$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e/ec42e5db-129d-3e21-a678-85b4b5f3ba38.roa File: ec42e5db-129d-3e21-a678-85b4b5f3ba38.roa (raw, json) Hash identifier: s1dtUdihpu2v1hDx8i0giQwjmqHwl1eMFsEL313FF5o= Subject key identifier: 9B:AC:7F:FC:EC:BA:81:28:5E:A0:39:37:D7:49:C1:FE:AD:7B:46:B5 Certificate issuer: /CN=9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e Certificate serial: 010D0C9F4328584EAFE6F4ED515DB81A129E4A00 Authority key identifier: A6:3B:19:6E:4C:31:08:67:74:57:05:6A:AD:1D:28:E3:BF:03:CA:F5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e/ec42e5db-129d-3e21-a678-85b4b5f3ba38.roa Signing time: Sat 01 Aug 2026 01:00:12 +0000 ROA not before: Sat 01 Aug 2026 01:00:12 +0000 ROA not after: Fri 30 Oct 2026 01:00:12 +0000 asID: 35870 IP address blocks: 23.144.200.0/24 maxlen: 24 2602:fac0::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:af:e6:f4:ed:51:5d:b8:1a:12:9e:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e Validity Not Before: Aug 1 01:00:12 2026 GMT Not After : Oct 30 01:00:12 2026 GMT Subject: CN=0aacb4c4-5ea5-49e7-8546-2aad85ae7d06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:33:cd:6f:cf:f7:ed:7e:26:6c:53:26:33:ef: d7:2a:e0:9b:73:f8:90:90:53:5d:ad:fd:b3:28:be: 36:7b:d9:01:5c:b9:68:52:a6:fa:ac:c7:bd:75:63: c0:5d:4d:30:61:c0:f8:52:6a:91:dc:0a:e5:04:8a: fc:41:ae:ae:7f:b6:dc:0b:ef:f2:3c:ab:2e:bb:38: a6:8a:63:47:21:ce:33:fb:04:b0:ba:61:64:66:97: a3:b3:c6:01:41:06:26:bd:8d:c3:a0:75:60:69:5c: 10:b6:15:51:37:be:02:1a:8b:6c:cd:e4:f1:e8:ef: b6:09:3b:62:28:60:58:b1:94:48:bd:55:99:93:b8: a5:b8:ab:f5:23:d5:d1:fe:c0:69:9c:9c:c8:09:fc: 3b:61:50:27:87:00:ef:e4:59:52:af:77:92:0f:60: 72:2f:67:6a:5b:35:51:dd:84:9c:f1:72:2d:8c:a7: 47:f3:9c:a7:93:78:f3:fe:cf:d8:28:a0:c2:c5:82: d4:02:60:07:ba:75:21:1c:41:e4:3d:a0:50:89:ca: 43:2d:6f:9e:aa:d9:0e:12:86:6a:df:60:dd:49:d1: 59:a7:86:4e:a6:9e:c4:0e:6d:3d:10:22:79:26:5e: 10:62:be:db:3b:df:7f:ae:05:4d:2a:c1:ee:89:67: 73:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:AC:7F:FC:EC:BA:81:28:5E:A0:39:37:D7:49:C1:FE:AD:7B:46:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e/ec42e5db-129d-3e21-a678-85b4b5f3ba38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e.crl X509v3 Authority Key Identifier: keyid:A6:3B:19:6E:4C:31:08:67:74:57:05:6A:AD:1D:28:E3:BF:03:CA:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e.cer sbgp-ipAddrBlock: critical IPv4: 23.144.200.0/24 IPv6: 2602:fac0::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:2e:09:82:49:cf:99:7f:a4:fc:78:31:69:8a:02:98:28:ac: 1c:c2:5a:d6:e7:20:31:6c:5b:f1:eb:a1:1f:92:b7:c1:e8:ca: 80:b5:5b:5b:c5:58:da:8f:d5:c6:9c:a3:e4:aa:d3:84:dd:0a: 89:d5:83:d7:e1:71:86:77:50:dd:c0:a9:c6:ba:a3:93:1f:21: bf:4f:95:02:29:82:44:10:d1:60:d1:68:11:d3:d9:db:ce:d1: 57:82:fb:ce:b6:39:3e:ca:67:e4:82:2d:9a:77:14:a7:22:20: 53:94:aa:aa:7f:15:66:9b:fe:4c:c0:fc:55:60:93:8d:65:0f: 09:f4:9b:fb:53:9e:fb:73:15:06:32:37:a9:a3:2b:49:ee:12: 3a:77:77:fe:2b:c1:ae:f0:79:0a:29:ee:09:61:4e:1e:be:5e: 0e:54:82:bc:57:5d:b6:3d:02:87:94:cc:e7:79:60:c7:a1:e9: a4:09:f8:5e:59:e3:83:6d:e7:e0:1b:24:4a:c1:e9:21:ec:36: 04:3a:ca:c8:1b:82:1a:78:46:30:2a:78:14:23:6f:ce:d6:4f: 22:3d:7a:70:98:38:9b:6d:9a:dc:02:7e:ec:63:89:1c:38:ee: b4:dd:1c:fa:c2:86:56:be:db:a2:c3:1c:b3:1c:88:7f:b5:9e: b5:7c:c7:29 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE6v5vTtUV24GhKeSgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWY5Y2EwMmMtNzIxZS00Y2E4LTk2ZDQtNmViMTBkOGVh MzhlMB4XDTI2MDgwMTAxMDAxMloXDTI2MTAzMDAxMDAxMlowLzEtMCsGA1UEAxMk MGFhY2I0YzQtNWVhNS00OWU3LTg1NDYtMmFhZDg1YWU3ZDA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTPNb8/37X4mbFMmM+/XKuCbc/iQkFNdrf2z KL42e9kBXLloUqb6rMe9dWPAXU0wYcD4UmqR3ArlBIr8Qa6uf7bcC+/yPKsuuzim imNHIc4z+wSwumFkZpejs8YBQQYmvY3DoHVgaVwQthVRN74CGotszeTx6O+2CTti KGBYsZRIvVWZk7iluKv1I9XR/sBpnJzICfw7YVAnhwDv5FlSr3eSD2ByL2dqWzVR 3YSc8XItjKdH85ynk3jz/s/YKKDCxYLUAmAHunUhHEHkPaBQicpDLW+eqtkOEoZq 32DdSdFZp4ZOpp7EDm09ECJ5Jl4QYr7bO99/rgVNKsHuiWdzGQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFJusf/zsuoEoXqA5N9dJwf6te0a1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85Zjlj YTAyYy03MjFlLTRjYTgtOTZkNC02ZWIxMGQ4ZWEzOGUvZWM0MmU1ZGItMTI5ZC0z ZTIxLWE2NzgtODViNGI1ZjNiYTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOWY5Y2EwMmMtNzIxZS00Y2E4LTk2 ZDQtNmViMTBkOGVhMzhlLzlmOWNhMDJjLTcyMWUtNGNhOC05NmQ0LTZlYjEwZDhl YTM4ZS5jcmwwHwYDVR0jBBgwFoAUpjsZbkwxCGd0VwVqrR0o478DyvUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85ZjljYTAyYy03MjFlLTRjYTgtOTZkNC02ZWIx MGQ4ZWEzOGUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF5DIMA4E AgACMAgDBgAmAvrAADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBpLgmCSc+Zf6T8eDFpigKYKKwcwlrW5yAx bFvx66EfkrfB6MqAtVtbxVjaj9XGnKPkqtOE3QqJ1YPX4XGGd1DdwKnGuqOTHyG/ T5UCKYJEENFg0WgR09nbztFXgvvOtjk+ymfkgi2adxSnIiBTlKqqfxVmm/5MwPxV YJONZQ8J9Jv7U577cxUGMjepoytJ7hI6d3f+K8Gu8HkKKe4JYU4evl4OVIK8V122 PQKHlMzneWDHoemkCfheWeODbefgGyRKwekh7DYEOsrIG4IaeEYwKngUI2/O1k8i PXpwmDibbZrcAn7sY4kcOO603Rz6woZWvtuiwxyzHIh/tZ61fMcp -----END CERTIFICATE-----Generated at Fri Aug 21 02:49:13 2026 by rpki-client