$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/a5b9068d-7c24-337f-a2a7-9c8861dda220.roa File: a5b9068d-7c24-337f-a2a7-9c8861dda220.roa (raw, json) Hash identifier: 8opJt+/Hkw0NYfh4GHgf7PgWZHVJFVLn1otUfUTuVwc= Subject key identifier: A9:FB:53:CA:E2:84:A8:E5:FE:0F:D0:96:A8:FB:16:73:38:A0:34:9B Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584EBC2BB93F503D4CFD8BF2DC80 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/a5b9068d-7c24-337f-a2a7-9c8861dda220.roa Signing time: Wed 05 Aug 2026 10:28:35 +0000 ROA not before: Wed 05 Aug 2026 10:28:35 +0000 ROA not after: Tue 03 Nov 2026 11:28:35 +0000 asID: 27411 IP address blocks: 23.108.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bc:2b:b9:3f:50:3d:4c:fd:8b:f2:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Aug 5 10:28:35 2026 GMT Not After : Nov 3 11:28:35 2026 GMT Subject: CN=72761400-f3be-4d7f-9bd8-e3384a6e9a56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:12:69:28:8d:39:26:88:1d:80:bf:d3:2c:fc: 50:df:39:30:6b:21:47:8b:dd:cc:a1:72:e7:39:8f: 4c:7d:5f:0e:10:ca:72:f3:f1:7d:d4:15:10:6d:1f: 83:3f:c0:37:7c:2d:15:75:0a:08:e5:72:0e:fa:2b: d9:3d:6b:98:05:c3:f1:d0:e8:36:66:fa:6e:10:93: d7:18:05:07:6e:92:82:df:5f:54:1f:3d:88:c2:96: 2d:b2:66:e4:5d:8e:d1:e5:89:2e:6c:62:e2:85:27: 39:35:50:d1:32:a0:e2:5a:bc:da:2e:42:b5:88:68: 5c:44:0f:84:ce:05:59:a2:b9:e0:10:31:54:f4:6a: f0:01:a8:45:b7:a0:84:07:d7:eb:f3:84:a9:23:cc: a1:36:c6:9a:b8:48:14:1e:37:55:bd:6a:97:1f:31: d8:06:b5:64:22:d3:fc:9f:5a:1c:10:21:ae:29:19: bf:bf:c7:83:18:97:a8:38:c5:d0:7a:2b:57:8f:72: cc:18:28:79:7c:56:6d:28:f1:84:ba:fd:3c:af:91: 63:f3:96:fe:1c:c5:e3:ca:2e:ec:3e:76:8b:d8:5c: 59:af:8e:b8:0a:f1:1a:b6:ad:74:38:d9:e9:8c:0b: 2b:b8:7c:a1:64:d2:e3:1c:9d:7a:55:e5:84:7a:c9: 5b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:FB:53:CA:E2:84:A8:E5:FE:0F:D0:96:A8:FB:16:73:38:A0:34:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/a5b9068d-7c24-337f-a2a7-9c8861dda220.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.108.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:f9:23:8a:51:6c:77:48:fb:19:ba:8d:f9:ab:01:97:d1:da: 7a:56:06:21:34:93:b2:55:2b:7e:64:2b:40:da:30:27:e6:7c: 0b:97:85:29:44:b6:e4:92:bc:eb:1d:3e:2f:e7:65:71:bd:86: e4:72:31:70:42:be:3b:41:ae:b3:77:b5:ef:76:53:72:9b:91: 3c:33:c1:6a:cb:0b:70:44:d0:86:4a:ea:7b:81:8e:af:b0:34: 42:15:44:7d:3c:d6:14:12:12:ed:40:db:f3:19:21:11:89:4c: 37:43:ad:f4:06:b6:2f:ef:10:83:3c:ce:b2:25:20:3b:24:8b: 37:70:af:29:84:fb:e9:93:4d:42:00:8c:19:a1:2d:54:4a:21: ab:59:a8:a9:67:fc:3c:b2:e3:cd:f4:d1:cf:9b:a7:99:87:2a: bb:68:81:aa:5e:47:0b:da:55:f0:f2:4b:75:30:c7:d3:82:27: ec:d6:1f:c1:fc:be:64:eb:09:4d:4b:99:d1:9e:4b:a2:95:c9: 69:9a:f4:f1:24:a9:83:f4:18:ff:6c:b8:f7:ae:4c:96:16:a4: 71:21:da:c2:11:a5:4e:5e:d4:74:6f:33:e8:e7:da:c1:6b:3c: 3a:f9:9c:82:06:32:da:58:02:30:e6:21:35:6b:f3:66:97:cc: 00:d8:93:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE68K7k/UD1M/Yvy3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDgwNTEwMjgzNVoXDTI2MTEwMzExMjgzNVowLzEtMCsGA1UEAxMk NzI3NjE0MDAtZjNiZS00ZDdmLTliZDgtZTMzODRhNmU5YTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRJpKI05JogdgL/TLPxQ3zkwayFHi93MoXLn OY9MfV8OEMpy8/F91BUQbR+DP8A3fC0VdQoI5XIO+ivZPWuYBcPx0Og2ZvpuEJPX GAUHbpKC319UHz2IwpYtsmbkXY7R5YkubGLihSc5NVDRMqDiWrzaLkK1iGhcRA+E zgVZorngEDFU9GrwAahFt6CEB9fr84SpI8yhNsaauEgUHjdVvWqXHzHYBrVkItP8 n1ocECGuKRm/v8eDGJeoOMXQeitXj3LMGCh5fFZtKPGEuv08r5Fj85b+HMXjyi7s PnaL2FxZr464CvEatq10ONnpjAsruHyhZNLjHJ16VeWEeslb0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKn7U8rihKjl/g/Qlqj7FnM4oDSbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvYTViOTA2OGQtN2MyNC0z MzdmLWEyYTctOWM4ODYxZGRhMjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFF2xAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALz5I4pRbHdI+xm6jfmrAZfR2npWBiE0k7JVK35kK0DaMCfmfAuXhSlE tuSSvOsdPi/nZXG9huRyMXBCvjtBrrN3te92U3KbkTwzwWrLC3BE0IZK6nuBjq+w NEIVRH081hQSEu1A2/MZIRGJTDdDrfQGti/vEIM8zrIlIDskizdwrymE++mTTUIA jBmhLVRKIatZqKln/Dyy48300c+bp5mHKrtogapeRwvaVfDyS3Uwx9OCJ+zWH8H8 vmTrCU1LmdGeS6KVyWma9PEkqYP0GP9suPeuTJYWpHEh2sIRpU5e1HRvM+jn2sFr PDr5nIIGMtpYAjDmITVr82aXzADYkwE= -----END CERTIFICATE-----Generated at Thu Aug 27 16:01:40 2026 by rpki-client