$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b32cd942-7da6-4568-a951-c48745916cd9/4de99c7b-0c73-37cc-9e43-4055a303bea4.roa File: 4de99c7b-0c73-37cc-9e43-4055a303bea4.roa (raw, json) Hash identifier: EcOwFibxcsk6QbBnYPcYv9fjMBAuKJSeBwDkAJYrnLA= Subject key identifier: 7A:D6:89:7F:DB:B2:27:6E:34:F0:AF:96:C4:73:03:C7:15:2B:06:1E Certificate issuer: /CN=b32cd942-7da6-4568-a951-c48745916cd9 Certificate serial: 010D0C9F4328584EC90710EF104D1EA67E076000 Authority key identifier: F3:AC:69:66:DA:8B:B6:0B:4A:22:89:AD:B4:81:5F:0E:C1:81:2D:15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b32cd942-7da6-4568-a951-c48745916cd9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b32cd942-7da6-4568-a951-c48745916cd9/4de99c7b-0c73-37cc-9e43-4055a303bea4.roa Signing time: Mon 10 Aug 2026 01:00:12 +0000 ROA not before: Mon 10 Aug 2026 01:00:12 +0000 ROA not after: Sun 08 Nov 2026 02:00:12 +0000 asID: 402619 IP address blocks: 23.159.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b32cd942-7da6-4568-a951-c48745916cd9/b32cd942-7da6-4568-a951-c48745916cd9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b32cd942-7da6-4568-a951-c48745916cd9/b32cd942-7da6-4568-a951-c48745916cd9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b32cd942-7da6-4568-a951-c48745916cd9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c9:07:10:ef:10:4d:1e:a6:7e:07:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b32cd942-7da6-4568-a951-c48745916cd9 Validity Not Before: Aug 10 01:00:12 2026 GMT Not After : Nov 8 02:00:12 2026 GMT Subject: CN=8ee711ee-540a-47aa-9419-c8d5e92a7225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c8:b5:47:eb:f0:30:74:ad:89:04:8d:3a:99: c2:4e:e7:97:9b:95:0c:0a:a5:00:58:7f:d9:b3:73: 47:4b:31:48:be:05:5f:73:da:88:95:f0:31:cd:d5: a2:31:43:9c:1b:24:1e:64:4a:76:9b:d1:5b:66:7a: 1c:d6:be:85:91:c2:6b:c3:0e:51:17:58:d2:f7:07: 71:67:66:c8:b4:7f:af:11:95:59:af:b9:01:70:f2: f9:49:8d:58:83:4e:5d:9c:c2:0f:cc:7c:0f:61:af: e8:76:fc:69:52:2f:19:df:db:41:1a:eb:fb:c3:2b: fa:9a:80:1a:e4:6b:c6:dc:4d:08:20:a3:41:bb:38: 49:89:23:74:b2:8b:79:98:a1:44:b3:ca:ee:41:0b: 43:14:9b:87:4a:eb:50:69:d0:f7:a7:b1:e4:1a:85: 2e:41:eb:90:15:b5:5a:ef:27:7a:34:d5:8c:01:29: f1:bd:8a:23:95:03:10:a1:b0:d0:86:de:48:a7:39: 0a:77:d7:05:b7:04:e4:98:12:81:b6:e8:08:8b:9c: 82:56:9a:45:f0:c7:f5:08:d0:0a:f5:30:ca:d7:ee: 43:0e:f0:7b:dd:57:5f:e1:f3:a5:92:48:81:2f:33: 45:02:30:b1:28:67:ae:96:e9:94:e5:61:6f:c8:34: 3f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:D6:89:7F:DB:B2:27:6E:34:F0:AF:96:C4:73:03:C7:15:2B:06:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b32cd942-7da6-4568-a951-c48745916cd9/4de99c7b-0c73-37cc-9e43-4055a303bea4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b32cd942-7da6-4568-a951-c48745916cd9/b32cd942-7da6-4568-a951-c48745916cd9.crl X509v3 Authority Key Identifier: keyid:F3:AC:69:66:DA:8B:B6:0B:4A:22:89:AD:B4:81:5F:0E:C1:81:2D:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b32cd942-7da6-4568-a951-c48745916cd9.cer sbgp-ipAddrBlock: critical IPv4: 23.159.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:79:4a:49:04:ab:67:b0:d5:30:34:da:38:1d:55:da:85:5b: 67:cd:1c:11:53:e1:86:84:6d:56:ae:34:be:c4:a6:0a:85:09: 00:68:cc:92:6a:1a:06:7b:c9:f2:5f:99:64:14:dc:55:c6:ca: 7b:26:b8:e3:98:c3:82:88:94:72:6f:20:33:6e:d4:70:ba:e0: 7e:69:95:e2:dc:a7:eb:b9:09:87:ce:5d:a6:2f:14:23:d8:65: e4:32:06:8e:d4:b0:77:20:7f:03:84:a2:bd:f6:a1:3f:9a:f0: d1:a9:ed:43:9f:99:8f:89:00:63:76:e9:84:c3:80:df:2e:74: 82:81:90:b1:b8:de:08:cd:1a:30:33:03:ac:1a:34:47:7d:cc: 91:df:68:73:6b:88:a7:c8:27:12:72:0d:9f:fd:a4:77:f2:bd: cb:60:ec:65:c7:39:94:8f:e2:8f:6f:51:37:c2:9f:1a:a3:09: bb:82:c5:97:81:c7:d3:c5:e9:5a:5e:09:a1:87:43:fb:79:33: bf:b4:f8:41:97:f0:76:a3:c8:de:19:35:07:a9:e3:91:01:8d: c8:f9:d6:e1:cb:e2:3a:ed:cf:3d:6d:5e:5f:03:d9:5b:8d:42: 98:f8:d3:fa:ac:e9:08:4d:f9:62:b6:6a:1f:91:82:8c:65:19: 19:cb:fb:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7JBxDvEE0epn4HYAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjMyY2Q5NDItN2RhNi00NTY4LWE5NTEtYzQ4NzQ1OTE2 Y2Q5MB4XDTI2MDgxMDAxMDAxMloXDTI2MTEwODAyMDAxMlowLzEtMCsGA1UEAxMk OGVlNzExZWUtNTQwYS00N2FhLTk0MTktYzhkNWU5MmE3MjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8i1R+vwMHStiQSNOpnCTueXm5UMCqUAWH/Z s3NHSzFIvgVfc9qIlfAxzdWiMUOcGyQeZEp2m9FbZnoc1r6FkcJrww5RF1jS9wdx Z2bItH+vEZVZr7kBcPL5SY1Yg05dnMIPzHwPYa/odvxpUi8Z39tBGuv7wyv6moAa 5GvG3E0IIKNBuzhJiSN0sot5mKFEs8ruQQtDFJuHSutQadD3p7HkGoUuQeuQFbVa 7yd6NNWMASnxvYojlQMQobDQht5IpzkKd9cFtwTkmBKBtugIi5yCVppF8Mf1CNAK 9TDK1+5DDvB73Vdf4fOlkkiBLzNFAjCxKGeulumU5WFvyDQ/UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHrWiX/bsiduNPCvlsRzA8cVKwYeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9iMzJj ZDk0Mi03ZGE2LTQ1NjgtYTk1MS1jNDg3NDU5MTZjZDkvNGRlOTljN2ItMGM3My0z N2NjLTllNDMtNDA1NWEzMDNiZWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYjMyY2Q5NDItN2RhNi00NTY4LWE5 NTEtYzQ4NzQ1OTE2Y2Q5L2IzMmNkOTQyLTdkYTYtNDU2OC1hOTUxLWM0ODc0NTkx NmNkOS5jcmwwHwYDVR0jBBgwFoAU86xpZtqLtgtKIomttIFfDsGBLRUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9iMzJjZDk0Mi03ZGE2LTQ1NjgtYTk1MS1jNDg3 NDU5MTZjZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5/8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZ5SkkEq2ew1TA02jgdVdqFW2fNHBFT4YaEbVauNL7EpgqFCQBozJJq GgZ7yfJfmWQU3FXGynsmuOOYw4KIlHJvIDNu1HC64H5pleLcp+u5CYfOXaYvFCPY ZeQyBo7UsHcgfwOEor32oT+a8NGp7UOfmY+JAGN26YTDgN8udIKBkLG43gjNGjAz A6waNEd9zJHfaHNriKfIJxJyDZ/9pHfyvctg7GXHOZSP4o9vUTfCnxqjCbuCxZeB x9PF6VpeCaGHQ/t5M7+0+EGX8HajyN4ZNQep45EBjcj51uHL4jrtzz1tXl8D2VuN Qpj40/qs6QhN+WK2ah+RgoxlGRnL+5U= -----END CERTIFICATE-----Generated at Sat Sep 5 06:20:45 2026 by rpki-client