$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/a981c111-3341-3f73-85ec-3e9f5b8d2766.roa File: a981c111-3341-3f73-85ec-3e9f5b8d2766.roa (raw, json) Hash identifier: ZiMB5X/Lyt8Em/szjE8x+LyJjrs+MMQKyvWuOQyMaxU= Subject key identifier: 0F:A0:8E:C4:D4:0F:2D:91:37:98:54:99:BE:B2:67:BD:19:6A:14:08 Certificate issuer: /CN=2ff85e79-174c-46f6-8a62-a92c2c9875b8 Certificate serial: 010D0C9F4328584E4AEF51A9D60B475FFBD507A0 Authority key identifier: C8:BE:F2:EE:D8:21:9E:78:D4:AE:55:A0:07:8D:21:70:2F:8F:51:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/a981c111-3341-3f73-85ec-3e9f5b8d2766.roa Signing time: Thu 25 Jun 2026 21:00:12 +0000 ROA not before: Thu 25 Jun 2026 21:00:12 +0000 ROA not after: Wed 23 Sep 2026 21:00:12 +0000 asID: 396500 IP address blocks: 23.187.152.0/24 maxlen: 24 2602:f82d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Jul 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4a:ef:51:a9:d6:0b:47:5f:fb:d5:07:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ff85e79-174c-46f6-8a62-a92c2c9875b8 Validity Not Before: Jun 25 21:00:12 2026 GMT Not After : Sep 23 21:00:12 2026 GMT Subject: CN=c1afe8c4-7ca0-4271-8cd4-8e9499c75750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d2:60:83:7b:fa:bf:f8:eb:7d:42:d5:a6:f0: e6:54:dc:d1:d8:f9:de:53:3f:bc:4a:58:7e:b1:93: e6:cf:f7:8d:01:a5:00:95:98:ee:3a:08:ee:75:a7: 9e:bf:0e:35:f9:3b:fc:0c:3d:8c:56:96:30:46:f2: 04:6c:6e:72:8b:e2:6e:9f:a2:4f:ea:4e:9a:e8:f9: 61:b7:1f:84:3e:c4:7a:72:9d:75:8a:a2:a3:70:20: 85:c3:c5:11:b3:d7:62:57:98:ab:df:c4:d6:e0:3a: 68:94:a2:5b:74:ae:8f:82:57:8f:77:73:bc:60:d4: 9f:b9:c7:95:58:61:c4:d6:76:a9:6f:b0:86:c5:0c: a3:cc:f2:8e:07:05:7f:b5:a4:c2:02:c3:93:73:d7: 93:be:24:b3:29:cb:7a:df:20:14:6d:4a:99:18:02: 6a:f6:e3:7e:31:f2:36:20:a5:d5:9b:08:45:bc:1e: 71:73:e1:e2:6a:ce:af:f0:77:22:98:0d:a1:3c:ee: ff:79:01:a4:19:e0:58:02:30:a8:e9:3a:f5:07:3b: ae:0e:7d:2e:f2:d6:17:d1:74:5c:c3:ea:96:19:e0: 75:fe:1a:be:62:c9:2b:4a:a1:22:ff:08:6a:2a:64: 8f:29:22:df:a0:86:e2:1c:11:5b:48:2d:40:6f:be: 48:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:A0:8E:C4:D4:0F:2D:91:37:98:54:99:BE:B2:67:BD:19:6A:14:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/a981c111-3341-3f73-85ec-3e9f5b8d2766.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.crl X509v3 Authority Key Identifier: keyid:C8:BE:F2:EE:D8:21:9E:78:D4:AE:55:A0:07:8D:21:70:2F:8F:51:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer sbgp-ipAddrBlock: critical IPv4: 23.187.152.0/24 IPv6: 2602:f82d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:7e:fb:67:ed:66:eb:95:a1:e4:df:56:29:20:4d:6c:24:9c: 70:6c:e4:5d:cc:5c:2f:f6:35:9f:b1:a0:ac:0e:39:30:a3:d8: 40:c9:e3:6f:b5:bc:68:31:b9:59:2f:ac:5a:6b:7d:56:b4:c3: b4:f1:ee:39:e0:5d:22:29:2e:dd:39:90:f9:08:df:a4:d1:28: aa:08:eb:4b:d2:20:1c:f8:dd:80:ce:b6:4e:2f:dd:57:e2:d0: 59:3c:ea:54:4f:ab:54:0d:84:78:77:40:af:05:52:c0:7d:5d: 41:c4:fe:7e:40:45:00:5b:2f:6c:96:be:1f:de:07:36:37:ad: 77:61:6c:30:a1:fd:41:8e:f1:40:20:80:cd:93:c6:14:02:c7: 67:d6:0a:95:72:0c:80:e9:ce:d3:e9:5d:ee:76:b4:c2:aa:ad: 86:30:2d:94:39:6d:40:c3:96:4b:75:f5:e3:88:0a:34:24:83: 4c:18:78:41:84:60:0d:7d:03:74:a8:9c:9e:75:c7:e1:15:a0: dc:42:fe:00:d6:40:da:fa:9f:32:5a:10:8b:bd:60:f7:40:e5: 53:f6:08:d5:4a:2f:21:09:3d:2c:aa:f2:25:72:74:1b:5a:d3: 66:20:be:61:f7:f6:da:9f:c9:18:11:9b:63:db:31:7f:e5:cf: ee:1a:d4:bc -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE5K71Gp1gtHX/vVB6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmZmODVlNzktMTc0Yy00NmY2LThhNjItYTkyYzJjOTg3 NWI4MB4XDTI2MDYyNTIxMDAxMloXDTI2MDkyMzIxMDAxMlowLzEtMCsGA1UEAxMk YzFhZmU4YzQtN2NhMC00MjcxLThjZDQtOGU5NDk5Yzc1NzUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNJgg3v6v/jrfULVpvDmVNzR2PneUz+8Slh+ sZPmz/eNAaUAlZjuOgjudaeevw41+Tv8DD2MVpYwRvIEbG5yi+Jun6JP6k6a6Plh tx+EPsR6cp11iqKjcCCFw8URs9diV5ir38TW4DpolKJbdK6PglePd3O8YNSfuceV WGHE1napb7CGxQyjzPKOBwV/taTCAsOTc9eTviSzKct63yAUbUqZGAJq9uN+MfI2 IKXVmwhFvB5xc+Hias6v8HcimA2hPO7/eQGkGeBYAjCo6Tr1BzuuDn0u8tYX0XRc w+qWGeB1/hq+YskrSqEi/whqKmSPKSLfoIbiHBFbSC1Ab75I6QIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFA+gjsTUDy2RN5hUmb6yZ70ZahQIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yZmY4 NWU3OS0xNzRjLTQ2ZjYtOGE2Mi1hOTJjMmM5ODc1YjgvYTk4MWMxMTEtMzM0MS0z ZjczLTg1ZWMtM2U5ZjViOGQyNzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMmZmODVlNzktMTc0Yy00NmY2LThh NjItYTkyYzJjOTg3NWI4LzJmZjg1ZTc5LTE3NGMtNDZmNi04YTYyLWE5MmMyYzk4 NzViOC5jcmwwHwYDVR0jBBgwFoAUyL7y7tghnnjUrlWgB40hcC+PUdwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yZmY4NWU3OS0xNzRjLTQ2ZjYtOGE2Mi1hOTJj MmM5ODc1YjguY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAF7uYMA8E AgACMAkDBwAmAvgtAAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAUX77Z+1m65Wh5N9WKSBNbCSccGzkXcxc L/Y1n7GgrA45MKPYQMnjb7W8aDG5WS+sWmt9VrTDtPHuOeBdIiku3TmQ+QjfpNEo qgjrS9IgHPjdgM62Ti/dV+LQWTzqVE+rVA2EeHdArwVSwH1dQcT+fkBFAFsvbJa+ H94HNjetd2FsMKH9QY7xQCCAzZPGFALHZ9YKlXIMgOnO0+ld7na0wqqthjAtlDlt QMOWS3X144gKNCSDTBh4QYRgDX0DdKicnnXH4RWg3EL+ANZA2vqfMloQi71g90Dl U/YI1UovIQk9LKryJXJ0G1rTZiC+Yff22p/JGBGbY9sxf+XP7hrUvA== -----END CERTIFICATE-----Generated at Sat Jul 18 08:23:29 2026 by rpki-client