$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/412a11c3-55d8-30a7-954e-7f92feb5901b.roa File: 412a11c3-55d8-30a7-954e-7f92feb5901b.roa (raw, json) Hash identifier: e2wvqUf3swt4Y4JmsGiskNPv85hZ6qRg/r8bfxOdubE= Subject key identifier: AE:D8:1F:03:4D:1F:44:D9:2D:9A:29:07:28:39:E5:D4:A5:FA:9A:7A Certificate issuer: /CN=239e2a72-9347-4316-9be7-20bdf6512711 Certificate serial: 010D0C9F4328584F119CFA28C76BB7AE8F57C600 Authority key identifier: C7:00:5A:76:42:60:11:9F:ED:7A:6F:7F:67:94:62:64:EC:2D:6B:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/412a11c3-55d8-30a7-954e-7f92feb5901b.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 62164 IP address blocks: 23.129.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/239e2a72-9347-4316-9be7-20bdf6512711.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/239e2a72-9347-4316-9be7-20bdf6512711.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9c:fa:28:c7:6b:b7:ae:8f:57:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=239e2a72-9347-4316-9be7-20bdf6512711 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=b415c3b0-6fb0-4e03-b9fa-ded4dc358453 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7e:94:d4:23:55:44:f1:82:75:7e:63:7e:73: 74:8c:08:ed:e9:a9:65:ff:b2:cf:6e:b4:63:3d:84: 0c:76:b3:da:44:12:4d:c9:5e:a1:5a:15:c8:fb:de: 67:53:07:92:b5:2a:89:99:44:f9:a4:a3:5a:29:b1: 75:9f:2b:0c:48:cd:7c:99:5f:e5:2a:a4:3e:aa:43: 5a:c1:e1:08:49:92:8f:e8:18:f9:3c:1e:31:be:8d: 55:49:39:1f:0a:89:96:9c:80:15:1c:bd:0b:2d:4c: 91:34:4e:61:9d:81:e5:5a:f9:9d:95:25:b2:5a:21: c4:bd:f7:9f:e9:7a:25:bd:0e:c1:f7:69:98:c5:33: 37:ca:e2:30:a8:bb:0e:76:4a:2c:b8:2b:cb:58:69: 33:29:f7:2b:d8:c1:ab:c4:ec:8e:f9:16:77:f7:21: 12:52:d1:7a:fa:fb:9d:b5:0f:cb:cc:6d:03:83:2c: ff:70:ac:64:c5:7a:37:37:f8:a6:95:ab:a5:6e:9c: ff:cc:26:03:2f:80:b5:b9:47:b8:70:ca:cf:e7:69: 18:f8:97:8c:92:db:37:68:05:e1:d6:69:dd:40:98: b5:0c:76:55:2b:f1:d9:67:69:9a:b7:0d:0c:71:58: a4:e0:74:95:45:62:45:4e:12:f6:08:1e:e7:80:d7: 90:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:D8:1F:03:4D:1F:44:D9:2D:9A:29:07:28:39:E5:D4:A5:FA:9A:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/412a11c3-55d8-30a7-954e-7f92feb5901b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/239e2a72-9347-4316-9be7-20bdf6512711.crl X509v3 Authority Key Identifier: keyid:C7:00:5A:76:42:60:11:9F:ED:7A:6F:7F:67:94:62:64:EC:2D:6B:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer sbgp-ipAddrBlock: critical IPv4: 23.129.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:8c:dd:00:ea:59:13:5a:b6:14:33:db:fe:6f:32:65:73:2f: e1:1d:78:b8:f8:a9:81:5e:0a:60:f7:d8:26:a3:d3:5f:c3:69: fe:10:c8:e3:58:6e:c8:86:72:c1:44:2c:ba:18:94:6d:4a:bc: 07:09:7f:91:e7:c4:dd:3e:6a:13:12:60:39:6d:f9:1b:25:f2: 54:19:5d:f6:5e:3c:e0:5a:6f:8c:38:3d:4b:f5:4d:5e:ef:c5: b9:f6:ec:19:9d:84:30:36:9a:70:de:e1:7a:df:c1:a5:4e:40: b1:1a:87:7c:c6:7d:59:ef:8c:91:5d:d6:88:4b:15:cb:01:80: 3d:54:86:74:15:69:39:32:9c:17:5a:48:3b:f4:cf:60:70:6b: b5:13:0a:d7:10:b1:21:66:87:ff:77:22:54:2c:3f:e4:d0:1d: 43:74:69:46:ff:75:4a:4d:5a:81:49:7f:b6:1a:24:b3:37:44: e7:d4:3c:7e:68:86:34:15:c0:1d:1f:01:4e:66:73:d0:84:58: 78:5f:50:b1:9f:3f:cd:04:d6:45:3e:82:f5:32:3e:61:38:6f: 1f:bf:03:e9:b5:6a:73:c9:65:c7:71:fa:b9:f2:4d:ac:4f:c3: f0:00:49:2c:89:0f:ee:fa:40:cc:3b:95:17:f3:42:57:7f:ce: 53:cc:e3:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnPoox2u3ro9XxgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjM5ZTJhNzItOTM0Ny00MzE2LTliZTctMjBiZGY2NTEy NzExMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk YjQxNWMzYjAtNmZiMC00ZTAzLWI5ZmEtZGVkNGRjMzU4NDUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyH6U1CNVRPGCdX5jfnN0jAjt6all/7LPbrRj PYQMdrPaRBJNyV6hWhXI+95nUweStSqJmUT5pKNaKbF1nysMSM18mV/lKqQ+qkNa weEISZKP6Bj5PB4xvo1VSTkfComWnIAVHL0LLUyRNE5hnYHlWvmdlSWyWiHEvfef 6XolvQ7B92mYxTM3yuIwqLsOdkosuCvLWGkzKfcr2MGrxOyO+RZ39yESUtF6+vud tQ/LzG0Dgyz/cKxkxXo3N/imlaulbpz/zCYDL4C1uUe4cMrP52kY+JeMkts3aAXh 1mndQJi1DHZVK/HZZ2matw0McVik4HSVRWJFThL2CB7ngNeQFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK7YHwNNH0TZLZopByg55dSl+pp6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yMzll MmE3Mi05MzQ3LTQzMTYtOWJlNy0yMGJkZjY1MTI3MTEvNDEyYTExYzMtNTVkOC0z MGE3LTk1NGUtN2Y5MmZlYjU5MDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjM5ZTJhNzItOTM0Ny00MzE2LTli ZTctMjBiZGY2NTEyNzExLzIzOWUyYTcyLTkzNDctNDMxNi05YmU3LTIwYmRmNjUx MjcxMS5jcmwwHwYDVR0jBBgwFoAUxwBadkJgEZ/tem9/Z5RiZOwta1QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yMzllMmE3Mi05MzQ3LTQzMTYtOWJlNy0yMGJk ZjY1MTI3MTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4HoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABWM3QDqWRNathQz2/5vMmVzL+EdeLj4qYFeCmD32Caj01/Daf4QyONY bsiGcsFELLoYlG1KvAcJf5HnxN0+ahMSYDlt+Rsl8lQZXfZePOBab4w4PUv1TV7v xbn27BmdhDA2mnDe4XrfwaVOQLEah3zGfVnvjJFd1ohLFcsBgD1UhnQVaTkynBda SDv0z2Bwa7UTCtcQsSFmh/93IlQsP+TQHUN0aUb/dUpNWoFJf7YaJLM3ROfUPH5o hjQVwB0fAU5mc9CEWHhfULGfP80E1kU+gvUyPmE4bx+/A+m1anPJZcdx+rnyTaxP w/AASSyJD+76QMw7lRfzQld/zlPM49M= -----END CERTIFICATE-----Generated at Sat Sep 5 05:02:37 2026 by rpki-client