$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/ca756e9a-47d8-33bf-9e02-86af045884a9.roa File: ca756e9a-47d8-33bf-9e02-86af045884a9.roa (raw, json) Hash identifier: R076Xxik5sD4aCtgf60Qsz+pwig6gVbLEyo1dDo+QIA= Subject key identifier: 01:5C:A8:7B:04:EB:94:59:F9:65:F0:C1:C7:7A:FA:16:DC:F9:60:05 Certificate issuer: /CN=1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f Certificate serial: 010D0C9F4328584EA793A9FD8CDC090760008280 Authority key identifier: 3C:C3:16:47:8C:B1:26:ED:0F:A9:63:29:A2:01:6E:85:BA:90:9A:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/ca756e9a-47d8-33bf-9e02-86af045884a9.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 135074 IP address blocks: 23.145.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:93:a9:fd:8c:dc:09:07:60:00:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=c1d55ce0-af52-4820-9d6f-867aee041e8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:54:d4:b8:0d:44:34:b9:94:3f:be:c9:a2:5c: 51:60:7d:24:3a:62:b2:aa:fa:ff:7d:c3:b6:9d:73: 22:2f:81:26:9a:13:a9:77:3d:4b:59:2e:60:a1:44: bc:c0:95:d2:4b:92:dc:d2:e2:99:b1:d8:58:34:ab: 61:8f:cb:a4:6b:38:16:8a:3a:1c:d8:86:66:f7:d1: b3:6f:27:b2:eb:2e:59:bc:8d:c3:98:25:48:6f:cb: fa:26:2e:4a:f5:b2:de:60:e3:36:ba:12:f4:3b:52: aa:2e:a0:6a:7f:97:e5:80:f7:82:dc:c7:b4:38:c2: a7:9d:3c:b3:77:2b:3b:5e:3e:22:b1:b3:dd:fb:b7: 7d:69:74:9a:37:4f:69:c5:8f:c4:7c:7f:70:05:bd: 77:45:47:9e:e1:70:54:96:01:1e:4e:94:00:bb:50: d1:46:87:5e:e7:24:16:ee:93:aa:ad:78:0f:0d:0d: cf:67:80:8c:7b:94:bc:0b:8a:0e:af:07:39:93:d4: af:f4:9f:58:ca:b7:5b:02:10:8b:25:d6:4e:f6:95: da:a2:3e:de:7d:dd:39:a6:df:73:b6:57:67:01:f9: 47:91:3e:44:85:c6:2d:82:7c:bf:02:1f:b7:db:0f: be:ed:7e:11:99:71:50:45:05:b3:26:27:61:06:bb: 29:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:5C:A8:7B:04:EB:94:59:F9:65:F0:C1:C7:7A:FA:16:DC:F9:60:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/ca756e9a-47d8-33bf-9e02-86af045884a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.crl X509v3 Authority Key Identifier: keyid:3C:C3:16:47:8C:B1:26:ED:0F:A9:63:29:A2:01:6E:85:BA:90:9A:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.cer sbgp-ipAddrBlock: critical IPv4: 23.145.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d3:e7:77:76:0c:30:d3:ed:5a:05:50:36:c5:52:53:e0:75:31: 23:22:56:a3:ce:12:14:14:d3:c6:a8:4a:53:ae:f1:06:68:8e: 16:b4:bd:c1:f1:4b:d9:d1:a6:2b:2c:83:fc:18:50:74:cd:5e: 30:45:da:64:99:4c:fd:41:d9:ae:ff:56:45:04:2d:8e:a4:82: f5:60:41:2a:1a:22:81:59:68:77:ad:29:e1:94:ed:e4:dd:3d: 1d:e9:35:38:05:c3:ea:a5:d3:b8:aa:d1:64:6d:8f:67:00:c1: 32:91:0c:85:75:0f:ec:29:e5:75:e9:34:01:6a:68:2d:57:af: 11:da:6b:20:02:b6:61:42:d5:34:f7:17:93:32:9b:d8:ca:92: 9d:61:7f:8c:ff:fb:68:99:c4:82:92:05:9a:08:d3:98:85:d1: e1:69:12:f9:6e:06:3a:4e:63:0f:a3:62:9c:80:50:4e:95:22: 01:5d:ed:cd:a6:57:db:71:e1:68:b5:92:25:ba:72:b9:ff:f2: 0e:00:2d:d1:a4:c8:50:b6:67:34:97:1d:64:52:a8:ef:c8:de: 39:68:66:51:57:d3:d5:68:ca:eb:e4:a2:f8:dd:39:f0:27:54: c8:74:3e:19:1d:27:da:49:18:f0:46:50:e4:ce:95:49:80:ec: 6c:d4:b9:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nk6n9jNwJB2AAgoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWI5YmYyZjQtYzgzMS00ZjFlLWEyZDUtZDdmYzQwNTM1 YzhmMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YzFkNTVjZTAtYWY1Mi00ODIwLTlkNmYtODY3YWVlMDQxZThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlTUuA1ENLmUP77JolxRYH0kOmKyqvr/fcO2 nXMiL4EmmhOpdz1LWS5goUS8wJXSS5Lc0uKZsdhYNKthj8ukazgWijoc2IZm99Gz byey6y5ZvI3DmCVIb8v6Ji5K9bLeYOM2uhL0O1KqLqBqf5flgPeC3Me0OMKnnTyz dys7Xj4isbPd+7d9aXSaN09pxY/EfH9wBb13RUee4XBUlgEeTpQAu1DRRode5yQW 7pOqrXgPDQ3PZ4CMe5S8C4oOrwc5k9Sv9J9YyrdbAhCLJdZO9pXaoj7efd05pt9z tldnAflHkT5EhcYtgny/Ah+32w++7X4RmXFQRQWzJidhBrspaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAFcqHsE65RZ+WXwwcd6+hbc+WAFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xYjli ZjJmNC1jODMxLTRmMWUtYTJkNS1kN2ZjNDA1MzVjOGYvY2E3NTZlOWEtNDdkOC0z M2JmLTllMDItODZhZjA0NTg4NGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMWI5YmYyZjQtYzgzMS00ZjFlLWEy ZDUtZDdmYzQwNTM1YzhmLzFiOWJmMmY0LWM4MzEtNGYxZS1hMmQ1LWQ3ZmM0MDUz NWM4Zi5jcmwwHwYDVR0jBBgwFoAUPMMWR4yxJu0PqWMpogFuhbqQmokwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xYjliZjJmNC1jODMxLTRmMWUtYTJkNS1kN2Zj NDA1MzVjOGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5GIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANPnd3YMMNPtWgVQNsVSU+B1MSMiVqPOEhQU08aoSlOu8QZojha0vcHx S9nRpissg/wYUHTNXjBF2mSZTP1B2a7/VkUELY6kgvVgQSoaIoFZaHetKeGU7eTd PR3pNTgFw+ql07iq0WRtj2cAwTKRDIV1D+wp5XXpNAFqaC1XrxHaayACtmFC1TT3 F5Mym9jKkp1hf4z/+2iZxIKSBZoI05iF0eFpEvluBjpOYw+jYpyAUE6VIgFd7c2m V9tx4Wi1kiW6crn/8g4ALdGkyFC2ZzSXHWRSqO/I3jloZlFX09VoyuvkovjdOfAn VMh0PhkdJ9pJGPBGUOTOlUmA7GzUuQQ= -----END CERTIFICATE-----Generated at Fri Aug 21 02:49:11 2026 by rpki-client