7wi8YSqTOpQlJG8C4nxHA aPCXtzkq4i0xCnAIt3jdQn3XlLVRBd7r4jjZRQgG2txGQp13LbaEHCrc/b/2MfBP qJMOj4JugPRvh23D9lmpubTk1XdwNFidfL1R5FPzYHDywZrdFVdiv7zbIFFXirJd 1zi5eDV8qGcFn2U2YXr7m2TDMHHQ6fZ/ZLb+obawsNMd77FEmOIGLzvAtVMydjeE crz/txiTIWoEDr4ET4mAKeyFstBvNJ7ahU27TGeHsvdah2jI1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK48N0qf0R+0w2MgMRZOPyrIUMq0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNDI5 MDBhMi1iNWVhLTRhNDAtYTMxZi1lZjJjYjI1NTJmYzYvMTMzMzU3YjQtODY5My0z YWUyLThkZTYtNGZlYWMxYzFmNjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMzQyOTAwYTItYjVlYS00YTQwLWEz MWYtZWYyY2IyNTUyZmM2LzM0MjkwMGEyLWI1ZWEtNGE0MC1hMzFmLWVmMmNiMjU1 MmZjNi5jcmwwHwYDVR0jBBgwFoAUKQ5b2tUtQ8aOgqLyUlGNF5+8QaMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8zNDI5MDBhMi1iNWVhLTRhNDAtYTMxZi1lZjJj YjI1NTJmYzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF59MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADD7CKSRFEw0I3mMuPVsQjD2gWgGGMVCIYUM73nQIdKojcokmLET37ZH uinJNpdGR19B61TQZTlPcG57117dk5YMTZOwhNscwc8+VDd/EvSS+Blm+czb1TIT C7XaBQWJ5cua3TfKPDy8cNOFHO88QklvfTmjsyY6CRm0ODcAE+mW9bQr2tscKg0n qorvAmu2APFf7qah4XtynU5mvfHKpDFXdzTp4jgiCcvYzST9bC69xgXBxwn4hVpb ItvlXyBpKVPbzFsBst0Tj40fK9LI49YWB6OUzlDXAh/FyThrSpF+y0SEX7uwWozY LRz98jJ18JcnXZ+yY/zpQ/KDJlF0MjA= -----END CERTIFICATE-----Generated at Sat Sep 5 00:56:56 2026 by rpki-client