$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/17ba49ac-37d6-4b90-b973-bee8a685e116/f80aa1f9-a6e2-3038-b512-57e988c3c123.roa File: f80aa1f9-a6e2-3038-b512-57e988c3c123.roa (raw, json) Hash identifier: PjRiGkrA+aVMCeVPIr35oWC7bAQ2z1Kmam9KUYaZ2Xs= Subject key identifier: 0B:D7:7A:BD:23:B2:A3:D9:8B:D5:42:17:AA:EA:03:95:33:AF:10:18 Certificate issuer: /CN=17ba49ac-37d6-4b90-b973-bee8a685e116 Certificate serial: 010D0C9F4328584EA79874D1698C5BC828F84680 Authority key identifier: 24:F8:90:91:66:EA:CD:1F:05:33:85:A2:E7:15:EA:8A:EF:FA:17:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/17ba49ac-37d6-4b90-b973-bee8a685e116.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/17ba49ac-37d6-4b90-b973-bee8a685e116/f80aa1f9-a6e2-3038-b512-57e988c3c123.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 402071 IP address blocks: 23.147.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/17ba49ac-37d6-4b90-b973-bee8a685e116/17ba49ac-37d6-4b90-b973-bee8a685e116.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/17ba49ac-37d6-4b90-b973-bee8a685e116/17ba49ac-37d6-4b90-b973-bee8a685e116.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/17ba49ac-37d6-4b90-b973-bee8a685e116.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:98:74:d1:69:8c:5b:c8:28:f8:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17ba49ac-37d6-4b90-b973-bee8a685e116 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=6d272839-df3e-4d70-a8a3-2aad806ae31c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:7e:f3:d6:f9:e2:79:fa:24:a8:fe:ad:3c:a4: a8:f7:1c:c6:5a:93:9d:e0:98:91:91:c8:e7:cc:a3: d2:b8:80:e5:2d:6b:9c:75:1c:0c:ae:d0:ca:34:16: b6:59:c1:53:9b:d4:03:ee:75:cf:10:48:ac:a3:02: e6:de:f0:d1:8f:14:61:ea:46:cd:f6:6f:52:8a:5c: 39:3b:78:b0:d8:06:37:ac:46:a8:40:98:b2:f7:3c: 56:bd:0c:1b:82:c6:38:46:b7:d3:e1:5d:c1:4e:90: df:d8:a0:f4:52:b6:ae:68:c7:50:10:55:7c:39:a7: 43:36:7c:13:0e:3b:c0:59:91:a9:98:54:57:2d:57: 62:1b:8f:8a:66:b2:5b:3b:d5:5c:21:90:71:b3:58: 9a:75:d2:50:f6:c7:99:63:75:27:6e:3d:26:d3:f9: 10:42:58:0b:6e:cc:a2:81:ce:7f:af:42:fc:7d:1e: 26:81:24:d0:13:aa:0f:96:a2:2e:c7:b3:69:7e:65: 8d:4b:1b:ee:8a:d3:9d:bb:8b:31:c6:19:1c:fb:38: 78:8f:6a:e0:92:ea:3d:28:7c:15:87:22:98:be:40: 3c:8a:a0:3b:d9:ac:5a:31:85:12:c1:52:33:93:18: 1c:f5:0c:e7:8b:e6:55:d0:a0:d9:79:86:af:d4:74: 61:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:D7:7A:BD:23:B2:A3:D9:8B:D5:42:17:AA:EA:03:95:33:AF:10:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/17ba49ac-37d6-4b90-b973-bee8a685e116/f80aa1f9-a6e2-3038-b512-57e988c3c123.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/17ba49ac-37d6-4b90-b973-bee8a685e116/17ba49ac-37d6-4b90-b973-bee8a685e116.crl X509v3 Authority Key Identifier: keyid:24:F8:90:91:66:EA:CD:1F:05:33:85:A2:E7:15:EA:8A:EF:FA:17:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/17ba49ac-37d6-4b90-b973-bee8a685e116.cer sbgp-ipAddrBlock: critical IPv4: 23.147.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:ba:97:66:a6:ed:ea:e0:00:3a:a8:f0:ab:8e:f3:07:a1:66: 70:3a:bf:3d:54:eb:73:2e:6c:e3:8f:d5:e6:c3:ea:51:9f:7e: 83:8a:be:02:7b:ab:4c:90:92:db:43:e2:91:9e:83:49:c1:ba: ec:eb:b3:dd:78:87:d9:04:12:9d:af:2c:2d:01:c7:18:87:65: 39:e0:2f:04:e2:f4:5a:d3:47:01:32:ab:79:75:09:31:ec:fd: bc:3d:7a:5e:ff:79:27:bc:78:4b:89:f7:0d:0d:ed:3b:19:88: b5:40:5e:0e:61:b8:2d:07:d9:41:93:b7:e0:09:1a:83:ff:34: c8:ae:9b:28:96:92:59:20:25:9a:d7:36:2b:c8:5e:1b:00:81: e0:a1:48:5c:5b:49:04:fc:0f:e2:54:ec:4a:14:f9:8c:5a:fb: 24:f2:db:c3:8b:a7:86:86:6e:86:e0:dd:99:39:e0:63:6a:a6: 34:1c:cc:7e:11:54:13:f7:2d:df:db:03:4b:2d:8d:f6:7a:62: 73:69:36:93:72:47:43:3c:a2:5f:c4:35:ff:ad:44:b6:0c:01: 77:3a:05:d0:c8:a3:1e:1a:34:83:1b:c7:ce:9c:87:ba:66:a5: 47:1d:31:b7:d9:90:d0:08:49:ca:f3:b6:cf:c3:d8:be:69:6d: 2a:d1:69:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmHTRaYxbyCj4RoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTdiYTQ5YWMtMzdkNi00YjkwLWI5NzMtYmVlOGE2ODVl MTE2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NmQyNzI4MzktZGYzZS00ZDcwLWE4YTMtMmFhZDgwNmFlMzFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzH7z1vniefokqP6tPKSo9xzGWpOd4JiRkcjn zKPSuIDlLWucdRwMrtDKNBa2WcFTm9QD7nXPEEisowLm3vDRjxRh6kbN9m9Silw5 O3iw2AY3rEaoQJiy9zxWvQwbgsY4RrfT4V3BTpDf2KD0UrauaMdQEFV8OadDNnwT DjvAWZGpmFRXLVdiG4+KZrJbO9VcIZBxs1iaddJQ9seZY3Unbj0m0/kQQlgLbsyi gc5/r0L8fR4mgSTQE6oPlqIux7NpfmWNSxvuitOdu4sxxhkc+zh4j2rgkuo9KHwV hyKYvkA8iqA72axaMYUSwVIzkxgc9Qzni+ZV0KDZeYav1HRhgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAvXer0jsqPZi9VCF6rqA5UzrxAYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8xN2Jh NDlhYy0zN2Q2LTRiOTAtYjk3My1iZWU4YTY4NWUxMTYvZjgwYWExZjktYTZlMi0z MDM4LWI1MTItNTdlOTg4YzNjMTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMTdiYTQ5YWMtMzdkNi00YjkwLWI5 NzMtYmVlOGE2ODVlMTE2LzE3YmE0OWFjLTM3ZDYtNGI5MC1iOTczLWJlZThhNjg1 ZTExNi5jcmwwHwYDVR0jBBgwFoAUJPiQkWbqzR8FM4Wi5xXqiu/6FyYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8xN2JhNDlhYy0zN2Q2LTRiOTAtYjk3My1iZWU4 YTY4NWUxMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5McMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABO6l2am7ergADqo8KuO8wehZnA6vz1U63MubOOP1ebD6lGffoOKvgJ7 q0yQkttD4pGeg0nBuuzrs914h9kEEp2vLC0BxxiHZTngLwTi9FrTRwEyq3l1CTHs /bw9el7/eSe8eEuJ9w0N7TsZiLVAXg5huC0H2UGTt+AJGoP/NMiumyiWklkgJZrX NivIXhsAgeChSFxbSQT8D+JU7EoU+Yxa+yTy28OLp4aGbobg3Zk54GNqpjQczH4R VBP3Ld/bA0stjfZ6YnNpNpNyR0M8ol/ENf+tRLYMAXc6BdDIox4aNIMbx86ch7pm pUcdMbfZkNAIScrzts/D2L5pbSrRaTo= -----END CERTIFICATE-----Generated at Thu Aug 27 04:06:33 2026 by rpki-client