$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d7f7925-1c13-4bc8-bda4-43bd8af82fe3/afe8120a-69d1-34fa-83db-c6fd11615b6d.roa File: afe8120a-69d1-34fa-83db-c6fd11615b6d.roa (raw, json) Hash identifier: RkqX+TER+swqo0ZrHBhviVmXYBzr2UXW1W42WRFIglA= Subject key identifier: 5D:F7:6E:93:6C:79:71:33:0B:7A:F8:B6:E2:C4:B8:74:5A:1A:83:03 Certificate issuer: /CN=6d7f7925-1c13-4bc8-bda4-43bd8af82fe3 Certificate serial: 010D0C9F4328584EEA874ACF3F75079A1E3A9318 Authority key identifier: 51:F2:64:E1:0A:95:A7:56:CA:B1:00:1F:64:96:DA:11:93:C2:A7:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d7f7925-1c13-4bc8-bda4-43bd8af82fe3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d7f7925-1c13-4bc8-bda4-43bd8af82fe3/afe8120a-69d1-34fa-83db-c6fd11615b6d.roa Signing time: Sat 22 Aug 2026 01:00:12 +0000 ROA not before: Sat 22 Aug 2026 01:00:12 +0000 ROA not after: Fri 20 Nov 2026 02:00:12 +0000 asID: 979 IP address blocks: 23.144.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d7f7925-1c13-4bc8-bda4-43bd8af82fe3/6d7f7925-1c13-4bc8-bda4-43bd8af82fe3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d7f7925-1c13-4bc8-bda4-43bd8af82fe3/6d7f7925-1c13-4bc8-bda4-43bd8af82fe3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d7f7925-1c13-4bc8-bda4-43bd8af82fe3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:87:4a:cf:3f:75:07:9a:1e:3a:93:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d7f7925-1c13-4bc8-bda4-43bd8af82fe3 Validity Not Before: Aug 22 01:00:12 2026 GMT Not After : Nov 20 02:00:12 2026 GMT Subject: CN=bb8056cc-843c-4aeb-a7c4-72499eeaeef6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c0:5d:ad:91:0d:60:86:c4:f1:da:ff:fe:a7: 48:9d:ef:0d:8c:d5:48:ae:de:f5:9e:46:5a:1a:c2: 84:23:46:95:b1:b6:da:e1:ff:8f:d2:ef:66:a6:7a: 46:5f:23:94:fb:2c:9b:ed:cd:a9:52:3c:ca:60:e5: c4:95:ae:8d:2b:af:da:a0:bf:53:b2:ad:0a:3e:c8: d9:b8:6e:72:e2:98:27:a0:08:08:a1:8a:a6:0d:cb: 4e:5d:b4:95:7c:fb:58:22:e7:cd:a3:ee:b0:76:64: 85:49:b7:d7:44:b4:a3:27:8f:a7:44:04:6d:75:b5: 5a:b2:1e:57:79:0f:57:e0:89:ae:9e:93:8e:bb:09: 88:fd:a1:4c:ce:6d:5a:8f:7a:d5:15:ed:3b:51:21: da:bb:b8:0a:dd:7a:9c:f7:5e:57:0d:21:f2:ac:1f: ed:f9:a1:60:a5:be:93:e3:9f:4f:42:bc:89:84:62: ac:a4:36:7a:99:1d:53:7e:e4:3d:6b:69:09:d5:f6: a8:1d:d1:54:39:c2:30:7b:81:49:cf:f7:31:a6:f9: 28:2f:5b:e5:c3:1e:2e:84:1b:b0:6f:dd:1d:07:22: fd:f5:3e:f1:34:30:5f:48:94:55:04:56:a5:67:23: c4:31:f4:f1:bc:1a:f6:a0:19:48:cf:c5:67:26:40: 15:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:F7:6E:93:6C:79:71:33:0B:7A:F8:B6:E2:C4:B8:74:5A:1A:83:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d7f7925-1c13-4bc8-bda4-43bd8af82fe3/afe8120a-69d1-34fa-83db-c6fd11615b6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d7f7925-1c13-4bc8-bda4-43bd8af82fe3/6d7f7925-1c13-4bc8-bda4-43bd8af82fe3.crl X509v3 Authority Key Identifier: keyid:51:F2:64:E1:0A:95:A7:56:CA:B1:00:1F:64:96:DA:11:93:C2:A7:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d7f7925-1c13-4bc8-bda4-43bd8af82fe3.cer sbgp-ipAddrBlock: critical IPv4: 23.144.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:2b:b5:fc:8c:25:10:f4:ae:c8:ed:3a:46:1f:b2:f8:2e:2c: 4a:d5:99:45:e5:63:0e:af:54:b8:46:3a:c3:27:60:57:05:b9: 70:b0:9d:6e:f0:f9:05:b0:56:ca:83:c3:8e:4b:44:97:b6:74: 96:53:f3:bd:1d:97:b3:a6:3e:42:9b:ff:90:95:47:b3:f1:f5: 4a:9f:54:4e:18:78:4a:2f:5f:c3:f7:91:ed:f5:57:71:bb:9b: a9:4e:f2:ea:aa:f7:16:83:7c:7f:30:71:c9:b6:32:63:57:f9: b0:74:c9:ed:19:37:d3:90:c1:6c:76:98:b1:91:ad:d1:74:a4: 74:29:42:72:28:d9:8d:1a:0b:97:5f:78:9c:9e:bb:33:9c:98: 78:f3:f7:33:ca:58:b6:9e:a6:f0:24:70:1e:a5:89:f8:27:fd: 4f:fb:cb:04:df:a8:22:de:67:f7:56:bc:43:7a:75:e2:5c:6f: 55:e7:43:58:ee:79:77:89:1b:c8:35:2e:51:83:76:ac:a5:05: 2b:9c:02:f7:02:c9:4d:5c:21:60:bc:2a:45:33:56:9e:2e:56: 3e:a5:62:26:a9:0c:bb:fb:87:e0:39:1f:28:a4:8d:f0:23:09: 30:78:34:f8:35:9d:16:1b:94:b6:63:4e:37:77:fc:e7:91:be: 3a:02:cc:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh0rPP3UHmh46kxgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ3Zjc5MjUtMWMxMy00YmM4LWJkYTQtNDNiZDhhZjgy ZmUzMB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk YmI4MDU2Y2MtODQzYy00YWViLWE3YzQtNzI0OTllZWFlZWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcBdrZENYIbE8dr//qdIne8NjNVIrt71nkZa GsKEI0aVsbba4f+P0u9mpnpGXyOU+yyb7c2pUjzKYOXEla6NK6/aoL9Tsq0KPsjZ uG5y4pgnoAgIoYqmDctOXbSVfPtYIufNo+6wdmSFSbfXRLSjJ4+nRARtdbVash5X eQ9X4ImunpOOuwmI/aFMzm1aj3rVFe07USHau7gK3Xqc915XDSHyrB/t+aFgpb6T 459PQryJhGKspDZ6mR1TfuQ9a2kJ1faoHdFUOcIwe4FJz/cxpvkoL1vlwx4uhBuw b90dByL99T7xNDBfSJRVBFalZyPEMfTxvBr2oBlIz8VnJkAVSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF33bpNseXEzC3r4tuLEuHRaGoMDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi82ZDdm NzkyNS0xYzEzLTRiYzgtYmRhNC00M2JkOGFmODJmZTMvYWZlODEyMGEtNjlkMS0z NGZhLTgzZGItYzZmZDExNjE1YjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNmQ3Zjc5MjUtMWMxMy00YmM4LWJk YTQtNDNiZDhhZjgyZmUzLzZkN2Y3OTI1LTFjMTMtNGJjOC1iZGE0LTQzYmQ4YWY4 MmZlMy5jcmwwHwYDVR0jBBgwFoAUUfJk4QqVp1bKsQAfZJbaEZPCp0gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi82ZDdmNzkyNS0xYzEzLTRiYzgtYmRhNC00M2Jk OGFmODJmZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5BEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIIrtfyMJRD0rsjtOkYfsvguLErVmUXlYw6vVLhGOsMnYFcFuXCwnW7w +QWwVsqDw45LRJe2dJZT870dl7OmPkKb/5CVR7Px9UqfVE4YeEovX8P3ke31V3G7 m6lO8uqq9xaDfH8wccm2MmNX+bB0ye0ZN9OQwWx2mLGRrdF0pHQpQnIo2Y0aC5df eJyeuzOcmHjz9zPKWLaepvAkcB6lifgn/U/7ywTfqCLeZ/dWvEN6deJcb1XnQ1ju eXeJG8g1LlGDdqylBSucAvcCyU1cIWC8KkUzVp4uVj6lYiapDLv7h+A5HyikjfAj CTB4NPg1nRYblLZjTjd3/OeRvjoCzIE= -----END CERTIFICATE-----Generated at Sat Sep 19 10:04:02 2026 by rpki-client