$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8d70f86-b257-4225-9609-989938a4164f/062098c5-0138-3dd6-b2b3-0b23b92be422.roa File: 062098c5-0138-3dd6-b2b3-0b23b92be422.roa (raw, json) Hash identifier: YUfQ3eaG+Tl9Yv1sq84ei2vZQ1XynVNN7oJDopuBL3Q= Subject key identifier: 8F:8D:19:BB:F3:AC:D4:41:63:F7:F2:31:E4:1F:3A:52:76:1A:C8:CD Certificate issuer: /CN=a8d70f86-b257-4225-9609-989938a4164f Certificate serial: 010D0C9F4328584F07D77D787FD3987E4FD6F800 Authority key identifier: 02:6F:4A:69:37:74:48:96:C9:80:79:8E:15:BD:04:55:3A:43:0C:4A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8d70f86-b257-4225-9609-989938a4164f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8d70f86-b257-4225-9609-989938a4164f/062098c5-0138-3dd6-b2b3-0b23b92be422.roa Signing time: Tue 01 Sep 2026 13:00:12 +0000 ROA not before: Tue 01 Sep 2026 13:00:12 +0000 ROA not after: Mon 30 Nov 2026 14:00:12 +0000 asID: 214483 IP address blocks: 23.147.44.0/24 maxlen: 24 2602:f52b::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8d70f86-b257-4225-9609-989938a4164f/a8d70f86-b257-4225-9609-989938a4164f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8d70f86-b257-4225-9609-989938a4164f/a8d70f86-b257-4225-9609-989938a4164f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8d70f86-b257-4225-9609-989938a4164f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:07:d7:7d:78:7f:d3:98:7e:4f:d6:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8d70f86-b257-4225-9609-989938a4164f Validity Not Before: Sep 1 13:00:12 2026 GMT Not After : Nov 30 14:00:12 2026 GMT Subject: CN=76830a63-48db-417c-aaa4-4960ea78fec0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:72:19:f4:d2:53:ec:dc:95:90:8b:a1:89:fc: b1:b5:bb:d3:5b:84:7d:80:11:d1:0a:4c:45:0e:33: 42:a4:3d:ab:f2:9f:a9:29:a7:cd:76:00:58:79:f0: 99:31:4b:58:10:20:57:e4:37:9e:15:47:b1:1f:0a: fa:bd:7b:42:57:fb:91:a3:5b:fc:76:7f:01:ea:05: 84:15:b2:3a:e0:8b:74:f4:24:73:a8:29:9a:85:0b: 9f:94:85:37:eb:55:f6:6a:89:1a:b5:0e:10:b6:a9: 39:a9:60:ec:e7:12:97:a9:79:e9:ab:4a:06:d1:ac: 4e:2c:23:94:29:2a:94:9b:7e:b7:11:97:c0:b2:2f: a4:3d:3d:bd:77:75:ac:dd:47:46:df:3b:07:7e:93: 1d:5e:da:d6:b5:ea:65:57:8c:fe:46:d3:30:62:64: 6c:b9:4a:a4:d2:3c:ff:06:c7:b8:0a:b9:18:a3:ba: d9:d7:40:3c:c7:c2:7a:9f:40:6a:1e:40:e8:13:03: ef:1d:44:7b:1f:75:78:42:73:0b:b1:45:e6:bf:aa: d1:9a:b5:e1:63:7d:34:36:39:3b:1d:2b:25:0c:bb: e2:8d:d2:bb:3b:b3:aa:0b:6d:2e:7d:5d:47:f9:1f: e3:d2:af:2e:65:86:16:9e:52:20:1f:41:cf:06:34: 00:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:8D:19:BB:F3:AC:D4:41:63:F7:F2:31:E4:1F:3A:52:76:1A:C8:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8d70f86-b257-4225-9609-989938a4164f/062098c5-0138-3dd6-b2b3-0b23b92be422.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8d70f86-b257-4225-9609-989938a4164f/a8d70f86-b257-4225-9609-989938a4164f.crl X509v3 Authority Key Identifier: keyid:02:6F:4A:69:37:74:48:96:C9:80:79:8E:15:BD:04:55:3A:43:0C:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8d70f86-b257-4225-9609-989938a4164f.cer sbgp-ipAddrBlock: critical IPv4: 23.147.44.0/24 IPv6: 2602:f52b::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:f7:9e:87:df:bb:f3:7d:ac:8c:6c:87:2a:9a:a0:6a:ec:64: 15:c7:d0:40:aa:8f:2b:4b:af:91:8e:d0:1e:9b:c7:ca:69:5a: 75:f8:31:a4:34:06:fe:9e:47:5c:d9:d9:76:a2:f3:00:3f:3e: 1c:8b:ac:f1:41:ea:60:21:94:33:bf:d9:42:1a:68:63:a9:1d: af:34:0f:a8:02:91:5f:8a:e8:08:6d:31:23:28:42:41:99:2a: 36:48:20:50:67:3a:c3:95:a7:59:09:6e:4a:36:2d:19:79:cc: 06:02:cd:ca:22:29:a4:c7:ae:95:0d:d7:8d:90:29:58:6c:81: f4:a5:c9:28:30:4b:79:b6:fa:84:f4:39:3d:a8:6e:4c:0c:c9: de:6e:54:98:9d:76:1d:d8:69:e6:5e:8e:b1:58:f9:07:ec:6d: 18:ae:64:64:18:ac:26:a4:a1:30:69:77:80:10:dd:c7:6c:bc: 63:c8:6f:16:45:43:7f:2d:20:f0:a7:38:90:11:7b:22:73:4a: 68:d6:fb:32:74:93:5d:87:57:ff:9a:24:28:78:67:6e:3d:27: fc:ef:e2:c1:b8:f3:39:0d:93:00:8a:18:6f:a0:dc:46:27:d8: fc:d3:03:c1:26:bf:20:cf:6a:e0:08:b3:3f:b8:c7:01:c8:f4: c6:f2:fa:a2 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE8H1314f9OYfk/W+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYThkNzBmODYtYjI1Ny00MjI1LTk2MDktOTg5OTM4YTQx NjRmMB4XDTI2MDkwMTEzMDAxMloXDTI2MTEzMDE0MDAxMlowLzEtMCsGA1UEAxMk NzY4MzBhNjMtNDhkYi00MTdjLWFhYTQtNDk2MGVhNzhmZWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinIZ9NJT7NyVkIuhifyxtbvTW4R9gBHRCkxF DjNCpD2r8p+pKafNdgBYefCZMUtYECBX5DeeFUexHwr6vXtCV/uRo1v8dn8B6gWE FbI64It09CRzqCmahQuflIU361X2aokatQ4Qtqk5qWDs5xKXqXnpq0oG0axOLCOU KSqUm363EZfAsi+kPT29d3Ws3UdG3zsHfpMdXtrWteplV4z+RtMwYmRsuUqk0jz/ Bse4CrkYo7rZ10A8x8J6n0BqHkDoEwPvHUR7H3V4QnMLsUXmv6rRmrXhY300Njk7 HSslDLvijdK7O7OqC20ufV1H+R/j0q8uZYYWnlIgH0HPBjQA0wIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFI+NGbvzrNRBY/fyMeQfOlJ2GsjNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hOGQ3 MGY4Ni1iMjU3LTQyMjUtOTYwOS05ODk5MzhhNDE2NGYvMDYyMDk4YzUtMDEzOC0z ZGQ2LWIyYjMtMGIyM2I5MmJlNDIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYThkNzBmODYtYjI1Ny00MjI1LTk2 MDktOTg5OTM4YTQxNjRmL2E4ZDcwZjg2LWIyNTctNDIyNS05NjA5LTk4OTkzOGE0 MTY0Zi5jcmwwHwYDVR0jBBgwFoAUAm9KaTd0SJbJgHmOFb0EVTpDDEowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hOGQ3MGY4Ni1iMjU3LTQyMjUtOTYwOS05ODk5 MzhhNDE2NGYuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF5MsMA4E AgACMAgDBgAmAvUrADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAn956H37vzfayMbIcqmqBq7GQVx9BAqo8r S6+RjtAem8fKaVp1+DGkNAb+nkdc2dl2ovMAPz4ci6zxQepgIZQzv9lCGmhjqR2v NA+oApFfiugIbTEjKEJBmSo2SCBQZzrDladZCW5KNi0ZecwGAs3KIimkx66VDdeN kClYbIH0pckoMEt5tvqE9Dk9qG5MDMneblSYnXYd2GnmXo6xWPkH7G0YrmRkGKwm pKEwaXeAEN3HbLxjyG8WRUN/LSDwpziQEXsic0po1vsydJNdh1f/miQoeGduPSf8 7+LBuPM5DZMAihhvoNxGJ9j80wPBJr8gz2rgCLM/uMcByPTG8vqi -----END CERTIFICATE-----Generated at Fri Sep 11 03:34:41 2026 by rpki-client