$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9ca3e3ab-fb49-462e-94c4-59d06cf51fec/3c7d2ec2-2210-309d-bcaf-495b1e8feb08.roa File: 3c7d2ec2-2210-309d-bcaf-495b1e8feb08.roa (raw, json) Hash identifier: 3Pj+/WuAn+mnb7zsfzy7xWtLlM3RBZawJwhS2XMZwog= Subject key identifier: 82:19:0F:5C:50:29:1D:7B:1D:DB:E4:43:A6:02:80:0A:5B:0D:19:D7 Certificate issuer: /CN=9ca3e3ab-fb49-462e-94c4-59d06cf51fec Certificate serial: 010D0C9F4328584E82C4DFF3CBF331F6516B4000 Authority key identifier: A3:F3:8C:97:DE:D0:DB:E8:0F:32:5B:11:0D:1F:4F:1C:70:B4:77:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9ca3e3ab-fb49-462e-94c4-59d06cf51fec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9ca3e3ab-fb49-462e-94c4-59d06cf51fec/3c7d2ec2-2210-309d-bcaf-495b1e8feb08.roa Signing time: Wed 15 Jul 2026 21:00:12 +0000 ROA not before: Wed 15 Jul 2026 21:00:12 +0000 ROA not after: Tue 13 Oct 2026 21:00:12 +0000 asID: 14619 IP address blocks: 23.129.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9ca3e3ab-fb49-462e-94c4-59d06cf51fec/9ca3e3ab-fb49-462e-94c4-59d06cf51fec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9ca3e3ab-fb49-462e-94c4-59d06cf51fec/9ca3e3ab-fb49-462e-94c4-59d06cf51fec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9ca3e3ab-fb49-462e-94c4-59d06cf51fec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:82:c4:df:f3:cb:f3:31:f6:51:6b:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ca3e3ab-fb49-462e-94c4-59d06cf51fec Validity Not Before: Jul 15 21:00:12 2026 GMT Not After : Oct 13 21:00:12 2026 GMT Subject: CN=3ab4acfb-b340-4c45-9c33-13da4b2f9241 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:02:0a:8a:6a:ec:7b:8e:c4:bc:ff:16:0e:dd: a6:99:70:3e:90:42:06:08:fa:90:aa:f7:92:ac:fa: 68:0a:91:e2:02:ac:aa:c3:5e:c6:2d:39:4e:c6:7d: 5a:1d:f0:d1:34:77:03:62:96:34:cf:4d:ef:70:ae: 32:90:4c:5d:03:42:e3:38:a0:8a:51:bc:71:01:27: 5d:31:81:e8:27:55:87:2f:1e:c2:b6:5f:69:62:e7: 69:be:cf:d7:7f:f9:3c:e1:93:ca:e4:52:2d:06:b9: db:6a:55:95:4a:c5:3e:63:ab:12:ad:cf:74:71:e6: a3:76:55:77:bc:eb:21:96:1a:db:cd:8f:63:0c:55: e7:3d:c1:2f:fa:df:b1:ed:3e:15:63:4f:75:3a:bc: 6c:40:32:fd:0a:71:36:22:7a:26:3b:16:94:b5:e5: 41:84:61:4c:ff:e2:9b:5d:8a:90:04:3f:b9:f9:20: 84:32:87:98:f6:84:11:9c:21:2e:c8:4b:52:ac:50: d2:d5:6c:4d:12:45:04:50:ee:6b:2f:85:5e:ad:01: 9b:22:94:3b:24:07:39:5a:da:c4:a4:07:7d:e8:ff: 92:24:5a:1e:6b:ab:9b:6f:3b:66:93:7e:31:fc:f9: df:01:6b:a1:31:1c:84:0c:ec:af:24:f1:d8:4a:de: 62:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:19:0F:5C:50:29:1D:7B:1D:DB:E4:43:A6:02:80:0A:5B:0D:19:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9ca3e3ab-fb49-462e-94c4-59d06cf51fec/3c7d2ec2-2210-309d-bcaf-495b1e8feb08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9ca3e3ab-fb49-462e-94c4-59d06cf51fec/9ca3e3ab-fb49-462e-94c4-59d06cf51fec.crl X509v3 Authority Key Identifier: keyid:A3:F3:8C:97:DE:D0:DB:E8:0F:32:5B:11:0D:1F:4F:1C:70:B4:77:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9ca3e3ab-fb49-462e-94c4-59d06cf51fec.cer sbgp-ipAddrBlock: critical IPv4: 23.129.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:5b:3c:16:b3:44:51:39:44:39:77:56:4d:12:83:53:04:55: bf:89:d3:42:23:05:e6:12:ef:b2:9a:a7:f1:0e:29:45:b3:f2: 09:45:59:3e:a8:a0:95:b0:95:fc:15:95:a7:8e:0e:a5:0a:1c: 96:41:3d:e1:80:37:19:16:67:df:a5:0b:ab:5f:df:4b:59:8b: 72:5a:68:6b:8b:ed:d4:60:33:e6:e7:62:84:b8:b4:86:c4:66: e3:0d:c9:b2:b3:49:3a:f0:85:e5:5f:1f:3f:70:2a:94:86:90: a6:c4:da:88:f3:83:94:cd:56:3a:8d:3e:7f:70:ff:15:30:0a: 60:8c:7a:2b:79:37:f8:51:7d:19:94:0d:9e:2d:c9:5b:cb:c2: 7c:4d:86:76:bc:59:bc:b9:0b:43:8c:77:07:73:f5:00:86:91: 08:e8:25:f8:57:8c:da:cc:5f:cf:59:4d:d2:23:30:39:4b:b8: db:80:63:61:d9:77:d5:12:20:21:d8:b5:89:92:50:e1:3d:1f: ea:e6:b9:41:62:5e:bb:76:06:18:2d:07:68:6b:c1:a9:dc:00: 0b:c8:2f:26:38:67:b9:95:23:58:74:36:d4:bc:12:44:e1:3d: 96:75:82:c8:f5:86:44:82:68:29:e5:5b:31:cc:2e:37:d1:67: ec:f4:cd:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6CxN/zy/Mx9lFrQAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWNhM2UzYWItZmI0OS00NjJlLTk0YzQtNTlkMDZjZjUx ZmVjMB4XDTI2MDcxNTIxMDAxMloXDTI2MTAxMzIxMDAxMlowLzEtMCsGA1UEAxMk M2FiNGFjZmItYjM0MC00YzQ1LTljMzMtMTNkYTRiMmY5MjQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwIKimrse47EvP8WDt2mmXA+kEIGCPqQqveS rPpoCpHiAqyqw17GLTlOxn1aHfDRNHcDYpY0z03vcK4ykExdA0LjOKCKUbxxASdd MYHoJ1WHLx7Ctl9pYudpvs/Xf/k84ZPK5FItBrnbalWVSsU+Y6sSrc90ceajdlV3 vOshlhrbzY9jDFXnPcEv+t+x7T4VY091OrxsQDL9CnE2InomOxaUteVBhGFM/+Kb XYqQBD+5+SCEMoeY9oQRnCEuyEtSrFDS1WxNEkUEUO5rL4VerQGbIpQ7JAc5WtrE pAd96P+SJFoea6ubbztmk34x/PnfAWuhMRyEDOyvJPHYSt5iFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIIZD1xQKR17HdvkQ6YCgApbDRnXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi85Y2Ez ZTNhYi1mYjQ5LTQ2MmUtOTRjNC01OWQwNmNmNTFmZWMvM2M3ZDJlYzItMjIxMC0z MDlkLWJjYWYtNDk1YjFlOGZlYjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOWNhM2UzYWItZmI0OS00NjJlLTk0 YzQtNTlkMDZjZjUxZmVjLzljYTNlM2FiLWZiNDktNDYyZS05NGM0LTU5ZDA2Y2Y1 MWZlYy5jcmwwHwYDVR0jBBgwFoAUo/OMl97Q2+gPMlsRDR9PHHC0d4kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi85Y2EzZTNhYi1mYjQ5LTQ2MmUtOTRjNC01OWQw NmNmNTFmZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4EEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALVbPBazRFE5RDl3Vk0Sg1MEVb+J00IjBeYS77Kap/EOKUWz8glFWT6o oJWwlfwVlaeODqUKHJZBPeGANxkWZ9+lC6tf30tZi3JaaGuL7dRgM+bnYoS4tIbE ZuMNybKzSTrwheVfHz9wKpSGkKbE2ojzg5TNVjqNPn9w/xUwCmCMeit5N/hRfRmU DZ4tyVvLwnxNhna8Wby5C0OMdwdz9QCGkQjoJfhXjNrMX89ZTdIjMDlLuNuAY2HZ d9USICHYtYmSUOE9H+rmuUFiXrt2BhgtB2hrwancAAvILyY4Z7mVI1h0NtS8EkTh PZZ1gsj1hkSCaCnlWzHMLjfRZ+z0zVg= -----END CERTIFICATE-----Generated at Tue Jul 21 20:39:47 2026 by rpki-client