$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/14f63f23-4dd6-39b4-bee1-1cf1a112b843.roa File: 14f63f23-4dd6-39b4-bee1-1cf1a112b843.roa (raw, json) Hash identifier: khcs31aAPZwgkyB3NZCXMNBJWTXpgp9mvbP/5B0uzA4= Subject key identifier: 91:2E:D2:2B:C1:39:F7:3C:F3:84:89:4A:8E:00:4E:96:C0:F7:FA:49 Certificate issuer: /CN=b9b87434-00de-4d2f-a45d-abe1efe5ecfd Certificate serial: 010D0C9F4328584E5D14B081E901F9D433324E00 Authority key identifier: 67:BA:AB:82:D5:25:B6:AD:DE:AC:2E:FF:27:E5:85:9C:97:CE:3C:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/14f63f23-4dd6-39b4-bee1-1cf1a112b843.roa Signing time: Thu 02 Jul 2026 09:00:12 +0000 ROA not before: Thu 02 Jul 2026 09:00:12 +0000 ROA not after: Wed 30 Sep 2026 09:00:12 +0000 asID: 40569 IP address blocks: 23.171.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Jul 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5d:14:b0:81:e9:01:f9:d4:33:32:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9b87434-00de-4d2f-a45d-abe1efe5ecfd Validity Not Before: Jul 2 09:00:12 2026 GMT Not After : Sep 30 09:00:12 2026 GMT Subject: CN=2c1bbb67-c3e8-403c-82f6-be4b79a07446 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:21:e2:12:fe:52:37:8b:47:97:1d:3e:c6:97: b8:8d:b8:9f:10:34:3b:4c:c6:d8:d7:60:b0:7b:ee: bb:52:b2:e6:97:a0:b1:06:24:55:7c:36:28:e1:4b: 70:d9:8d:6d:b6:0a:38:27:93:06:3e:f6:8f:84:b6: 20:e5:4c:84:19:7a:cd:8b:03:1a:5b:f2:a3:61:ab: 4f:15:28:50:d8:3c:de:af:74:0c:2f:89:22:cb:db: 3e:60:80:e3:d9:c2:a3:e8:36:8e:d4:e5:0a:36:69: 78:9b:34:9b:e5:ca:89:e4:69:9e:ac:46:c1:dc:e2: 11:4e:c2:5f:35:98:68:2d:4e:d7:57:66:08:f2:79: 34:6d:26:1a:da:d8:51:9d:49:c2:cd:da:d8:2a:59: 8f:40:a0:d0:a8:9e:e4:e9:a2:4e:05:a9:03:da:4b: cf:4e:ef:21:f6:5f:e5:e2:20:5a:6d:9f:65:e7:22: c4:4c:50:26:5b:17:56:95:f9:30:94:89:49:75:23: 29:d3:63:ad:82:d7:a0:18:5b:c3:af:dc:09:6f:de: 0d:c8:b8:88:65:c4:ed:a6:46:72:22:8a:f1:21:d9: 7e:60:6c:5a:43:19:de:81:41:5e:8e:84:7a:a0:41: eb:8d:ac:d7:48:17:cb:e7:0e:3f:30:f1:dc:09:b3: e7:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:2E:D2:2B:C1:39:F7:3C:F3:84:89:4A:8E:00:4E:96:C0:F7:FA:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/14f63f23-4dd6-39b4-bee1-1cf1a112b843.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.crl X509v3 Authority Key Identifier: keyid:67:BA:AB:82:D5:25:B6:AD:DE:AC:2E:FF:27:E5:85:9C:97:CE:3C:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.cer sbgp-ipAddrBlock: critical IPv4: 23.171.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:11:4b:6a:cc:33:ae:cd:85:f3:20:8c:b6:50:53:d7:58:62: 5e:11:da:d8:31:9b:02:e1:f4:b9:fa:7e:86:67:3b:63:df:b1: 46:b2:e0:e6:74:76:d7:0a:52:c8:32:6e:00:28:29:00:da:08: 0d:7c:05:e0:61:5b:27:ca:b9:18:6a:d2:f8:ce:af:f0:e2:d1: d6:f9:4c:2a:39:5b:0b:58:35:51:8a:fb:e0:01:1d:9a:8d:7a: fa:30:78:1c:45:4b:da:af:9b:3b:70:81:b4:46:4e:07:48:7e: 18:60:69:36:e0:2c:1c:22:8c:42:30:d9:46:a5:31:d3:27:da: 30:12:c9:00:79:db:03:ca:8c:e9:e3:0b:80:a6:ae:bd:7d:52: 9b:51:c1:ae:a5:18:4d:4a:42:46:e6:06:5d:e3:aa:63:4e:55: 81:ec:06:b6:70:85:8a:02:da:8d:14:73:da:c9:57:8b:d1:6d: 35:f7:6b:f2:0a:21:9b:38:f6:1c:27:3e:bf:2f:3f:13:43:41: 05:6f:5c:cf:59:71:dd:ab:9f:2f:7b:ab:50:99:c8:dd:1d:73: 72:d5:a0:94:7f:91:3a:5d:08:8c:87:80:d6:1e:51:61:1e:7f: be:ca:40:94:57:44:e8:ab:e5:9b:aa:13:a4:c3:16:27:40:8a: 13:d3:b3:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5dFLCB6QH51DMyTgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjliODc0MzQtMDBkZS00ZDJmLWE0NWQtYWJlMWVmZTVl Y2ZkMB4XDTI2MDcwMjA5MDAxMloXDTI2MDkzMDA5MDAxMlowLzEtMCsGA1UEAxMk MmMxYmJiNjctYzNlOC00MDNjLTgyZjYtYmU0Yjc5YTA3NDQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSHiEv5SN4tHlx0+xpe4jbifEDQ7TMbY12Cw e+67UrLml6CxBiRVfDYo4Utw2Y1ttgo4J5MGPvaPhLYg5UyEGXrNiwMaW/KjYatP FShQ2Dzer3QML4kiy9s+YIDj2cKj6DaO1OUKNml4mzSb5cqJ5GmerEbB3OIRTsJf NZhoLU7XV2YI8nk0bSYa2thRnUnCzdrYKlmPQKDQqJ7k6aJOBakD2kvPTu8h9l/l 4iBabZ9l5yLETFAmWxdWlfkwlIlJdSMp02OtgtegGFvDr9wJb94NyLiIZcTtpkZy IorxIdl+YGxaQxnegUFejoR6oEHrjazXSBfL5w4/MPHcCbPnawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJEu0ivBOfc884SJSo4ATpbA9/pJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iOWI4 NzQzNC0wMGRlLTRkMmYtYTQ1ZC1hYmUxZWZlNWVjZmQvMTRmNjNmMjMtNGRkNi0z OWI0LWJlZTEtMWNmMWExMTJiODQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjliODc0MzQtMDBkZS00ZDJmLWE0 NWQtYWJlMWVmZTVlY2ZkL2I5Yjg3NDM0LTAwZGUtNGQyZi1hNDVkLWFiZTFlZmU1 ZWNmZC5jcmwwHwYDVR0jBBgwFoAUZ7qrgtUltq3erC7/J+WFnJfOPGswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iOWI4NzQzNC0wMGRlLTRkMmYtYTQ1ZC1hYmUx ZWZlNWVjZmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6uoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL4RS2rMM67NhfMgjLZQU9dYYl4R2tgxmwLh9Ln6foZnO2PfsUay4OZ0 dtcKUsgybgAoKQDaCA18BeBhWyfKuRhq0vjOr/Di0db5TCo5WwtYNVGK++ABHZqN evoweBxFS9qvmztwgbRGTgdIfhhgaTbgLBwijEIw2UalMdMn2jASyQB52wPKjOnj C4Cmrr19UptRwa6lGE1KQkbmBl3jqmNOVYHsBrZwhYoC2o0Uc9rJV4vRbTX3a/IK IZs49hwnPr8vPxNDQQVvXM9Zcd2rny97q1CZyN0dc3LVoJR/kTpdCIyHgNYeUWEe f77KQJRXROir5ZuqE6TDFidAihPTs08= -----END CERTIFICATE-----Generated at Fri Jul 10 01:20:01 2026 by rpki-client