$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aabbabc3-cafd-46c0-b90e-e44d061ba2a3/870afd69-134e-3a16-b55c-fb7fad5a4868.roa File: 870afd69-134e-3a16-b55c-fb7fad5a4868.roa (raw, json) Hash identifier: 1+m+M2bBB93pvT7fsgFAiDP/4VHgfTjKC+yrEkSm7/M= Subject key identifier: 7B:D5:F1:6F:88:58:0B:34:C3:14:E3:50:25:81:38:3F:42:32:1D:20 Certificate issuer: /CN=aabbabc3-cafd-46c0-b90e-e44d061ba2a3 Certificate serial: 010D0C9F4328584EC371B5E2B1D6BE0E94FF4A80 Authority key identifier: 32:C7:97:1D:40:11:9A:A3:10:7D:7C:66:68:0F:11:BF:70:CC:0F:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aabbabc3-cafd-46c0-b90e-e44d061ba2a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aabbabc3-cafd-46c0-b90e-e44d061ba2a3/870afd69-134e-3a16-b55c-fb7fad5a4868.roa Signing time: Sat 08 Aug 2026 01:00:11 +0000 ROA not before: Sat 08 Aug 2026 01:00:11 +0000 ROA not after: Fri 06 Nov 2026 02:00:11 +0000 asID: 401155 IP address blocks: 23.142.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aabbabc3-cafd-46c0-b90e-e44d061ba2a3/aabbabc3-cafd-46c0-b90e-e44d061ba2a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aabbabc3-cafd-46c0-b90e-e44d061ba2a3/aabbabc3-cafd-46c0-b90e-e44d061ba2a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aabbabc3-cafd-46c0-b90e-e44d061ba2a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c3:71:b5:e2:b1:d6:be:0e:94:ff:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aabbabc3-cafd-46c0-b90e-e44d061ba2a3 Validity Not Before: Aug 8 01:00:11 2026 GMT Not After : Nov 6 02:00:11 2026 GMT Subject: CN=4c5e90cd-626b-4710-972e-c209f24063c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:10:c2:de:cc:16:6e:38:1e:c7:b1:07:3d:02: 7e:e8:1c:e1:5c:a2:0f:68:e2:d6:00:93:b4:11:ea: f7:b9:e9:17:4e:f1:82:ee:50:41:d4:96:11:4d:81: b3:cf:90:ce:7f:46:c8:2e:82:cc:77:d0:e1:a6:ce: 46:77:5d:3d:d6:85:29:77:83:d1:79:d3:f5:c5:4e: 61:0b:57:2d:18:8b:89:c5:89:c4:88:07:b2:70:da: 96:c3:96:6f:31:d3:a9:c9:c8:cb:f3:01:7f:47:c8: e3:5f:e1:1d:7f:b2:6d:26:b6:ad:8c:f6:a1:0c:56: 94:d9:0c:5a:3f:5d:50:05:f4:21:db:cc:35:0f:91: 42:ab:64:a3:7c:c6:8d:5b:b7:a3:9c:b2:12:ac:95: d2:25:3c:35:5b:57:0f:df:4a:1b:c9:30:12:a6:e4: 7e:19:a4:fe:cb:c0:34:ad:6d:cf:80:e0:2a:ff:49: e4:ca:03:d4:d9:c2:d3:92:7c:96:27:0f:5f:30:33: c5:52:11:6e:42:ce:70:17:30:58:45:fb:31:60:52: ed:82:1b:88:23:0e:50:1c:77:01:e0:ac:41:e1:e1: 64:9c:d6:b9:14:f6:04:c0:f1:a3:4e:84:26:fc:54: 5e:b4:5e:bc:32:6c:43:a1:a4:22:1f:7e:04:9f:a3: 2b:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:D5:F1:6F:88:58:0B:34:C3:14:E3:50:25:81:38:3F:42:32:1D:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aabbabc3-cafd-46c0-b90e-e44d061ba2a3/870afd69-134e-3a16-b55c-fb7fad5a4868.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aabbabc3-cafd-46c0-b90e-e44d061ba2a3/aabbabc3-cafd-46c0-b90e-e44d061ba2a3.crl X509v3 Authority Key Identifier: keyid:32:C7:97:1D:40:11:9A:A3:10:7D:7C:66:68:0F:11:BF:70:CC:0F:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aabbabc3-cafd-46c0-b90e-e44d061ba2a3.cer sbgp-ipAddrBlock: critical IPv4: 23.142.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:25:5c:60:8e:03:28:71:ea:ae:6c:b6:1c:46:31:26:20:2d: c8:21:47:d1:2e:af:b1:14:2f:3a:e2:1b:a3:4d:a4:47:30:b2: cc:70:b0:39:69:11:6b:c8:3b:16:0c:99:f6:8b:5d:77:8e:1e: 47:3d:cf:f0:17:24:d5:c2:ba:3d:c2:34:1e:1d:56:d1:7c:cc: c2:89:21:85:c3:e7:d3:82:ee:a0:38:42:9c:1d:4e:ff:2c:ec: 69:6d:b1:8c:24:ef:9b:61:8b:7c:4c:8c:dc:22:af:96:48:4c: 5c:4b:a9:80:93:07:cf:9a:cc:30:d3:d5:67:fe:62:5c:ad:9a: eb:ec:ce:1a:ba:11:77:55:42:94:16:ad:ce:13:e9:1f:92:c4: 87:3b:dc:0e:ea:19:69:56:cd:b9:ed:0d:f4:a0:91:1b:03:94: 85:43:bd:3a:0b:07:87:af:36:1a:68:e9:bd:1d:fa:e0:3e:3c: d6:a5:a9:2f:41:3a:fb:0c:b6:7a:b0:0f:8a:b5:b0:dd:3b:cd: 37:32:06:5b:d8:47:41:88:68:37:c8:b3:b1:5a:c4:0f:bd:69: 85:3a:e8:a1:38:88:d8:31:b5:d0:cb:00:58:a7:7d:65:67:48: f0:d5:f5:dd:91:5f:2d:b5:30:38:07:ef:46:17:78:a6:23:2c: 0a:07:f1:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7DcbXisda+DpT/SoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFiYmFiYzMtY2FmZC00NmMwLWI5MGUtZTQ0ZDA2MWJh MmEzMB4XDTI2MDgwODAxMDAxMVoXDTI2MTEwNjAyMDAxMVowLzEtMCsGA1UEAxMk NGM1ZTkwY2QtNjI2Yi00NzEwLTk3MmUtYzIwOWYyNDA2M2MxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRDC3swWbjgex7EHPQJ+6BzhXKIPaOLWAJO0 Eer3uekXTvGC7lBB1JYRTYGzz5DOf0bILoLMd9Dhps5Gd1091oUpd4PRedP1xU5h C1ctGIuJxYnEiAeycNqWw5ZvMdOpycjL8wF/R8jjX+Edf7JtJratjPahDFaU2Qxa P11QBfQh28w1D5FCq2SjfMaNW7ejnLISrJXSJTw1W1cP30obyTASpuR+GaT+y8A0 rW3PgOAq/0nkygPU2cLTknyWJw9fMDPFUhFuQs5wFzBYRfsxYFLtghuIIw5QHHcB 4KxB4eFknNa5FPYEwPGjToQm/FRetF68MmxDoaQiH34En6MrKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHvV8W+IWAs0wxTjUCWBOD9CMh0gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hYWJi YWJjMy1jYWZkLTQ2YzAtYjkwZS1lNDRkMDYxYmEyYTMvODcwYWZkNjktMTM0ZS0z YTE2LWI1NWMtZmI3ZmFkNWE0ODY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYWFiYmFiYzMtY2FmZC00NmMwLWI5 MGUtZTQ0ZDA2MWJhMmEzL2FhYmJhYmMzLWNhZmQtNDZjMC1iOTBlLWU0NGQwNjFi YTJhMy5jcmwwHwYDVR0jBBgwFoAUMseXHUARmqMQfXxmaA8Rv3DMD6cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9hYWJiYWJjMy1jYWZkLTQ2YzAtYjkwZS1lNDRk MDYxYmEyYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF458MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG8lXGCOAyhx6q5sthxGMSYgLcghR9Eur7EULzriG6NNpEcwssxwsDlp EWvIOxYMmfaLXXeOHkc9z/AXJNXCuj3CNB4dVtF8zMKJIYXD59OC7qA4QpwdTv8s 7GltsYwk75thi3xMjNwir5ZITFxLqYCTB8+azDDT1Wf+Ylytmuvszhq6EXdVQpQW rc4T6R+SxIc73A7qGWlWzbntDfSgkRsDlIVDvToLB4evNhpo6b0d+uA+PNalqS9B OvsMtnqwD4q1sN07zTcyBlvYR0GIaDfIs7FaxA+9aYU66KE4iNgxtdDLAFinfWVn SPDV9d2RXy21MDgH70YXeKYjLAoH8bE= -----END CERTIFICATE-----Generated at Sun Sep 13 12:34:22 2026 by rpki-client