$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/882d0ec4-8387-38e3-93e9-e4806eb2a252.roa File: 882d0ec4-8387-38e3-93e9-e4806eb2a252.roa (raw, json) Hash identifier: Q/vv0cyt6FiDSZbMkf6uuGzA5gFulFR/sTTXnA0rxuE= Subject key identifier: 4E:0F:D3:D9:40:7B:A4:DB:DF:53:E9:E5:B6:3C:9E:A0:D9:BA:48:F6 Certificate issuer: /CN=3ee720de-c322-4bb5-b8cd-c7a3f23b92d7 Certificate serial: 010D0C9F4328584EDC921264467B76FE55C5BC00 Authority key identifier: 09:E5:A6:15:6F:8C:9D:40:E2:35:5F:CF:DA:0D:F5:05:3E:52:6F:E8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/882d0ec4-8387-38e3-93e9-e4806eb2a252.roa Signing time: Mon 17 Aug 2026 01:00:12 +0000 ROA not before: Mon 17 Aug 2026 01:00:12 +0000 ROA not after: Sun 15 Nov 2026 02:00:12 +0000 asID: 26904 IP address blocks: 23.247.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:dc:92:12:64:46:7b:76:fe:55:c5:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ee720de-c322-4bb5-b8cd-c7a3f23b92d7 Validity Not Before: Aug 17 01:00:12 2026 GMT Not After : Nov 15 02:00:12 2026 GMT Subject: CN=5e447b5b-a774-4bf8-bae3-d13ef9e987d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:02:2c:d7:de:6a:f7:00:da:59:21:10:9c:16: e8:6d:93:a4:52:22:de:29:cd:b7:e0:f4:26:ec:99: 32:2e:17:8b:ce:cc:f9:19:fe:1d:09:6c:84:89:08: 55:84:5c:39:1e:ed:c0:db:71:2c:07:cc:73:b8:fd: c0:7f:13:75:59:9d:cc:70:75:4e:85:82:13:5c:fa: af:b3:f1:8a:a3:99:1b:ec:b6:fa:ff:08:2f:4c:ad: e9:ef:cf:9c:db:a6:5b:7d:94:fa:0e:78:49:06:83: 71:34:4a:c4:f5:ce:85:9e:e5:a0:e1:6a:97:45:f3: a6:ff:9b:1f:dc:7e:86:61:2c:49:42:b5:b5:78:fd: 28:66:7d:d5:c6:95:63:f2:80:7a:6a:8c:6e:2c:d7: bf:f7:2b:9e:37:ee:cc:10:10:dc:38:1a:44:05:35: 32:fb:53:4c:ec:a5:87:61:c9:12:f6:3c:a9:4a:69: 88:b5:5a:e4:4c:9f:26:45:d7:37:af:85:39:86:84: 25:ef:f0:99:67:06:c7:4e:e2:dd:79:1d:21:1b:0e: cd:c7:b0:6c:3f:98:fd:e5:b9:4d:03:4c:ce:91:7f: c6:14:8c:00:3b:c4:8c:95:e7:5d:b8:62:e9:b4:60: 4d:88:c1:9f:aa:b7:54:ad:f9:7d:81:7f:7e:c5:24: 02:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:0F:D3:D9:40:7B:A4:DB:DF:53:E9:E5:B6:3C:9E:A0:D9:BA:48:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/882d0ec4-8387-38e3-93e9-e4806eb2a252.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.crl X509v3 Authority Key Identifier: keyid:09:E5:A6:15:6F:8C:9D:40:E2:35:5F:CF:DA:0D:F5:05:3E:52:6F:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer sbgp-ipAddrBlock: critical IPv4: 23.247.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:65:94:d4:e1:0f:c6:34:b7:4e:43:19:9f:82:07:15:b0:ce: ac:32:bc:f4:60:eb:c1:51:97:ef:ab:69:61:3a:36:a8:db:84: c0:c6:ad:95:69:2c:f3:3f:b1:d1:ac:2c:2e:de:4d:39:c1:08: b1:07:93:2f:c1:f5:78:87:77:8a:4e:89:b0:82:ef:0c:92:0c: c7:a5:79:cd:49:4e:90:99:3e:5c:39:35:cb:57:d9:c1:f9:95: a3:f2:df:21:96:8a:71:e0:a1:b4:e7:f1:f4:bb:39:cb:ef:91: 27:dd:78:cd:56:00:e5:8c:a3:db:14:89:b1:6c:a5:e3:77:bb: 62:88:c1:d3:c6:14:ad:b7:e0:66:2f:4a:a3:1c:4b:2a:e3:98: 62:59:ae:88:90:09:b9:35:bd:ea:04:a8:19:75:f4:70:95:53: c8:1b:26:66:71:fd:f6:86:b9:fd:1d:55:58:e7:5c:a5:8f:70: 78:6b:1c:aa:af:0b:c2:d0:2f:80:1d:91:d7:60:5b:bc:e3:e7: a2:6f:36:d5:8e:e3:31:54:48:62:09:55:76:ed:ab:ac:69:f6: db:3e:ba:42:28:34:0a:51:48:2c:e8:14:c6:dd:48:4a:1f:7e: cb:34:f1:1a:c2:5f:90:e2:c8:fc:f9:ce:21:21:2a:db:fa:6a: 02:d7:1b:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ckhJkRnt2/lXFvAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2VlNzIwZGUtYzMyMi00YmI1LWI4Y2QtYzdhM2YyM2I5 MmQ3MB4XDTI2MDgxNzAxMDAxMloXDTI2MTExNTAyMDAxMlowLzEtMCsGA1UEAxMk NWU0NDdiNWItYTc3NC00YmY4LWJhZTMtZDEzZWY5ZTk4N2Q5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4gIs195q9wDaWSEQnBbobZOkUiLeKc234PQm 7JkyLheLzsz5Gf4dCWyEiQhVhFw5Hu3A23EsB8xzuP3AfxN1WZ3McHVOhYITXPqv s/GKo5kb7Lb6/wgvTK3p78+c26ZbfZT6DnhJBoNxNErE9c6FnuWg4WqXRfOm/5sf 3H6GYSxJQrW1eP0oZn3VxpVj8oB6aoxuLNe/9yueN+7MEBDcOBpEBTUy+1NM7KWH YckS9jypSmmItVrkTJ8mRdc3r4U5hoQl7/CZZwbHTuLdeR0hGw7Nx7BsP5j95blN A0zOkX/GFIwAO8SMledduGLptGBNiMGfqrdUrfl9gX9+xSQClQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE4P09lAe6Tb31Pp5bY8nqDZukj2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zZWU3 MjBkZS1jMzIyLTRiYjUtYjhjZC1jN2EzZjIzYjkyZDcvODgyZDBlYzQtODM4Ny0z OGUzLTkzZTktZTQ4MDZlYjJhMjUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2VlNzIwZGUtYzMyMi00YmI1LWI4 Y2QtYzdhM2YyM2I5MmQ3LzNlZTcyMGRlLWMzMjItNGJiNS1iOGNkLWM3YTNmMjNi OTJkNy5jcmwwHwYDVR0jBBgwFoAUCeWmFW+MnUDiNV/P2g31BT5Sb+gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zZWU3MjBkZS1jMzIyLTRiYjUtYjhjZC1jN2Ez ZjIzYjkyZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF/eoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdllNThD8Y0t05DGZ+CBxWwzqwyvPRg68FRl++raWE6NqjbhMDGrZVp LPM/sdGsLC7eTTnBCLEHky/B9XiHd4pOibCC7wySDMelec1JTpCZPlw5NctX2cH5 laPy3yGWinHgobTn8fS7OcvvkSfdeM1WAOWMo9sUibFspeN3u2KIwdPGFK234GYv SqMcSyrjmGJZroiQCbk1veoEqBl19HCVU8gbJmZx/faGuf0dVVjnXKWPcHhrHKqv C8LQL4AdkddgW7zj56JvNtWO4zFUSGIJVXbtq6xp9ts+ukIoNApRSCzoFMbdSEof fss08RrCX5DiyPz5ziEhKtv6agLXG60= -----END CERTIFICATE-----Generated at Tue Aug 25 21:50:34 2026 by rpki-client