$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2a2cac0-9f4e-4e62-acf9-0302120174f8/123ec8f2-3786-3363-ba42-24ba0989b710.roa File: 123ec8f2-3786-3363-ba42-24ba0989b710.roa (raw, json) Hash identifier: hgUmh2S3q1AAjIaDnGYt95keKs+Ptpz8LXBSDzZSZVY= Subject key identifier: FE:41:BA:C7:44:1A:93:95:68:08:A7:1E:0B:80:ED:BE:6D:95:81:71 Certificate issuer: /CN=b2a2cac0-9f4e-4e62-acf9-0302120174f8 Certificate serial: 010D0C9F4328584E69A4B21797834864B9E210D0 Authority key identifier: D9:8E:DA:EF:67:8F:4D:40:F9:54:87:84:6C:9A:60:B2:88:10:4A:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2a2cac0-9f4e-4e62-acf9-0302120174f8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2a2cac0-9f4e-4e62-acf9-0302120174f8/123ec8f2-3786-3363-ba42-24ba0989b710.roa Signing time: Mon 06 Jul 2026 21:00:13 +0000 ROA not before: Mon 06 Jul 2026 21:00:13 +0000 ROA not after: Sun 04 Oct 2026 21:00:13 +0000 asID: 18935 IP address blocks: 23.145.180.0/24 maxlen: 24 2602:f557::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2a2cac0-9f4e-4e62-acf9-0302120174f8/b2a2cac0-9f4e-4e62-acf9-0302120174f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2a2cac0-9f4e-4e62-acf9-0302120174f8/b2a2cac0-9f4e-4e62-acf9-0302120174f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2a2cac0-9f4e-4e62-acf9-0302120174f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:69:a4:b2:17:97:83:48:64:b9:e2:10:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2a2cac0-9f4e-4e62-acf9-0302120174f8 Validity Not Before: Jul 6 21:00:13 2026 GMT Not After : Oct 4 21:00:13 2026 GMT Subject: CN=78c8f6b0-0b71-4ecd-8de5-f325ac6450bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:c5:ca:12:4a:02:cf:b1:fb:fe:0b:6f:35:9b: 47:31:c8:e7:9d:6c:a7:70:89:f4:6e:71:b9:f1:01: 8e:c5:c6:75:e0:09:08:8c:7c:2d:28:92:2e:32:5f: d8:fa:9f:ca:76:59:cd:7b:fc:d3:7e:d0:9a:33:00: 21:2a:15:56:3c:7b:f4:c6:dd:fd:d1:45:f6:41:bd: b2:3c:4e:6f:5b:89:29:c2:b9:37:4a:03:d4:32:33: 12:32:d9:1f:d2:07:72:cd:c4:36:1d:f7:7b:c8:63: 9e:2a:d2:cf:01:9c:ea:81:c1:7e:2d:85:cc:b4:22: 07:32:6c:b6:c1:18:4e:19:85:6c:b1:42:d1:33:d9: 45:e5:d2:07:c6:6c:eb:8d:52:03:e9:9f:7c:48:26: 38:fa:12:0c:da:5b:70:c2:e6:32:fe:4f:aa:c1:3b: a2:ac:90:26:69:59:2a:c4:15:62:69:fa:e7:5d:14: 85:fc:c3:ad:75:6d:60:b6:ea:7e:53:b7:dd:2c:ee: 6d:eb:a3:08:a7:50:d8:54:50:7e:61:61:b6:7c:0e: 9e:81:e5:b2:76:9b:31:48:d5:33:77:1c:5a:4c:2e: 51:18:16:74:11:a9:1e:ff:87:77:bc:b5:7d:4e:bc: be:08:2d:45:bc:89:33:29:d0:34:8b:98:23:df:81: 29:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:41:BA:C7:44:1A:93:95:68:08:A7:1E:0B:80:ED:BE:6D:95:81:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2a2cac0-9f4e-4e62-acf9-0302120174f8/123ec8f2-3786-3363-ba42-24ba0989b710.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2a2cac0-9f4e-4e62-acf9-0302120174f8/b2a2cac0-9f4e-4e62-acf9-0302120174f8.crl X509v3 Authority Key Identifier: keyid:D9:8E:DA:EF:67:8F:4D:40:F9:54:87:84:6C:9A:60:B2:88:10:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2a2cac0-9f4e-4e62-acf9-0302120174f8.cer sbgp-ipAddrBlock: critical IPv4: 23.145.180.0/24 IPv6: 2602:f557::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:86:a7:86:d7:1d:8b:19:4b:3b:00:39:3f:fe:eb:6e:cb:62: 0b:c5:1b:00:6a:96:61:22:d2:47:5d:24:60:4a:dc:08:39:fc: 15:4a:c0:98:c0:47:22:bc:de:87:1a:1c:c9:6b:03:62:23:64: 2f:b3:63:9a:9f:d6:f3:99:7d:cb:02:0c:88:a3:60:14:d3:db: 26:4f:a7:af:e0:67:7b:56:79:44:56:f4:87:a0:9d:eb:a2:0c: 73:45:76:84:b7:4b:71:b8:3e:22:13:6f:18:27:a8:7f:bf:1b: 8c:dc:0c:d1:50:36:c5:fb:ef:bb:78:c2:a2:34:28:0c:fc:6c: c5:31:2f:36:33:a0:c3:2c:4e:c9:40:ef:3a:14:7a:d3:9d:e0: 81:d1:2c:b6:a4:03:d7:09:0c:82:92:bd:d2:69:1b:83:a5:f6: ad:7e:0f:b2:4f:8c:42:7e:e7:f8:d8:55:74:9b:60:28:7b:49: db:9a:0d:4f:18:60:08:31:fe:ea:37:9c:a4:a5:99:5d:03:f6: 36:a3:e3:f0:45:10:53:7b:79:07:e5:e3:44:53:1c:70:3a:83: d0:02:fd:d7:bb:a7:85:c2:2f:8c:eb:57:7f:d7:a5:54:4f:0c: 9d:67:8f:93:da:12:b8:47:2f:6a:29:cf:73:b9:00:9a:00:a2: c5:76:6c:81 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE5ppLIXl4NIZLniENAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJhMmNhYzAtOWY0ZS00ZTYyLWFjZjktMDMwMjEyMDE3 NGY4MB4XDTI2MDcwNjIxMDAxM1oXDTI2MTAwNDIxMDAxM1owLzEtMCsGA1UEAxMk NzhjOGY2YjAtMGI3MS00ZWNkLThkZTUtZjMyNWFjNjQ1MGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsXKEkoCz7H7/gtvNZtHMcjnnWyncIn0bnG5 8QGOxcZ14AkIjHwtKJIuMl/Y+p/KdlnNe/zTftCaMwAhKhVWPHv0xt390UX2Qb2y PE5vW4kpwrk3SgPUMjMSMtkf0gdyzcQ2Hfd7yGOeKtLPAZzqgcF+LYXMtCIHMmy2 wRhOGYVssULRM9lF5dIHxmzrjVID6Z98SCY4+hIM2ltwwuYy/k+qwTuirJAmaVkq xBViafrnXRSF/MOtdW1gtup+U7fdLO5t66MIp1DYVFB+YWG2fA6egeWydpsxSNUz dxxaTC5RGBZ0Eake/4d3vLV9Try+CC1FvIkzKdA0i5gj34EpkwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFP5BusdEGpOVaAinHguA7b5tlYFxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9iMmEy Y2FjMC05ZjRlLTRlNjItYWNmOS0wMzAyMTIwMTc0ZjgvMTIzZWM4ZjItMzc4Ni0z MzYzLWJhNDItMjRiYTA5ODliNzEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYjJhMmNhYzAtOWY0ZS00ZTYyLWFj ZjktMDMwMjEyMDE3NGY4L2IyYTJjYWMwLTlmNGUtNGU2Mi1hY2Y5LTAzMDIxMjAx NzRmOC5jcmwwHwYDVR0jBBgwFoAU2Y7a72ePTUD5VIeEbJpgsogQSjcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9iMmEyY2FjMC05ZjRlLTRlNjItYWNmOS0wMzAy MTIwMTc0ZjguY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF5G0MA4E AgACMAgDBgAmAvVXADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAdhqeG1x2LGUs7ADk//utuy2ILxRsAapZh ItJHXSRgStwIOfwVSsCYwEcivN6HGhzJawNiI2Qvs2Oan9bzmX3LAgyIo2AU09sm T6ev4Gd7VnlEVvSHoJ3rogxzRXaEt0txuD4iE28YJ6h/vxuM3AzRUDbF+++7eMKi NCgM/GzFMS82M6DDLE7JQO86FHrTneCB0Sy2pAPXCQyCkr3SaRuDpfatfg+yT4xC fuf42FV0m2Aoe0nbmg1PGGAIMf7qN5ykpZldA/Y2o+PwRRBTe3kH5eNEUxxwOoPQ Av3Xu6eFwi+M61d/16VUTwydZ4+T2hK4Ry9qKc9zuQCaAKLFdmyB -----END CERTIFICATE-----Generated at Mon Jul 13 08:59:19 2026 by rpki-client