$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8d335843-a776-4e8d-949e-8217822b7151/b38cb35a-486e-3325-8799-f39704b0b87c.roa File: b38cb35a-486e-3325-8799-f39704b0b87c.roa (raw, json) Hash identifier: JqOhzONL7bMvKdYInW03/snpEQGGV9V4i4Qe6DOjvSk= Subject key identifier: 14:6E:28:8F:64:EB:C2:15:E7:BC:CC:8C:6B:8C:A5:24:D4:8F:D5:AD Certificate issuer: /CN=8d335843-a776-4e8d-949e-8217822b7151 Certificate serial: 010D0C9F4328584EAE81B6F49767049AF2B07EE0 Authority key identifier: F4:D1:12:A6:8C:DB:75:56:5D:AD:9A:FD:A6:92:14:D9:04:80:89:44 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8d335843-a776-4e8d-949e-8217822b7151.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8d335843-a776-4e8d-949e-8217822b7151/b38cb35a-486e-3325-8799-f39704b0b87c.roa Signing time: Fri 31 Jul 2026 13:00:12 +0000 ROA not before: Fri 31 Jul 2026 13:00:12 +0000 ROA not after: Thu 29 Oct 2026 13:00:12 +0000 asID: 29769 IP address blocks: 23.183.176.0/24 maxlen: 24 2602:fc5a::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8d335843-a776-4e8d-949e-8217822b7151/8d335843-a776-4e8d-949e-8217822b7151.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8d335843-a776-4e8d-949e-8217822b7151/8d335843-a776-4e8d-949e-8217822b7151.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8d335843-a776-4e8d-949e-8217822b7151.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ae:81:b6:f4:97:67:04:9a:f2:b0:7e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d335843-a776-4e8d-949e-8217822b7151 Validity Not Before: Jul 31 13:00:12 2026 GMT Not After : Oct 29 13:00:12 2026 GMT Subject: CN=e4074f74-145e-4bd5-a5ae-9d3bb6cb6d61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:8d:29:cf:64:21:61:cb:cb:e6:65:87:37:fe: 44:f6:ad:0c:b5:ff:85:27:a0:28:69:69:04:89:06: fc:ed:f7:57:f0:f1:2a:20:3b:9c:59:fd:cc:23:f6: 00:7e:04:9c:45:88:09:a1:8f:29:14:95:39:14:ab: 2c:23:d9:c6:a8:6e:24:a1:0b:71:64:3a:b9:9f:e5: e3:74:ab:41:1b:3c:06:62:2d:79:b7:8f:99:f0:b4: 62:31:ad:3d:21:dd:00:2f:ce:24:36:e9:4e:55:1f: f5:32:4f:db:8a:b9:c1:ce:88:57:26:c4:37:62:9d: b8:21:3c:d6:d8:bf:6c:93:f5:6e:0f:08:bf:34:4a: fd:64:f9:05:76:70:90:63:9b:49:7c:f2:0b:6f:22: 2a:d0:59:30:23:e3:78:49:40:37:e1:42:ac:b6:20: ad:c0:18:c6:9c:03:46:5f:74:7a:d2:89:48:68:2c: a6:c0:15:a5:23:be:75:87:7d:55:14:39:9a:82:03: 74:4b:01:4d:4c:62:ab:0b:4b:70:13:e0:4e:64:32: ad:88:38:56:79:08:a6:41:84:f4:19:23:60:62:72: 4f:5a:62:8d:cc:92:4a:27:fe:b7:03:98:68:4e:6a: db:07:44:a0:d3:87:57:a1:fc:f9:75:69:b6:71:48: 6f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:6E:28:8F:64:EB:C2:15:E7:BC:CC:8C:6B:8C:A5:24:D4:8F:D5:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8d335843-a776-4e8d-949e-8217822b7151/b38cb35a-486e-3325-8799-f39704b0b87c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8d335843-a776-4e8d-949e-8217822b7151/8d335843-a776-4e8d-949e-8217822b7151.crl X509v3 Authority Key Identifier: keyid:F4:D1:12:A6:8C:DB:75:56:5D:AD:9A:FD:A6:92:14:D9:04:80:89:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8d335843-a776-4e8d-949e-8217822b7151.cer sbgp-ipAddrBlock: critical IPv4: 23.183.176.0/24 IPv6: 2602:fc5a::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:3d:2a:67:34:7d:33:77:7f:79:36:9e:12:00:21:71:fb:98: af:cb:eb:0a:be:7d:85:07:24:f2:85:d0:c9:4e:4b:16:f8:2b: 6b:49:7b:8c:72:a6:e6:52:d6:85:d8:cc:8d:8d:e5:ab:ce:ad: 14:e9:a9:6b:19:52:bf:24:ff:b0:32:7e:45:7e:8e:32:ea:d3: 82:34:e3:e1:57:e3:be:90:79:b6:91:4b:4f:c5:a2:52:f5:1d: 7f:61:33:74:a6:e9:e0:f4:39:8d:7e:6b:32:b1:7f:af:a0:91: ad:62:20:f1:00:6a:78:27:84:d9:a1:83:19:d1:53:92:54:78: 74:4d:fd:58:45:5f:15:12:b2:76:19:d4:f3:3c:34:54:03:f6: c7:91:da:04:95:8c:ec:0e:d4:b2:ae:bd:05:dc:c7:03:58:0f: c4:8f:f3:7f:fb:66:04:52:f6:5e:a8:5c:6f:11:b1:2e:67:31: e6:9c:fa:61:94:ec:02:b9:3b:db:f7:14:23:0a:0d:f4:22:ea: e9:98:cb:18:0d:2c:95:7e:67:1e:bd:f7:84:03:ef:04:73:fc: 2e:3f:d5:4d:45:d4:77:4d:1d:0e:b4:28:3d:ac:6e:82:69:ba: 70:30:ee:4e:79:29:37:a2:da:e3:4c:ac:1f:63:ea:c1:9f:86: 46:30:3d:34 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE6ugbb0l2cEmvKwfuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQzMzU4NDMtYTc3Ni00ZThkLTk0OWUtODIxNzgyMmI3 MTUxMB4XDTI2MDczMTEzMDAxMloXDTI2MTAyOTEzMDAxMlowLzEtMCsGA1UEAxMk ZTQwNzRmNzQtMTQ1ZS00YmQ1LWE1YWUtOWQzYmI2Y2I2ZDYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmI0pz2QhYcvL5mWHN/5E9q0Mtf+FJ6AoaWkE iQb87fdX8PEqIDucWf3MI/YAfgScRYgJoY8pFJU5FKssI9nGqG4koQtxZDq5n+Xj dKtBGzwGYi15t4+Z8LRiMa09Id0AL84kNulOVR/1Mk/birnBzohXJsQ3Yp24ITzW 2L9sk/VuDwi/NEr9ZPkFdnCQY5tJfPILbyIq0FkwI+N4SUA34UKstiCtwBjGnANG X3R60olIaCymwBWlI751h31VFDmaggN0SwFNTGKrC0twE+BOZDKtiDhWeQimQYT0 GSNgYnJPWmKNzJJKJ/63A5hoTmrbB0Sg04dXofz5dWm2cUhvTQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFBRuKI9k68IV57zMjGuMpSTUj9WtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84ZDMz NTg0My1hNzc2LTRlOGQtOTQ5ZS04MjE3ODIyYjcxNTEvYjM4Y2IzNWEtNDg2ZS0z MzI1LTg3OTktZjM5NzA0YjBiODdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGQzMzU4NDMtYTc3Ni00ZThkLTk0 OWUtODIxNzgyMmI3MTUxLzhkMzM1ODQzLWE3NzYtNGU4ZC05NDllLTgyMTc4MjJi NzE1MS5jcmwwHwYDVR0jBBgwFoAU9NESpozbdVZdrZr9ppIU2QSAiUQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84ZDMzNTg0My1hNzc2LTRlOGQtOTQ5ZS04MjE3 ODIyYjcxNTEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF7ewMA4E AgACMAgDBgQmAvxaADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBHPSpnNH0zd395Np4SACFx+5ivy+sKvn2F ByTyhdDJTksW+CtrSXuMcqbmUtaF2MyNjeWrzq0U6alrGVK/JP+wMn5Ffo4y6tOC NOPhV+O+kHm2kUtPxaJS9R1/YTN0pung9DmNfmsysX+voJGtYiDxAGp4J4TZoYMZ 0VOSVHh0Tf1YRV8VErJ2GdTzPDRUA/bHkdoElYzsDtSyrr0F3McDWA/Ej/N/+2YE UvZeqFxvEbEuZzHmnPphlOwCuTvb9xQjCg30IurpmMsYDSyVfmcevfeEA+8Ec/wu P9VNRdR3TR0OtCg9rG6CabpwMO5OeSk3otrjTKwfY+rBn4ZGMD00 -----END CERTIFICATE-----Generated at Sat Aug 22 18:06:13 2026 by rpki-client