$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/f069f00f-676a-3490-bfe2-b5427e021c6d.roa File: f069f00f-676a-3490-bfe2-b5427e021c6d.roa (raw, json) Hash identifier: lUrMMKSIapR0GyPiJkTmDdKxclrtagRzSLQTAP1Q4i4= Subject key identifier: 5D:02:55:11:C6:E1:D8:3B:82:44:80:CC:08:31:9A:84:3C:72:BC:9D Certificate issuer: /CN=0aa7836e-22e9-444b-9d13-5d11358bd6ab Certificate serial: 010D0C9F4328584ED9C758FBCD3789CAF0912F80 Authority key identifier: AA:57:C4:29:E5:6A:1D:D4:AF:56:9E:A4:6D:45:98:0D:26:7D:E9:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/f069f00f-676a-3490-bfe2-b5427e021c6d.roa Signing time: Sun 16 Aug 2026 01:00:14 +0000 ROA not before: Sun 16 Aug 2026 01:00:14 +0000 ROA not after: Sat 14 Nov 2026 02:00:14 +0000 asID: 397181 IP address blocks: 23.128.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d9:c7:58:fb:cd:37:89:ca:f0:91:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0aa7836e-22e9-444b-9d13-5d11358bd6ab Validity Not Before: Aug 16 01:00:14 2026 GMT Not After : Nov 14 02:00:14 2026 GMT Subject: CN=99c628e0-430c-4ce5-a676-89d935697420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:97:bc:46:72:ec:4d:20:f5:58:57:ff:b7:45: bf:f8:33:e8:be:e2:ac:28:dc:65:97:90:a0:26:26: 5a:f5:1a:21:0b:38:7c:c1:94:15:41:c3:85:1f:d8: 8d:f5:26:05:f8:f6:bb:15:dc:53:ae:af:82:d8:07: 73:d0:86:b1:60:45:77:c4:1a:c3:f6:ca:8a:93:63: 1f:96:1f:d2:94:05:ec:21:df:9c:63:d5:98:20:6f: 59:86:70:0d:f2:0f:ec:f8:c5:8c:a6:64:6d:2f:d8: f3:61:60:8f:1d:68:49:0b:51:42:c8:21:da:f3:bf: 78:9c:53:7a:bc:52:a7:35:e3:da:87:91:8f:1a:6b: e3:53:87:31:46:3e:e6:13:10:bd:1b:51:02:08:e0: 95:dd:0c:a7:89:d3:49:b0:07:2e:a1:ad:19:78:de: 73:3d:8a:41:d6:89:63:c4:ac:bd:f2:7b:79:67:d2: f2:51:22:42:a0:c3:03:a5:20:80:0a:27:0a:6d:be: f1:af:3d:a9:05:01:ef:a8:ae:0a:a9:84:52:60:2e: 43:f2:44:c1:59:b8:ba:45:15:94:1c:7f:8a:67:17: 89:bd:af:52:a9:2d:73:e3:b6:9b:a5:2f:92:8e:db: 44:b1:48:06:1b:6f:71:55:40:03:24:b9:26:04:30: 8a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:02:55:11:C6:E1:D8:3B:82:44:80:CC:08:31:9A:84:3C:72:BC:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/f069f00f-676a-3490-bfe2-b5427e021c6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.crl X509v3 Authority Key Identifier: keyid:AA:57:C4:29:E5:6A:1D:D4:AF:56:9E:A4:6D:45:98:0D:26:7D:E9:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer sbgp-ipAddrBlock: critical IPv4: 23.128.160.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:60:93:dc:72:2e:d8:98:48:23:3b:a9:7d:f7:3d:d7:fc:86: db:f9:b8:6a:f2:08:4e:b9:aa:25:e3:d1:0b:86:1e:3b:bf:81: bf:cd:f4:f6:0a:e5:f3:e3:f4:0e:43:c9:91:af:c7:a7:ac:e3: 63:f1:8e:2a:59:66:89:54:41:7c:f6:5b:26:08:1b:59:5a:ca: 50:68:8d:d6:a4:e2:8f:29:69:d4:00:63:30:03:a7:ce:10:c1: 8e:a7:25:85:6c:ac:e0:59:7b:4a:60:0b:ce:e1:33:9a:e6:73: 50:23:9b:c2:0e:12:df:9a:72:14:7b:40:0d:6f:34:82:f0:16: 6e:08:8a:b5:29:66:cb:84:d1:10:5a:05:bf:c1:59:d3:1b:89: c0:09:f1:60:8f:09:2f:b7:7e:87:b9:c7:dd:9a:7e:bf:fa:ea: 7d:c9:76:13:d2:fd:b5:c1:4f:51:5e:aa:5b:fd:0d:0d:f1:71: 28:89:16:69:0f:22:d4:6f:11:b1:11:83:79:2c:00:f3:54:8e: a3:9b:e7:6d:88:6f:6c:46:a2:32:4f:e6:b5:24:6b:62:d2:78: 28:90:95:7a:4f:c2:47:71:1d:6f:ac:1d:06:28:b4:03:a3:a1: 60:bd:29:4c:c6:45:56:b0:6d:4d:cf:a4:77:6f:49:d5:ba:ca: a8:87:2d:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Zx1j7zTeJyvCRL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFhNzgzNmUtMjJlOS00NDRiLTlkMTMtNWQxMTM1OGJk NmFiMB4XDTI2MDgxNjAxMDAxNFoXDTI2MTExNDAyMDAxNFowLzEtMCsGA1UEAxMk OTljNjI4ZTAtNDMwYy00Y2U1LWE2NzYtODlkOTM1Njk3NDIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25e8RnLsTSD1WFf/t0W/+DPovuKsKNxll5Cg JiZa9RohCzh8wZQVQcOFH9iN9SYF+Pa7FdxTrq+C2Adz0IaxYEV3xBrD9sqKk2Mf lh/SlAXsId+cY9WYIG9ZhnAN8g/s+MWMpmRtL9jzYWCPHWhJC1FCyCHa8794nFN6 vFKnNePah5GPGmvjU4cxRj7mExC9G1ECCOCV3QynidNJsAcuoa0ZeN5zPYpB1olj xKy98nt5Z9LyUSJCoMMDpSCACicKbb7xrz2pBQHvqK4KqYRSYC5D8kTBWbi6RRWU HH+KZxeJva9SqS1z47abpS+SjttEsUgGG29xVUADJLkmBDCKWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF0CVRHG4dg7gkSAzAgxmoQ8crydMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wYWE3 ODM2ZS0yMmU5LTQ0NGItOWQxMy01ZDExMzU4YmQ2YWIvZjA2OWYwMGYtNjc2YS0z NDkwLWJmZTItYjU0MjdlMDIxYzZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMGFhNzgzNmUtMjJlOS00NDRiLTlk MTMtNWQxMTM1OGJkNmFiLzBhYTc4MzZlLTIyZTktNDQ0Yi05ZDEzLTVkMTEzNThi ZDZhYi5jcmwwHwYDVR0jBBgwFoAUqlfEKeVqHdSvVp6kbUWYDSZ96RcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8wYWE3ODM2ZS0yMmU5LTQ0NGItOWQxMy01ZDEx MzU4YmQ2YWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4CgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABgk9xyLtiYSCM7qX33Pdf8htv5uGryCE65qiXj0QuGHju/gb/N9PYK 5fPj9A5DyZGvx6es42PxjipZZolUQXz2WyYIG1laylBojdak4o8padQAYzADp84Q wY6nJYVsrOBZe0pgC87hM5rmc1Ajm8IOEt+achR7QA1vNILwFm4IirUpZsuE0RBa Bb/BWdMbicAJ8WCPCS+3foe5x92afr/66n3JdhPS/bXBT1Feqlv9DQ3xcSiJFmkP ItRvEbERg3ksAPNUjqOb522Ib2xGojJP5rUka2LSeCiQlXpPwkdxHW+sHQYotAOj oWC9KUzGRVawbU3PpHdvSdW6yqiHLUc= -----END CERTIFICATE-----Generated at Fri Sep 11 16:26:49 2026 by rpki-client