$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/657a3a89-cae6-3d0f-8216-8429aef9560e.roa File: 657a3a89-cae6-3d0f-8216-8429aef9560e.roa (raw, json) Hash identifier: xWPaPy44HKYlzlHLnF8XD/S7DeKZ1Sa0AoTgo/dDUlI= Subject key identifier: 6C:C4:17:C6:B7:CA:D4:88:E0:F8:3B:86:76:65:A0:32:40:D2:DF:8F Certificate issuer: /CN=39667f8b-e7b7-4c34-aaa0-00fddbeef48d Certificate serial: 010D0C9F4328584E31CF8228950F8087482B7900 Authority key identifier: 30:DF:1A:E4:43:D8:56:06:DE:21:D1:57:3F:18:32:63:7A:B9:6F:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/657a3a89-cae6-3d0f-8216-8429aef9560e.roa Signing time: Tue 16 Jun 2026 21:00:12 +0000 ROA not before: Tue 16 Jun 2026 21:00:12 +0000 ROA not after: Mon 14 Sep 2026 21:00:12 +0000 asID: 401160 IP address blocks: 23.170.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Jul 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:31:cf:82:28:95:0f:80:87:48:2b:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39667f8b-e7b7-4c34-aaa0-00fddbeef48d Validity Not Before: Jun 16 21:00:12 2026 GMT Not After : Sep 14 21:00:12 2026 GMT Subject: CN=d19af1e3-a2ec-4e76-99f4-b3138b4bb75f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:1c:c0:55:34:3d:8f:dc:a6:a5:76:f5:53:cb: 5e:79:59:fa:37:f2:cb:e4:ad:60:e8:c4:6b:e3:46: ff:ea:4e:40:f7:7d:6f:e2:63:05:75:99:ae:80:82: eb:d9:f2:a0:11:aa:58:99:e5:96:35:dd:68:50:34: ee:57:c2:69:7c:05:da:a7:8c:60:d4:c7:6e:b4:02: 08:43:f7:43:1a:eb:db:a4:c9:c5:5b:f9:98:4c:e9: 07:47:14:31:d4:2b:f8:e2:ea:02:84:e5:b4:77:fe: d6:72:c9:56:c6:1a:ec:01:91:b7:86:38:3f:89:bb: 0f:82:67:61:d0:b4:16:31:a1:70:fc:06:f4:57:68: 9e:7b:75:28:b6:2b:3e:bf:f0:98:82:d6:b5:b9:e9: 02:1e:6c:23:f4:1f:f9:08:46:9f:25:a7:0c:b2:23: 66:b8:1b:a1:f3:e3:6e:3a:7f:77:1f:c0:ab:b6:bd: 43:b7:55:6a:f8:61:88:1d:6b:ba:a7:58:d2:ee:43: c9:34:b3:c1:1f:22:84:9c:76:48:80:e9:48:80:ac: a4:dd:12:f9:2c:3f:48:66:56:08:22:00:63:fb:c1: a9:05:66:5f:9f:e5:e3:8a:7c:16:ba:7e:a9:d0:29: aa:f4:b1:d3:aa:fc:63:49:26:cf:53:d2:f4:1e:00: 37:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:C4:17:C6:B7:CA:D4:88:E0:F8:3B:86:76:65:A0:32:40:D2:DF:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/657a3a89-cae6-3d0f-8216-8429aef9560e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.crl X509v3 Authority Key Identifier: keyid:30:DF:1A:E4:43:D8:56:06:DE:21:D1:57:3F:18:32:63:7A:B9:6F:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.cer sbgp-ipAddrBlock: critical IPv4: 23.170.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:a1:d6:44:66:33:4c:90:fb:86:a3:3c:85:82:bd:17:b7:32: 96:c3:ce:85:ff:c3:30:66:ee:1f:6a:36:87:b3:42:98:38:d6: fc:6d:cb:67:2f:fe:1a:38:49:bd:3b:66:5f:c3:d9:e2:34:a9: da:5c:8e:88:a7:d7:50:81:62:1b:02:d1:74:c3:ed:79:d4:7a: 4e:b4:ff:4f:dd:0e:12:f9:58:7d:74:bd:21:bb:c9:fe:24:b2: 47:fb:d0:7c:1b:7e:d1:6b:8a:c9:d2:42:2c:14:f3:13:fb:9e: fe:04:7c:c5:b0:82:2b:96:f6:c9:a2:37:d4:e8:19:7c:9f:ca: 41:88:2b:23:5f:90:06:5f:1c:94:17:bb:69:8e:04:63:a7:b1: 01:14:4d:d6:cd:3c:a9:36:29:70:7a:cc:6d:e2:c2:b5:a3:43: 25:35:9d:ba:c7:6a:c9:86:15:a5:91:d6:b5:80:5d:a5:1c:cd: 47:2f:25:b4:33:a3:b7:ec:56:10:b9:68:e7:f2:10:4f:54:81: f2:24:2b:cd:0d:d6:3b:05:8f:09:f3:7e:06:77:a6:b9:65:48: 15:3d:4b:3a:1d:60:c4:b2:aa:fb:35:29:a7:d2:7b:b9:b1:c9: 17:64:72:cb:82:00:55:d6:68:ca:4b:d7:d6:d3:1f:0f:11:c2: ff:82:68:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4xz4IolQ+Ah0greQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzk2NjdmOGItZTdiNy00YzM0LWFhYTAtMDBmZGRiZWVm NDhkMB4XDTI2MDYxNjIxMDAxMloXDTI2MDkxNDIxMDAxMlowLzEtMCsGA1UEAxMk ZDE5YWYxZTMtYTJlYy00ZTc2LTk5ZjQtYjMxMzhiNGJiNzVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxzAVTQ9j9ympXb1U8teeVn6N/LL5K1g6MRr 40b/6k5A931v4mMFdZmugILr2fKgEapYmeWWNd1oUDTuV8JpfAXap4xg1MdutAII Q/dDGuvbpMnFW/mYTOkHRxQx1Cv44uoChOW0d/7WcslWxhrsAZG3hjg/ibsPgmdh 0LQWMaFw/Ab0V2iee3Uotis+v/CYgta1uekCHmwj9B/5CEafJacMsiNmuBuh8+Nu On93H8Crtr1Dt1Vq+GGIHWu6p1jS7kPJNLPBHyKEnHZIgOlIgKyk3RL5LD9IZlYI IgBj+8GpBWZfn+XjinwWun6p0Cmq9LHTqvxjSSbPU9L0HgA3BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGzEF8a3ytSI4Pg7hnZloDJA0t+PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zOTY2 N2Y4Yi1lN2I3LTRjMzQtYWFhMC0wMGZkZGJlZWY0OGQvNjU3YTNhODktY2FlNi0z ZDBmLTgyMTYtODQyOWFlZjk1NjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzk2NjdmOGItZTdiNy00YzM0LWFh YTAtMDBmZGRiZWVmNDhkLzM5NjY3ZjhiLWU3YjctNGMzNC1hYWEwLTAwZmRkYmVl ZjQ4ZC5jcmwwHwYDVR0jBBgwFoAUMN8a5EPYVgbeIdFXPxgyY3q5bw0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zOTY2N2Y4Yi1lN2I3LTRjMzQtYWFhMC0wMGZk ZGJlZWY0OGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6o4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAISh1kRmM0yQ+4ajPIWCvRe3MpbDzoX/wzBm7h9qNoezQpg41vxty2cv /ho4Sb07Zl/D2eI0qdpcjoin11CBYhsC0XTD7XnUek60/0/dDhL5WH10vSG7yf4k skf70HwbftFrisnSQiwU8xP7nv4EfMWwgiuW9smiN9ToGXyfykGIKyNfkAZfHJQX u2mOBGOnsQEUTdbNPKk2KXB6zG3iwrWjQyU1nbrHasmGFaWR1rWAXaUczUcvJbQz o7fsVhC5aOfyEE9UgfIkK80N1jsFjwnzfgZ3prllSBU9SzodYMSyqvs1KafSe7mx yRdkcsuCAFXWaMpL19bTHw8Rwv+CaKU= -----END CERTIFICATE-----Generated at Sat Jul 18 06:45:59 2026 by rpki-client