$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913/8bc7533a-4c86-3c21-96e7-1039cdf81ece.roa File: 8bc7533a-4c86-3c21-96e7-1039cdf81ece.roa (raw, json) Hash identifier: a/7Axez7oJThnhjH9YjEWUDwK3ZDy6E95ymcrmI6lDI= Subject key identifier: 48:C2:C1:72:38:7B:BE:9D:78:2F:4D:9A:63:90:DE:41:BF:B8:DB:F3 Certificate issuer: /CN=9dfbf5d7-ddfe-4e2e-8a95-68ded6498913 Certificate serial: 010D0C9F4328584EA786FA03DAB2BD07F0D68000 Authority key identifier: 76:08:53:D4:B8:A9:B0:34:F2:33:1E:68:8B:DC:95:30:DA:0D:06:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913/8bc7533a-4c86-3c21-96e7-1039cdf81ece.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 4766 IP address blocks: 23.133.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:86:fa:03:da:b2:bd:07:f0:d6:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dfbf5d7-ddfe-4e2e-8a95-68ded6498913 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=99598dfa-4a73-448f-a1b1-9d588c09df54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:81:b3:80:18:11:27:ec:ab:ab:c6:a4:01:d7: b5:8d:0a:36:44:f6:9c:31:11:eb:ff:ee:4e:fb:68: 5f:bf:7c:1d:63:c6:1b:22:d4:0c:e4:17:28:8d:92: 8a:ea:ec:ef:d9:36:48:ab:90:62:14:1c:35:4e:0b: f5:63:7d:c9:de:76:21:24:cf:38:2d:f9:1d:2f:e5: 68:af:ac:f3:ed:bf:1a:7e:57:aa:8f:52:4a:86:aa: 60:cf:bf:a9:cb:87:0f:e7:8b:7b:36:a3:51:31:c6: 26:4e:1e:05:ed:d2:70:22:2d:47:f4:be:e9:6c:d7: 23:54:20:3c:be:ee:06:81:81:b9:c7:72:37:2f:f8: 09:6c:a6:2b:a5:54:75:61:b1:d3:60:13:53:a8:c9: 3a:49:78:b0:45:f3:fd:34:8d:72:4c:be:b8:e6:47: ab:ed:c5:29:24:13:77:b8:88:83:4b:f1:5c:15:dd: 6b:16:7d:82:6d:18:e1:ac:e6:f2:40:8b:8b:43:a8: c7:82:6b:12:33:42:55:95:e4:ba:83:32:0e:38:10: e1:5a:14:89:a5:e8:cb:31:e2:bc:c1:9d:d8:dd:9d: 77:69:c0:bf:43:f8:e7:ea:13:58:78:8d:02:de:68: 69:db:c1:8e:22:25:0e:81:d8:a2:de:f6:7d:6b:eb: 54:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:C2:C1:72:38:7B:BE:9D:78:2F:4D:9A:63:90:DE:41:BF:B8:DB:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913/8bc7533a-4c86-3c21-96e7-1039cdf81ece.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913.crl X509v3 Authority Key Identifier: keyid:76:08:53:D4:B8:A9:B0:34:F2:33:1E:68:8B:DC:95:30:DA:0D:06:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913.cer sbgp-ipAddrBlock: critical IPv4: 23.133.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:14:d7:7a:aa:08:1b:5e:25:b6:f2:3d:4e:56:14:67:d5:8c: 8f:b9:a0:71:69:e1:66:50:3a:a2:3d:45:c9:18:61:e8:a2:94: e9:75:b1:ae:07:5d:cb:07:fd:67:58:4f:62:78:d9:27:5e:ce: 59:a2:5a:df:63:31:b9:ce:92:2f:f6:9c:1d:53:8f:0a:25:2d: b2:7f:64:79:c1:51:5e:5a:7e:2c:bc:18:26:47:5f:39:47:da: 48:b1:0a:0c:30:c0:f5:54:96:3f:d3:c7:a3:dc:93:07:0e:8e: 78:c3:0e:96:bd:00:b8:eb:d5:61:3a:aa:91:1a:57:9c:bb:e8: 8b:1b:b5:5d:4f:44:7c:59:45:c2:6f:16:12:24:65:b9:df:01: 89:dd:16:dc:c9:1b:96:2f:69:d0:f6:8f:64:5e:b3:fe:a1:3b: de:dd:59:b2:3b:b8:b3:f1:b5:e8:d9:89:3c:56:2b:23:39:44: f7:ba:12:5a:61:6c:ec:94:09:bb:fe:d4:98:06:84:46:07:7c: 5c:79:42:a8:72:85:8f:61:a8:59:47:80:18:18:6f:61:1d:7d: cb:26:f5:95:8e:1f:43:c1:c1:dd:56:c7:4e:53:2b:6a:b6:c5: 09:b6:31:44:e3:a8:71:12:6a:88:9e:b3:fd:4c:3e:93:84:be: ea:30:eb:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nhvoD2rK9B/DWgAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWRmYmY1ZDctZGRmZS00ZTJlLThhOTUtNjhkZWQ2NDk4 OTEzMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OTk1OThkZmEtNGE3My00NDhmLWExYjEtOWQ1ODhjMDlkZjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloGzgBgRJ+yrq8akAde1jQo2RPacMRHr/+5O +2hfv3wdY8YbItQM5BcojZKK6uzv2TZIq5BiFBw1Tgv1Y33J3nYhJM84LfkdL+Vo r6zz7b8afleqj1JKhqpgz7+py4cP54t7NqNRMcYmTh4F7dJwIi1H9L7pbNcjVCA8 vu4GgYG5x3I3L/gJbKYrpVR1YbHTYBNTqMk6SXiwRfP9NI1yTL645ker7cUpJBN3 uIiDS/FcFd1rFn2CbRjhrObyQIuLQ6jHgmsSM0JVleS6gzIOOBDhWhSJpejLMeK8 wZ3Y3Z13acC/Q/jn6hNYeI0C3mhp28GOIiUOgdii3vZ9a+tUqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEjCwXI4e76deC9NmmOQ3kG/uNvzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85ZGZi ZjVkNy1kZGZlLTRlMmUtOGE5NS02OGRlZDY0OTg5MTMvOGJjNzUzM2EtNGM4Ni0z YzIxLTk2ZTctMTAzOWNkZjgxZWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOWRmYmY1ZDctZGRmZS00ZTJlLThh OTUtNjhkZWQ2NDk4OTEzLzlkZmJmNWQ3LWRkZmUtNGUyZS04YTk1LTY4ZGVkNjQ5 ODkxMy5jcmwwHwYDVR0jBBgwFoAUdghT1LipsDTyMx5oi9yVMNoNBpUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85ZGZiZjVkNy1kZGZlLTRlMmUtOGE5NS02OGRl ZDY0OTg5MTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4WUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACEU13qqCBteJbbyPU5WFGfVjI+5oHFp4WZQOqI9RckYYeiilOl1sa4H XcsH/WdYT2J42SdezlmiWt9jMbnOki/2nB1TjwolLbJ/ZHnBUV5afiy8GCZHXzlH 2kixCgwwwPVUlj/Tx6PckwcOjnjDDpa9ALjr1WE6qpEaV5y76IsbtV1PRHxZRcJv FhIkZbnfAYndFtzJG5YvadD2j2Res/6hO97dWbI7uLPxtejZiTxWKyM5RPe6Elph bOyUCbv+1JgGhEYHfFx5QqhyhY9hqFlHgBgYb2Edfcsm9ZWOH0PBwd1Wx05TK2q2 xQm2MUTjqHESaoies/1MPpOEvuow62c= -----END CERTIFICATE-----Generated at Sat Sep 5 01:48:40 2026 by rpki-client