$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aba387d8-77e7-4cb0-90f0-413919279004/7805a20f-edf2-3806-90f6-7532d50131af.roa File: 7805a20f-edf2-3806-90f6-7532d50131af.roa (raw, json) Hash identifier: CNv9lcR/FCv6DxXGqI4Vr6a7Z4tKFzXA3/kjOYn19mo= Subject key identifier: ED:36:F6:F2:E5:48:71:DD:F4:D3:1C:56:D1:94:F9:59:F8:B0:3E:8D Certificate issuer: /CN=aba387d8-77e7-4cb0-90f0-413919279004 Certificate serial: 010D0C9F4328584E74CF6B367BB1864D59955DE0 Authority key identifier: 8D:1E:75:A6:63:98:72:99:5C:9D:80:D2:DC:C3:2E:A9:F1:16:F9:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aba387d8-77e7-4cb0-90f0-413919279004.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aba387d8-77e7-4cb0-90f0-413919279004/7805a20f-edf2-3806-90f6-7532d50131af.roa Signing time: Fri 10 Jul 2026 21:00:12 +0000 ROA not before: Fri 10 Jul 2026 21:00:12 +0000 ROA not after: Thu 08 Oct 2026 21:00:12 +0000 asID: 152179 IP address blocks: 23.150.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aba387d8-77e7-4cb0-90f0-413919279004/aba387d8-77e7-4cb0-90f0-413919279004.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aba387d8-77e7-4cb0-90f0-413919279004/aba387d8-77e7-4cb0-90f0-413919279004.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aba387d8-77e7-4cb0-90f0-413919279004.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:74:cf:6b:36:7b:b1:86:4d:59:95:5d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aba387d8-77e7-4cb0-90f0-413919279004 Validity Not Before: Jul 10 21:00:12 2026 GMT Not After : Oct 8 21:00:12 2026 GMT Subject: CN=24ac9631-2d0e-48c0-bd54-a05a2d7f3d3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:61:69:72:d7:82:82:c6:30:16:a7:76:3a:48: 1f:ad:e8:e9:73:35:ee:3d:66:12:e9:b7:4b:3c:31: 80:09:24:79:a8:08:80:a7:50:f7:fe:77:d0:00:86: 71:b2:8d:94:f9:98:d0:69:e7:b1:83:04:0b:8d:3e: ac:43:87:02:fe:c6:8d:c5:5b:bb:17:2b:3c:ab:9b: 5a:ce:55:4f:a8:32:50:f7:7f:6e:d3:78:39:8c:20: 56:aa:ea:9f:f0:fc:82:a7:27:72:b5:91:38:26:1b: bd:f1:00:fb:3e:17:9c:28:05:e1:d4:1c:f2:61:d6: 80:fe:ab:67:26:a2:a7:e7:97:e2:29:2d:1a:cd:37: ea:1a:f2:05:16:dd:db:e7:88:d9:a2:e6:f9:a0:09: 03:6b:3b:56:84:f1:d1:f3:91:24:8a:b4:8b:fb:48: 39:4c:b0:32:6c:f7:d4:cd:ed:65:72:49:c5:1b:21: 6c:f3:38:94:15:45:46:5f:93:b6:a3:51:43:5a:5a: 19:2a:3f:ac:22:fd:09:4b:71:33:e0:ea:4e:e1:f8: e7:46:d2:c8:53:dc:58:42:7f:5c:b4:86:09:45:71: ae:0a:1a:94:24:c7:ff:ee:55:cc:c3:8c:d1:cd:85: 13:21:45:45:a8:e0:5a:11:bc:4f:bd:40:d5:02:c7: e2:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:36:F6:F2:E5:48:71:DD:F4:D3:1C:56:D1:94:F9:59:F8:B0:3E:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aba387d8-77e7-4cb0-90f0-413919279004/7805a20f-edf2-3806-90f6-7532d50131af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aba387d8-77e7-4cb0-90f0-413919279004/aba387d8-77e7-4cb0-90f0-413919279004.crl X509v3 Authority Key Identifier: keyid:8D:1E:75:A6:63:98:72:99:5C:9D:80:D2:DC:C3:2E:A9:F1:16:F9:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aba387d8-77e7-4cb0-90f0-413919279004.cer sbgp-ipAddrBlock: critical IPv4: 23.150.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:04:3a:db:3e:6b:06:67:f1:72:e0:0b:18:7f:fe:13:6b:19: 49:08:cb:3f:94:41:2b:ce:91:ad:e5:fe:a2:0d:68:4d:d0:96: 1c:54:fc:b6:ad:d5:e0:2b:37:8c:d2:b0:57:df:8c:b2:86:87: b2:75:03:68:83:21:46:0b:db:6b:bb:4e:a6:7d:d7:41:86:12: 91:e8:37:3b:8b:8b:bc:09:1c:4c:a3:b5:17:d6:33:01:7b:ad: 71:3f:59:7c:32:9c:ee:c6:d1:45:47:18:78:60:bc:e2:79:03: 2c:18:6d:f0:90:9e:15:0a:47:e0:5a:45:77:01:c8:0d:ad:9e: 46:8b:fa:a4:f8:53:e2:df:56:4c:28:1f:de:16:c3:fe:af:66: 67:7e:b5:b6:dd:04:d8:b7:51:62:98:fe:91:03:c1:a7:36:81: 05:a5:76:1c:e2:46:5b:dd:f9:01:35:0c:69:c4:9e:b8:bc:b2: 7b:0f:1a:30:8f:e0:0e:03:87:fd:2a:33:9a:83:6f:4b:c0:68: f3:fe:7c:07:24:94:9f:40:c7:f6:1b:f3:47:e6:4a:4d:3e:6a: aa:aa:45:9e:e6:60:97:e7:c0:93:36:43:e2:8d:f7:aa:ca:73: 2f:b6:a4:ed:fb:e1:8f:e1:8c:15:9e:d6:79:36:98:b4:09:4a: 49:26:92:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE50z2s2e7GGTVmVXeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJhMzg3ZDgtNzdlNy00Y2IwLTkwZjAtNDEzOTE5Mjc5 MDA0MB4XDTI2MDcxMDIxMDAxMloXDTI2MTAwODIxMDAxMlowLzEtMCsGA1UEAxMk MjRhYzk2MzEtMmQwZS00OGMwLWJkNTQtYTA1YTJkN2YzZDNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWFpcteCgsYwFqd2OkgfrejpczXuPWYS6bdL PDGACSR5qAiAp1D3/nfQAIZxso2U+ZjQaeexgwQLjT6sQ4cC/saNxVu7Fys8q5ta zlVPqDJQ939u03g5jCBWquqf8PyCpydytZE4Jhu98QD7PhecKAXh1BzyYdaA/qtn JqKn55fiKS0azTfqGvIFFt3b54jZoub5oAkDaztWhPHR85EkirSL+0g5TLAybPfU ze1lcknFGyFs8ziUFUVGX5O2o1FDWloZKj+sIv0JS3Ez4OpO4fjnRtLIU9xYQn9c tIYJRXGuChqUJMf/7lXMw4zRzYUTIUVFqOBaEbxPvUDVAsfiZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO029vLlSHHd9NMcVtGU+Vn4sD6NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hYmEz ODdkOC03N2U3LTRjYjAtOTBmMC00MTM5MTkyNzkwMDQvNzgwNWEyMGYtZWRmMi0z ODA2LTkwZjYtNzUzMmQ1MDEzMWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYWJhMzg3ZDgtNzdlNy00Y2IwLTkw ZjAtNDEzOTE5Mjc5MDA0L2FiYTM4N2Q4LTc3ZTctNGNiMC05MGYwLTQxMzkxOTI3 OTAwNC5jcmwwHwYDVR0jBBgwFoAUjR51pmOYcplcnYDS3MMuqfEW+ZEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hYmEzODdkOC03N2U3LTRjYjAtOTBmMC00MTM5 MTkyNzkwMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5b8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE8EOts+awZn8XLgCxh//hNrGUkIyz+UQSvOka3l/qINaE3QlhxU/Lat 1eArN4zSsFffjLKGh7J1A2iDIUYL22u7TqZ910GGEpHoNzuLi7wJHEyjtRfWMwF7 rXE/WXwynO7G0UVHGHhgvOJ5AywYbfCQnhUKR+BaRXcByA2tnkaL+qT4U+LfVkwo H94Ww/6vZmd+tbbdBNi3UWKY/pEDwac2gQWldhziRlvd+QE1DGnEnri8snsPGjCP 4A4Dh/0qM5qDb0vAaPP+fAcklJ9Ax/Yb80fmSk0+aqqqRZ7mYJfnwJM2Q+KN96rK cy+2pO374Y/hjBWe1nk2mLQJSkkmkgo= -----END CERTIFICATE-----Generated at Mon Jul 13 01:27:00 2026 by rpki-client