$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d49d6e31-9274-4997-a718-4ba13c83041c/35aa566c-1d54-3f84-a686-08058cbecf0f.roa File: 35aa566c-1d54-3f84-a686-08058cbecf0f.roa (raw, json) Hash identifier: nWiwAGpHzT5dCPlg+6hjuqNhraEmJv48whM1a9auyCQ= Subject key identifier: CE:54:FB:33:39:DA:E8:BE:B4:04:66:9B:D9:54:FA:50:25:DE:CA:26 Certificate issuer: /CN=d49d6e31-9274-4997-a718-4ba13c83041c Certificate serial: 010D0C9F4328584EA7884C3C412F2FF99E9F5480 Authority key identifier: 48:00:01:89:2B:1B:3F:0A:CC:70:19:D8:E6:32:2E:B2:F7:A7:D9:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d49d6e31-9274-4997-a718-4ba13c83041c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d49d6e31-9274-4997-a718-4ba13c83041c/35aa566c-1d54-3f84-a686-08058cbecf0f.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 63023 IP address blocks: 23.157.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d49d6e31-9274-4997-a718-4ba13c83041c/d49d6e31-9274-4997-a718-4ba13c83041c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d49d6e31-9274-4997-a718-4ba13c83041c/d49d6e31-9274-4997-a718-4ba13c83041c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d49d6e31-9274-4997-a718-4ba13c83041c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:4c:3c:41:2f:2f:f9:9e:9f:54:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d49d6e31-9274-4997-a718-4ba13c83041c Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=7a3c1fa0-ffa0-4f2d-94ef-c8baff83a828 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:35:0e:df:2a:eb:d0:ee:10:b2:62:95:cc:f1: 00:ac:a0:83:ca:a2:0a:3b:d5:09:09:ad:66:2f:44: 1d:74:39:82:88:df:77:87:df:6b:bb:5c:2a:33:dc: ca:ce:0e:77:27:83:04:ae:34:9c:5b:60:90:7c:b6: e9:40:4c:a1:b2:cd:eb:dc:67:86:58:93:8e:00:5d: 01:0e:bd:ba:42:da:2f:34:aa:dc:6a:af:1e:95:0b: 87:03:3c:dd:b0:26:5d:5a:f0:29:65:42:9e:9d:6a: 10:e9:70:f7:b0:57:65:3c:69:b6:e4:71:c3:4c:5b: 9b:4b:dd:dd:3f:52:80:94:04:3a:8c:14:7a:9c:38: e2:ef:ef:48:90:9a:39:bd:a5:6a:86:95:c3:d1:f4: aa:6f:79:64:f8:c8:6e:58:68:c2:61:5a:1f:ef:74: 8a:03:15:a8:f7:45:58:94:5f:9d:ca:6c:ca:45:01: 42:90:92:5e:67:b1:d2:a5:0d:45:e4:4c:73:37:5d: a4:03:30:15:5b:91:02:f7:93:40:b9:11:60:e9:38: e8:aa:ae:4c:f9:71:82:84:bc:32:5e:24:b6:a3:a1: 63:c5:3f:41:cf:ff:96:5b:e4:6d:83:f9:2c:2e:c9: 38:06:d2:93:93:c6:00:25:11:78:2d:d0:6e:88:ab: 3a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:54:FB:33:39:DA:E8:BE:B4:04:66:9B:D9:54:FA:50:25:DE:CA:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d49d6e31-9274-4997-a718-4ba13c83041c/35aa566c-1d54-3f84-a686-08058cbecf0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d49d6e31-9274-4997-a718-4ba13c83041c/d49d6e31-9274-4997-a718-4ba13c83041c.crl X509v3 Authority Key Identifier: keyid:48:00:01:89:2B:1B:3F:0A:CC:70:19:D8:E6:32:2E:B2:F7:A7:D9:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d49d6e31-9274-4997-a718-4ba13c83041c.cer sbgp-ipAddrBlock: critical IPv4: 23.157.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:99:8a:e0:21:43:86:85:03:be:36:b6:bc:36:7f:56:61:7e: a6:88:25:a0:ce:dd:33:87:8d:50:30:58:eb:b0:66:eb:55:14: 37:ea:51:1c:e3:df:c5:89:9a:bf:a1:2c:22:3b:8d:02:0d:c3: 45:68:3c:41:10:08:82:f1:35:ca:9f:98:fa:33:b6:0f:67:ef: b9:64:35:a7:82:2a:88:e1:a1:b8:48:f6:37:31:36:e2:7f:bb: c6:11:97:7a:02:5a:b6:49:7c:4b:aa:76:23:83:99:b8:6f:0b: 05:eb:4b:2e:8a:48:6a:a1:eb:77:74:15:c4:9a:bc:71:01:1e: 14:d0:43:4a:9b:e2:c0:35:e3:37:dc:f2:fe:69:10:a0:b4:c9: 6e:74:ab:b9:9f:d3:7c:38:f1:7f:fa:78:3a:b1:20:7d:18:ed: e2:1c:c3:7d:57:28:0d:bc:e2:7f:6d:0f:df:94:a7:06:e4:0d: 9c:b1:ca:0b:e9:49:bb:97:3d:86:de:0c:2c:33:a7:3c:ee:f8: d1:39:bc:0a:51:c4:d1:30:cb:1b:7d:4c:c7:f0:d0:a1:c2:05: 53:e0:8b:7a:d4:a9:3c:e3:be:dc:d4:12:83:aa:ea:d6:2d:88: e3:2f:b5:a6:73:20:84:31:6f:47:9d:78:f8:08:a5:b1:29:57: 0e:5b:da:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niEw8QS8v+Z6fVIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ5ZDZlMzEtOTI3NC00OTk3LWE3MTgtNGJhMTNjODMw NDFjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk N2EzYzFmYTAtZmZhMC00ZjJkLTk0ZWYtYzhiYWZmODNhODI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjUO3yrr0O4QsmKVzPEArKCDyqIKO9UJCa1m L0QddDmCiN93h99ru1wqM9zKzg53J4MErjScW2CQfLbpQEyhss3r3GeGWJOOAF0B Dr26QtovNKrcaq8elQuHAzzdsCZdWvApZUKenWoQ6XD3sFdlPGm25HHDTFubS93d P1KAlAQ6jBR6nDji7+9IkJo5vaVqhpXD0fSqb3lk+MhuWGjCYVof73SKAxWo90VY lF+dymzKRQFCkJJeZ7HSpQ1F5ExzN12kAzAVW5EC95NAuRFg6Tjoqq5M+XGChLwy XiS2o6FjxT9Bz/+WW+Rtg/ksLsk4BtKTk8YAJRF4LdBuiKs6PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM5U+zM52ui+tARmm9lU+lAl3somMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kNDlk NmUzMS05Mjc0LTQ5OTctYTcxOC00YmExM2M4MzA0MWMvMzVhYTU2NmMtMWQ1NC0z Zjg0LWE2ODYtMDgwNThjYmVjZjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDQ5ZDZlMzEtOTI3NC00OTk3LWE3 MTgtNGJhMTNjODMwNDFjL2Q0OWQ2ZTMxLTkyNzQtNDk5Ny1hNzE4LTRiYTEzYzgz MDQxYy5jcmwwHwYDVR0jBBgwFoAUSAABiSsbPwrMcBnY5jIusven2eUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kNDlkNmUzMS05Mjc0LTQ5OTctYTcxOC00YmEx M2M4MzA0MWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF50oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABGZiuAhQ4aFA742trw2f1ZhfqaIJaDO3TOHjVAwWOuwZutVFDfqURzj 38WJmr+hLCI7jQINw0VoPEEQCILxNcqfmPoztg9n77lkNaeCKojhobhI9jcxNuJ/ u8YRl3oCWrZJfEuqdiODmbhvCwXrSy6KSGqh63d0FcSavHEBHhTQQ0qb4sA14zfc 8v5pEKC0yW50q7mf03w48X/6eDqxIH0Y7eIcw31XKA284n9tD9+UpwbkDZyxygvp SbuXPYbeDCwzpzzu+NE5vApRxNEwyxt9TMfw0KHCBVPgi3rUqTzjvtzUEoOq6tYt iOMvtaZzIIQxb0edePgIpbEpVw5b2hQ= -----END CERTIFICATE-----Generated at Fri Sep 11 03:54:29 2026 by rpki-client