$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/d4cb7a07-3013-37f5-aa8c-b08579fc062a.roa File: d4cb7a07-3013-37f5-aa8c-b08579fc062a.roa (raw, json) Hash identifier: eNO2Dzcp+dGAznsthU8pDmH8K4jUp+WzV2DyzVR0vTY= Subject key identifier: 17:DC:DA:5B:2B:9A:DD:1D:48:B1:57:31:78:14:AE:DA:C1:AA:05:71 Certificate issuer: /CN=b5db45db-8c92-4b61-a3d5-f5bbb993bdc3 Certificate serial: 010D0C9F4328584EA7901DD899408BA1911D7C40 Authority key identifier: 92:7D:D7:70:1F:B4:FA:EE:7E:66:5D:66:8F:0C:09:8B:B2:93:A4:60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/d4cb7a07-3013-37f5-aa8c-b08579fc062a.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 400928 IP address blocks: 23.173.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:90:1d:d8:99:40:8b:a1:91:1d:7c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5db45db-8c92-4b61-a3d5-f5bbb993bdc3 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=678c07a3-53ee-4f4f-88cb-e102de674cec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:14:2a:9a:67:79:01:8b:17:45:ea:a4:16:86: 83:3e:46:19:24:d6:ee:73:99:a9:af:2c:ca:82:a7: 08:1c:5e:83:1d:de:e0:0c:61:7f:9c:33:e6:39:8c: 99:61:44:bd:28:94:1a:a0:17:ea:54:04:84:bb:1b: 20:a0:97:6d:2b:86:b0:c7:6a:ab:c7:77:aa:37:e4: 6e:0b:79:8d:0a:f1:d6:0f:d5:ea:56:20:59:28:cb: 2d:07:92:9f:e8:9d:9f:0e:b5:e6:60:e3:ae:6b:39: ee:65:57:b1:d6:66:62:56:66:ea:79:d4:9c:14:4a: 26:4d:33:14:4d:2d:60:24:5e:af:08:1e:58:23:1b: 82:f7:ee:4e:0d:54:8a:a7:89:f0:be:e7:bd:9b:2a: a7:05:40:08:e9:e6:f0:dc:57:e8:57:ba:44:a8:52: 67:d6:cf:95:85:63:1a:4a:52:bf:15:ee:d1:92:ac: f8:e3:87:75:95:06:f3:f4:4e:4b:54:21:f2:bf:b6: 00:20:ab:9b:f4:68:0f:9e:9b:11:d8:cc:d8:ac:f3: 4f:d9:66:cc:b8:4a:a7:d7:9e:a5:0e:c3:f7:91:37: 9d:ea:e2:41:18:0f:fb:1b:31:0c:90:6a:dc:70:ab: db:c8:29:b7:6d:94:57:11:c7:00:c7:eb:c1:00:57: c7:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:DC:DA:5B:2B:9A:DD:1D:48:B1:57:31:78:14:AE:DA:C1:AA:05:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/d4cb7a07-3013-37f5-aa8c-b08579fc062a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.crl X509v3 Authority Key Identifier: keyid:92:7D:D7:70:1F:B4:FA:EE:7E:66:5D:66:8F:0C:09:8B:B2:93:A4:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.cer sbgp-ipAddrBlock: critical IPv4: 23.173.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:d2:57:91:17:0b:c4:80:21:34:5d:d6:36:18:14:69:47:bb: b9:90:dd:ee:cf:8d:22:a4:7e:6d:98:61:0e:5e:ec:69:23:09: 6a:80:71:73:52:4a:26:d3:fd:bf:f5:aa:bf:d8:fe:cc:51:18: 06:c7:8d:71:75:af:a9:a1:20:bb:5f:90:ea:d9:a4:47:76:cd: 1e:cb:15:5a:7e:66:a1:6d:43:11:7e:dd:c3:f5:94:7d:50:93: ab:5e:65:6d:30:e5:bf:fe:cc:34:8c:3a:7e:21:73:6f:53:aa: c3:98:ac:c7:00:44:99:d3:da:05:c8:e1:a1:d2:8f:f8:51:28: 9a:c8:a2:69:14:f4:a7:3f:71:37:72:64:e1:d8:1c:e8:bb:a0: d9:4c:d8:75:79:60:48:8d:e3:05:20:6c:61:1b:fb:b5:d2:64: 7c:71:d9:b0:22:a2:a3:b2:89:b9:51:53:0a:cf:93:0a:04:d1: c5:04:25:9d:4f:97:af:eb:20:33:47:03:2a:52:c3:43:e4:6d: 2d:f1:4c:ed:87:8b:a2:6d:dc:ef:e7:f2:bf:cb:fb:f4:b1:80: 63:08:3e:5f:e7:3c:f0:2f:53:7c:ec:62:5c:27:61:ed:d6:ca: bf:5d:4e:73:47:12:5a:e4:26:e8:ba:26:14:b3:fe:3f:ca:fb: 43:27:c9:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkB3YmUCLoZEdfEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVkYjQ1ZGItOGM5Mi00YjYxLWEzZDUtZjViYmI5OTNi ZGMzMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk Njc4YzA3YTMtNTNlZS00ZjRmLTg4Y2ItZTEwMmRlNjc0Y2VjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRQqmmd5AYsXReqkFoaDPkYZJNbuc5mpryzK gqcIHF6DHd7gDGF/nDPmOYyZYUS9KJQaoBfqVASEuxsgoJdtK4awx2qrx3eqN+Ru C3mNCvHWD9XqViBZKMstB5Kf6J2fDrXmYOOuaznuZVex1mZiVmbqedScFEomTTMU TS1gJF6vCB5YIxuC9+5ODVSKp4nwvue9myqnBUAI6ebw3FfoV7pEqFJn1s+VhWMa SlK/Fe7Rkqz444d1lQbz9E5LVCHyv7YAIKub9GgPnpsR2MzYrPNP2WbMuEqn156l DsP3kTed6uJBGA/7GzEMkGrccKvbyCm3bZRXEccAx+vBAFfHewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBfc2lsrmt0dSLFXMXgUrtrBqgVxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iNWRi NDVkYi04YzkyLTRiNjEtYTNkNS1mNWJiYjk5M2JkYzMvZDRjYjdhMDctMzAxMy0z N2Y1LWFhOGMtYjA4NTc5ZmMwNjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjVkYjQ1ZGItOGM5Mi00YjYxLWEz ZDUtZjViYmI5OTNiZGMzL2I1ZGI0NWRiLThjOTItNGI2MS1hM2Q1LWY1YmJiOTkz YmRjMy5jcmwwHwYDVR0jBBgwFoAUkn3XcB+0+u5+Zl1mjwwJi7KTpGAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iNWRiNDVkYi04YzkyLTRiNjEtYTNkNS1mNWJi Yjk5M2JkYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF60YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIbSV5EXC8SAITRd1jYYFGlHu7mQ3e7PjSKkfm2YYQ5e7GkjCWqAcXNS SibT/b/1qr/Y/sxRGAbHjXF1r6mhILtfkOrZpEd2zR7LFVp+ZqFtQxF+3cP1lH1Q k6teZW0w5b/+zDSMOn4hc29TqsOYrMcARJnT2gXI4aHSj/hRKJrIomkU9Kc/cTdy ZOHYHOi7oNlM2HV5YEiN4wUgbGEb+7XSZHxx2bAioqOyiblRUwrPkwoE0cUEJZ1P l6/rIDNHAypSw0PkbS3xTO2Hi6Jt3O/n8r/L+/SxgGMIPl/nPPAvU3zsYlwnYe3W yr9dTnNHElrkJui6JhSz/j/K+0MnyTE= -----END CERTIFICATE-----Generated at Fri Aug 21 00:18:23 2026 by rpki-client