$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/79401fe4-d719-4a98-97e7-e309254447c9/58a880e9-2266-32dc-b76b-c63dfd7568e2.roa File: 58a880e9-2266-32dc-b76b-c63dfd7568e2.roa (raw, json) Hash identifier: nTpPpx1ETL3DfvKHxT3hJNdognvXv270nBDlE/FrYKs= Subject key identifier: 38:E0:CD:F7:84:4F:C0:64:4F:FF:2B:7F:16:E1:CD:C3:4A:D0:35:63 Certificate issuer: /CN=79401fe4-d719-4a98-97e7-e309254447c9 Certificate serial: 010D0C9F4328584EFE120FDD0FBEFB124A67D700 Authority key identifier: CA:75:62:B9:45:F0:B5:EC:8B:03:CC:16:FC:05:FB:F9:36:63:20:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/79401fe4-d719-4a98-97e7-e309254447c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/79401fe4-d719-4a98-97e7-e309254447c9/58a880e9-2266-32dc-b76b-c63dfd7568e2.roa Signing time: Sat 29 Aug 2026 01:00:12 +0000 ROA not before: Sat 29 Aug 2026 01:00:12 +0000 ROA not after: Fri 27 Nov 2026 02:00:12 +0000 asID: 7361 IP address blocks: 23.159.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/79401fe4-d719-4a98-97e7-e309254447c9/79401fe4-d719-4a98-97e7-e309254447c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/79401fe4-d719-4a98-97e7-e309254447c9/79401fe4-d719-4a98-97e7-e309254447c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/79401fe4-d719-4a98-97e7-e309254447c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 30 Aug 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fe:12:0f:dd:0f:be:fb:12:4a:67:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79401fe4-d719-4a98-97e7-e309254447c9 Validity Not Before: Aug 29 01:00:12 2026 GMT Not After : Nov 27 02:00:12 2026 GMT Subject: CN=c48b5008-cb85-4e19-ac08-e63e7f253bf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ce:96:a9:f7:ba:da:64:79:12:18:0f:97:7c: 45:81:96:ca:d0:98:a8:28:f9:7c:aa:15:51:82:52: 6e:1f:83:60:c0:97:d5:a7:66:e3:ec:7b:d9:6b:27: 98:0e:5a:2a:1e:5c:85:05:86:c8:bf:4f:05:fa:ae: 4d:6c:c4:28:90:78:37:9c:f0:a5:82:45:5e:61:5c: 31:52:28:1b:a0:01:8c:16:db:a0:92:14:96:d8:5c: aa:eb:91:6c:8c:be:27:e4:42:fa:56:5a:1c:ca:bb: 0a:4a:0b:7a:6d:5f:07:d5:2a:31:6a:df:d8:f1:b6: 5c:a9:62:e9:cf:15:d7:61:58:bb:ad:cd:a2:4d:4c: a2:75:bc:17:00:2c:90:a6:20:b0:2c:c2:4c:db:df: d1:f8:a6:5a:4d:80:c8:1f:d5:cd:60:8a:e5:88:ad: 6b:a9:52:1f:19:2f:ec:df:c2:f7:80:6c:37:bc:87: d2:ba:60:61:7f:47:5c:8f:97:be:e9:db:26:bf:01: fc:c8:a3:6c:03:76:63:56:45:9a:00:98:a2:ed:be: 91:cc:07:4e:71:18:6c:94:53:c2:8c:00:1c:b1:f6: f0:dd:6f:59:f5:a9:a2:bd:91:c6:fa:6c:66:99:e8: ed:ae:a6:b5:ff:a5:d2:54:ce:ca:95:b9:23:e7:e1: fb:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:E0:CD:F7:84:4F:C0:64:4F:FF:2B:7F:16:E1:CD:C3:4A:D0:35:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/79401fe4-d719-4a98-97e7-e309254447c9/58a880e9-2266-32dc-b76b-c63dfd7568e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/79401fe4-d719-4a98-97e7-e309254447c9/79401fe4-d719-4a98-97e7-e309254447c9.crl X509v3 Authority Key Identifier: keyid:CA:75:62:B9:45:F0:B5:EC:8B:03:CC:16:FC:05:FB:F9:36:63:20:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/79401fe4-d719-4a98-97e7-e309254447c9.cer sbgp-ipAddrBlock: critical IPv4: 23.159.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:0a:35:d6:53:c7:c5:e8:79:37:cd:b0:90:80:93:9c:39:18: 9b:4f:f4:fa:44:d3:99:06:b5:0a:71:1e:20:19:58:0e:fd:d8: 77:af:a7:5d:d8:ca:0d:42:5f:43:7e:25:8a:0c:a4:8a:9d:2e: 8c:9f:aa:47:0d:74:e2:90:f9:b2:3d:74:78:16:d9:7f:97:99: 7a:8a:db:b8:7c:c0:06:07:e3:3e:97:b7:d1:35:b8:30:c5:d4: c2:13:6a:a8:a9:f5:e6:b4:73:f0:50:01:2a:4b:55:f2:a5:5d: 74:ab:da:33:77:3d:2f:bb:ec:d0:d6:92:3a:76:fe:35:cc:93: 3d:1b:a3:0d:02:97:22:51:3e:22:73:ba:0a:87:aa:77:f2:de: cf:48:a5:b0:69:36:5e:54:e3:f3:d0:d8:ae:85:43:9b:3c:bf: e0:4e:e1:aa:f2:05:b3:ec:2f:1f:c8:ff:7a:38:4c:ef:f2:5d: 8a:da:0c:e8:4f:00:54:9a:17:af:b7:45:c8:1f:81:a1:59:e7: 53:de:fc:ef:8b:bb:d6:8f:ba:11:40:ed:13:89:ae:89:4b:d2: 8e:d1:a7:00:79:bc:c7:01:af:76:3e:86:b4:c3:43:25:19:df: 56:70:31:bf:49:5d:8a:1a:9e:4c:70:dc:8a:ea:39:fd:fe:bd: 48:66:ac:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7+Eg/dD777Ekpn1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzk0MDFmZTQtZDcxOS00YTk4LTk3ZTctZTMwOTI1NDQ0 N2M5MB4XDTI2MDgyOTAxMDAxMloXDTI2MTEyNzAyMDAxMlowLzEtMCsGA1UEAxMk YzQ4YjUwMDgtY2I4NS00ZTE5LWFjMDgtZTYzZTdmMjUzYmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk86Wqfe62mR5EhgPl3xFgZbK0JioKPl8qhVR glJuH4NgwJfVp2bj7HvZayeYDloqHlyFBYbIv08F+q5NbMQokHg3nPClgkVeYVwx UigboAGMFtugkhSW2Fyq65FsjL4n5EL6VlocyrsKSgt6bV8H1Soxat/Y8bZcqWLp zxXXYVi7rc2iTUyidbwXACyQpiCwLMJM29/R+KZaTYDIH9XNYIrliK1rqVIfGS/s 38L3gGw3vIfSumBhf0dcj5e+6dsmvwH8yKNsA3ZjVkWaAJii7b6RzAdOcRhslFPC jAAcsfbw3W9Z9amivZHG+mxmmejtrqa1/6XSVM7Klbkj5+H7YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDjgzfeET8BkT/8rfxbhzcNK0DVjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi83OTQw MWZlNC1kNzE5LTRhOTgtOTdlNy1lMzA5MjU0NDQ3YzkvNThhODgwZTktMjI2Ni0z MmRjLWI3NmItYzYzZGZkNzU2OGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNzk0MDFmZTQtZDcxOS00YTk4LTk3 ZTctZTMwOTI1NDQ0N2M5Lzc5NDAxZmU0LWQ3MTktNGE5OC05N2U3LWUzMDkyNTQ0 NDdjOS5jcmwwHwYDVR0jBBgwFoAUynViuUXwteyLA8wW/AX7+TZjIEswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi83OTQwMWZlNC1kNzE5LTRhOTgtOTdlNy1lMzA5 MjU0NDQ3YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF59kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMoKNdZTx8XoeTfNsJCAk5w5GJtP9PpE05kGtQpxHiAZWA792Hevp13Y yg1CX0N+JYoMpIqdLoyfqkcNdOKQ+bI9dHgW2X+XmXqK27h8wAYH4z6Xt9E1uDDF 1MITaqip9ea0c/BQASpLVfKlXXSr2jN3PS+77NDWkjp2/jXMkz0bow0ClyJRPiJz ugqHqnfy3s9IpbBpNl5U4/PQ2K6FQ5s8v+BO4aryBbPsLx/I/3o4TO/yXYraDOhP AFSaF6+3RcgfgaFZ51Pe/O+Lu9aPuhFA7ROJrolL0o7RpwB5vMcBr3Y+hrTDQyUZ 31ZwMb9JXYoankxw3IrqOf3+vUhmrGs= -----END CERTIFICATE-----Generated at Sat Aug 29 08:47:02 2026 by rpki-client