$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8718a34a-0473-4338-8132-defee58e8e69/dc8be82c-d662-3036-b0a5-aeb711c16b20.roa File: dc8be82c-d662-3036-b0a5-aeb711c16b20.roa (raw, json) Hash identifier: dJa6uu1kZjzSCi3QbGNZrz7pjQkhTNEcXWzSVWZ9fmM= Subject key identifier: C7:80:F7:5E:54:33:01:8C:2A:3E:8C:EC:21:64:82:D1:E0:B1:C7:A7 Certificate issuer: /CN=8718a34a-0473-4338-8132-defee58e8e69 Certificate serial: 010D0C9F4328584EFE120FB4EA15B58A35035640 Authority key identifier: 66:17:77:41:45:C1:9F:6A:BC:BE:B2:F0:F3:9E:EB:83:1E:A5:DF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8718a34a-0473-4338-8132-defee58e8e69.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8718a34a-0473-4338-8132-defee58e8e69/dc8be82c-d662-3036-b0a5-aeb711c16b20.roa Signing time: Sat 29 Aug 2026 01:00:12 +0000 ROA not before: Sat 29 Aug 2026 01:00:12 +0000 ROA not after: Fri 27 Nov 2026 02:00:12 +0000 asID: 7361 IP address blocks: 23.159.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8718a34a-0473-4338-8132-defee58e8e69/8718a34a-0473-4338-8132-defee58e8e69.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8718a34a-0473-4338-8132-defee58e8e69/8718a34a-0473-4338-8132-defee58e8e69.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8718a34a-0473-4338-8132-defee58e8e69.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 30 Aug 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fe:12:0f:b4:ea:15:b5:8a:35:03:56:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8718a34a-0473-4338-8132-defee58e8e69 Validity Not Before: Aug 29 01:00:12 2026 GMT Not After : Nov 27 02:00:12 2026 GMT Subject: CN=4f300935-5ca3-4e9e-ae14-9d559f04c197 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:f9:8a:bf:06:fe:d1:11:b1:3b:87:7a:69:96: c8:06:b5:0d:3c:79:58:fb:fb:26:54:2c:0d:f9:f6: 5b:71:3f:47:f1:aa:77:3c:c9:ae:dd:3b:45:d2:9d: c5:3d:0d:99:d2:4c:cf:2f:4c:ef:9e:e9:8e:52:32: 30:2f:37:7e:fb:e9:f0:e2:3d:4e:2b:a2:45:3c:15: 65:62:e7:13:f9:18:2d:39:2c:34:50:b7:c3:6a:a7: dc:66:a1:b5:f9:a8:b3:c1:b9:97:c7:a8:93:a7:bc: 4d:79:f0:9e:84:91:9e:73:fe:f6:3d:18:9f:99:5f: c2:0f:20:2f:8f:eb:49:b1:f9:29:8a:f2:a6:a5:67: b7:59:e5:95:25:c8:14:a8:15:39:3f:c4:12:20:bc: 71:08:18:a0:9a:f7:c5:bb:78:8f:3c:cd:77:6a:1c: e1:a2:a2:d9:34:31:70:7d:3f:b7:59:78:be:d1:d1: 36:bb:89:02:81:38:b1:ab:ef:cb:a1:85:29:9e:9f: d1:b9:b5:73:aa:58:d4:a8:46:0a:28:74:42:82:3a: c4:1f:69:6e:7f:a3:07:82:7e:7d:bb:e3:6d:38:2d: a5:c5:fd:27:5d:ff:7b:86:4d:da:e6:70:35:2c:f6: 95:32:f9:d1:47:31:e2:6e:c3:f1:bf:e5:cd:ce:98: 09:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:80:F7:5E:54:33:01:8C:2A:3E:8C:EC:21:64:82:D1:E0:B1:C7:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8718a34a-0473-4338-8132-defee58e8e69/dc8be82c-d662-3036-b0a5-aeb711c16b20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8718a34a-0473-4338-8132-defee58e8e69/8718a34a-0473-4338-8132-defee58e8e69.crl X509v3 Authority Key Identifier: keyid:66:17:77:41:45:C1:9F:6A:BC:BE:B2:F0:F3:9E:EB:83:1E:A5:DF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8718a34a-0473-4338-8132-defee58e8e69.cer sbgp-ipAddrBlock: critical IPv4: 23.159.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:94:3b:6a:50:b8:15:be:6a:10:79:99:a6:99:37:0b:e0:0f: b0:c7:35:80:cd:88:e6:77:f1:ca:81:62:14:c4:00:56:12:0c: 3b:be:36:e8:f8:88:00:49:b6:78:6e:f8:48:0b:d3:55:8b:46: 9d:73:fe:bc:57:bb:11:4b:04:b7:26:d8:fe:fe:e1:f8:93:fe: b1:08:91:cd:de:7d:d4:e4:f6:12:33:a3:4e:c0:ee:22:36:6f: 03:81:57:5a:ab:91:03:33:36:2e:af:30:32:4d:a2:29:f1:5d: 27:f8:9c:1d:53:fe:74:7c:1d:9e:21:60:53:9b:fd:5a:06:2a: 7d:8d:0c:92:64:2f:25:db:96:eb:23:38:a9:9b:ec:a6:e6:22: c2:d5:1a:fb:ad:5b:9b:2a:dd:1b:47:98:73:d7:65:87:63:55: d5:32:a4:71:2a:b7:93:ee:5e:f9:46:b2:74:b5:26:2a:d8:33: e4:df:73:35:17:5e:9f:5d:4e:75:d3:35:92:1f:cc:19:92:33: a1:bf:3f:da:be:f6:28:ed:2d:74:41:b6:ab:4b:f3:9f:98:66: 91:2b:ac:60:86:80:a6:15:51:3b:cc:50:c4:03:d1:b2:25:f3: 98:e7:73:eb:f7:36:a3:58:08:1a:c4:d7:15:b1:26:8f:e7:9f: d5:a9:d9:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7+Eg+06hW1ijUDVkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxOGEzNGEtMDQ3My00MzM4LTgxMzItZGVmZWU1OGU4 ZTY5MB4XDTI2MDgyOTAxMDAxMloXDTI2MTEyNzAyMDAxMlowLzEtMCsGA1UEAxMk NGYzMDA5MzUtNWNhMy00ZTllLWFlMTQtOWQ1NTlmMDRjMTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPmKvwb+0RGxO4d6aZbIBrUNPHlY+/smVCwN +fZbcT9H8ap3PMmu3TtF0p3FPQ2Z0kzPL0zvnumOUjIwLzd+++nw4j1OK6JFPBVl YucT+RgtOSw0ULfDaqfcZqG1+aizwbmXx6iTp7xNefCehJGec/72PRifmV/CDyAv j+tJsfkpivKmpWe3WeWVJcgUqBU5P8QSILxxCBigmvfFu3iPPM13ahzhoqLZNDFw fT+3WXi+0dE2u4kCgTixq+/LoYUpnp/RubVzqljUqEYKKHRCgjrEH2luf6MHgn59 u+NtOC2lxf0nXf97hk3a5nA1LPaVMvnRRzHibsPxv+XNzpgJMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMeA915UMwGMKj6M7CFkgtHgscenMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84NzE4 YTM0YS0wNDczLTQzMzgtODEzMi1kZWZlZTU4ZThlNjkvZGM4YmU4MmMtZDY2Mi0z MDM2LWIwYTUtYWViNzExYzE2YjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvODcxOGEzNGEtMDQ3My00MzM4LTgx MzItZGVmZWU1OGU4ZTY5Lzg3MThhMzRhLTA0NzMtNDMzOC04MTMyLWRlZmVlNThl OGU2OS5jcmwwHwYDVR0jBBgwFoAUZhd3QUXBn2q8vrLw857rgx6l354wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84NzE4YTM0YS0wNDczLTQzMzgtODEzMi1kZWZl ZTU4ZThlNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5+kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADCUO2pQuBW+ahB5maaZNwvgD7DHNYDNiOZ38cqBYhTEAFYSDDu+Nuj4 iABJtnhu+EgL01WLRp1z/rxXuxFLBLcm2P7+4fiT/rEIkc3efdTk9hIzo07A7iI2 bwOBV1qrkQMzNi6vMDJNoinxXSf4nB1T/nR8HZ4hYFOb/VoGKn2NDJJkLyXblusj OKmb7KbmIsLVGvutW5sq3RtHmHPXZYdjVdUypHEqt5PuXvlGsnS1JirYM+TfczUX Xp9dTnXTNZIfzBmSM6G/P9q+9ijtLXRBtqtL85+YZpErrGCGgKYVUTvMUMQD0bIl 85jnc+v3NqNYCBrE1xWxJo/nn9Wp2Q4= -----END CERTIFICATE-----Generated at Sat Aug 29 08:47:48 2026 by rpki-client