$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/aa578848-2b75-3b39-9243-d445c17b3680.roa File: aa578848-2b75-3b39-9243-d445c17b3680.roa (raw, json) Hash identifier: eATtxglWPGllSoYUEJwWqhr9gPo9YqMh9FBhE5eam/c= Subject key identifier: 6C:5A:4B:7B:FC:1A:F6:5E:38:BA:54:9D:96:84:1B:43:44:10:22:CB Certificate issuer: /CN=c966e577-4964-41bf-aced-835168bef4f1 Certificate serial: 010D0C9F4328584E4AEF4D32067CA8FA21AF2300 Authority key identifier: 2D:0D:DA:44:49:F1:1D:E6:DF:F1:97:47:F4:A5:7D:8F:1E:8A:71:5D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/aa578848-2b75-3b39-9243-d445c17b3680.roa Signing time: Thu 25 Jun 2026 21:00:12 +0000 ROA not before: Thu 25 Jun 2026 21:00:12 +0000 ROA not after: Wed 23 Sep 2026 21:00:12 +0000 asID: 395400 IP address blocks: 168.123.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/c966e577-4964-41bf-aced-835168bef4f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/c966e577-4964-41bf-aced-835168bef4f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Jul 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4a:ef:4d:32:06:7c:a8:fa:21:af:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c966e577-4964-41bf-aced-835168bef4f1 Validity Not Before: Jun 25 21:00:12 2026 GMT Not After : Sep 23 21:00:12 2026 GMT Subject: CN=3321596a-344b-4dd1-945f-f1c6de8e3ba7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b6:82:c3:b2:7c:c9:2d:e0:eb:d3:13:10:0a: a3:cb:c5:e3:b1:bd:1d:35:ce:6a:f0:c1:02:7f:65: f8:5f:9e:e1:72:ec:f1:e0:50:b7:05:ef:8d:30:b5: 21:12:69:ac:5e:cd:26:7d:97:68:4f:05:a9:bf:ab: 52:fb:52:18:9c:2f:97:b4:29:3b:e2:eb:3f:be:b3: bf:64:c5:98:2b:31:80:80:9d:54:59:cd:dc:cf:ad: 60:ac:ac:5f:cb:47:df:29:72:b5:56:28:3d:11:00: 1c:c6:34:31:7d:41:13:23:ef:98:9b:1f:3c:b7:a9: 73:b7:4e:60:d9:94:d5:4d:79:ee:5b:96:bf:b9:ac: 70:1e:54:f0:b2:4c:0b:24:30:56:66:97:8f:a7:db: 0c:18:0b:e6:23:cb:f0:1d:e4:7e:65:22:51:ff:f5: 94:d8:fd:a1:bc:73:da:d5:0f:43:a2:2b:56:04:cc: e6:2d:4c:81:a0:32:64:e7:78:28:f5:f5:41:ba:a4: eb:4c:0d:a1:39:d5:26:de:0a:e5:bb:27:2c:5f:e9: 54:86:bd:1f:b3:14:2c:38:80:8a:dc:fe:22:14:01: 8e:46:7c:3e:8e:f7:87:d4:89:c6:74:4d:73:22:76: 1b:89:9f:52:d8:94:69:74:0b:e7:bc:0c:eb:85:72: 04:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:5A:4B:7B:FC:1A:F6:5E:38:BA:54:9D:96:84:1B:43:44:10:22:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/aa578848-2b75-3b39-9243-d445c17b3680.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/c966e577-4964-41bf-aced-835168bef4f1.crl X509v3 Authority Key Identifier: keyid:2D:0D:DA:44:49:F1:1D:E6:DF:F1:97:47:F4:A5:7D:8F:1E:8A:71:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1.cer sbgp-ipAddrBlock: critical IPv4: 168.123.132.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:84:9d:55:6d:fe:34:95:53:96:c9:16:76:88:98:6b:a1:c2: e6:80:b8:71:72:0c:ff:b3:83:fc:8b:56:56:37:0c:69:84:59: 84:6d:cf:6b:5c:1c:b2:6e:c9:32:34:a4:34:af:bd:43:13:21: 71:0e:56:43:c9:5b:de:e6:9c:55:de:e5:d2:1c:f1:b2:40:0d: a5:b8:81:30:90:d5:3f:b0:bb:f3:ef:eb:8b:01:f6:26:02:21: 3e:e7:27:d0:4e:2b:ac:66:28:8d:d7:da:34:2a:b1:52:05:31: bc:98:94:dd:60:88:22:2e:d5:98:47:e7:a0:f9:a8:c2:6d:b6: 21:f8:aa:f5:61:2d:06:a0:c3:91:e8:39:3c:e9:e1:28:fa:62: 85:61:f1:59:0f:21:95:55:4a:2a:e8:13:bf:ea:68:99:c9:2c: 00:a7:61:ea:63:34:d0:4e:f5:19:60:47:d5:f2:2e:1f:4d:07: fe:bc:71:8e:da:f8:66:08:0a:1e:f5:7c:d6:b2:a7:c2:1f:d1: 34:cd:c6:5b:95:c8:19:8c:83:28:c4:8d:1b:34:6b:d2:58:d4: 9f:24:4c:3f:d5:82:c2:a2:f0:cd:af:21:06:aa:de:39:2e:87: 08:96:fd:d6:4b:33:4c:d5:ae:0a:d0:11:4e:a6:ae:86:d5:39: 91:83:9e:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5K700yBnyo+iGvIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzk2NmU1NzctNDk2NC00MWJmLWFjZWQtODM1MTY4YmVm NGYxMB4XDTI2MDYyNTIxMDAxMloXDTI2MDkyMzIxMDAxMlowLzEtMCsGA1UEAxMk MzMyMTU5NmEtMzQ0Yi00ZGQxLTk0NWYtZjFjNmRlOGUzYmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuraCw7J8yS3g69MTEAqjy8Xjsb0dNc5q8MEC f2X4X57hcuzx4FC3Be+NMLUhEmmsXs0mfZdoTwWpv6tS+1IYnC+XtCk74us/vrO/ ZMWYKzGAgJ1UWc3cz61grKxfy0ffKXK1Vig9EQAcxjQxfUETI++Ymx88t6lzt05g 2ZTVTXnuW5a/uaxwHlTwskwLJDBWZpePp9sMGAvmI8vwHeR+ZSJR//WU2P2hvHPa 1Q9DoitWBMzmLUyBoDJk53go9fVBuqTrTA2hOdUm3grluycsX+lUhr0fsxQsOICK 3P4iFAGORnw+jveH1InGdE1zInYbiZ9S2JRpdAvnvAzrhXIEoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGxaS3v8GvZeOLpUnZaEG0NEECLLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jOTY2 ZTU3Ny00OTY0LTQxYmYtYWNlZC04MzUxNjhiZWY0ZjEvYWE1Nzg4NDgtMmI3NS0z YjM5LTkyNDMtZDQ0NWMxN2IzNjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzk2NmU1NzctNDk2NC00MWJmLWFj ZWQtODM1MTY4YmVmNGYxL2M5NjZlNTc3LTQ5NjQtNDFiZi1hY2VkLTgzNTE2OGJl ZjRmMS5jcmwwHwYDVR0jBBgwFoAULQ3aREnxHebf8ZdH9KV9jx6KcV0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jOTY2ZTU3Ny00OTY0LTQxYmYtYWNlZC04MzUx NjhiZWY0ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqHuEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHeEnVVt/jSVU5bJFnaImGuhwuaAuHFyDP+zg/yLVlY3DGmEWYRtz2tc HLJuyTI0pDSvvUMTIXEOVkPJW97mnFXe5dIc8bJADaW4gTCQ1T+wu/Pv64sB9iYC IT7nJ9BOK6xmKI3X2jQqsVIFMbyYlN1giCIu1ZhH56D5qMJttiH4qvVhLQagw5Ho OTzp4Sj6YoVh8VkPIZVVSiroE7/qaJnJLACnYepjNNBO9RlgR9XyLh9NB/68cY7a +GYICh71fNayp8If0TTNxluVyBmMgyjEjRs0a9JY1J8kTD/VgsKi8M2vIQaq3jku hwiW/dZLM0zVrgrQEU6mrobVOZGDnuo= -----END CERTIFICATE-----Generated at Mon Jul 6 22:17:58 2026 by rpki-client