$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/c53925ff-d700-3546-9f23-98b9543e1426.roa File: c53925ff-d700-3546-9f23-98b9543e1426.roa (raw, json) Hash identifier: qsP1cvMpH5xL+JZDAz6zM6ZX16xjSBwg/+jW+cDhIk4= Subject key identifier: 0D:D3:B7:73:9B:FA:D3:DC:2D:2E:B3:BE:A7:C0:BC:CA:13:32:4D:57 Certificate issuer: /CN=4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b Certificate serial: 010D0C9F4328584EA787F32EB1734DCCD089CF60 Authority key identifier: 8D:76:83:30:91:E7:4B:04:84:43:F7:C4:8F:24:50:50:D1:98:96:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/c53925ff-d700-3546-9f23-98b9543e1426.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 398741 IP address blocks: 23.172.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:f3:2e:b1:73:4d:cc:d0:89:cf:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=75ace3ff-66ba-4f86-abe2-a345da1e894f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e5:75:2f:9d:1c:ad:74:b3:98:74:1d:e7:8d: 84:e6:16:7c:17:be:43:cb:04:ca:19:b2:ab:70:81: 45:6d:84:40:4e:63:e5:67:46:14:2a:86:1b:6c:a7: b6:d5:d1:56:38:c1:82:f0:68:81:f8:9b:bf:f6:0d: 3d:e1:f2:ea:04:6c:e9:c7:30:6c:a0:4f:8c:49:9a: 1b:61:32:98:7e:36:13:45:bb:6a:d1:39:07:6c:3d: fa:75:dd:d5:cf:21:72:aa:4b:d0:01:32:e0:e6:7b: 23:1b:73:23:60:3b:e9:d6:c5:51:f8:b3:54:3c:cd: 24:f5:aa:2b:c7:68:f9:a9:d2:95:3f:34:86:04:75: 64:43:69:df:18:a9:47:d6:fd:0d:f7:da:d7:83:f5: c7:48:99:d8:d1:71:a1:35:c9:f5:1b:0a:b5:1b:85: 08:81:21:f3:52:fa:54:8c:1c:46:76:c8:13:4b:19: dc:13:ed:05:4d:93:8a:92:95:0d:4b:a4:de:9b:51: 41:02:98:2a:ff:4f:7c:bf:10:45:12:34:3b:c5:9c: cd:0b:cb:b0:12:41:ef:fb:3c:da:48:e8:82:ea:e2: a3:d5:ba:9a:86:66:6a:ab:c5:fb:82:da:cd:65:90: 14:65:38:93:72:2d:36:75:a5:5f:e9:7f:19:05:2f: 91:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:D3:B7:73:9B:FA:D3:DC:2D:2E:B3:BE:A7:C0:BC:CA:13:32:4D:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/c53925ff-d700-3546-9f23-98b9543e1426.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.crl X509v3 Authority Key Identifier: keyid:8D:76:83:30:91:E7:4B:04:84:43:F7:C4:8F:24:50:50:D1:98:96:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.cer sbgp-ipAddrBlock: critical IPv4: 23.172.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:b3:79:ea:cb:87:c8:5e:8d:b5:60:0b:52:34:b9:8d:67:01: 9a:a3:76:9e:73:33:39:7a:ba:db:52:33:fa:71:f8:29:55:d2: 32:f8:4c:07:b0:95:dc:1b:5c:b5:b8:c0:e4:6a:6e:0b:b1:91: 4c:d8:42:49:34:48:2c:33:1b:91:3b:d1:e8:20:01:f6:b3:b3: 38:d6:4c:65:68:f2:5f:7d:e2:94:8e:50:9e:a4:78:e9:75:b6: 0e:c7:f7:f9:a9:77:46:f2:51:6e:e0:d1:75:fc:bf:57:07:be: 8f:34:94:ae:1e:4e:41:23:de:74:5a:cd:a9:d9:3f:09:9f:91: 04:10:5a:83:73:a1:5f:45:c9:dc:b5:8d:bb:b5:4c:bb:e0:95: 72:29:b6:4b:60:6b:ca:9c:c2:4d:31:10:20:ce:85:57:7c:be: c1:55:67:af:d4:31:7c:31:47:02:64:72:2a:32:35:94:87:4d: 1c:73:97:09:60:16:ef:e7:78:26:27:90:83:7b:cb:85:cd:43: 3d:d3:96:ee:ed:30:fa:27:69:b2:75:54:d0:87:41:8e:ce:4f: 58:cb:57:0f:9e:de:16:31:24:4f:57:86:7b:46:dd:41:17:f9: 09:18:6f:75:03:8f:49:69:d8:1b:5d:4b:ee:59:7b:74:a8:26: 7a:04:7d:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh/MusXNNzNCJz2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMzYmI3ZTQtYzk3ZS00M2FiLWE2ZGQtY2JmMGU2NDM0 YzViMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NzVhY2UzZmYtNjZiYS00Zjg2LWFiZTItYTM0NWRhMWU4OTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteV1L50crXSzmHQd542E5hZ8F75DywTKGbKr cIFFbYRATmPlZ0YUKoYbbKe21dFWOMGC8GiB+Ju/9g094fLqBGzpxzBsoE+MSZob YTKYfjYTRbtq0TkHbD36dd3VzyFyqkvQATLg5nsjG3MjYDvp1sVR+LNUPM0k9aor x2j5qdKVPzSGBHVkQ2nfGKlH1v0N99rXg/XHSJnY0XGhNcn1Gwq1G4UIgSHzUvpU jBxGdsgTSxncE+0FTZOKkpUNS6Tem1FBApgq/098vxBFEjQ7xZzNC8uwEkHv+zza SOiC6uKj1bqahmZqq8X7gtrNZZAUZTiTci02daVf6X8ZBS+RmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA3Tt3Ob+tPcLS6zvqfAvMoTMk1XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80YzNi YjdlNC1jOTdlLTQzYWItYTZkZC1jYmYwZTY0MzRjNWIvYzUzOTI1ZmYtZDcwMC0z NTQ2LTlmMjMtOThiOTU0M2UxNDI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNGMzYmI3ZTQtYzk3ZS00M2FiLWE2 ZGQtY2JmMGU2NDM0YzViLzRjM2JiN2U0LWM5N2UtNDNhYi1hNmRkLWNiZjBlNjQz NGM1Yi5jcmwwHwYDVR0jBBgwFoAUjXaDMJHnSwSEQ/fEjyRQUNGYlvQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80YzNiYjdlNC1jOTdlLTQzYWItYTZkZC1jYmYw ZTY0MzRjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6zZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEuzeerLh8hejbVgC1I0uY1nAZqjdp5zMzl6uttSM/px+ClV0jL4TAew ldwbXLW4wORqbguxkUzYQkk0SCwzG5E70eggAfazszjWTGVo8l994pSOUJ6keOl1 tg7H9/mpd0byUW7g0XX8v1cHvo80lK4eTkEj3nRazanZPwmfkQQQWoNzoV9Fydy1 jbu1TLvglXIptktga8qcwk0xECDOhVd8vsFVZ6/UMXwxRwJkcioyNZSHTRxzlwlg Fu/neCYnkIN7y4XNQz3Tlu7tMPonabJ1VNCHQY7OT1jLVw+e3hYxJE9XhntG3UEX +QkYb3UDj0lp2BtdS+5Ze3SoJnoEfRk= -----END CERTIFICATE-----Generated at Thu Sep 10 19:57:07 2026 by rpki-client