$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/7f2249f6-4bb2-31b7-9f14-aa3ee4d4a343.roa File: 7f2249f6-4bb2-31b7-9f14-aa3ee4d4a343.roa (raw, json) Hash identifier: FdxUO2r+4hQm8hhbYd7HBzdIOUmEPOLbR2O/FVyQj3o= Subject key identifier: F3:12:03:A8:74:7B:E5:BE:06:9B:6D:E1:EF:D2:34:C5:7C:5F:48:7C Certificate issuer: /CN=d0fa8e3f-67e9-4e8f-9d18-6211dd613073 Certificate serial: 010D0C9F4328584EA798CFBFCD089AE162736E00 Authority key identifier: 2B:B4:63:CE:67:00:19:DA:3A:DE:BC:3B:E5:62:36:DD:BB:4D:C2:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/7f2249f6-4bb2-31b7-9f14-aa3ee4d4a343.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 3356 IP address blocks: 23.156.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 14 Aug 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:98:cf:bf:cd:08:9a:e1:62:73:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0fa8e3f-67e9-4e8f-9d18-6211dd613073 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=9468d311-4da2-4ade-8786-176568651e9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:b0:c6:60:09:97:d0:5f:08:82:19:b9:02:d6: ab:3f:e1:f4:d6:8e:9a:a7:44:b3:65:f2:d2:99:d2: 71:57:52:8b:f3:42:2c:db:41:98:cb:73:db:47:fd: ef:f2:6a:0e:53:39:fd:9a:72:7e:38:e1:b2:f2:b3: 3d:c8:ac:a3:3a:a4:4d:cb:a6:cd:1d:c0:4f:89:5f: 2a:2f:c9:ff:b1:80:f5:ba:7a:f1:9b:ae:62:4e:8f: ec:b0:b5:ab:d6:28:d9:88:85:37:38:37:52:98:3c: 26:2c:19:1b:96:52:10:06:61:74:5d:de:fe:7f:5c: 03:d2:7f:fb:e4:46:39:6c:f1:47:a4:70:97:15:21: 53:4b:9d:f8:c7:01:03:ec:69:13:43:9d:da:5b:b1: 7f:35:2a:43:ca:26:ae:4e:72:c4:d4:79:ac:44:dc: 63:0a:9d:de:ee:3b:a1:c3:5a:36:cb:60:89:ae:74: 62:e9:b9:07:50:d1:fc:f0:02:61:57:cd:32:c2:47: 10:0f:85:86:8b:7b:3d:66:30:f1:a5:65:de:47:36: f3:b5:d6:6b:ee:ef:59:24:e3:9f:b8:d2:2e:29:4a: fe:8c:8d:8e:6b:2b:b3:50:e6:9f:ac:54:bd:e4:d3: 4d:d8:4c:bb:e5:f9:2d:3f:c8:c9:5c:f1:1d:5b:89: b1:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:12:03:A8:74:7B:E5:BE:06:9B:6D:E1:EF:D2:34:C5:7C:5F:48:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/7f2249f6-4bb2-31b7-9f14-aa3ee4d4a343.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.crl X509v3 Authority Key Identifier: keyid:2B:B4:63:CE:67:00:19:DA:3A:DE:BC:3B:E5:62:36:DD:BB:4D:C2:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.cer sbgp-ipAddrBlock: critical IPv4: 23.156.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:4a:ad:4a:d6:24:f7:ad:12:cc:0b:84:21:cd:2c:da:92:8b: bd:d8:10:7e:9b:93:b2:aa:e8:e9:36:46:b2:fd:a8:22:f6:47: e5:22:cc:e7:38:2c:bf:b3:40:bc:31:79:94:b6:7b:4d:2d:84: bf:c0:13:c4:1f:6b:43:ef:bd:2b:f4:61:24:9e:0f:3d:4e:a7: a0:06:cf:1b:26:b5:15:cf:d6:22:3e:4d:f4:98:58:f6:03:30: 16:52:20:6f:50:23:75:63:73:cc:e1:37:28:dc:ac:e2:38:cf: 54:19:8a:e5:b1:10:0c:69:26:cd:66:5b:0b:6f:a1:b2:bf:4b: ae:47:12:c1:39:d4:4a:83:6b:dc:54:53:da:27:29:e6:77:bf: cb:65:f3:f4:e2:fa:9f:d1:85:74:92:01:56:39:bb:5a:cc:1b: a6:b7:64:ac:9b:4c:f4:a7:6e:9c:76:23:81:4d:2a:b4:be:b6: 37:61:9f:7b:6c:f2:26:94:1c:1f:82:f3:2f:f5:d5:ff:b3:c5: 5a:8f:3c:dd:01:28:4d:90:83:e9:98:41:df:e3:6d:20:4b:a9: a3:73:d9:47:08:c5:72:3c:7c:e9:a5:90:4c:63:3c:57:89:00: e6:1e:30:ed:f1:d6:41:66:ef:54:33:d8:bf:dc:af:37:2b:4f: 98:31:5d:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmM+/zQia4WJzbgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBmYThlM2YtNjdlOS00ZThmLTlkMTgtNjIxMWRkNjEz MDczMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OTQ2OGQzMTEtNGRhMi00YWRlLTg3ODYtMTc2NTY4NjUxZTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7DGYAmX0F8Ighm5AtarP+H01o6ap0SzZfLS mdJxV1KL80Is20GYy3PbR/3v8moOUzn9mnJ+OOGy8rM9yKyjOqRNy6bNHcBPiV8q L8n/sYD1unrxm65iTo/ssLWr1ijZiIU3ODdSmDwmLBkbllIQBmF0Xd7+f1wD0n/7 5EY5bPFHpHCXFSFTS534xwED7GkTQ53aW7F/NSpDyiauTnLE1HmsRNxjCp3e7juh w1o2y2CJrnRi6bkHUNH88AJhV80ywkcQD4WGi3s9ZjDxpWXeRzbztdZr7u9ZJOOf uNIuKUr+jI2OayuzUOafrFS95NNN2Ey75fktP8jJXPEdW4mx9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPMSA6h0e+W+Bptt4e/SNMV8X0h8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGZh OGUzZi02N2U5LTRlOGYtOWQxOC02MjExZGQ2MTMwNzMvN2YyMjQ5ZjYtNGJiMi0z MWI3LTlmMTQtYWEzZWU0ZDRhMzQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBmYThlM2YtNjdlOS00ZThmLTlk MTgtNjIxMWRkNjEzMDczL2QwZmE4ZTNmLTY3ZTktNGU4Zi05ZDE4LTYyMTFkZDYx MzA3My5jcmwwHwYDVR0jBBgwFoAUK7RjzmcAGdo63rw75WI23btNwp4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGZhOGUzZi02N2U5LTRlOGYtOWQxOC02MjEx ZGQ2MTMwNzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5x4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJpKrUrWJPetEswLhCHNLNqSi73YEH6bk7Kq6Ok2RrL9qCL2R+UizOc4 LL+zQLwxeZS2e00thL/AE8Qfa0PvvSv0YSSeDz1Op6AGzxsmtRXP1iI+TfSYWPYD MBZSIG9QI3Vjc8zhNyjcrOI4z1QZiuWxEAxpJs1mWwtvobK/S65HEsE51EqDa9xU U9onKeZ3v8tl8/Ti+p/RhXSSAVY5u1rMG6a3ZKybTPSnbpx2I4FNKrS+tjdhn3ts 8iaUHB+C8y/11f+zxVqPPN0BKE2Qg+mYQd/jbSBLqaNz2UcIxXI8fOmlkExjPFeJ AOYeMO3x1kFm71Qz2L/crzcrT5gxXVA= -----END CERTIFICATE-----Generated at Thu Aug 13 21:53:44 2026 by rpki-client