$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852/2798972b-fe2c-3ced-a28d-a282be3e435d.roa File: 2798972b-fe2c-3ced-a28d-a282be3e435d.roa (raw, json) Hash identifier: xPiJrPvld7jLQXZHpW4BppaNh5v5nG4yRUnPHB+Fp7I= Subject key identifier: 95:9B:6C:EC:03:CF:6F:F2:91:4B:5A:D2:98:7E:11:9C:FA:6D:2B:E3 Certificate issuer: /CN=a683f70a-4d8a-489e-b03c-abca94cd7852 Certificate serial: 010D0C9F4328584E4AEF4014402725C8B33DF000 Authority key identifier: B8:59:03:9E:D8:37:04:1C:D9:8D:1B:75:25:FF:EA:F2:58:28:49:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852/2798972b-fe2c-3ced-a28d-a282be3e435d.roa Signing time: Thu 25 Jun 2026 21:00:12 +0000 ROA not before: Thu 25 Jun 2026 21:00:12 +0000 ROA not after: Wed 23 Sep 2026 21:00:12 +0000 asID: 36369 IP address blocks: 23.131.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852/a683f70a-4d8a-489e-b03c-abca94cd7852.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852/a683f70a-4d8a-489e-b03c-abca94cd7852.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4a:ef:40:14:40:27:25:c8:b3:3d:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a683f70a-4d8a-489e-b03c-abca94cd7852 Validity Not Before: Jun 25 21:00:12 2026 GMT Not After : Sep 23 21:00:12 2026 GMT Subject: CN=8d3e9204-59a1-45df-8e07-3cbbd15eaa50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:64:10:72:ec:74:60:5b:af:6a:a0:7b:78:8b: ab:12:ff:57:c1:c1:c6:a9:4b:cc:4e:10:21:ad:f6: c6:b3:ff:1d:ee:09:84:35:dc:1d:88:9a:9a:15:2f: 87:a1:aa:cf:77:d7:5c:6f:42:3c:f0:c3:fc:aa:1a: c8:89:39:d7:22:d1:bb:2b:9b:c3:ce:1c:80:ca:a1: 15:3f:28:17:27:19:9a:6a:3b:cc:26:74:c9:62:ae: 48:ae:cd:34:62:ba:00:34:f0:4e:6c:c0:2c:96:0f: 8c:ec:4d:11:24:e7:b3:eb:77:f6:cf:9b:40:fa:5f: a0:05:3a:ed:bc:e7:7a:dd:c3:a8:64:e8:d4:5e:37: 84:d4:ef:50:b3:13:90:f6:9a:7c:5b:fe:09:de:4f: 20:ec:c5:d7:54:42:2a:dd:f3:fc:10:35:af:2b:1a: 0b:02:ba:bb:06:57:36:43:f3:75:09:98:b1:34:a4: 2b:a9:33:80:5e:31:0a:80:aa:18:7e:b8:78:fd:92: 2c:dc:99:33:57:53:e7:4a:c8:f9:e8:bc:13:ab:c4: dc:24:71:7a:03:25:6a:24:59:f5:67:e1:eb:ca:fb: 19:d3:1f:3e:16:c4:77:25:0f:3c:96:1d:68:2f:85: 9d:73:dd:d2:16:df:36:67:4d:2d:56:07:9f:66:81: d7:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:9B:6C:EC:03:CF:6F:F2:91:4B:5A:D2:98:7E:11:9C:FA:6D:2B:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852/2798972b-fe2c-3ced-a28d-a282be3e435d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852/a683f70a-4d8a-489e-b03c-abca94cd7852.crl X509v3 Authority Key Identifier: keyid:B8:59:03:9E:D8:37:04:1C:D9:8D:1B:75:25:FF:EA:F2:58:28:49:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852.cer sbgp-ipAddrBlock: critical IPv4: 23.131.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:fc:2d:2d:37:02:2e:42:5a:fd:be:74:85:77:1a:18:3a:75: 5e:83:18:5e:77:33:52:a4:ce:cb:4c:48:2e:69:2f:b5:53:ab: f1:ab:8e:b2:4b:94:9c:61:70:b2:8f:48:ba:2c:b7:33:0b:25: 38:bf:79:41:89:dc:4f:ac:ff:54:bc:d2:5c:a6:97:2a:aa:be: 45:f0:60:e8:b2:ab:c6:f6:01:07:88:3a:95:02:7e:72:74:07: d4:a5:8a:a0:73:2a:db:fe:e4:3e:38:e2:2b:1d:01:e0:00:c4: c3:02:59:b2:4f:01:02:ec:4e:06:67:07:5c:f8:d7:5a:30:30: 12:2d:21:a9:db:c6:01:75:b0:1d:72:40:fb:0c:34:d3:df:5a: db:85:e9:18:77:96:b4:00:85:2c:f7:5e:bd:20:71:b5:1f:2c: ef:b1:3b:a3:3d:58:df:43:09:27:0f:fe:76:82:cf:00:98:38: e7:82:0a:e2:9a:d1:c1:03:42:ae:17:37:41:4c:05:31:42:a5: 7a:61:62:51:8d:92:3b:ce:9d:6d:11:da:54:ca:e5:d1:b1:74: 86:13:8f:97:0b:f7:82:ec:89:89:d4:0c:1b:86:c7:b1:24:5f: aa:5b:95:92:1a:56:ee:a4:3a:a9:33:d8:7b:ae:45:df:fe:bb: e7:c3:b7:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5K70AUQCclyLM98AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTY4M2Y3MGEtNGQ4YS00ODllLWIwM2MtYWJjYTk0Y2Q3 ODUyMB4XDTI2MDYyNTIxMDAxMloXDTI2MDkyMzIxMDAxMlowLzEtMCsGA1UEAxMk OGQzZTkyMDQtNTlhMS00NWRmLThlMDctM2NiYmQxNWVhYTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWQQcux0YFuvaqB7eIurEv9XwcHGqUvMThAh rfbGs/8d7gmENdwdiJqaFS+HoarPd9dcb0I88MP8qhrIiTnXItG7K5vDzhyAyqEV PygXJxmaajvMJnTJYq5Irs00YroANPBObMAslg+M7E0RJOez63f2z5tA+l+gBTrt vOd63cOoZOjUXjeE1O9QsxOQ9pp8W/4J3k8g7MXXVEIq3fP8EDWvKxoLArq7Blc2 Q/N1CZixNKQrqTOAXjEKgKoYfrh4/ZIs3JkzV1PnSsj56LwTq8TcJHF6AyVqJFn1 Z+HryvsZ0x8+FsR3JQ88lh1oL4Wdc93SFt82Z00tVgefZoHX5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJWbbOwDz2/ykUta0ph+EZz6bSvjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hNjgz ZjcwYS00ZDhhLTQ4OWUtYjAzYy1hYmNhOTRjZDc4NTIvMjc5ODk3MmItZmUyYy0z Y2VkLWEyOGQtYTI4MmJlM2U0MzVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTY4M2Y3MGEtNGQ4YS00ODllLWIw M2MtYWJjYTk0Y2Q3ODUyL2E2ODNmNzBhLTRkOGEtNDg5ZS1iMDNjLWFiY2E5NGNk Nzg1Mi5jcmwwHwYDVR0jBBgwFoAUuFkDntg3BBzZjRt1Jf/q8lgoSeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hNjgzZjcwYS00ZDhhLTQ4OWUtYjAzYy1hYmNh OTRjZDc4NTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4MgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMD8LS03Ai5CWv2+dIV3Ghg6dV6DGF53M1KkzstMSC5pL7VTq/GrjrJL lJxhcLKPSLostzMLJTi/eUGJ3E+s/1S80lymlyqqvkXwYOiyq8b2AQeIOpUCfnJ0 B9SliqBzKtv+5D444isdAeAAxMMCWbJPAQLsTgZnB1z411owMBItIanbxgF1sB1y QPsMNNPfWtuF6Rh3lrQAhSz3Xr0gcbUfLO+xO6M9WN9DCScP/naCzwCYOOeCCuKa 0cEDQq4XN0FMBTFCpXphYlGNkjvOnW0R2lTK5dGxdIYTj5cL94LsiYnUDBuGx7Ek X6pblZIaVu6kOqkz2HuuRd/+u+fDt7A= -----END CERTIFICATE-----Generated at Tue Jul 21 19:30:34 2026 by rpki-client