$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/cc8cc32a-1d34-3d94-916b-005b597a491d.roa File: cc8cc32a-1d34-3d94-916b-005b597a491d.roa (raw, json) Hash identifier: eB1CNNHighs5P+9LSl/sF44B0rPTuK9akvgn5XTApzs= Subject key identifier: E6:5A:16:7D:C1:69:83:A1:50:78:73:8B:DF:D7:7C:44:3A:F6:03:EB Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584EB9C1B2926F7209F536CADA00 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/cc8cc32a-1d34-3d94-916b-005b597a491d.roa Signing time: Tue 04 Aug 2026 13:43:20 +0000 ROA not before: Tue 04 Aug 2026 13:43:20 +0000 ROA not after: Mon 02 Nov 2026 14:43:20 +0000 asID: 7203 IP address blocks: 23.108.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b9:c1:b2:92:6f:72:09:f5:36:ca:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Aug 4 13:43:20 2026 GMT Not After : Nov 2 14:43:20 2026 GMT Subject: CN=8c91af0d-576a-4fcc-81d0-f5d029647892 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f3:ed:5e:89:7d:b0:c2:26:e1:ec:df:71:fc: 5f:26:39:4f:78:56:1d:fe:e4:d2:87:90:d8:1f:1d: bb:7a:f0:41:e8:89:c3:f6:a1:ee:72:b5:85:02:3e: 2c:04:05:8e:55:a3:17:2e:55:bd:5f:e6:46:ef:a6: 04:f2:73:db:66:55:4c:d8:88:98:c4:c0:0f:d7:c3: 89:22:47:d3:d2:5a:fc:17:1b:77:84:c0:5a:4f:c4: 78:6a:22:c1:90:64:46:6e:2a:8e:46:25:cc:89:6c: e2:32:a2:00:95:95:1c:64:d5:b8:56:86:59:8a:4f: e1:7f:fa:0b:be:b9:4a:b1:ca:b9:78:c0:da:2a:e4: 22:27:51:86:c3:16:2c:f2:26:82:f1:5b:9d:e4:71: c5:7e:9d:7f:b1:f9:69:a1:f2:a2:f6:4f:df:ae:00: 9f:cb:56:28:b0:53:43:4f:96:d6:01:ac:75:d0:83: 89:7b:29:1c:75:28:98:a1:c9:09:ee:c8:05:78:60: e3:16:3d:13:34:26:e4:bc:3b:56:55:6f:5b:dc:86: ee:8c:61:7f:31:6a:c7:b1:de:a9:64:92:80:5d:f5: 1d:87:4e:f4:51:a1:89:67:55:81:9b:80:6b:98:bb: 18:2b:fb:b3:60:0c:24:ae:1c:ca:7d:21:96:df:7e: 5f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:5A:16:7D:C1:69:83:A1:50:78:73:8B:DF:D7:7C:44:3A:F6:03:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/cc8cc32a-1d34-3d94-916b-005b597a491d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.108.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:c9:8f:03:fb:56:fa:bf:82:bf:eb:c5:f2:f0:b0:25:fd:76: 3c:ed:46:54:58:96:ea:29:13:d1:4e:74:3a:f1:8e:d0:07:cd: 2d:12:3d:70:8d:50:4e:8d:b8:e3:66:d4:34:97:22:62:3b:28: 08:e3:41:02:dd:0e:10:7b:b9:b2:b5:99:90:77:ef:9c:69:02: 4e:12:b2:d4:33:ef:18:9f:ac:2a:51:0a:a5:51:58:00:ea:c2: 7b:a5:d6:99:4c:a5:62:61:af:85:5d:68:7f:40:d6:af:9a:2d: 4f:2f:fd:3b:a5:96:5b:74:d5:a8:f6:45:c8:47:aa:e9:73:31: 87:19:7f:b1:0b:a0:a6:8c:21:8a:1b:75:8f:0c:ca:f3:71:3a: 8c:1b:8a:ca:30:25:5b:2c:44:fb:52:d1:47:8c:ee:11:fe:42: 1f:18:4e:af:b4:eb:87:3c:60:87:d6:7e:a8:7e:6a:64:81:86: 64:a9:4f:e3:ff:1e:2c:38:5f:e8:23:65:7c:96:59:19:76:3f: 0f:7f:01:25:59:f4:30:23:e1:f5:fa:8b:d1:f1:fd:b8:1b:69: d2:b7:a8:b4:d4:fa:29:c8:c2:d1:2e:a2:ed:0f:53:7c:e0:1a: 49:3b:9c:52:1d:07:88:01:7d:03:55:d3:a2:33:59:7d:e9:88: 54:4d:f0:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE65wbKSb3IJ9TbK2gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDgwNDEzNDMyMFoXDTI2MTEwMjE0NDMyMFowLzEtMCsGA1UEAxMk OGM5MWFmMGQtNTc2YS00ZmNjLTgxZDAtZjVkMDI5NjQ3ODkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/PtXol9sMIm4ezfcfxfJjlPeFYd/uTSh5DY Hx27evBB6InD9qHucrWFAj4sBAWOVaMXLlW9X+ZG76YE8nPbZlVM2IiYxMAP18OJ IkfT0lr8Fxt3hMBaT8R4aiLBkGRGbiqORiXMiWziMqIAlZUcZNW4VoZZik/hf/oL vrlKscq5eMDaKuQiJ1GGwxYs8iaC8Vud5HHFfp1/sflpofKi9k/frgCfy1YosFND T5bWAax10IOJeykcdSiYockJ7sgFeGDjFj0TNCbkvDtWVW9b3IbujGF/MWrHsd6p ZJKAXfUdh070UaGJZ1WBm4BrmLsYK/uzYAwkrhzKfSGW335f/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOZaFn3BaYOhUHhzi9/XfEQ69gPrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvY2M4Y2MzMmEtMWQzNC0z ZDk0LTkxNmItMDA1YjU5N2E0OTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF2xsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJfJjwP7Vvq/gr/rxfLwsCX9djztRlRYluopE9FOdDrxjtAHzS0SPXCN UE6NuONm1DSXImI7KAjjQQLdDhB7ubK1mZB375xpAk4SstQz7xifrCpRCqVRWADq wnul1plMpWJhr4VdaH9A1q+aLU8v/Tulllt01aj2RchHqulzMYcZf7ELoKaMIYob dY8MyvNxOowbisowJVssRPtS0UeM7hH+Qh8YTq+064c8YIfWfqh+amSBhmSpT+P/ Hiw4X+gjZXyWWRl2Pw9/ASVZ9DAj4fX6i9Hx/bgbadK3qLTU+inIwtEuou0PU3zg Gkk7nFIdB4gBfQNV06IzWX3piFRN8Cc= -----END CERTIFICATE-----Generated at Thu Aug 27 17:38:45 2026 by rpki-client