$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/dc7ed13e-be40-30d8-b0c7-71d789003fcd.roa File: dc7ed13e-be40-30d8-b0c7-71d789003fcd.roa (raw, json) Hash identifier: N+JqkLrwnz1jli4XJVXG/G56+JPko8DTCoZMbQGQ5cc= Subject key identifier: CC:FF:13:D8:D1:3F:6D:C4:BD:97:8A:27:56:1E:B6:C4:95:B5:AD:09 Certificate issuer: /CN=f8e7a246-465c-42e8-8be1-af167b20b04d Certificate serial: 010D0C9F4328584EF2BAA76DF813C16641D59780 Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/dc7ed13e-be40-30d8-b0c7-71d789003fcd.roa Signing time: Mon 24 Aug 2026 23:30:13 +0000 ROA not before: Mon 24 Aug 2026 23:30:13 +0000 ROA not after: Mon 23 Nov 2026 00:30:13 +0000 asID: 3257 IP address blocks: 23.234.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f2:ba:a7:6d:f8:13:c1:66:41:d5:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d Validity Not Before: Aug 24 23:30:13 2026 GMT Not After : Nov 23 00:30:13 2026 GMT Subject: CN=aae368ec-640b-4945-a8f0-c586632386ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0f:05:ff:58:43:f6:78:7c:9a:2f:a2:17:19: 37:ea:99:bf:74:06:24:d7:18:9f:b5:7c:8b:fa:d1: 46:60:b1:af:58:02:81:27:1f:33:5a:eb:c6:04:4b: 87:34:fb:15:8b:3c:41:8b:3e:16:2c:14:7b:db:4a: 55:7f:4c:ca:91:60:c1:f6:bc:1d:d5:af:99:58:54: 3e:44:ab:29:d3:57:e0:c2:11:a9:d7:45:55:4f:9f: 4b:98:a3:25:7a:81:fb:ae:60:d9:11:17:76:02:3d: 6e:31:ac:37:6a:e3:6f:da:b8:38:69:f3:27:f6:fc: 3b:9b:eb:d6:65:78:7d:7e:1c:cc:18:96:e6:af:83: 77:ea:4e:4f:75:f7:de:9c:52:8c:e6:01:10:1e:5e: 5d:46:ac:47:fe:b7:0a:66:54:dc:18:34:3d:f3:01: 88:cd:39:ca:37:73:5e:fa:b9:1c:e0:50:db:9f:4c: 6b:99:c7:2e:6e:71:55:5b:d8:e8:b3:21:bd:c1:96: be:73:00:e6:66:6a:fd:d2:b6:6f:4c:ca:c8:d6:49: c6:26:8b:77:4c:a5:a7:b4:fe:22:c9:54:49:ee:a7: 20:75:51:a5:75:51:0b:7e:b2:76:d2:f6:95:e2:96: 0b:10:5c:19:54:ba:9d:11:e3:e6:00:1f:81:a2:df: 4e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:FF:13:D8:D1:3F:6D:C4:BD:97:8A:27:56:1E:B6:C4:95:B5:AD:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/dc7ed13e-be40-30d8-b0c7-71d789003fcd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl X509v3 Authority Key Identifier: keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer sbgp-ipAddrBlock: critical IPv4: 23.234.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:1a:33:45:3d:37:79:34:c1:cc:4a:6d:29:f6:5c:b5:d9:75: d3:b6:b9:ac:92:d2:c3:ba:5d:bc:33:d6:37:89:c1:37:30:ee: 9c:e6:f3:96:5d:59:1d:63:02:e0:2a:ac:08:99:8e:65:64:5d: 89:fb:a0:3e:bc:25:14:35:95:ed:bb:a6:38:0f:60:27:76:86: ff:08:dc:36:b3:3e:1f:ab:91:b7:9d:b6:a5:96:20:44:b2:68: fb:81:37:d1:44:50:dd:76:a5:75:66:6f:75:4a:49:2a:25:c6: 28:a7:d4:47:bb:e1:9b:3b:c8:f0:94:6a:a9:31:35:e5:66:2b: dc:ae:56:a4:1a:c9:fc:3a:48:09:d3:95:fa:47:37:59:11:d6: c1:81:96:ec:32:88:23:b9:50:67:06:ef:71:96:31:52:d7:c8: cf:c6:1f:d4:42:2a:c7:a8:37:b6:32:7a:48:ba:6e:44:4f:4f: 4a:7e:ab:e3:b7:60:e6:0a:1a:a6:cd:eb:e7:fd:c5:b3:51:2b: cb:9b:1c:79:3b:d4:38:99:a8:65:20:6a:31:b4:a2:28:c6:8c: 45:c7:2f:60:11:d6:92:23:19:10:82:fc:d0:ae:df:39:be:9d: db:9b:b3:83:c7:12:ac:2a:fa:bc:4c:bf:e9:52:a2:27:34:98: a4:d2:ec:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7yuqdt+BPBZkHVl4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjhlN2EyNDYtNDY1Yy00MmU4LThiZTEtYWYxNjdiMjBi MDRkMB4XDTI2MDgyNDIzMzAxM1oXDTI2MTEyMzAwMzAxM1owLzEtMCsGA1UEAxMk YWFlMzY4ZWMtNjQwYi00OTQ1LWE4ZjAtYzU4NjYzMjM4NmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArw8F/1hD9nh8mi+iFxk36pm/dAYk1xiftXyL +tFGYLGvWAKBJx8zWuvGBEuHNPsVizxBiz4WLBR720pVf0zKkWDB9rwd1a+ZWFQ+ RKsp01fgwhGp10VVT59LmKMleoH7rmDZERd2Aj1uMaw3auNv2rg4afMn9vw7m+vW ZXh9fhzMGJbmr4N36k5PdffenFKM5gEQHl5dRqxH/rcKZlTcGDQ98wGIzTnKN3Ne +rkc4FDbn0xrmccubnFVW9josyG9wZa+cwDmZmr90rZvTMrI1knGJot3TKWntP4i yVRJ7qcgdVGldVELfrJ20vaV4pYLEFwZVLqdEePmAB+Bot9O7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMz/E9jRP23EvZeKJ1YetsSVta0JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mOGU3 YTI0Ni00NjVjLTQyZTgtOGJlMS1hZjE2N2IyMGIwNGQvZGM3ZWQxM2UtYmU0MC0z MGQ4LWIwYzctNzFkNzg5MDAzZmNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZjhlN2EyNDYtNDY1Yy00MmU4LThi ZTEtYWYxNjdiMjBiMDRkL2Y4ZTdhMjQ2LTQ2NWMtNDJlOC04YmUxLWFmMTY3YjIw YjA0ZC5jcmwwHwYDVR0jBBgwFoAUR+JH4gjDggpVpJle4BDeeNKU8c4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mOGU3YTI0Ni00NjVjLTQyZTgtOGJlMS1hZjE2 N2IyMGIwNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF+qAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJAaM0U9N3k0wcxKbSn2XLXZddO2uayS0sO6Xbwz1jeJwTcw7pzm85Zd WR1jAuAqrAiZjmVkXYn7oD68JRQ1le27pjgPYCd2hv8I3DazPh+rkbedtqWWIESy aPuBN9FEUN12pXVmb3VKSSolxiin1Ee74Zs7yPCUaqkxNeVmK9yuVqQayfw6SAnT lfpHN1kR1sGBluwyiCO5UGcG73GWMVLXyM/GH9RCKseoN7Yyeki6bkRPT0p+q+O3 YOYKGqbN6+f9xbNRK8ubHHk71DiZqGUgajG0oijGjEXHL2AR1pIjGRCC/NCu3zm+ ndubs4PHEqwq+rxMv+lSoic0mKTS7OM= -----END CERTIFICATE-----Generated at Tue Sep 1 03:00:56 2026 by rpki-client