$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/103e2c68-3cdd-47e4-bce0-07faaeba78e1/73e60fce-48ad-3cff-baaa-9c6c1d1d470d.roa File: 73e60fce-48ad-3cff-baaa-9c6c1d1d470d.roa (raw, json) Hash identifier: cmgVtnlC9coWaowupGtmilcliz8mjZL/iv08Q9M9jjg= Subject key identifier: 11:52:70:C0:81:24:E4:52:3C:14:17:A0:F0:39:3B:CD:93:25:C8:1A Certificate issuer: /CN=103e2c68-3cdd-47e4-bce0-07faaeba78e1 Certificate serial: 010D0C9F4328584ECD372937F3AABA0944C93480 Authority key identifier: 90:4D:9C:1B:E6:96:A5:67:07:28:6B:32:12:80:86:30:8C:AB:D5:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/103e2c68-3cdd-47e4-bce0-07faaeba78e1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/103e2c68-3cdd-47e4-bce0-07faaeba78e1/73e60fce-48ad-3cff-baaa-9c6c1d1d470d.roa Signing time: Tue 11 Aug 2026 13:00:11 +0000 ROA not before: Tue 11 Aug 2026 13:00:11 +0000 ROA not after: Mon 09 Nov 2026 14:00:11 +0000 asID: 400154 IP address blocks: 23.128.168.0/24 maxlen: 24 2606:8cc0::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/103e2c68-3cdd-47e4-bce0-07faaeba78e1/103e2c68-3cdd-47e4-bce0-07faaeba78e1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/103e2c68-3cdd-47e4-bce0-07faaeba78e1/103e2c68-3cdd-47e4-bce0-07faaeba78e1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/103e2c68-3cdd-47e4-bce0-07faaeba78e1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Aug 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cd:37:29:37:f3:aa:ba:09:44:c9:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=103e2c68-3cdd-47e4-bce0-07faaeba78e1 Validity Not Before: Aug 11 13:00:11 2026 GMT Not After : Nov 9 14:00:11 2026 GMT Subject: CN=41b3468e-a842-4139-b13d-1f87b92b1349 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:20:e7:42:74:4e:09:7b:3c:0f:5e:78:ac:57: 01:cd:2c:3f:fc:d3:1a:52:0f:d5:49:25:39:d9:5d: a6:35:f6:c5:2a:57:85:4f:61:70:06:3b:b4:92:60: 44:ca:fa:39:17:4c:ff:1c:df:e9:17:aa:0b:f4:5a: c1:8b:0f:a4:70:f0:89:ad:9b:6d:3f:cc:cc:17:88: a2:f0:23:ad:89:0d:81:b9:d9:29:38:ac:da:fd:5e: 41:b3:8c:14:a9:ff:60:2f:08:4d:8a:ec:6a:83:09: a9:f4:71:6d:31:b4:a9:93:fd:85:f3:a3:55:d9:c2: c8:04:23:50:6e:9b:b1:50:72:08:9b:ef:d3:0a:b1: c0:8c:96:52:2a:bb:78:12:42:6f:f3:89:83:11:c8: ec:ba:b7:ef:c4:59:b5:4a:d7:4e:9e:87:d0:f6:7e: 8f:6d:07:0f:3c:4b:36:f5:40:57:ed:f2:27:6c:83: 72:54:5f:62:f0:7b:2e:b1:fb:c2:6c:c9:e9:fb:28: a2:37:4b:5d:4d:c8:2d:b0:9f:84:08:a8:fc:ea:a5: 2f:75:2e:4e:7a:48:cf:b1:6b:9f:de:59:35:c1:f9: 57:2f:31:67:0f:a4:ff:ff:4f:c9:23:ac:5e:b7:52: 34:fa:d4:ad:07:1c:e6:b1:3b:06:70:d6:05:84:0f: 97:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:52:70:C0:81:24:E4:52:3C:14:17:A0:F0:39:3B:CD:93:25:C8:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/103e2c68-3cdd-47e4-bce0-07faaeba78e1/73e60fce-48ad-3cff-baaa-9c6c1d1d470d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/103e2c68-3cdd-47e4-bce0-07faaeba78e1/103e2c68-3cdd-47e4-bce0-07faaeba78e1.crl X509v3 Authority Key Identifier: keyid:90:4D:9C:1B:E6:96:A5:67:07:28:6B:32:12:80:86:30:8C:AB:D5:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/103e2c68-3cdd-47e4-bce0-07faaeba78e1.cer sbgp-ipAddrBlock: critical IPv4: 23.128.168.0/24 IPv6: 2606:8cc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:5f:35:47:06:e5:a8:1a:5c:cc:a5:e9:6e:44:ee:b7:e3:ab: f0:76:82:08:1d:28:51:0b:7f:f8:02:1f:eb:b8:c6:aa:d8:e6: 07:fc:13:07:17:c4:8d:ee:a4:c7:51:33:94:db:2f:a6:2f:1f: eb:ec:f6:f8:ac:8f:be:63:a8:ca:56:f4:f3:ec:59:73:7d:cd: 9a:05:cd:04:e1:7c:cc:a3:39:a6:a8:97:50:03:92:ae:55:14: 79:d7:2d:5b:27:70:b6:cc:12:8f:aa:b6:9b:17:d2:03:4a:f8: 85:d0:b4:4e:84:c4:c3:16:b6:2d:b9:60:e0:94:2d:c0:60:e6: f1:c9:ba:c4:63:b8:cf:27:5d:74:9f:97:e0:47:43:18:16:3d: 2b:b2:a1:24:16:da:82:f8:d6:2f:3c:81:12:62:05:e6:84:11: 08:64:46:1c:3c:d7:ff:f2:7f:04:93:92:d5:ae:24:b5:58:fa: 9b:09:d4:8f:a6:20:de:62:1f:20:36:33:17:cc:d5:a6:fa:da: 6c:5f:b0:c2:07:ba:72:59:1c:ed:17:ea:3d:ed:b0:4f:33:66: da:cb:ab:e8:32:90:a3:6f:3b:89:2c:47:81:5b:e9:57:58:38: c9:ab:70:bf:d5:e3:94:bd:07:d6:22:03:fe:9d:27:91:d7:46: b4:c8:74:08 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE7NNyk386q6CUTJNIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTAzZTJjNjgtM2NkZC00N2U0LWJjZTAtMDdmYWFlYmE3 OGUxMB4XDTI2MDgxMTEzMDAxMVoXDTI2MTEwOTE0MDAxMVowLzEtMCsGA1UEAxMk NDFiMzQ2OGUtYTg0Mi00MTM5LWIxM2QtMWY4N2I5MmIxMzQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSDnQnROCXs8D154rFcBzSw//NMaUg/VSSU5 2V2mNfbFKleFT2FwBju0kmBEyvo5F0z/HN/pF6oL9FrBiw+kcPCJrZttP8zMF4ii 8COtiQ2BudkpOKza/V5Bs4wUqf9gLwhNiuxqgwmp9HFtMbSpk/2F86NV2cLIBCNQ bpuxUHIIm+/TCrHAjJZSKrt4EkJv84mDEcjsurfvxFm1StdOnofQ9n6PbQcPPEs2 9UBX7fInbINyVF9i8HsusfvCbMnp+yiiN0tdTcgtsJ+ECKj86qUvdS5OekjPsWuf 3lk1wflXLzFnD6T//0/JI6xet1I0+tStBxzmsTsGcNYFhA+XMwIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFBFScMCBJORSPBQXoPA5O82TJcgaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xMDNl MmM2OC0zY2RkLTQ3ZTQtYmNlMC0wN2ZhYWViYTc4ZTEvNzNlNjBmY2UtNDhhZC0z Y2ZmLWJhYWEtOWM2YzFkMWQ0NzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTAzZTJjNjgtM2NkZC00N2U0LWJj ZTAtMDdmYWFlYmE3OGUxLzEwM2UyYzY4LTNjZGQtNDdlNC1iY2UwLTA3ZmFhZWJh NzhlMS5jcmwwHwYDVR0jBBgwFoAUkE2cG+aWpWcHKGsyEoCGMIyr1S0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xMDNlMmM2OC0zY2RkLTQ3ZTQtYmNlMC0wN2Zh YWViYTc4ZTEuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF4CoMA0E AgACMAcDBQAmBozAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAHFfNUcG5agaXMyl6W5E7rfjq/B2gggdKFEL f/gCH+u4xqrY5gf8EwcXxI3upMdRM5TbL6YvH+vs9visj75jqMpW9PPsWXN9zZoF zQThfMyjOaaol1ADkq5VFHnXLVsncLbMEo+qtpsX0gNK+IXQtE6ExMMWti25YOCU LcBg5vHJusRjuM8nXXSfl+BHQxgWPSuyoSQW2oL41i88gRJiBeaEEQhkRhw81//y fwSTktWuJLVY+psJ1I+mIN5iHyA2MxfM1ab62mxfsMIHunJZHO0X6j3tsE8zZtrL q+gykKNvO4ksR4Fb6VdYOMmrcL/V45S9B9YiA/6dJ5HXRrTIdAg= -----END CERTIFICATE-----Generated at Thu Aug 20 00:05:16 2026 by rpki-client