$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/657a3a89-cae6-3d0f-8216-8429aef9560e.roa File: 657a3a89-cae6-3d0f-8216-8429aef9560e.roa (raw, json) Hash identifier: a1nqwKHyzwJ1mbEmelqKvIoXrsyYrEtxTCiwkWue9eU= Subject key identifier: 2C:BC:5E:ED:5B:52:BD:82:EC:68:F0:93:D5:C8:40:27:BD:45:F4:AE Certificate issuer: /CN=39667f8b-e7b7-4c34-aaa0-00fddbeef48d Certificate serial: 010D0C9F4328584ED4325B8A728925668BA0D200 Authority key identifier: 30:DF:1A:E4:43:D8:56:06:DE:21:D1:57:3F:18:32:63:7A:B9:6F:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/657a3a89-cae6-3d0f-8216-8429aef9560e.roa Signing time: Fri 14 Aug 2026 01:00:13 +0000 ROA not before: Fri 14 Aug 2026 01:00:13 +0000 ROA not after: Thu 12 Nov 2026 02:00:13 +0000 asID: 401160 IP address blocks: 23.170.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Sep 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d4:32:5b:8a:72:89:25:66:8b:a0:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39667f8b-e7b7-4c34-aaa0-00fddbeef48d Validity Not Before: Aug 14 01:00:13 2026 GMT Not After : Nov 12 02:00:13 2026 GMT Subject: CN=573fc8d8-b4ee-40cc-950d-e9fed057eb9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:9c:e6:f8:22:ea:eb:10:b3:41:6a:e4:47:66: 87:99:ae:b9:7e:36:8d:b4:da:80:34:f7:6a:7c:9e: c1:39:75:d8:9a:2f:a0:cd:7c:de:11:2f:f3:ac:89: b4:f4:96:14:06:39:f7:12:e7:68:f6:59:a2:a8:68: c5:ba:97:3c:91:95:70:e5:42:74:cf:0d:b9:52:48: 8e:e8:d6:41:c5:d8:d6:11:24:6d:41:b0:ea:35:e4: da:35:92:4b:62:79:3f:40:eb:ec:f7:ad:c2:45:93: 90:e0:70:39:a1:92:3a:ea:72:c8:38:62:00:27:79: 6c:12:7f:11:82:cc:e0:e6:0a:ad:70:1c:10:08:38: 40:9f:40:ed:59:1e:c8:02:ef:3d:fa:0c:ed:34:dd: 89:92:74:29:79:99:57:39:26:b6:df:b6:ab:10:e9: 1d:99:0f:7f:b5:b9:62:40:b0:3e:75:a0:f1:21:4b: be:1e:66:5b:03:f8:2f:29:43:99:e3:e3:45:99:a9: 21:26:f5:37:22:1d:0a:7b:a8:6a:a1:b1:a0:b0:35: 44:76:2b:b6:c2:a0:e4:d0:7b:d8:db:de:88:40:66: 53:b3:19:74:6a:05:a0:0d:25:8b:ff:16:92:23:9e: fe:08:3c:f1:b3:f4:db:f5:27:3e:8b:de:31:f9:25: 65:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:BC:5E:ED:5B:52:BD:82:EC:68:F0:93:D5:C8:40:27:BD:45:F4:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/657a3a89-cae6-3d0f-8216-8429aef9560e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.crl X509v3 Authority Key Identifier: keyid:30:DF:1A:E4:43:D8:56:06:DE:21:D1:57:3F:18:32:63:7A:B9:6F:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.cer sbgp-ipAddrBlock: critical IPv4: 23.170.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:7f:91:d5:8a:5a:d2:40:13:8b:6b:e5:52:5c:63:e6:f7:10: d1:96:63:a6:56:6c:bd:ec:d0:78:93:9d:a6:90:88:35:42:6d: 45:f9:94:c4:a6:01:68:2a:f6:5e:d8:1e:d6:de:b8:8e:0a:e7: 08:d2:cb:90:5a:2e:49:7c:99:5a:61:26:02:15:e8:14:b2:ac: de:77:af:26:c8:37:db:ef:53:b0:3d:c6:32:ae:2a:9a:7c:0f: 41:c6:2a:4d:5a:53:e3:a1:d8:9b:e9:b7:7b:25:5f:7f:50:f6: 80:22:30:2d:06:57:40:ba:60:46:b5:06:02:f0:66:4b:a4:dc: af:aa:17:c0:d6:52:1a:52:a6:e0:d9:42:ef:87:b6:a9:bd:d0: f1:0f:98:f4:a8:09:89:c9:f7:18:8a:d0:ae:2b:81:0e:19:de: 57:9a:09:a3:f2:42:80:b6:a7:51:d0:c7:32:74:c0:76:39:ef: f1:95:95:7b:62:76:df:8d:d5:0f:4b:55:de:5e:8b:fc:90:62: c3:bb:4d:05:94:81:3e:1f:df:5b:23:b4:ee:db:ba:08:7b:46: 42:2a:ef:fa:de:a3:72:63:90:e3:81:6b:97:b6:4b:ef:66:64: 42:bc:f7:65:fc:90:eb:28:94:e7:54:aa:be:ba:6c:28:cc:b4: f0:6b:39:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7UMluKcoklZoug0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzk2NjdmOGItZTdiNy00YzM0LWFhYTAtMDBmZGRiZWVm NDhkMB4XDTI2MDgxNDAxMDAxM1oXDTI2MTExMjAyMDAxM1owLzEtMCsGA1UEAxMk NTczZmM4ZDgtYjRlZS00MGNjLTk1MGQtZTlmZWQwNTdlYjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJzm+CLq6xCzQWrkR2aHma65fjaNtNqANPdq fJ7BOXXYmi+gzXzeES/zrIm09JYUBjn3Eudo9lmiqGjFupc8kZVw5UJ0zw25UkiO 6NZBxdjWESRtQbDqNeTaNZJLYnk/QOvs963CRZOQ4HA5oZI66nLIOGIAJ3lsEn8R gszg5gqtcBwQCDhAn0DtWR7IAu89+gztNN2JknQpeZlXOSa237arEOkdmQ9/tbli QLA+daDxIUu+HmZbA/gvKUOZ4+NFmakhJvU3Ih0Ke6hqobGgsDVEdiu2wqDk0HvY 296IQGZTsxl0agWgDSWL/xaSI57+CDzxs/Tb9Sc+i94x+SVlnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCy8Xu1bUr2C7Gjwk9XIQCe9RfSuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zOTY2 N2Y4Yi1lN2I3LTRjMzQtYWFhMC0wMGZkZGJlZWY0OGQvNjU3YTNhODktY2FlNi0z ZDBmLTgyMTYtODQyOWFlZjk1NjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzk2NjdmOGItZTdiNy00YzM0LWFh YTAtMDBmZGRiZWVmNDhkLzM5NjY3ZjhiLWU3YjctNGMzNC1hYWEwLTAwZmRkYmVl ZjQ4ZC5jcmwwHwYDVR0jBBgwFoAUMN8a5EPYVgbeIdFXPxgyY3q5bw0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zOTY2N2Y4Yi1lN2I3LTRjMzQtYWFhMC0wMGZk ZGJlZWY0OGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6o4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABt/kdWKWtJAE4tr5VJcY+b3ENGWY6ZWbL3s0HiTnaaQiDVCbUX5lMSm AWgq9l7YHtbeuI4K5wjSy5BaLkl8mVphJgIV6BSyrN53rybIN9vvU7A9xjKuKpp8 D0HGKk1aU+Oh2Jvpt3slX39Q9oAiMC0GV0C6YEa1BgLwZkuk3K+qF8DWUhpSpuDZ Qu+Htqm90PEPmPSoCYnJ9xiK0K4rgQ4Z3leaCaPyQoC2p1HQxzJ0wHY57/GVlXti dt+N1Q9LVd5ei/yQYsO7TQWUgT4f31sjtO7bugh7RkIq7/reo3JjkOOBa5e2S+9m ZEK892X8kOsolOdUqr66bCjMtPBrOZ4= -----END CERTIFICATE-----Generated at Thu Sep 10 05:19:26 2026 by rpki-client