$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f8bd5146-a29d-4a93-883e-fc63eb0b4533/40bd3dcf-2cbb-397a-b0d3-3b27f58c8215.roa File: 40bd3dcf-2cbb-397a-b0d3-3b27f58c8215.roa (raw, json) Hash identifier: Jt34ueFcqnmNHi34q7bNJhMqNmUBzzuYS6+xLgzeok8= Subject key identifier: 1D:B8:96:6F:71:65:4B:D2:0B:10:62:3A:42:B5:D8:06:39:FA:39:69 Certificate issuer: /CN=f8bd5146-a29d-4a93-883e-fc63eb0b4533 Certificate serial: 010D0C9F4328584EA79169610E44DA8A5AD2FB00 Authority key identifier: FB:81:BA:54:5C:A7:44:EE:AD:0D:73:17:9F:B9:F2:DF:58:03:19:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f8bd5146-a29d-4a93-883e-fc63eb0b4533.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f8bd5146-a29d-4a93-883e-fc63eb0b4533/40bd3dcf-2cbb-397a-b0d3-3b27f58c8215.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 21859 IP address blocks: 23.154.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f8bd5146-a29d-4a93-883e-fc63eb0b4533/f8bd5146-a29d-4a93-883e-fc63eb0b4533.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f8bd5146-a29d-4a93-883e-fc63eb0b4533/f8bd5146-a29d-4a93-883e-fc63eb0b4533.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f8bd5146-a29d-4a93-883e-fc63eb0b4533.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Aug 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:91:69:61:0e:44:da:8a:5a:d2:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8bd5146-a29d-4a93-883e-fc63eb0b4533 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=73e13160-1397-4249-a39c-af5f95b2320d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:88:19:5d:07:b0:15:10:ca:8f:a4:f7:19:80: f5:4d:9a:e7:4c:9d:64:0e:12:20:f9:df:ea:4f:bb: fd:1a:c7:86:59:cc:c2:9a:e5:01:e6:b8:80:ce:b0: ff:f7:60:9e:25:46:c8:8e:f8:b0:7d:51:1d:4c:a1: ea:4a:ce:91:78:3c:df:8b:da:c5:cf:22:d8:22:b4: 83:7e:95:18:06:e2:6e:2d:db:86:02:e7:06:6a:99: 7d:08:a8:ed:f8:4b:4c:ab:b7:71:a0:97:4c:38:f4: 1f:97:fa:2b:eb:36:e7:43:1f:ac:7f:91:ce:91:ef: f5:05:0a:9c:11:28:22:eb:2d:f6:7d:b2:c8:6e:2e: 40:18:d9:e0:2f:03:8c:0a:36:5e:97:d2:eb:43:39: 77:c5:56:fd:fe:98:d8:7c:b2:0a:3d:46:b7:b9:05: ae:35:1e:d0:ac:4c:90:1d:eb:b7:97:e2:47:3c:73: 7c:d9:0b:da:15:61:b5:53:33:8d:be:be:20:62:fb: 04:be:2e:4c:3b:fb:75:bb:f5:47:14:45:c7:94:ff: 00:91:e9:72:e1:78:c4:38:bf:b7:3c:59:4d:61:dd: 02:5f:08:36:fb:10:98:1a:f0:2e:21:2e:8b:11:32: 21:3e:f7:39:c7:02:d9:ca:dc:54:5f:d6:13:8a:f9: b9:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:B8:96:6F:71:65:4B:D2:0B:10:62:3A:42:B5:D8:06:39:FA:39:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f8bd5146-a29d-4a93-883e-fc63eb0b4533/40bd3dcf-2cbb-397a-b0d3-3b27f58c8215.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f8bd5146-a29d-4a93-883e-fc63eb0b4533/f8bd5146-a29d-4a93-883e-fc63eb0b4533.crl X509v3 Authority Key Identifier: keyid:FB:81:BA:54:5C:A7:44:EE:AD:0D:73:17:9F:B9:F2:DF:58:03:19:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f8bd5146-a29d-4a93-883e-fc63eb0b4533.cer sbgp-ipAddrBlock: critical IPv4: 23.154.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:82:e1:0f:4a:af:52:5a:dd:e7:15:0f:ca:9a:c2:bc:30:db: e2:59:b1:17:34:05:2d:98:49:d6:8d:ef:e6:76:40:ed:d4:47: 83:fe:f9:0a:b3:28:66:bf:8c:41:b2:e2:1b:77:0a:af:d8:3c: cf:4f:28:e0:0e:be:ba:aa:9b:3e:7c:db:05:64:cd:a3:e9:e4: 44:d0:86:1e:cf:9f:26:e0:4b:8a:e9:1e:fd:5e:d3:7e:01:7d: 88:6c:c1:54:3f:88:41:29:84:00:1f:05:a7:7e:53:00:4b:74: 4d:f1:e4:57:6e:e8:38:8b:1c:3f:fc:fd:3a:c7:5a:e6:5e:d4: 85:b4:b8:8e:49:a5:d1:3f:0e:2c:34:12:51:00:59:6f:69:65: 4b:bc:43:46:91:2c:6e:4c:97:3d:3d:99:c2:ad:42:f3:7b:f3: 0a:35:08:ca:bb:85:8b:1c:68:8f:b7:70:18:d7:cd:d7:06:aa: 83:2e:9f:b4:4f:57:5d:c2:6c:a6:ba:39:f6:84:1e:5e:3f:4b: 6a:1c:56:07:f4:ac:d4:47:26:5f:3d:1b:75:fc:29:ed:db:bd: bc:74:f1:79:52:09:0a:87:a0:90:46:dd:31:8c:c5:76:ee:21: 6e:4b:4e:00:b7:78:45:38:10:13:dd:c4:f4:a8:4a:17:9c:ed: 68:f5:31:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkWlhDkTailrS+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjhiZDUxNDYtYTI5ZC00YTkzLTg4M2UtZmM2M2ViMGI0 NTMzMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NzNlMTMxNjAtMTM5Ny00MjQ5LWEzOWMtYWY1Zjk1YjIzMjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3IgZXQewFRDKj6T3GYD1TZrnTJ1kDhIg+d/q T7v9GseGWczCmuUB5riAzrD/92CeJUbIjviwfVEdTKHqSs6ReDzfi9rFzyLYIrSD fpUYBuJuLduGAucGapl9CKjt+EtMq7dxoJdMOPQfl/or6zbnQx+sf5HOke/1BQqc ESgi6y32fbLIbi5AGNngLwOMCjZel9LrQzl3xVb9/pjYfLIKPUa3uQWuNR7QrEyQ Heu3l+JHPHN82QvaFWG1UzONvr4gYvsEvi5MO/t1u/VHFEXHlP8Akely4XjEOL+3 PFlNYd0CXwg2+xCYGvAuIS6LETIhPvc5xwLZytxUX9YTivm5jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB24lm9xZUvSCxBiOkK12AY5+jlpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9mOGJk NTE0Ni1hMjlkLTRhOTMtODgzZS1mYzYzZWIwYjQ1MzMvNDBiZDNkY2YtMmNiYi0z OTdhLWIwZDMtM2IyN2Y1OGM4MjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZjhiZDUxNDYtYTI5ZC00YTkzLTg4 M2UtZmM2M2ViMGI0NTMzL2Y4YmQ1MTQ2LWEyOWQtNGE5My04ODNlLWZjNjNlYjBi NDUzMy5jcmwwHwYDVR0jBBgwFoAU+4G6VFynRO6tDXMXn7ny31gDGfYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9mOGJkNTE0Ni1hMjlkLTRhOTMtODgzZS1mYzYz ZWIwYjQ1MzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5osMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKSC4Q9Kr1Ja3ecVD8qawrww2+JZsRc0BS2YSdaN7+Z2QO3UR4P++Qqz KGa/jEGy4ht3Cq/YPM9PKOAOvrqqmz582wVkzaPp5ETQhh7PnybgS4rpHv1e034B fYhswVQ/iEEphAAfBad+UwBLdE3x5Fdu6DiLHD/8/TrHWuZe1IW0uI5JpdE/Diw0 ElEAWW9pZUu8Q0aRLG5Mlz09mcKtQvN78wo1CMq7hYscaI+3cBjXzdcGqoMun7RP V13CbKa6OfaEHl4/S2ocVgf0rNRHJl89G3X8Ke3bvbx08XlSCQqHoJBG3TGMxXbu IW5LTgC3eEU4EBPdxPSoShec7Wj1MWQ= -----END CERTIFICATE-----Generated at Sat Aug 22 22:36:18 2026 by rpki-client