$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9c2da67c-11a4-4c1b-b100-46b8c2dd97ae/d2afa191-abdb-30af-b5a2-fcae4e03229f.roa File: d2afa191-abdb-30af-b5a2-fcae4e03229f.roa (raw, json) Hash identifier: tyxYBtpVCzsFfWYTA3aa7SbWGuNuWAjKNZ2k3ye6ln4= Subject key identifier: B0:9E:55:CA:BA:B9:67:FB:F8:46:1A:07:B7:7B:C1:01:FF:02:BB:70 Certificate issuer: /CN=9c2da67c-11a4-4c1b-b100-46b8c2dd97ae Certificate serial: 010D0C9F4328584EAE818ECCBDE4EC70AB4E3640 Authority key identifier: 6C:28:27:9E:B3:F4:1C:22:41:34:D4:47:8A:4A:6D:BF:AA:E6:64:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9c2da67c-11a4-4c1b-b100-46b8c2dd97ae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9c2da67c-11a4-4c1b-b100-46b8c2dd97ae/d2afa191-abdb-30af-b5a2-fcae4e03229f.roa Signing time: Fri 31 Jul 2026 13:00:12 +0000 ROA not before: Fri 31 Jul 2026 13:00:12 +0000 ROA not after: Thu 29 Oct 2026 13:00:12 +0000 asID: 402585 IP address blocks: 23.159.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9c2da67c-11a4-4c1b-b100-46b8c2dd97ae/9c2da67c-11a4-4c1b-b100-46b8c2dd97ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9c2da67c-11a4-4c1b-b100-46b8c2dd97ae/9c2da67c-11a4-4c1b-b100-46b8c2dd97ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9c2da67c-11a4-4c1b-b100-46b8c2dd97ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ae:81:8e:cc:bd:e4:ec:70:ab:4e:36:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c2da67c-11a4-4c1b-b100-46b8c2dd97ae Validity Not Before: Jul 31 13:00:12 2026 GMT Not After : Oct 29 13:00:12 2026 GMT Subject: CN=ec29f4d8-bdc1-4df6-99c8-0e2cd2938bdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2a:06:e4:09:4e:05:83:70:eb:10:9b:3a:b7: fe:db:c6:e3:29:25:d9:57:9f:25:a8:81:8e:56:90: dc:b2:08:97:82:28:57:85:b3:1a:9c:3f:1b:10:7f: 8c:2f:0a:0c:a6:d0:13:82:09:c2:15:f5:f2:d7:6f: 5e:0c:d6:4f:f1:bf:2f:01:6e:4a:b8:aa:39:59:27: 48:8a:fd:53:f8:75:81:62:ae:6d:e0:7f:2b:e1:c2: 46:a4:d4:0b:89:05:6e:09:9a:bf:16:c2:d8:67:ae: 0e:e1:3a:35:39:75:4d:ee:51:cd:9b:77:b2:48:66: 3b:78:e8:ab:13:b5:9d:94:dd:2f:23:83:3c:13:35: b9:06:ea:11:d3:d3:6f:ae:11:1e:ad:c6:34:73:e2: a7:9b:53:43:3a:ce:f3:22:e0:a2:93:02:0b:e9:d6: 47:b9:42:4e:6f:87:20:84:07:78:72:6f:2f:be:a4: 36:d1:21:e9:60:ab:6b:aa:3b:2d:59:8f:6b:a9:4e: 93:86:6f:3c:c8:96:be:db:92:2f:d4:ce:41:cc:fa: 32:92:56:cf:f4:e0:7c:f0:6c:6f:a4:e2:3e:0e:6d: 56:5d:a6:7d:9b:52:68:d6:36:8f:bf:2e:77:27:96: d1:08:97:7d:c4:e7:23:4f:e5:60:07:da:00:d9:10: ac:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:9E:55:CA:BA:B9:67:FB:F8:46:1A:07:B7:7B:C1:01:FF:02:BB:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9c2da67c-11a4-4c1b-b100-46b8c2dd97ae/d2afa191-abdb-30af-b5a2-fcae4e03229f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9c2da67c-11a4-4c1b-b100-46b8c2dd97ae/9c2da67c-11a4-4c1b-b100-46b8c2dd97ae.crl X509v3 Authority Key Identifier: keyid:6C:28:27:9E:B3:F4:1C:22:41:34:D4:47:8A:4A:6D:BF:AA:E6:64:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9c2da67c-11a4-4c1b-b100-46b8c2dd97ae.cer sbgp-ipAddrBlock: critical IPv4: 23.159.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:2f:8b:f0:0a:70:d8:e6:10:5b:8d:da:e9:fb:06:2a:c5:e5: de:d8:71:e9:86:b6:2d:18:70:a6:83:38:62:2a:f7:8e:36:d9: 0c:a1:d4:21:b5:42:53:2e:b9:ae:f1:4e:be:df:0e:48:a2:ed: 05:e0:d3:25:5c:13:80:89:e0:e5:31:7c:36:9f:52:5f:fb:e3: fc:74:90:2c:b7:3d:c8:11:22:9c:4c:2a:43:3e:e9:53:f5:bf: e3:fc:a1:29:89:e0:8b:4c:d1:29:b8:3d:3c:12:bc:71:59:b6: 6b:fa:42:55:2f:26:80:15:ba:8a:dd:fd:25:4f:5a:1d:dc:94: ab:95:63:c9:9a:4a:00:48:95:91:02:2e:48:0a:db:4b:25:e4: 12:d8:e4:9f:db:5b:45:4b:2a:9d:0c:74:ae:7e:f7:76:15:59: 2b:f0:70:5a:e0:fc:78:63:59:aa:2f:3f:77:af:5d:d6:05:ab: 98:87:27:02:ae:de:15:65:08:e3:03:fd:2b:df:55:52:ca:4f: 4e:b2:1d:29:e8:24:15:f7:61:7a:a8:77:ad:56:68:ba:04:49: 06:36:f7:0a:87:14:61:08:b4:8d:81:e7:be:ab:ec:6a:14:74: 4f:9e:3e:c0:f4:de:f8:f6:04:2a:b7:17:1c:90:57:bf:45:6b: b2:70:22:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ugY7MveTscKtONkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMyZGE2N2MtMTFhNC00YzFiLWIxMDAtNDZiOGMyZGQ5 N2FlMB4XDTI2MDczMTEzMDAxMloXDTI2MTAyOTEzMDAxMlowLzEtMCsGA1UEAxMk ZWMyOWY0ZDgtYmRjMS00ZGY2LTk5YzgtMGUyY2QyOTM4YmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSoG5AlOBYNw6xCbOrf+28bjKSXZV58lqIGO VpDcsgiXgihXhbManD8bEH+MLwoMptATggnCFfXy129eDNZP8b8vAW5KuKo5WSdI iv1T+HWBYq5t4H8r4cJGpNQLiQVuCZq/FsLYZ64O4To1OXVN7lHNm3eySGY7eOir E7WdlN0vI4M8EzW5BuoR09NvrhEercY0c+Knm1NDOs7zIuCikwIL6dZHuUJOb4cg hAd4cm8vvqQ20SHpYKtrqjstWY9rqU6Thm88yJa+25Iv1M5BzPoyklbP9OB88Gxv pOI+Dm1WXaZ9m1Jo1jaPvy53J5bRCJd9xOcjT+VgB9oA2RCsBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLCeVcq6uWf7+EYaB7d7wQH/ArtwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi85YzJk YTY3Yy0xMWE0LTRjMWItYjEwMC00NmI4YzJkZDk3YWUvZDJhZmExOTEtYWJkYi0z MGFmLWI1YTItZmNhZTRlMDMyMjlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOWMyZGE2N2MtMTFhNC00YzFiLWIx MDAtNDZiOGMyZGQ5N2FlLzljMmRhNjdjLTExYTQtNGMxYi1iMTAwLTQ2YjhjMmRk OTdhZS5jcmwwHwYDVR0jBBgwFoAUbCgnnrP0HCJBNNRHikptv6rmZCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi85YzJkYTY3Yy0xMWE0LTRjMWItYjEwMC00NmI4 YzJkZDk3YWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF598MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGgvi/AKcNjmEFuN2un7BirF5d7YcemGti0YcKaDOGIq94422Qyh1CG1 QlMuua7xTr7fDkii7QXg0yVcE4CJ4OUxfDafUl/74/x0kCy3PcgRIpxMKkM+6VP1 v+P8oSmJ4ItM0Sm4PTwSvHFZtmv6QlUvJoAVuord/SVPWh3clKuVY8maSgBIlZEC LkgK20sl5BLY5J/bW0VLKp0MdK5+93YVWSvwcFrg/HhjWaovP3evXdYFq5iHJwKu 3hVlCOMD/SvfVVLKT06yHSnoJBX3YXqod61WaLoESQY29wqHFGEItI2B576r7GoU dE+ePsD03vj2BCq3FxyQV79Fa7JwIig= -----END CERTIFICATE-----Generated at Sat Sep 5 03:12:08 2026 by rpki-client