$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/021fd352-b120-37cf-a79b-223606371da5.roa File: 021fd352-b120-37cf-a79b-223606371da5.roa (raw, json) Hash identifier: Qo8XkxLr4DWKgIbjCaVYzOPvIDlBRSA/vW5iaYTb5Mo= Subject key identifier: 20:C1:EE:E0:E9:C2:8E:23:EA:5D:1B:3F:EB:2A:B6:5D:B3:33:E3:8E Certificate issuer: /CN=ca3c740c-67d3-47ed-b43d-9bd91b31cdb1 Certificate serial: 010D0C9F4328584EED51FCA15EE856C131CA6420 Authority key identifier: 57:A2:47:DA:F5:84:83:97:0C:4D:55:A0:05:82:4E:3E:8C:AD:3C:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/021fd352-b120-37cf-a79b-223606371da5.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 154321 IP address blocks: 23.247.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:51:fc:a1:5e:e8:56:c1:31:ca:64:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca3c740c-67d3-47ed-b43d-9bd91b31cdb1 Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=709b64c1-b903-4fcd-bfe2-600d2443bfa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ef:77:a6:72:86:2a:38:70:58:fe:27:dd:5d: a5:8e:e1:bd:46:b8:5b:91:28:b9:d9:e9:09:f1:8c: 52:3a:f8:65:92:8b:2e:a4:a6:fb:75:ce:d6:b6:33: 51:00:4a:9a:9f:8e:be:e4:99:c4:08:c2:9f:23:98: 1b:b0:d0:f4:08:f0:2a:1e:81:db:c8:16:d1:8c:5e: a9:e1:6f:df:d7:a7:eb:97:20:ed:8b:cd:1f:d5:7d: 8f:b0:ed:ef:08:d7:d5:a6:e3:aa:da:af:98:61:cd: 04:56:85:a3:7d:37:be:55:e4:bd:00:2d:bc:fe:06: 59:4e:99:83:5a:34:5a:23:a1:28:1a:82:9c:05:d2: 90:03:a1:bb:7f:17:a7:18:20:fe:95:3b:1d:34:35: 0b:b9:ff:51:de:27:0f:7f:15:13:4d:fe:2b:40:3d: 9a:a9:f6:ac:d9:4a:e2:5b:99:02:03:e2:95:c1:31: 4b:3f:61:d9:a1:11:8d:51:b0:cd:e5:e7:56:b6:dd: ac:63:83:22:ca:1c:18:e4:7a:97:17:0a:d3:42:36: 70:fc:a4:a6:4a:71:84:2c:fa:8a:24:b7:8e:18:0e: 56:56:4c:67:86:6d:50:ac:51:d8:45:88:0c:2d:e5: b0:b4:bd:06:11:ce:32:d1:d3:e9:79:f0:0c:74:88: ab:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:C1:EE:E0:E9:C2:8E:23:EA:5D:1B:3F:EB:2A:B6:5D:B3:33:E3:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/021fd352-b120-37cf-a79b-223606371da5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.crl X509v3 Authority Key Identifier: keyid:57:A2:47:DA:F5:84:83:97:0C:4D:55:A0:05:82:4E:3E:8C:AD:3C:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.cer sbgp-ipAddrBlock: critical IPv4: 23.247.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:d6:82:39:52:2b:3f:e3:75:e9:ee:33:4f:2a:88:c6:80:e2: 79:aa:d0:28:60:a9:ec:4a:75:ed:55:f8:ce:82:0a:ec:a2:ef: 81:19:3a:e2:fd:e9:4c:d1:72:a9:bb:14:93:2d:b3:2b:80:45: db:34:af:5f:43:13:2c:22:7a:cf:01:d9:cc:b5:d9:92:0f:6e: 84:26:ff:98:6f:96:7c:73:36:6a:0f:2c:42:dd:63:78:de:ae: 63:19:2b:d1:7e:30:1e:f7:c2:0e:82:09:5e:33:60:b2:cd:e2: b9:61:78:99:55:fc:5c:e4:bb:7f:75:7d:ee:04:1a:ab:a6:fa: 06:dc:f5:51:9c:0f:e8:da:99:99:43:74:a0:f8:19:2a:c2:d7: e3:97:ba:ea:4c:39:ac:21:85:43:6e:8c:18:78:6f:7c:11:44: 01:ef:1e:f2:58:b7:56:7e:26:c9:55:10:9f:86:2e:70:db:ac: a1:44:40:4c:6a:7d:95:d5:f3:f2:00:4f:ee:3e:2e:37:4d:38: 60:fb:33:69:42:64:f6:d3:c0:d4:71:01:8b:21:f7:78:fa:76: 53:6e:fc:f4:80:48:31:5a:b2:e7:03:e0:47:06:fb:f1:85:5c: 89:1b:d5:2e:63:e8:86:4b:43:c7:86:3e:d4:97:1a:89:3c:8e: ea:a2:54:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUfyhXuhWwTHKZCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2EzYzc0MGMtNjdkMy00N2VkLWI0M2QtOWJkOTFiMzFj ZGIxMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk NzA5YjY0YzEtYjkwMy00ZmNkLWJmZTItNjAwZDI0NDNiZmE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+93pnKGKjhwWP4n3V2ljuG9RrhbkSi52ekJ 8YxSOvhlkosupKb7dc7WtjNRAEqan46+5JnECMKfI5gbsND0CPAqHoHbyBbRjF6p 4W/f16frlyDti80f1X2PsO3vCNfVpuOq2q+YYc0EVoWjfTe+VeS9AC28/gZZTpmD WjRaI6EoGoKcBdKQA6G7fxenGCD+lTsdNDULuf9R3icPfxUTTf4rQD2aqfas2Uri W5kCA+KVwTFLP2HZoRGNUbDN5edWtt2sY4MiyhwY5HqXFwrTQjZw/KSmSnGELPqK JLeOGA5WVkxnhm1QrFHYRYgMLeWwtL0GEc4y0dPpefAMdIirXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCDB7uDpwo4j6l0bP+sqtl2zM+OOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9jYTNj NzQwYy02N2QzLTQ3ZWQtYjQzZC05YmQ5MWIzMWNkYjEvMDIxZmQzNTItYjEyMC0z N2NmLWE3OWItMjIzNjA2MzcxZGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvY2EzYzc0MGMtNjdkMy00N2VkLWI0 M2QtOWJkOTFiMzFjZGIxL2NhM2M3NDBjLTY3ZDMtNDdlZC1iNDNkLTliZDkxYjMx Y2RiMS5jcmwwHwYDVR0jBBgwFoAUV6JH2vWEg5cMTVWgBYJOPoytPCgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9jYTNjNzQwYy02N2QzLTQ3ZWQtYjQzZC05YmQ5 MWIzMWNkYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF/eBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAALWgjlSKz/jdenuM08qiMaA4nmq0ChgqexKde1V+M6CCuyi74EZOuL9 6UzRcqm7FJMtsyuARds0r19DEywies8B2cy12ZIPboQm/5hvlnxzNmoPLELdY3je rmMZK9F+MB73wg6CCV4zYLLN4rlheJlV/Fzku391fe4EGqum+gbc9VGcD+jamZlD dKD4GSrC1+OXuupMOawhhUNujBh4b3wRRAHvHvJYt1Z+JslVEJ+GLnDbrKFEQExq fZXV8/IAT+4+LjdNOGD7M2lCZPbTwNRxAYsh93j6dlNu/PSASDFasucD4EcG+/GF XIkb1S5j6IZLQ8eGPtSXGok8juqiVI0= -----END CERTIFICATE-----Generated at Tue Sep 1 04:52:26 2026 by rpki-client