$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/db4190ad-5350-383b-b3b5-9d97a927e02f.roa File: db4190ad-5350-383b-b3b5-9d97a927e02f.roa (raw, json) Hash identifier: xMgSsRreMz0YkNP49/IojzVdJVkI4L3GzFkmDcQ3Kzo= Subject key identifier: 95:FB:00:75:5C:EC:5E:25:1F:BD:03:0C:EB:CE:AA:19:69:D3:94:23 Certificate issuer: /CN=de4a1dfa-8867-4aef-a2e6-131e93add9f9 Certificate serial: 010D0C9F4328584EA798103150421E8664B1CE40 Authority key identifier: BE:D8:56:32:EB:8C:A4:4A:C0:EA:03:98:A0:D1:F1:2F:29:91:03:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/db4190ad-5350-383b-b3b5-9d97a927e02f.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 21859 IP address blocks: 23.128.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/de4a1dfa-8867-4aef-a2e6-131e93add9f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/de4a1dfa-8867-4aef-a2e6-131e93add9f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:98:10:31:50:42:1e:86:64:b1:ce:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de4a1dfa-8867-4aef-a2e6-131e93add9f9 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=ef34852e-617a-406d-91c4-3e7a8eac5d60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:78:00:cd:7a:a6:5c:80:fd:f8:a5:3b:de:f1: d1:18:8f:b3:80:57:5e:29:e0:f1:64:f4:b2:f3:d4: f1:38:e5:a3:71:94:9b:e0:38:b9:f0:1a:05:20:39: cd:ae:e2:a6:11:0e:63:6e:e4:6e:5a:13:73:f9:88: 37:a6:b8:be:08:39:6f:ed:7a:58:03:37:86:ef:9a: 25:a2:22:71:f6:e8:42:e5:15:0b:b0:94:ba:a9:44: 41:7d:e7:35:30:32:05:8a:06:e9:77:e9:01:1e:8e: f7:23:fc:58:c3:ba:9d:c6:73:b1:23:a1:dd:4a:98: 69:9c:9f:bd:e2:ee:01:02:b0:dc:66:03:fd:b4:13: f4:3b:b9:e6:4e:a1:fc:89:29:54:99:18:71:af:d0: a2:3d:cf:47:b8:19:4f:ae:62:95:e5:48:44:75:e0: ea:d1:20:51:05:69:da:b3:3b:7e:b6:04:09:88:ab: ea:fb:04:b4:09:c8:7b:fe:48:80:15:3e:89:3f:11: 5f:fd:c7:7c:33:bd:67:55:df:3d:4a:fd:f2:f4:14: e5:fe:55:dc:08:e2:49:8d:cd:a1:ee:bd:26:df:00: 81:00:ec:6b:96:9d:c1:41:1a:95:74:5e:2b:10:d6: 00:b7:a3:41:58:93:6b:86:17:14:a7:48:e5:e0:ba: 84:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:FB:00:75:5C:EC:5E:25:1F:BD:03:0C:EB:CE:AA:19:69:D3:94:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/db4190ad-5350-383b-b3b5-9d97a927e02f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/de4a1dfa-8867-4aef-a2e6-131e93add9f9.crl X509v3 Authority Key Identifier: keyid:BE:D8:56:32:EB:8C:A4:4A:C0:EA:03:98:A0:D1:F1:2F:29:91:03:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9.cer sbgp-ipAddrBlock: critical IPv4: 23.128.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:19:5e:24:f2:7d:05:36:0b:00:74:48:31:9e:da:43:db:69: 70:7e:77:10:16:b6:20:24:b5:9e:17:51:fb:66:10:a1:ed:23: a4:be:41:30:09:d3:98:68:67:d3:02:a9:8d:3f:fb:bb:bd:16: ef:79:94:04:f9:df:75:95:d2:80:95:62:f8:e3:17:96:76:ce: 06:e4:da:8f:43:2a:94:63:8d:18:ad:21:67:89:09:08:f0:a3: 73:0f:d3:82:cb:dc:bf:27:7d:28:eb:9b:40:f8:5b:35:0b:54: 25:ac:2d:af:0d:89:bd:49:39:09:9d:54:1d:9f:fb:c0:fb:9f: d3:dc:98:95:ae:3d:ae:11:46:5f:3e:63:9c:77:1b:c4:29:e6: c9:fc:39:1f:a8:99:cf:41:25:c6:b3:76:2e:03:be:f2:4e:8f: db:79:d2:b5:3b:9b:ec:4b:27:20:f7:ca:b5:3b:85:aa:93:0f: 88:b1:b9:44:3a:54:57:f8:93:be:a2:e8:29:39:db:b2:c6:56: 0d:1e:04:3e:75:be:58:2a:30:e9:8d:d0:f0:2b:4a:4a:e2:59: 3f:65:9c:43:78:e6:0f:66:3f:13:23:97:65:c8:aa:7c:d2:1b: 53:4f:c5:09:b9:6f:cc:dd:8e:d0:c4:70:df:f2:8e:c1:09:71: a6:5f:4a:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmBAxUEIehmSxzkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU0YTFkZmEtODg2Ny00YWVmLWEyZTYtMTMxZTkzYWRk OWY5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZWYzNDg1MmUtNjE3YS00MDZkLTkxYzQtM2U3YThlYWM1ZDYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3gAzXqmXID9+KU73vHRGI+zgFdeKeDxZPSy 89TxOOWjcZSb4Di58BoFIDnNruKmEQ5jbuRuWhNz+Yg3pri+CDlv7XpYAzeG75ol oiJx9uhC5RULsJS6qURBfec1MDIFigbpd+kBHo73I/xYw7qdxnOxI6HdSphpnJ+9 4u4BArDcZgP9tBP0O7nmTqH8iSlUmRhxr9CiPc9HuBlPrmKV5UhEdeDq0SBRBWna szt+tgQJiKvq+wS0Cch7/kiAFT6JPxFf/cd8M71nVd89Sv3y9BTl/lXcCOJJjc2h 7r0m3wCBAOxrlp3BQRqVdF4rENYAt6NBWJNrhhcUp0jl4LqE9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJX7AHVc7F4lH70DDOvOqhlp05QjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kZTRh MWRmYS04ODY3LTRhZWYtYTJlNi0xMzFlOTNhZGQ5ZjkvZGI0MTkwYWQtNTM1MC0z ODNiLWIzYjUtOWQ5N2E5MjdlMDJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGU0YTFkZmEtODg2Ny00YWVmLWEy ZTYtMTMxZTkzYWRkOWY5L2RlNGExZGZhLTg4NjctNGFlZi1hMmU2LTEzMWU5M2Fk ZDlmOS5jcmwwHwYDVR0jBBgwFoAUvthWMuuMpErA6gOYoNHxLymRA8QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kZTRhMWRmYS04ODY3LTRhZWYtYTJlNi0xMzFl OTNhZGQ5ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4DEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGIZXiTyfQU2CwB0SDGe2kPbaXB+dxAWtiAktZ4XUftmEKHtI6S+QTAJ 05hoZ9MCqY0/+7u9Fu95lAT533WV0oCVYvjjF5Z2zgbk2o9DKpRjjRitIWeJCQjw o3MP04LL3L8nfSjrm0D4WzULVCWsLa8Nib1JOQmdVB2f+8D7n9PcmJWuPa4RRl8+ Y5x3G8Qp5sn8OR+omc9BJcazdi4DvvJOj9t50rU7m+xLJyD3yrU7haqTD4ixuUQ6 VFf4k76i6Ck527LGVg0eBD51vlgqMOmN0PArSkriWT9lnEN45g9mPxMjl2XIqnzS G1NPxQm5b8zdjtDEcN/yjsEJcaZfShM= -----END CERTIFICATE-----Generated at Sat Sep 5 03:15:48 2026 by rpki-client