$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/b1144a3c-3234-3ea2-83c2-e75a90ef9ead.roa File: b1144a3c-3234-3ea2-83c2-e75a90ef9ead.roa (raw, json) Hash identifier: GbUy887miwF82iDsNi0RWoxOpnDeYp2qVgn+v8b9pSM= Subject key identifier: 29:E6:FF:F3:78:1B:05:A1:BC:B0:70:39:5D:DA:60:AC:06:AD:6A:C6 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584EB9C31A6665419ECD878F0FC0 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/b1144a3c-3234-3ea2-83c2-e75a90ef9ead.roa Signing time: Tue 04 Aug 2026 13:46:10 +0000 ROA not before: Tue 04 Aug 2026 13:46:10 +0000 ROA not after: Mon 02 Nov 2026 14:46:10 +0000 asID: 7203 IP address blocks: 23.108.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b9:c3:1a:66:65:41:9e:cd:87:8f:0f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Aug 4 13:46:10 2026 GMT Not After : Nov 2 14:46:10 2026 GMT Subject: CN=8f85f285-6cad-4aa0-b1be-fc2147cbba57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f1:e6:2e:49:e0:4b:bd:3c:0d:c5:ca:fd:bd: 07:80:24:fa:0c:c7:00:50:95:c5:f9:80:cb:f0:90: 6b:02:dd:ad:3c:3e:60:83:46:31:88:92:98:d6:30: 68:11:c1:99:81:a3:5b:2d:5c:1c:bc:bb:e6:4c:12: 7c:c5:27:9a:95:f1:e3:8a:8a:01:71:65:eb:13:9b: de:8a:57:59:24:36:4e:4f:88:99:65:04:c4:4a:fb: e4:1c:21:ac:93:cc:28:59:ba:99:3b:8a:86:30:c5: 7f:7b:02:96:3e:f8:19:d2:d9:fc:11:55:84:a4:ff: de:25:a5:1b:84:44:ea:50:b9:f6:0f:fd:20:55:ae: 8c:00:1a:84:2b:c0:23:45:ca:26:e8:29:17:3f:25: dc:69:33:87:27:35:8a:af:da:49:1a:e3:3a:bd:ae: 48:d3:43:0d:90:b0:5d:26:10:31:6d:51:5e:1b:7e: 98:14:d0:fc:52:17:ef:25:5a:e7:06:ff:4d:48:25: bd:fb:fe:c0:68:37:d3:57:71:5b:96:a4:10:f2:be: 5d:56:29:79:9e:c3:e1:71:f3:16:8f:83:05:96:86: c3:af:a9:dc:47:08:0e:cc:94:ea:e9:3c:45:29:08: ab:79:e9:be:1b:1f:04:7c:e5:ba:73:24:cb:69:c0: 5c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:E6:FF:F3:78:1B:05:A1:BC:B0:70:39:5D:DA:60:AC:06:AD:6A:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/b1144a3c-3234-3ea2-83c2-e75a90ef9ead.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.108.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:87:bf:3c:46:51:3c:37:59:d5:59:da:39:f2:97:fc:8a:34: 1a:04:59:aa:36:d3:f4:61:d9:61:59:77:36:90:cf:4a:82:99: da:22:13:e4:40:73:db:1f:86:b4:77:6e:18:e2:61:6b:67:f2: f2:99:7a:4d:89:75:52:1e:9d:18:40:df:eb:ca:95:1f:fc:4c: d6:e4:a8:9d:85:81:d2:10:f6:41:90:94:e6:00:6b:c3:14:91: 66:42:5e:e6:22:f2:c9:b2:ec:b8:68:21:21:cf:97:19:9c:20: e8:aa:d2:34:e2:23:5b:ba:33:dd:d2:5f:3c:57:e2:df:d2:ee: 58:c5:33:4b:5e:74:c9:02:86:28:3e:c0:f5:15:6f:42:75:b7: 96:6a:ac:aa:67:bb:12:07:49:3b:38:ac:46:0a:89:ad:e0:cd: 27:98:3f:75:7c:fc:93:92:6e:4b:81:46:28:76:fe:e5:91:eb: 63:d9:7e:41:28:88:69:a4:d9:9c:b1:9b:f5:8a:32:8f:5f:8c: 0f:f9:bb:2a:e4:4d:28:fa:8d:ee:06:5f:77:52:e3:50:7a:a5: a2:8d:56:b9:f4:31:1a:cf:eb:59:ab:85:33:ce:f1:79:4b:db: a9:7d:b0:b7:3b:7e:f4:3b:ca:36:2e:2d:38:5d:75:ad:e7:03: d3:1d:01:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE65wxpmZUGezYePD8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDgwNDEzNDYxMFoXDTI2MTEwMjE0NDYxMFowLzEtMCsGA1UEAxMk OGY4NWYyODUtNmNhZC00YWEwLWIxYmUtZmMyMTQ3Y2JiYTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vHmLkngS708DcXK/b0HgCT6DMcAUJXF+YDL 8JBrAt2tPD5gg0YxiJKY1jBoEcGZgaNbLVwcvLvmTBJ8xSealfHjiooBcWXrE5ve ildZJDZOT4iZZQTESvvkHCGsk8woWbqZO4qGMMV/ewKWPvgZ0tn8EVWEpP/eJaUb hETqULn2D/0gVa6MABqEK8AjRcom6CkXPyXcaTOHJzWKr9pJGuM6va5I00MNkLBd JhAxbVFeG36YFND8UhfvJVrnBv9NSCW9+/7AaDfTV3FblqQQ8r5dVil5nsPhcfMW j4MFlobDr6ncRwgOzJTq6TxFKQireem+Gx8EfOW6cyTLacBc0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCnm//N4GwWhvLBwOV3aYKwGrWrGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvYjExNDRhM2MtMzIzNC0z ZWEyLTgzYzItZTc1YTkwZWY5ZWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF2zAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKOHvzxGUTw3WdVZ2jnyl/yKNBoEWao20/Rh2WFZdzaQz0qCmdoiE+RA c9sfhrR3bhjiYWtn8vKZek2JdVIenRhA3+vKlR/8TNbkqJ2FgdIQ9kGQlOYAa8MU kWZCXuYi8smy7LhoISHPlxmcIOiq0jTiI1u6M93SXzxX4t/S7ljFM0tedMkChig+ wPUVb0J1t5ZqrKpnuxIHSTs4rEYKia3gzSeYP3V8/JOSbkuBRih2/uWR62PZfkEo iGmk2Zyxm/WKMo9fjA/5uyrkTSj6je4GX3dS41B6paKNVrn0MRrP61mrhTPO8XlL 26l9sLc7fvQ7yjYuLThdda3nA9MdASc= -----END CERTIFICATE-----Generated at Thu Aug 27 18:18:48 2026 by rpki-client