$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0f7346aa-04ca-31b9-bb2d-2e823a303874.roa File: 0f7346aa-04ca-31b9-bb2d-2e823a303874.roa (raw, json) Hash identifier: cfeoG+GM9eqcKETsERxOAVUV/zPBCXhGOqrpTDSc8rk= Subject key identifier: D2:86:91:3F:46:93:A4:3B:34:AC:35:A9:31:1D:7F:D6:AA:E3:6F:8F Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584E66DA0FA754A5F0AD17AA4300 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0f7346aa-04ca-31b9-bb2d-2e823a303874.roa Signing time: Sun 05 Jul 2026 21:00:11 +0000 ROA not before: Sun 05 Jul 2026 21:00:11 +0000 ROA not after: Sat 03 Oct 2026 21:00:11 +0000 asID: 400536 IP address blocks: 23.230.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:66:da:0f:a7:54:a5:f0:ad:17:aa:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Jul 5 21:00:11 2026 GMT Not After : Oct 3 21:00:11 2026 GMT Subject: CN=d5bdc1e9-7d75-4a88-9395-de8f6d29549e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:64:1b:f9:90:a9:81:04:d9:d2:52:be:74:6e: 61:7b:e1:66:52:3c:d4:db:56:fd:bb:fe:1e:d1:c4: 70:27:34:2e:86:82:a0:87:54:6f:a4:bb:2e:35:30: 96:34:36:0d:eb:39:73:45:a3:12:7c:91:0c:57:83: e8:f6:c1:9b:6c:08:24:43:05:37:18:7b:38:df:e4: 89:2e:c5:dc:b1:98:8d:96:9c:3d:55:c9:10:ec:1d: 1e:71:90:91:e4:72:8d:11:d4:69:7b:1e:f9:54:0c: 9a:95:5a:74:ec:96:96:22:78:ef:ba:2c:6c:ae:30: 98:d3:5a:78:e8:82:f9:aa:6a:8c:aa:e6:68:03:f9: e7:33:9e:76:a5:56:46:c6:74:f0:c8:46:70:10:1c: 39:98:47:01:63:42:2b:82:d8:03:ae:e2:c6:46:33: 66:97:8c:7d:f9:2b:87:97:9b:05:b1:d4:3d:9e:a0: b4:ef:45:33:28:c5:6f:43:57:4c:e1:98:2b:9a:18: e1:22:17:f2:63:03:d0:93:72:b9:2c:d9:97:fe:3f: ed:4a:8d:db:5b:ad:6f:d2:59:d8:7d:ed:ab:fc:f9: 64:86:0c:81:2a:e6:72:22:19:6a:f9:ee:77:e3:dd: 02:53:3d:7c:83:58:10:fa:c3:af:d4:a4:fc:89:3f: 42:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:86:91:3F:46:93:A4:3B:34:AC:35:A9:31:1D:7F:D6:AA:E3:6F:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0f7346aa-04ca-31b9-bb2d-2e823a303874.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 23.230.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:1d:3e:9e:2b:ea:95:8e:bd:70:a0:ed:f9:de:79:44:dd:36: 2a:5c:40:86:e3:d2:65:64:7c:9c:99:6b:a9:d2:81:2c:81:2e: b1:dd:6f:04:08:db:f4:86:78:85:58:9c:80:86:7e:ef:c4:1a: 07:ef:00:97:a6:80:ce:b4:aa:a5:55:18:eb:88:ac:8b:22:01: a5:1c:47:b7:2b:7b:07:e2:7c:cb:b6:17:5f:36:2e:13:df:0a: d8:9c:6c:73:6e:d3:0a:6c:a3:e9:91:6d:ad:a2:5b:d6:f6:d8: ea:3b:74:84:98:1e:a0:d3:f8:5f:85:8c:f9:0d:ed:a6:c8:a8: c1:1f:11:79:53:09:bf:01:b9:09:19:44:d8:26:63:a6:86:c7: e3:cf:fd:01:f0:16:a3:15:95:5c:34:20:a6:6f:6f:7f:8b:a0: f4:15:fb:d1:6a:c8:11:5f:4d:08:43:47:79:5b:3f:b5:5d:15: 8a:cf:38:2d:39:c9:a6:c2:bf:8d:91:cc:3d:6d:e2:f5:ca:20: e2:ad:33:19:f5:ff:22:5c:ec:1c:ae:31:d9:fb:e1:d2:74:f3: 22:0f:48:b1:6f:59:b4:38:c7:29:20:44:24:12:30:e9:cf:93: 78:af:ea:a5:07:61:43:e4:23:94:96:10:fd:84:4b:e5:d3:fc: 1a:f2:25:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5m2g+nVKXwrReqQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDcwNTIxMDAxMVoXDTI2MTAwMzIxMDAxMVowLzEtMCsGA1UEAxMk ZDViZGMxZTktN2Q3NS00YTg4LTkzOTUtZGU4ZjZkMjk1NDllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymQb+ZCpgQTZ0lK+dG5he+FmUjzU21b9u/4e 0cRwJzQuhoKgh1RvpLsuNTCWNDYN6zlzRaMSfJEMV4Po9sGbbAgkQwU3GHs43+SJ LsXcsZiNlpw9VckQ7B0ecZCR5HKNEdRpex75VAyalVp07JaWInjvuixsrjCY01p4 6IL5qmqMquZoA/nnM552pVZGxnTwyEZwEBw5mEcBY0IrgtgDruLGRjNml4x9+SuH l5sFsdQ9nqC070UzKMVvQ1dM4ZgrmhjhIhfyYwPQk3K5LNmX/j/tSo3bW61v0lnY fe2r/PlkhgyBKuZyIhlq+e53490CUz18g1gQ+sOv1KT8iT9CBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNKGkT9Gk6Q7NKw1qTEdf9aq42+PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMGY3MzQ2YWEtMDRjYS0z MWI5LWJiMmQtMmU4MjNhMzAzODc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+YUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4dPp4r6pWOvXCg7fneeUTdNipcQIbj0mVkfJyZa6nSgSyBLrHdbwQI 2/SGeIVYnICGfu/EGgfvAJemgM60qqVVGOuIrIsiAaUcR7crewfifMu2F182LhPf CticbHNu0wpso+mRba2iW9b22Oo7dISYHqDT+F+FjPkN7abIqMEfEXlTCb8BuQkZ RNgmY6aGx+PP/QHwFqMVlVw0IKZvb3+LoPQV+9FqyBFfTQhDR3lbP7VdFYrPOC05 yabCv42RzD1t4vXKIOKtMxn1/yJc7ByuMdn74dJ08yIPSLFvWbQ4xykgRCQSMOnP k3iv6qUHYUPkI5SWEP2ES+XT/BryJSM= -----END CERTIFICATE-----Generated at Fri Jul 10 17:23:57 2026 by rpki-client