$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b23e3aaf-aa9a-41f9-982a-7ec54909b1e3/602e7de0-d3cf-349f-88b9-6298b9f75577.roa File: 602e7de0-d3cf-349f-88b9-6298b9f75577.roa (raw, json) Hash identifier: WrH0kymuSmzrBxL3Iy9u2/+fryOwTjlFjxpImaJyx/o= Subject key identifier: 11:E4:19:F3:5E:38:CD:6E:6E:8A:A0:F3:85:A1:AB:EA:6D:77:72:77 Certificate issuer: /CN=b23e3aaf-aa9a-41f9-982a-7ec54909b1e3 Certificate serial: 010D0C9F4328584EB57C46C5B698138D9EF62640 Authority key identifier: CF:8D:B6:52:B8:F9:F0:FF:4B:FE:7A:C5:E8:83:55:E6:54:C9:8A:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b23e3aaf-aa9a-41f9-982a-7ec54909b1e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b23e3aaf-aa9a-41f9-982a-7ec54909b1e3/602e7de0-d3cf-349f-88b9-6298b9f75577.roa Signing time: Mon 03 Aug 2026 01:00:11 +0000 ROA not before: Mon 03 Aug 2026 01:00:11 +0000 ROA not after: Sun 01 Nov 2026 01:00:11 +0000 asID: 394140 IP address blocks: 23.136.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b23e3aaf-aa9a-41f9-982a-7ec54909b1e3/b23e3aaf-aa9a-41f9-982a-7ec54909b1e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b23e3aaf-aa9a-41f9-982a-7ec54909b1e3/b23e3aaf-aa9a-41f9-982a-7ec54909b1e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b23e3aaf-aa9a-41f9-982a-7ec54909b1e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b5:7c:46:c5:b6:98:13:8d:9e:f6:26:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b23e3aaf-aa9a-41f9-982a-7ec54909b1e3 Validity Not Before: Aug 3 01:00:11 2026 GMT Not After : Nov 1 01:00:11 2026 GMT Subject: CN=bc311608-b0f7-4e26-9ff0-82cb96f9daa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d5:e6:8e:a9:79:1e:5f:5d:6f:1c:3b:9f:5e: 07:68:eb:21:07:7d:2e:ed:1f:2f:91:c5:1e:96:91: ea:c8:e8:e9:84:19:c2:1c:5c:8a:30:2c:3e:86:f8: fd:42:c5:e8:74:f0:81:b9:33:30:b5:8a:dd:65:95: 35:0b:07:b9:e0:f8:14:78:95:25:75:90:6b:65:87: 30:99:cf:ee:be:58:aa:02:35:d9:51:3f:dc:c7:08: f5:28:d7:24:62:88:e8:3d:a9:18:a1:ef:38:d3:a7: 93:5e:d3:9d:1e:77:97:ff:b3:eb:ea:aa:9d:e5:9d: 2a:90:3a:7b:28:86:49:bf:72:50:0c:61:bc:d4:3b: 96:6d:68:a5:5d:80:c1:a0:b9:5d:9d:28:f7:13:6e: 90:f9:64:12:3a:bd:e7:d2:7d:d7:2c:73:a4:41:20: dc:22:18:1e:45:0d:1c:43:f8:bf:0f:b6:05:85:1f: 5c:93:68:b9:b9:e1:6c:40:1f:44:af:68:4b:a2:f4: 0b:7c:49:e1:26:4d:a7:04:a5:33:08:af:38:66:f2: ae:af:ab:93:f9:86:ed:90:95:24:ad:99:e4:d3:2b: 80:e5:22:55:1d:ad:c6:11:cb:14:38:f0:8b:6d:f5: dc:7f:80:f3:1e:01:68:a4:ff:10:8c:c0:96:18:5e: 41:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:E4:19:F3:5E:38:CD:6E:6E:8A:A0:F3:85:A1:AB:EA:6D:77:72:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b23e3aaf-aa9a-41f9-982a-7ec54909b1e3/602e7de0-d3cf-349f-88b9-6298b9f75577.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b23e3aaf-aa9a-41f9-982a-7ec54909b1e3/b23e3aaf-aa9a-41f9-982a-7ec54909b1e3.crl X509v3 Authority Key Identifier: keyid:CF:8D:B6:52:B8:F9:F0:FF:4B:FE:7A:C5:E8:83:55:E6:54:C9:8A:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b23e3aaf-aa9a-41f9-982a-7ec54909b1e3.cer sbgp-ipAddrBlock: critical IPv4: 23.136.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:34:74:48:3d:67:f5:05:35:bf:c3:10:0f:71:2f:e6:5b:0e: 9e:4b:47:1c:12:5d:45:2e:42:42:b5:ae:d5:e5:25:58:30:5e: a4:0f:12:2e:a2:a2:ac:5a:1d:fc:72:96:9b:fd:23:c3:54:75: b6:2f:1e:3a:9a:c1:39:45:25:b9:b1:ce:08:d9:21:10:e4:59: e3:db:be:d9:19:c1:d4:da:f6:9a:b7:25:9e:31:07:ab:c7:c1: 53:6e:b6:2a:38:c7:28:3c:34:b4:f2:f8:56:7d:fa:82:75:4f: 3c:68:64:c7:ce:f6:c6:b1:ca:91:f9:4a:c4:61:2b:78:0d:1a: 6b:27:07:0b:e7:5f:f0:ff:fa:3e:37:bc:a6:7e:b9:1c:46:e8: 26:bf:5c:a8:79:88:5f:d2:20:f2:c2:f4:95:a0:6c:e7:cb:c5: 9c:5e:b6:81:87:2a:ab:df:c2:21:e7:e2:b9:d9:f6:f9:b3:bc: 2c:e9:b6:e9:cc:7b:c5:64:31:aa:17:d2:bd:21:20:54:e5:53: 2e:92:d2:c7:59:f6:e3:87:6d:e2:88:06:7b:fe:67:fe:07:4b: ed:7d:d1:67:00:93:6c:74:6d:4d:07:e5:e8:d8:43:ae:a7:c4: 1d:dc:51:bd:8a:5a:6e:c9:49:db:35:87:26:86:67:10:65:ed: 23:cb:9c:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE61fEbFtpgTjZ72JkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjIzZTNhYWYtYWE5YS00MWY5LTk4MmEtN2VjNTQ5MDli MWUzMB4XDTI2MDgwMzAxMDAxMVoXDTI2MTEwMTAxMDAxMVowLzEtMCsGA1UEAxMk YmMzMTE2MDgtYjBmNy00ZTI2LTlmZjAtODJjYjk2ZjlkYWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttXmjql5Hl9dbxw7n14HaOshB30u7R8vkcUe lpHqyOjphBnCHFyKMCw+hvj9QsXodPCBuTMwtYrdZZU1Cwe54PgUeJUldZBrZYcw mc/uvliqAjXZUT/cxwj1KNckYojoPakYoe8406eTXtOdHneX/7Pr6qqd5Z0qkDp7 KIZJv3JQDGG81DuWbWilXYDBoLldnSj3E26Q+WQSOr3n0n3XLHOkQSDcIhgeRQ0c Q/i/D7YFhR9ck2i5ueFsQB9Er2hLovQLfEnhJk2nBKUzCK84ZvKur6uT+YbtkJUk rZnk0yuA5SJVHa3GEcsUOPCLbfXcf4DzHgFopP8QjMCWGF5B0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBHkGfNeOM1uboqg84Whq+ptd3J3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9iMjNl M2FhZi1hYTlhLTQxZjktOTgyYS03ZWM1NDkwOWIxZTMvNjAyZTdkZTAtZDNjZi0z NDlmLTg4YjktNjI5OGI5Zjc1NTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYjIzZTNhYWYtYWE5YS00MWY5LTk4 MmEtN2VjNTQ5MDliMWUzL2IyM2UzYWFmLWFhOWEtNDFmOS05ODJhLTdlYzU0OTA5 YjFlMy5jcmwwHwYDVR0jBBgwFoAUz422Urj58P9L/nrF6INV5lTJirswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9iMjNlM2FhZi1hYTlhLTQxZjktOTgyYS03ZWM1 NDkwOWIxZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4gEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALU0dEg9Z/UFNb/DEA9xL+ZbDp5LRxwSXUUuQkK1rtXlJVgwXqQPEi6i oqxaHfxylpv9I8NUdbYvHjqawTlFJbmxzgjZIRDkWePbvtkZwdTa9pq3JZ4xB6vH wVNutio4xyg8NLTy+FZ9+oJ1TzxoZMfO9saxypH5SsRhK3gNGmsnBwvnX/D/+j43 vKZ+uRxG6Ca/XKh5iF/SIPLC9JWgbOfLxZxetoGHKqvfwiHn4rnZ9vmzvCzptunM e8VkMaoX0r0hIFTlUy6S0sdZ9uOHbeKIBnv+Z/4HS+190WcAk2x0bU0H5ejYQ66n xB3cUb2KWm7JSds1hyaGZxBl7SPLnPg= -----END CERTIFICATE-----Generated at Sat Sep 5 06:08:03 2026 by rpki-client