$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/4504c39c-22d1-3edb-b2aa-7cf0cf6c6a22.roa File: 4504c39c-22d1-3edb-b2aa-7cf0cf6c6a22.roa (raw, json) Hash identifier: ai0v+PAWWJojp8BKNJLRQ9k0ofH4G+EmGX/pOULOcoY= Subject key identifier: C8:F5:53:80:26:1C:6D:A0:2F:40:18:55:33:3B:6A:AB:DB:FF:62:6E Certificate issuer: /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Certificate serial: 010D0C9F4328584E7BCA2DF1EDDF936DE06FE700 Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/4504c39c-22d1-3edb-b2aa-7cf0cf6c6a22.roa Signing time: Mon 13 Jul 2026 09:00:12 +0000 ROA not before: Mon 13 Jul 2026 09:00:12 +0000 ROA not after: Sun 11 Oct 2026 09:00:12 +0000 asID: 26548 IP address blocks: 23.156.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7b:ca:2d:f1:ed:df:93:6d:e0:6f:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Validity Not Before: Jul 13 09:00:12 2026 GMT Not After : Oct 11 09:00:12 2026 GMT Subject: CN=fcf798cf-512d-4e34-8596-35309b7a919c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:19:d3:d4:7b:da:0f:37:30:08:fa:ca:0f:8f: 7c:d1:a9:1a:ab:61:96:a7:70:0f:9a:64:8c:3d:d3: c4:29:45:1f:69:94:33:e9:7f:7b:ee:5d:a4:42:f9: 45:f7:2b:93:13:d0:d8:53:91:4c:dc:b5:72:30:a6: 3a:8a:94:b4:24:79:db:e1:50:31:f1:31:5f:67:c4: 54:91:a7:12:98:3d:ca:4d:71:32:c0:c2:7b:b5:62: 10:26:44:dc:92:cd:0d:90:1f:20:df:8d:67:23:6e: f2:7a:f5:53:93:42:e8:61:a2:76:b4:31:14:4c:24: 4c:d3:38:5d:bf:c1:a2:4c:0c:be:fd:52:94:ad:80: f7:c3:e8:97:db:81:82:85:be:b6:b0:d2:1a:bc:9d: 38:1f:13:40:8e:71:f3:a4:ff:b2:e8:2c:22:38:24: 64:28:a1:2f:9a:c4:83:0d:2d:cc:1d:66:1e:ba:09: d7:fa:da:fc:ad:dd:6d:5f:19:57:72:38:c7:ca:87: a7:e6:2e:dd:aa:e0:1f:98:f2:5b:ec:13:49:1d:54: 17:27:0d:de:51:3d:a1:29:5c:cd:34:47:98:33:35: c8:d6:eb:e2:7c:c4:2f:b6:06:5e:3a:53:e8:a4:78: 63:77:a1:03:0e:8a:d4:a7:fe:31:e3:37:45:f7:ac: 0a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:F5:53:80:26:1C:6D:A0:2F:40:18:55:33:3B:6A:AB:DB:FF:62:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/4504c39c-22d1-3edb-b2aa-7cf0cf6c6a22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl X509v3 Authority Key Identifier: keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer sbgp-ipAddrBlock: critical IPv4: 23.156.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:a6:55:1a:3a:79:66:57:3f:d1:50:66:dc:77:57:cc:96:69: c3:21:12:1e:01:96:0f:19:68:dd:c0:7f:e8:38:2f:8b:70:e6: b8:7f:40:93:90:97:4a:9c:36:91:81:40:d9:8a:42:26:0d:73: 12:44:2b:64:0e:62:22:80:cd:83:62:77:cd:eb:e5:48:03:f2: 3a:9e:22:9f:60:6b:a6:19:79:e3:19:cf:02:31:53:0b:30:b4: 76:de:c9:32:47:e7:6a:40:7d:9b:a1:80:ba:da:c7:ea:c4:03: f7:7d:6c:e5:df:27:c2:bb:26:40:1e:91:35:9a:92:95:6f:7f: 07:05:7b:ff:b6:1d:12:21:9a:55:d1:23:a2:fc:4c:8c:fd:d9: 09:53:9e:7d:96:38:67:37:a3:b6:68:7a:21:87:2d:6c:f0:ec: aa:19:f4:8f:1b:e4:01:62:8d:97:d5:56:33:5d:31:e6:66:64: 96:12:13:13:8a:3a:be:32:e1:61:9d:e2:94:d9:d0:10:52:52: 80:27:6c:58:e2:89:bc:7e:13:59:0a:ca:bf:7a:94:e9:74:b7: f4:2b:70:61:d3:f3:27:c8:d8:ca:2f:d7:4c:83:a5:d0:38:49: fe:21:7d:08:cf:ba:36:60:17:81:f3:53:3f:11:52:cc:e8:e0: b0:d6:20:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE57yi3x7d+TbeBv5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWMxOWEyNDYtZDlmYS00ODFhLWE0ZDctMDEwYWY4YzEz MmIzMB4XDTI2MDcxMzA5MDAxMloXDTI2MTAxMTA5MDAxMlowLzEtMCsGA1UEAxMk ZmNmNzk4Y2YtNTEyZC00ZTM0LTg1OTYtMzUzMDliN2E5MTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxnT1HvaDzcwCPrKD4980akaq2GWp3APmmSM PdPEKUUfaZQz6X977l2kQvlF9yuTE9DYU5FM3LVyMKY6ipS0JHnb4VAx8TFfZ8RU kacSmD3KTXEywMJ7tWIQJkTcks0NkB8g341nI27yevVTk0LoYaJ2tDEUTCRM0zhd v8GiTAy+/VKUrYD3w+iX24GChb62sNIavJ04HxNAjnHzpP+y6CwiOCRkKKEvmsSD DS3MHWYeugnX+tr8rd1tXxlXcjjHyoen5i7dquAfmPJb7BNJHVQXJw3eUT2hKVzN NEeYMzXI1uvifMQvtgZeOlPopHhjd6EDDorUp/4x4zdF96wK5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMj1U4AmHG2gL0AYVTM7aqvb/2JuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81YzE5 YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBhZjhjMTMyYjMvNDUwNGMzOWMtMjJkMS0z ZWRiLWIyYWEtN2NmMGNmNmM2YTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWMxOWEyNDYtZDlmYS00ODFhLWE0 ZDctMDEwYWY4YzEzMmIzLzVjMTlhMjQ2LWQ5ZmEtNDgxYS1hNGQ3LTAxMGFmOGMx MzJiMy5jcmwwHwYDVR0jBBgwFoAUGBmr0BGL/MK+/l1zc0BDuuWTrnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81YzE5YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBh ZjhjMTMyYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5yIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMOmVRo6eWZXP9FQZtx3V8yWacMhEh4Blg8ZaN3Af+g4L4tw5rh/QJOQ l0qcNpGBQNmKQiYNcxJEK2QOYiKAzYNid83r5UgD8jqeIp9ga6YZeeMZzwIxUwsw tHbeyTJH52pAfZuhgLrax+rEA/d9bOXfJ8K7JkAekTWakpVvfwcFe/+2HRIhmlXR I6L8TIz92QlTnn2WOGc3o7ZoeiGHLWzw7KoZ9I8b5AFijZfVVjNdMeZmZJYSExOK Or4y4WGd4pTZ0BBSUoAnbFjiibx+E1kKyr96lOl0t/QrcGHT8yfI2Mov10yDpdA4 Sf4hfQjPujZgF4HzUz8RUszo4LDWINg= -----END CERTIFICATE-----Generated at Tue Jul 21 01:32:50 2026 by rpki-client