$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/394d8786-185c-3bfb-9e5a-2a4a57146ab1.roa File: 394d8786-185c-3bfb-9e5a-2a4a57146ab1.roa (raw, json) Hash identifier: ExrJTDlk3cX3Db1mDCNjcTI9h7MX3a8zoTi/QPUJh/4= Subject key identifier: D3:A8:EC:95:D3:04:B2:0B:16:ED:25:C0:EB:CB:A4:C5:7B:FA:A6:08 Certificate issuer: /CN=4009d93a-d9e7-4eb7-94cd-ffec0618c3ec Certificate serial: 010D0C9F4328584EE7BCAB22711638A380002600 Authority key identifier: D9:29:B8:E6:CC:D4:23:43:46:47:89:33:97:4A:24:76:99:8C:AB:72 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/394d8786-185c-3bfb-9e5a-2a4a57146ab1.roa Signing time: Fri 21 Aug 2026 01:00:12 +0000 ROA not before: Fri 21 Aug 2026 01:00:12 +0000 ROA not after: Thu 19 Nov 2026 02:00:12 +0000 asID: 63072 IP address blocks: 23.135.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e7:bc:ab:22:71:16:38:a3:80:00:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4009d93a-d9e7-4eb7-94cd-ffec0618c3ec Validity Not Before: Aug 21 01:00:12 2026 GMT Not After : Nov 19 02:00:12 2026 GMT Subject: CN=dae86b9e-e62a-4245-bc88-69485340e952 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:56:93:77:6a:d6:03:11:b3:d5:10:65:2e:9d: 02:3b:6d:fc:f4:18:6a:5c:2e:aa:65:66:d6:1e:cd: d8:6c:89:e8:99:97:a6:28:0f:d1:f0:06:52:ae:41: 3c:e4:8b:0c:7e:ab:c5:6a:27:ce:3a:1e:a4:42:b0: cb:55:bb:90:35:eb:63:fb:b5:88:89:b6:bb:7c:42: 2e:14:fc:c6:9e:2d:ca:40:27:32:23:0d:f5:dc:4b: 0e:2e:ec:21:d3:55:6b:01:fa:c7:ff:68:85:79:58: df:16:1c:87:de:40:ca:53:df:6d:19:de:2c:16:0f: 6c:63:ef:90:24:61:83:22:d8:8d:b3:86:26:fa:7e: 42:4e:f3:2a:aa:89:2b:71:f4:04:12:9c:75:3b:f5: de:9f:ec:3c:9b:11:3c:4e:06:9f:69:24:ce:20:47: 07:87:54:d9:ac:ce:30:b3:7d:86:43:5e:cc:9e:cd: 2d:94:b8:f5:9f:95:ce:48:62:b7:8d:b3:88:ad:88: cb:c0:9e:fd:f2:9c:22:3c:a2:76:05:9a:0b:1f:3a: 05:ef:b2:d9:a4:c3:d7:40:2f:15:1f:cd:20:d7:58: 11:02:16:d1:0c:e6:4c:b9:8c:2d:31:84:05:82:4c: 88:fa:ad:a5:d9:4d:6b:92:9c:d9:22:77:80:e6:66: 16:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:A8:EC:95:D3:04:B2:0B:16:ED:25:C0:EB:CB:A4:C5:7B:FA:A6:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/394d8786-185c-3bfb-9e5a-2a4a57146ab1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.crl X509v3 Authority Key Identifier: keyid:D9:29:B8:E6:CC:D4:23:43:46:47:89:33:97:4A:24:76:99:8C:AB:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.cer sbgp-ipAddrBlock: critical IPv4: 23.135.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:2a:f9:7b:3f:86:6d:d1:d1:4a:42:5b:65:42:2c:e2:76:d7: 7d:cc:df:45:fc:d7:47:6e:59:3a:97:37:0e:d0:46:15:a8:7f: bc:82:ea:fb:13:a4:75:ac:b8:d6:59:26:83:60:98:32:ab:fa: 63:5e:e0:69:0e:5c:19:d5:3a:dc:7c:5e:3f:3e:ac:17:53:cc: 14:45:a6:eb:34:99:a9:f1:b7:ab:91:51:46:56:7c:f5:26:d6: 2e:74:85:a7:7f:f8:44:05:90:55:37:17:3c:b8:bb:13:c5:a0: 60:7c:de:8c:1a:af:01:bb:49:8a:1f:14:81:95:5d:ec:bd:61: 03:d6:0a:d1:d5:ef:2c:7f:e5:bf:c0:9a:40:22:c3:ab:ed:09: 20:f8:5e:3a:ad:d2:f1:d3:95:78:b4:a4:11:91:3f:21:b5:85: c0:ed:e4:ed:b9:53:fa:d6:d8:4b:05:cd:77:d4:ad:90:cd:32: a1:a3:63:09:1b:8a:26:52:7f:a5:d4:1b:11:db:07:cf:7d:8e: 50:21:ab:52:97:cf:89:eb:1e:b3:cd:d1:dc:0c:bf:ec:46:47: 52:d3:f7:79:02:e8:a6:3d:7a:a2:7f:1c:74:18:79:39:46:37: ba:9c:6f:34:0c:73:d0:fa:18:82:18:b2:a4:d3:ea:7a:87:38: 20:2b:3a:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7nvKsicRY4o4AAJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDAwOWQ5M2EtZDllNy00ZWI3LTk0Y2QtZmZlYzA2MThj M2VjMB4XDTI2MDgyMTAxMDAxMloXDTI2MTExOTAyMDAxMlowLzEtMCsGA1UEAxMk ZGFlODZiOWUtZTYyYS00MjQ1LWJjODgtNjk0ODUzNDBlOTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulaTd2rWAxGz1RBlLp0CO2389BhqXC6qZWbW Hs3YbInomZemKA/R8AZSrkE85IsMfqvFaifOOh6kQrDLVbuQNetj+7WIiba7fEIu FPzGni3KQCcyIw313EsOLuwh01VrAfrH/2iFeVjfFhyH3kDKU99tGd4sFg9sY++Q JGGDItiNs4Ym+n5CTvMqqokrcfQEEpx1O/Xen+w8mxE8TgafaSTOIEcHh1TZrM4w s32GQ17Mns0tlLj1n5XOSGK3jbOIrYjLwJ798pwiPKJ2BZoLHzoF77LZpMPXQC8V H80g11gRAhbRDOZMuYwtMYQFgkyI+q2l2U1rkpzZIneA5mYWdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNOo7JXTBLILFu0lwOvLpMV7+qYIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80MDA5 ZDkzYS1kOWU3LTRlYjctOTRjZC1mZmVjMDYxOGMzZWMvMzk0ZDg3ODYtMTg1Yy0z YmZiLTllNWEtMmE0YTU3MTQ2YWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDAwOWQ5M2EtZDllNy00ZWI3LTk0 Y2QtZmZlYzA2MThjM2VjLzQwMDlkOTNhLWQ5ZTctNGViNy05NGNkLWZmZWMwNjE4 YzNlYy5jcmwwHwYDVR0jBBgwFoAU2Sm45szUI0NGR4kzl0okdpmMq3IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80MDA5ZDkzYS1kOWU3LTRlYjctOTRjZC1mZmVj MDYxOGMzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4ewMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF0q+Xs/hm3R0UpCW2VCLOJ2133M30X810duWTqXNw7QRhWof7yC6vsT pHWsuNZZJoNgmDKr+mNe4GkOXBnVOtx8Xj8+rBdTzBRFpus0manxt6uRUUZWfPUm 1i50had/+EQFkFU3Fzy4uxPFoGB83owarwG7SYofFIGVXey9YQPWCtHV7yx/5b/A mkAiw6vtCSD4Xjqt0vHTlXi0pBGRPyG1hcDt5O25U/rW2EsFzXfUrZDNMqGjYwkb iiZSf6XUGxHbB899jlAhq1KXz4nrHrPN0dwMv+xGR1LT93kC6KY9eqJ/HHQYeTlG N7qcbzQMc9D6GIIYsqTT6nqHOCArOrU= -----END CERTIFICATE-----Generated at Sat Aug 22 18:04:34 2026 by rpki-client