$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/af16373c-3287-341a-a7b4-1cec1a5c9f48.roa File: af16373c-3287-341a-a7b4-1cec1a5c9f48.roa (raw, json) Hash identifier: xqVFNoHxsT1fTwGe5MlaT9r1NxV0bNWqiMlOl0eqDpw= Subject key identifier: 94:29:2D:2D:72:61:22:43:C0:06:19:75:70:69:38:7D:18:70:B7:93 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584E54B4981DCECBC72C2229EF00 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/af16373c-3287-341a-a7b4-1cec1a5c9f48.roa Signing time: Mon 29 Jun 2026 09:00:12 +0000 ROA not before: Mon 29 Jun 2026 09:00:12 +0000 ROA not after: Sun 27 Sep 2026 09:00:12 +0000 asID: 19437 IP address blocks: 23.235.224.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:54:b4:98:1d:ce:cb:c7:2c:22:29:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Jun 29 09:00:12 2026 GMT Not After : Sep 27 09:00:12 2026 GMT Subject: CN=c63dbe69-0355-4eeb-9517-501a2eb537cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:31:76:dd:96:81:f2:a5:b9:28:12:15:ec:90: e9:9e:ad:0f:44:1a:32:15:0c:ad:4f:fa:3f:f0:38: 14:b6:48:0a:ab:8d:24:8a:16:7f:ac:60:78:c6:23: 75:64:0a:4a:7b:0f:3b:da:1a:93:57:35:11:8f:61: a4:e2:37:c7:10:d0:bf:f8:6a:4c:78:28:b4:fd:a4: bc:59:eb:8c:b7:1b:31:be:bd:7b:16:7a:f7:41:f4: 28:00:04:6d:8c:bf:3d:b4:69:a2:f8:cf:aa:a0:53: 6c:7e:8b:b7:3d:c7:ad:d6:be:c6:d0:61:eb:1d:7e: d5:29:32:2d:cf:0b:87:c8:af:e2:67:fa:e3:f7:5b: f1:5b:b7:6e:7d:32:d5:14:f5:2a:30:bc:02:14:06: e4:72:3b:12:e0:ca:8c:54:00:85:dc:b0:6c:6e:25: 01:b4:b5:ca:f5:4f:17:9f:06:36:c7:b0:3a:1e:99: 17:07:84:80:e0:0a:87:d6:45:40:51:a7:0b:3a:54: e5:d5:cb:7a:b1:b8:7b:53:9e:f0:c5:c6:6f:69:cf: 81:55:80:59:69:d4:da:d4:db:5a:af:ad:b3:51:fc: 10:52:ee:27:33:ec:a8:77:0e:5c:a7:27:2d:d0:81: b8:2f:4a:2e:07:32:70:2e:f1:5b:a9:6e:ef:5e:8d: 96:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:29:2D:2D:72:61:22:43:C0:06:19:75:70:69:38:7D:18:70:B7:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/af16373c-3287-341a-a7b4-1cec1a5c9f48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 23.235.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:2c:a0:c7:22:5d:07:e5:67:4d:e5:bf:17:f5:54:d3:5f:58: b3:51:47:a0:3b:fe:68:e3:2c:fb:16:cb:5e:7e:e1:b7:9d:0f: 89:60:46:be:18:c9:56:11:dc:7b:ee:88:69:2f:b2:c1:90:c7: 6e:dc:d5:72:8f:a7:bb:8d:52:85:03:df:63:0f:b2:82:d6:18: d0:1a:04:85:99:85:22:76:39:5f:bb:8c:97:cc:86:15:ad:69: c5:44:ca:04:b2:90:48:dd:39:ce:84:a7:10:04:aa:bd:fb:bd: 76:49:c6:13:ec:ac:a1:9c:da:86:4e:30:48:2b:11:66:ba:33: 0d:ac:57:be:53:8d:c6:33:b4:c7:9a:dc:2d:e3:bd:a9:0f:d5: 87:5d:23:c9:fa:9b:01:39:e6:30:2e:60:6a:e6:a5:f6:08:3f: aa:bb:a2:33:f9:87:67:05:90:8b:62:96:7f:6e:75:13:10:62: fc:7c:9f:09:7e:de:60:14:62:b5:07:2c:53:e0:bb:68:83:69: e3:f8:e7:e5:51:3d:74:da:af:97:c6:6d:36:be:d1:7c:b2:4f: 41:f8:3e:e4:b5:73:c7:18:e8:77:84:6c:53:c5:b6:6f:1a:53: 64:67:97:aa:a1:78:17:8f:4d:c4:67:63:17:a1:d3:a0:e7:de: 8a:83:28:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5UtJgdzsvHLCIp7wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI2MDYyOTA5MDAxMloXDTI2MDkyNzA5MDAxMlowLzEtMCsGA1UEAxMk YzYzZGJlNjktMDM1NS00ZWViLTk1MTctNTAxYTJlYjUzN2NjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTF23ZaB8qW5KBIV7JDpnq0PRBoyFQytT/o/ 8DgUtkgKq40kihZ/rGB4xiN1ZApKew872hqTVzURj2Gk4jfHENC/+GpMeCi0/aS8 WeuMtxsxvr17Fnr3QfQoAARtjL89tGmi+M+qoFNsfou3Pcet1r7G0GHrHX7VKTIt zwuHyK/iZ/rj91vxW7dufTLVFPUqMLwCFAbkcjsS4MqMVACF3LBsbiUBtLXK9U8X nwY2x7A6HpkXB4SA4AqH1kVAUacLOlTl1ct6sbh7U57wxcZvac+BVYBZadTa1Nta r62zUfwQUu4nM+yodw5cpyct0IG4L0ouBzJwLvFbqW7vXo2W2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJQpLS1yYSJDwAYZdXBpOH0YcLeTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvYWYxNjM3M2MtMzI4Ny0z NDFhLWE3YjQtMWNlYzFhNWM5ZjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF+vgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8soMciXQflZ03lvxf1VNNfWLNRR6A7/mjjLPsWy15+4bedD4lgRr4Y yVYR3HvuiGkvssGQx27c1XKPp7uNUoUD32MPsoLWGNAaBIWZhSJ2OV+7jJfMhhWt acVEygSykEjdOc6EpxAEqr37vXZJxhPsrKGc2oZOMEgrEWa6Mw2sV75TjcYztMea 3C3jvakP1YddI8n6mwE55jAuYGrmpfYIP6q7ojP5h2cFkItiln9udRMQYvx8nwl+ 3mAUYrUHLFPgu2iDaeP45+VRPXTar5fGbTa+0XyyT0H4PuS1c8cY6HeEbFPFtm8a U2Rnl6qheBePTcRnYxeh06Dn3oqDKFk= -----END CERTIFICATE-----Generated at Tue Jul 21 22:18:33 2026 by rpki-client