$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/6886b970-4f3a-34d3-ad6f-c471821f5b32.roa File: 6886b970-4f3a-34d3-ad6f-c471821f5b32.roa (raw, json) Hash identifier: fQbVvH0VjRICT5giA5CleTBWzDvqCzMnWJFKLSWCcw0= Subject key identifier: 43:4F:EB:3C:4E:AB:0E:BF:63:2A:74:89:B1:B3:8C:73:FA:A4:D8:5F Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584ECA954298162675E8F4F8AF80 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/6886b970-4f3a-34d3-ad6f-c471821f5b32.roa Signing time: Mon 10 Aug 2026 14:22:32 +0000 ROA not before: Mon 10 Aug 2026 14:22:32 +0000 ROA not after: Sun 08 Nov 2026 15:22:32 +0000 asID: 395954 IP address blocks: 23.83.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ca:95:42:98:16:26:75:e8:f4:f8:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Aug 10 14:22:32 2026 GMT Not After : Nov 8 15:22:32 2026 GMT Subject: CN=21a857de-ad23-4573-9099-0307f35c3480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:6c:79:c1:5e:12:aa:a3:65:3a:d2:3d:4b:8e: 0b:11:1d:5d:eb:43:c6:f1:de:d1:c1:93:52:df:e8: 3e:b4:c1:cf:1d:43:d4:3a:67:b6:d9:1b:88:97:fc: 8c:37:b9:1b:13:f1:3e:4d:e5:ae:12:27:3f:27:21: 64:b3:1b:9f:66:e1:3e:98:0b:86:85:76:15:8f:81: a5:90:37:98:b4:54:80:a3:ce:24:18:da:bf:d1:c2: a6:09:a3:65:0f:21:5a:8e:88:3b:fd:26:08:23:00: 24:b6:25:fc:68:21:0f:45:8a:4a:a4:dc:91:6a:cc: 5c:1c:c0:7b:9e:fa:6f:03:7e:9c:39:be:ae:f3:ea: af:01:ec:38:2d:c3:fb:1b:65:1e:87:56:0c:fc:29: 1c:8a:5a:31:ec:b8:68:91:cd:7d:f7:7f:72:99:fb: 6e:cb:86:3f:65:a8:99:7a:9f:8a:36:eb:cc:aa:19: eb:4e:d7:3d:4b:58:37:e8:37:e8:b2:54:3c:b9:e0: 96:80:62:58:9e:bd:43:39:0b:df:a8:0f:df:01:fa: c6:64:af:c6:b4:c2:a6:25:01:95:42:3a:d0:d9:a3: 63:fd:4f:1c:87:a6:c9:95:b2:2e:42:b6:8e:cf:83: 33:eb:ee:d0:9f:9a:81:a6:43:19:2a:10:92:5b:d2: af:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:4F:EB:3C:4E:AB:0E:BF:63:2A:74:89:B1:B3:8C:73:FA:A4:D8:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/6886b970-4f3a-34d3-ad6f-c471821f5b32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.83.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:cd:da:db:57:dc:05:33:0e:27:9b:4e:81:c4:dc:b7:e9:9d: 95:4c:7e:8d:f6:f0:82:0a:37:d6:fe:52:09:0b:a4:a8:74:7b: 2a:eb:f1:44:38:15:1f:11:18:6e:d2:8f:d3:6f:90:e9:2c:59: 9c:9e:82:5c:60:c8:ce:7f:19:a2:ce:f3:0e:30:5d:f9:30:b6: 4e:35:ce:9e:e2:fe:6a:4b:60:04:92:c6:9b:60:02:96:02:0b: 2d:f6:85:63:14:3a:74:3e:52:b0:d4:d7:4b:cb:af:3c:45:17: 1f:66:64:d6:ee:42:09:c9:83:7d:5b:5e:6d:be:d6:09:10:d6: 26:06:1d:3d:c7:f0:5c:1b:5f:66:9e:12:84:a0:3c:28:49:45: e7:f6:16:46:dc:e3:f9:b7:bb:58:c3:2b:18:a4:ac:f7:99:1a: b5:aa:1d:08:7d:1f:cd:c5:bb:1b:4d:e6:ac:14:cb:45:e2:bf: 3f:bb:ee:89:c0:24:eb:0c:08:0b:bd:df:3a:4c:d7:20:42:1a: 33:00:06:95:02:56:db:7a:38:3e:75:5b:8d:2c:9a:54:f3:03: 9b:28:63:5d:2a:66:8b:ba:ec:0c:5b:33:49:34:ef:a0:ee:11: 3f:dc:2f:f2:31:9f:10:0e:af:f2:17:47:49:5c:70:43:95:3c: 79:00:d3:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7KlUKYFiZ16PT4r4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDgxMDE0MjIzMloXDTI2MTEwODE1MjIzMlowLzEtMCsGA1UEAxMk MjFhODU3ZGUtYWQyMy00NTczLTkwOTktMDMwN2YzNWMzNDgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Wx5wV4SqqNlOtI9S44LER1d60PG8d7RwZNS 3+g+tMHPHUPUOme22RuIl/yMN7kbE/E+TeWuEic/JyFksxufZuE+mAuGhXYVj4Gl kDeYtFSAo84kGNq/0cKmCaNlDyFajog7/SYIIwAktiX8aCEPRYpKpNyRasxcHMB7 nvpvA36cOb6u8+qvAew4LcP7G2Ueh1YM/Ckcilox7Lhokc19939ymftuy4Y/ZaiZ ep+KNuvMqhnrTtc9S1g36DfoslQ8ueCWgGJYnr1DOQvfqA/fAfrGZK/GtMKmJQGV QjrQ2aNj/U8ch6bJlbIuQraOz4Mz6+7Qn5qBpkMZKhCSW9KvKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFENP6zxOqw6/Yyp0ibGzjHP6pNhfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvNjg4NmI5NzAtNGYzYS0z NGQzLWFkNmYtYzQ3MTgyMWY1YjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF1OIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEjN2ttX3AUzDiebToHE3LfpnZVMfo328IIKN9b+UgkLpKh0eyrr8UQ4 FR8RGG7Sj9NvkOksWZyeglxgyM5/GaLO8w4wXfkwtk41zp7i/mpLYASSxptgApYC Cy32hWMUOnQ+UrDU10vLrzxFFx9mZNbuQgnJg31bXm2+1gkQ1iYGHT3H8FwbX2ae EoSgPChJRef2Fkbc4/m3u1jDKxikrPeZGrWqHQh9H83FuxtN5qwUy0Xivz+77onA JOsMCAu93zpM1yBCGjMABpUCVtt6OD51W40smlTzA5soY10qZou67AxbM0k076Du ET/cL/IxnxAOr/IXR0lccEOVPHkA09k= -----END CERTIFICATE-----Generated at Thu Aug 27 17:39:26 2026 by rpki-client