$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70379220-49c0-45f2-94d3-098a72b1db54/2dfe31c7-54ee-3017-8637-ce67fd53b424.roa File: 2dfe31c7-54ee-3017-8637-ce67fd53b424.roa (raw, json) Hash identifier: Y3T38m5t9gMXIJWGl0BadxBI17AoWOn1AHS2rdbv8eI= Subject key identifier: ED:83:58:3B:33:63:62:61:22:D6:30:99:F5:48:DB:EE:7A:4C:3D:76 Certificate issuer: /CN=70379220-49c0-45f2-94d3-098a72b1db54 Certificate serial: 010D0C9F4328584EA79BAB5D8FA24CACC8176880 Authority key identifier: DE:AE:5B:59:16:A5:88:64:34:27:20:3B:E1:A0:9C:5E:69:FB:57:BD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70379220-49c0-45f2-94d3-098a72b1db54.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70379220-49c0-45f2-94d3-098a72b1db54/2dfe31c7-54ee-3017-8637-ce67fd53b424.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 400656 IP address blocks: 23.135.152.0/23 maxlen: 23 2606:cb40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70379220-49c0-45f2-94d3-098a72b1db54/70379220-49c0-45f2-94d3-098a72b1db54.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70379220-49c0-45f2-94d3-098a72b1db54/70379220-49c0-45f2-94d3-098a72b1db54.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70379220-49c0-45f2-94d3-098a72b1db54.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9b:ab:5d:8f:a2:4c:ac:c8:17:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70379220-49c0-45f2-94d3-098a72b1db54 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=8c12c669-37da-4b6c-8619-b62b70f031b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:55:f0:a0:53:94:a7:a9:92:92:84:32:a3:cb: 34:e5:7c:e1:f7:5e:dd:c8:0e:06:52:2f:bd:c5:68: 2e:67:b7:a5:a5:f4:08:5d:8c:b7:3a:0b:1e:c7:59: 90:40:5d:71:3c:4e:77:e3:65:5b:26:c6:2b:b7:fd: e4:6f:f4:1a:ec:fc:cc:eb:72:8d:93:ef:e5:3f:50: 08:dc:7b:37:b8:00:14:4f:5d:19:90:24:ec:43:6e: 9b:0f:ab:5b:b7:19:e7:1a:79:37:d8:af:3f:75:85: 4d:23:46:da:99:5b:7a:b2:75:3b:1d:35:4a:50:f6: d0:13:bb:45:08:a7:83:79:62:fa:6f:5f:0d:63:3d: 47:30:c5:00:a3:74:d1:bf:32:17:a2:9b:0e:9d:4d: 70:c7:d7:c7:05:74:63:3e:ca:6f:b8:ea:9c:d2:f6: d6:92:be:52:d9:05:1b:80:b4:16:73:32:d6:1d:21: 0a:fc:2d:d0:e7:ba:45:2e:05:3f:1a:10:38:14:d7: dd:38:20:89:7a:0d:82:b9:42:ef:59:52:c6:c2:7a: 10:f3:3d:b4:69:71:8f:30:17:d3:97:f6:96:44:6f: 53:f2:80:39:58:ac:42:fc:cd:c1:71:27:8c:9d:21: 3d:9a:80:d6:a9:82:a7:40:60:95:e4:a7:a0:62:94: 50:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:83:58:3B:33:63:62:61:22:D6:30:99:F5:48:DB:EE:7A:4C:3D:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70379220-49c0-45f2-94d3-098a72b1db54/2dfe31c7-54ee-3017-8637-ce67fd53b424.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70379220-49c0-45f2-94d3-098a72b1db54/70379220-49c0-45f2-94d3-098a72b1db54.crl X509v3 Authority Key Identifier: keyid:DE:AE:5B:59:16:A5:88:64:34:27:20:3B:E1:A0:9C:5E:69:FB:57:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70379220-49c0-45f2-94d3-098a72b1db54.cer sbgp-ipAddrBlock: critical IPv4: 23.135.152.0/23 IPv6: 2606:cb40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:0d:4e:46:b8:7e:fd:33:98:de:58:c5:b3:4f:38:c6:06:c0: 5b:15:43:e0:08:fc:d5:5e:22:2f:14:41:02:ba:c4:d1:81:5b: 75:e0:23:b9:1d:95:96:2f:f9:2a:6b:98:76:c1:4d:58:b5:82: f2:57:e2:ba:a1:13:89:bc:d8:e3:ab:8a:ab:cf:02:cc:4d:dd: df:54:84:da:ac:71:a9:f3:ba:f3:41:8b:8f:75:12:a6:7f:91: 4b:19:22:ed:c7:36:d7:b5:22:7a:fc:60:1c:18:41:2b:e5:db: 81:39:71:56:cf:f3:53:d3:48:70:4f:ec:e2:28:9c:19:8c:cb: a8:1f:f0:0f:cc:7a:2d:ce:6f:0d:4d:6c:ee:4d:10:73:6c:5b: 45:d2:d2:25:de:e4:51:36:7d:b6:a6:62:24:f0:d5:a9:d5:0c: 30:18:e8:38:d3:b6:f7:6e:66:da:39:29:9a:97:1e:15:8e:92: 3d:cf:31:67:cb:8f:fd:9d:97:17:72:b8:c6:37:3c:09:8c:7d: 8f:54:0d:e9:3c:50:35:a0:f2:05:a7:8a:66:fc:29:2f:ff:f4: 77:69:7e:f6:d1:99:65:6a:1f:71:4a:1d:f2:9c:1a:72:b7:26: f6:9f:70:8d:f3:b8:23:10:b1:6a:e6:6c:0a:40:35:c5:b3:f3: 01:3a:f6:d9 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE6nm6tdj6JMrMgXaIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzAzNzkyMjAtNDljMC00NWYyLTk0ZDMtMDk4YTcyYjFk YjU0MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OGMxMmM2NjktMzdkYS00YjZjLTg2MTktYjYyYjcwZjAzMWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlXwoFOUp6mSkoQyo8s05Xzh917dyA4GUi+9 xWguZ7elpfQIXYy3Ogsex1mQQF1xPE5342VbJsYrt/3kb/Qa7PzM63KNk+/lP1AI 3Hs3uAAUT10ZkCTsQ26bD6tbtxnnGnk32K8/dYVNI0bamVt6snU7HTVKUPbQE7tF CKeDeWL6b18NYz1HMMUAo3TRvzIXopsOnU1wx9fHBXRjPspvuOqc0vbWkr5S2QUb gLQWczLWHSEK/C3Q57pFLgU/GhA4FNfdOCCJeg2CuULvWVLGwnoQ8z20aXGPMBfT l/aWRG9T8oA5WKxC/M3BcSeMnSE9moDWqYKnQGCV5KegYpRQHQIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFO2DWDszY2JhItYwmfVI2+56TD12MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83MDM3 OTIyMC00OWMwLTQ1ZjItOTRkMy0wOThhNzJiMWRiNTQvMmRmZTMxYzctNTRlZS0z MDE3LTg2MzctY2U2N2ZkNTNiNDI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzAzNzkyMjAtNDljMC00NWYyLTk0 ZDMtMDk4YTcyYjFkYjU0LzcwMzc5MjIwLTQ5YzAtNDVmMi05NGQzLTA5OGE3MmIx ZGI1NC5jcmwwHwYDVR0jBBgwFoAU3q5bWRaliGQ0JyA74aCcXmn7V70wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83MDM3OTIyMC00OWMwLTQ1ZjItOTRkMy0wOThh NzJiMWRiNTQuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBF4eYMA0E AgACMAcDBQAmBstAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAG0NTka4fv0zmN5YxbNPOMYGwFsVQ+AI/NVe Ii8UQQK6xNGBW3XgI7kdlZYv+SprmHbBTVi1gvJX4rqhE4m82OOriqvPAsxN3d9U hNqscanzuvNBi491EqZ/kUsZIu3HNte1Inr8YBwYQSvl24E5cVbP81PTSHBP7OIo nBmMy6gf8A/Mei3Obw1NbO5NEHNsW0XS0iXe5FE2fbamYiTw1anVDDAY6DjTtvdu Zto5KZqXHhWOkj3PMWfLj/2dlxdyuMY3PAmMfY9UDek8UDWg8gWnimb8KS//9Hdp fvbRmWVqH3FKHfKcGnK3JvafcI3zuCMQsWrmbApANcWz8wE69tk= -----END CERTIFICATE-----Generated at Thu Aug 27 04:12:57 2026 by rpki-client