$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/643134dd-25b5-4c16-b9b4-7167cf0012db/0fe2de25-b9f9-390d-9def-950bfe47e7b0.roa File: 0fe2de25-b9f9-390d-9def-950bfe47e7b0.roa (raw, json) Hash identifier: gSYWt7h3feCwquEgDbILTS11iwHBwYGsMBNuYG83Ngs= Subject key identifier: 5D:8B:DA:E4:13:41:13:B1:9D:FA:10:56:58:04:9E:86:BC:A6:E0:CE Certificate issuer: /CN=643134dd-25b5-4c16-b9b4-7167cf0012db Certificate serial: 010D0C9F4328584ECE9C7A13B081A296E8B08A80 Authority key identifier: 5E:45:8E:D0:77:EF:EA:BE:49:9B:26:91:96:2A:A6:35:75:FF:A5:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/643134dd-25b5-4c16-b9b4-7167cf0012db.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/643134dd-25b5-4c16-b9b4-7167cf0012db/0fe2de25-b9f9-390d-9def-950bfe47e7b0.roa Signing time: Wed 12 Aug 2026 01:00:11 +0000 ROA not before: Wed 12 Aug 2026 01:00:11 +0000 ROA not after: Tue 10 Nov 2026 02:00:11 +0000 asID: 401662 IP address blocks: 23.137.172.0/24 maxlen: 32 2602:f680::/40 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/643134dd-25b5-4c16-b9b4-7167cf0012db/643134dd-25b5-4c16-b9b4-7167cf0012db.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/643134dd-25b5-4c16-b9b4-7167cf0012db/643134dd-25b5-4c16-b9b4-7167cf0012db.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/643134dd-25b5-4c16-b9b4-7167cf0012db.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ce:9c:7a:13:b0:81:a2:96:e8:b0:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=643134dd-25b5-4c16-b9b4-7167cf0012db Validity Not Before: Aug 12 01:00:11 2026 GMT Not After : Nov 10 02:00:11 2026 GMT Subject: CN=3d53fa28-0be5-49cb-824b-f14c472d2877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:5d:09:b6:06:75:01:eb:b4:df:a9:09:d6:9e: f9:c7:04:de:4c:36:c6:73:61:c6:4a:06:8f:45:ff: 6f:c2:41:13:09:33:a8:fa:b4:4e:6b:ba:ce:49:ab: 7c:15:d4:48:3d:30:7c:22:2d:d9:a7:de:88:f1:20: b0:fb:30:51:64:da:cf:cf:8a:54:a5:ab:db:9a:58: de:c1:ac:36:7d:14:3d:44:ee:11:d5:0b:b4:a1:a8: cb:f3:e6:f8:86:65:5e:ca:8d:25:9c:f0:7b:0c:16: e9:ea:10:92:b7:8d:fd:37:b5:96:3d:78:11:06:fe: cd:53:47:f4:86:22:86:64:e6:0f:6d:89:15:11:f9: db:e0:4a:88:dc:a9:16:71:48:64:52:cd:00:61:04: cf:6a:6c:ce:5e:c0:f2:ea:ef:25:8a:a3:e7:77:79: 12:97:e8:ff:6a:98:e6:3b:b0:1d:91:9e:1e:b3:e5: f1:4f:6c:88:26:1c:ad:3e:69:ab:79:fc:1f:40:21: 98:fa:b8:fb:77:ef:95:73:a2:4b:c2:2c:25:27:f9: 51:20:ae:4e:ad:b4:ec:f4:73:d6:62:50:98:78:9d: 9c:d0:df:d2:9b:cb:a2:47:be:1a:94:dc:f7:ca:d0: a3:35:b2:0f:de:52:a9:4c:fb:50:40:d9:e4:df:2a: e8:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:8B:DA:E4:13:41:13:B1:9D:FA:10:56:58:04:9E:86:BC:A6:E0:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/643134dd-25b5-4c16-b9b4-7167cf0012db/0fe2de25-b9f9-390d-9def-950bfe47e7b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/643134dd-25b5-4c16-b9b4-7167cf0012db/643134dd-25b5-4c16-b9b4-7167cf0012db.crl X509v3 Authority Key Identifier: keyid:5E:45:8E:D0:77:EF:EA:BE:49:9B:26:91:96:2A:A6:35:75:FF:A5:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/643134dd-25b5-4c16-b9b4-7167cf0012db.cer sbgp-ipAddrBlock: critical IPv4: 23.137.172.0/24 IPv6: 2602:f680::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:42:2c:de:f8:b2:f3:57:14:e1:06:ad:5e:36:85:0f:d0:ca: b5:71:3a:7f:66:31:e2:81:26:77:7f:af:35:69:fb:b1:53:19: b6:e6:3e:16:4e:e4:21:89:56:0c:d1:aa:9e:06:dd:2c:78:50: 30:37:14:f1:96:df:fc:d4:57:79:75:3f:1e:4d:69:c5:5b:46: fb:8f:28:da:4c:64:cd:b2:df:30:06:b7:9c:7e:7d:8b:63:f6: 5c:df:71:f7:2a:c1:f2:43:b5:06:b2:06:94:51:27:0c:a0:1b: 38:91:34:f7:7e:08:35:cc:90:55:23:4c:a5:b5:5f:16:e4:2a: c9:d6:7c:03:5b:f1:33:71:73:a8:df:6f:25:e1:d2:d1:3a:ad: b7:f2:94:23:6a:8d:82:f1:be:93:15:4d:f6:45:0c:25:a4:7a: ee:0f:dc:4e:55:1f:32:99:80:c6:f8:bb:5e:a1:7f:39:07:8b: 02:5f:e9:c0:0e:c6:38:88:a5:85:12:e9:a4:31:9f:d1:5e:c2: 1a:68:ea:ac:db:9f:31:b4:97:fc:1e:46:10:c3:fb:b1:16:0a: 88:ae:af:2a:a5:64:68:23:f9:69:f4:41:a4:0a:2d:bb:51:9a: 35:e9:34:1d:99:5d:3c:90:63:d9:ae:d7:94:13:df:26:ab:9c: 4b:1f:e7:74 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE7OnHoTsIGiluiwioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQzMTM0ZGQtMjViNS00YzE2LWI5YjQtNzE2N2NmMDAx MmRiMB4XDTI2MDgxMjAxMDAxMVoXDTI2MTExMDAyMDAxMVowLzEtMCsGA1UEAxMk M2Q1M2ZhMjgtMGJlNS00OWNiLTgyNGItZjE0YzQ3MmQyODc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgl0JtgZ1Aeu036kJ1p75xwTeTDbGc2HGSgaP Rf9vwkETCTOo+rROa7rOSat8FdRIPTB8Ii3Zp96I8SCw+zBRZNrPz4pUpavbmlje waw2fRQ9RO4R1Qu0oajL8+b4hmVeyo0lnPB7DBbp6hCSt439N7WWPXgRBv7NU0f0 hiKGZOYPbYkVEfnb4EqI3KkWcUhkUs0AYQTPamzOXsDy6u8liqPnd3kSl+j/apjm O7AdkZ4es+XxT2yIJhytPmmrefwfQCGY+rj7d++Vc6JLwiwlJ/lRIK5OrbTs9HPW YlCYeJ2c0N/Sm8uiR74alNz3ytCjNbIP3lKpTPtQQNnk3yroHQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFF2L2uQTQROxnfoQVlgEnoa8puDOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi82NDMx MzRkZC0yNWI1LTRjMTYtYjliNC03MTY3Y2YwMDEyZGIvMGZlMmRlMjUtYjlmOS0z OTBkLTlkZWYtOTUwYmZlNDdlN2IwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNjQzMTM0ZGQtMjViNS00YzE2LWI5 YjQtNzE2N2NmMDAxMmRiLzY0MzEzNGRkLTI1YjUtNGMxNi1iOWI0LTcxNjdjZjAw MTJkYi5jcmwwHwYDVR0jBBgwFoAUXkWO0Hfv6r5JmyaRliqmNXX/pR8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi82NDMxMzRkZC0yNWI1LTRjMTYtYjliNC03MTY3 Y2YwMDEyZGIuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4msMA4E AgACMAgDBgAmAvaAADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAhQize+LLzVxThBq1eNoUP0Mq1cTp/ZjHi gSZ3f681afuxUxm25j4WTuQhiVYM0aqeBt0seFAwNxTxlt/81Fd5dT8eTWnFW0b7 jyjaTGTNst8wBrecfn2LY/Zc33H3KsHyQ7UGsgaUUScMoBs4kTT3fgg1zJBVI0yl tV8W5CrJ1nwDW/EzcXOo328l4dLROq238pQjao2C8b6TFU32RQwlpHruD9xOVR8y mYDG+LteoX85B4sCX+nADsY4iKWFEumkMZ/RXsIaaOqs258xtJf8HkYQw/uxFgqI rq8qpWRoI/lp9EGkCi27UZo16TQdmV08kGPZrteUE98mq5xLH+d0 -----END CERTIFICATE-----Generated at Sat Sep 5 00:21:42 2026 by rpki-client