$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/253f385b-feb4-4b22-9447-502d6e3a69ac/8fba1e54-3f6c-3468-bd17-dcddcfa38562.roa File: 8fba1e54-3f6c-3468-bd17-dcddcfa38562.roa (raw, json) Hash identifier: JcHr1Fuq3/xfpKyE7fVE1G3F0Iy5qLwfNvTW/2bQZlE= Subject key identifier: 28:E3:3E:B7:53:5F:85:A2:D0:F3:81:D3:4A:A6:72:01:76:FE:B8:1D Certificate issuer: /CN=253f385b-feb4-4b22-9447-502d6e3a69ac Certificate serial: 010D0C9F4328584F050CC5A7273A0243A9741780 Authority key identifier: 91:4A:4D:FF:64:6A:DA:27:F3:47:72:92:0A:7D:EE:AF:4E:EE:CD:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/253f385b-feb4-4b22-9447-502d6e3a69ac.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/253f385b-feb4-4b22-9447-502d6e3a69ac/8fba1e54-3f6c-3468-bd17-dcddcfa38562.roa Signing time: Mon 31 Aug 2026 13:00:12 +0000 ROA not before: Mon 31 Aug 2026 13:00:12 +0000 ROA not after: Sun 29 Nov 2026 14:00:12 +0000 asID: 401081 IP address blocks: 23.140.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/253f385b-feb4-4b22-9447-502d6e3a69ac/253f385b-feb4-4b22-9447-502d6e3a69ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/253f385b-feb4-4b22-9447-502d6e3a69ac/253f385b-feb4-4b22-9447-502d6e3a69ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/253f385b-feb4-4b22-9447-502d6e3a69ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:05:0c:c5:a7:27:3a:02:43:a9:74:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=253f385b-feb4-4b22-9447-502d6e3a69ac Validity Not Before: Aug 31 13:00:12 2026 GMT Not After : Nov 29 14:00:12 2026 GMT Subject: CN=684ff30f-a357-4028-948d-92768e0b387a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:a7:c9:32:cd:63:ea:ea:68:ca:9a:8a:73:23: 77:f5:65:ea:6d:8e:43:ef:aa:bc:07:76:f6:b1:c5: cb:8b:e3:03:23:8c:6e:2f:4c:ad:3a:82:e5:3e:c3: 76:31:2f:55:01:26:d8:0f:d5:d5:a7:cc:5a:af:2e: 8f:01:f9:0a:4c:13:21:b5:53:0d:c0:04:c7:24:fe: 13:44:5e:5e:8a:47:24:55:78:92:3d:95:c6:85:83: d0:c3:7a:ea:72:03:ae:36:c0:fb:64:04:84:c1:ab: b4:9d:aa:c0:f7:a5:7a:3e:b9:38:9c:28:e5:90:f8: ff:d4:fd:15:63:36:34:e0:88:eb:4f:a5:32:6f:9c: 87:0d:52:77:74:68:88:63:6a:b6:7b:85:e8:c6:73: db:29:73:88:db:7e:5f:81:12:02:2d:fc:cf:ed:4c: b3:e6:36:c8:3c:d1:e7:d2:95:6d:12:ec:64:27:3b: 47:6c:86:8a:2b:1b:83:34:24:a6:22:a3:69:c0:0f: d2:58:bd:bd:85:cf:65:ed:f0:2b:0d:0e:d9:c2:86: c7:d1:f4:dc:46:38:74:dc:6f:f4:b8:8d:a7:64:82: 5d:6c:bd:a0:84:97:b0:68:52:19:ee:b7:cb:eb:16: 4f:fc:5a:11:3c:f9:e4:d0:37:45:50:9f:f6:76:fe: 3c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:E3:3E:B7:53:5F:85:A2:D0:F3:81:D3:4A:A6:72:01:76:FE:B8:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/253f385b-feb4-4b22-9447-502d6e3a69ac/8fba1e54-3f6c-3468-bd17-dcddcfa38562.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/253f385b-feb4-4b22-9447-502d6e3a69ac/253f385b-feb4-4b22-9447-502d6e3a69ac.crl X509v3 Authority Key Identifier: keyid:91:4A:4D:FF:64:6A:DA:27:F3:47:72:92:0A:7D:EE:AF:4E:EE:CD:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/253f385b-feb4-4b22-9447-502d6e3a69ac.cer sbgp-ipAddrBlock: critical IPv4: 23.140.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:7a:d3:48:8b:d4:77:49:8a:9d:39:cc:cf:0d:a8:03:10:ec: a6:f7:af:21:23:21:7b:a3:67:cf:49:ab:6d:e1:4a:64:17:55: af:8f:86:80:10:bd:d6:51:fd:3f:25:fc:d1:e3:5c:b6:96:93: 92:4e:39:1b:59:a4:fe:28:91:55:3f:c0:da:d4:f0:d9:c8:d7: 35:8f:54:ac:60:98:02:6c:22:f8:6d:a1:95:e9:75:cd:5b:e4: 6f:8d:7c:91:05:dd:80:61:df:9e:a5:18:95:e1:94:a7:03:15: 0e:1c:67:6f:65:e6:6c:01:6d:b0:6c:59:9e:54:b2:87:95:f1: ad:5a:df:e2:e1:54:11:54:b4:41:9e:88:6f:df:11:aa:d4:5d: 8e:58:ea:7a:c7:d8:27:90:43:13:99:82:be:29:f9:51:12:d1: 32:5d:9f:c3:bc:b9:3b:e0:eb:0d:4d:15:a2:1b:6a:e7:2c:b2: 18:db:7c:48:d4:52:0b:80:5f:75:35:1a:54:24:c8:21:fa:53: a2:b4:30:d2:99:94:c3:71:48:90:9d:5f:70:19:a0:e5:ad:da: 84:03:aa:e1:1e:6a:5f:cf:50:e7:c4:e6:20:20:17:95:4e:b8: ef:51:2d:26:bd:2c:b7:a7:4c:52:0c:53:6a:de:94:11:95:24: 86:e0:a7:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8FDMWnJzoCQ6l0F4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjUzZjM4NWItZmViNC00YjIyLTk0NDctNTAyZDZlM2E2 OWFjMB4XDTI2MDgzMTEzMDAxMloXDTI2MTEyOTE0MDAxMlowLzEtMCsGA1UEAxMk Njg0ZmYzMGYtYTM1Ny00MDI4LTk0OGQtOTI3NjhlMGIzODdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKfJMs1j6upoypqKcyN39WXqbY5D76q8B3b2 scXLi+MDI4xuL0ytOoLlPsN2MS9VASbYD9XVp8xary6PAfkKTBMhtVMNwATHJP4T RF5eikckVXiSPZXGhYPQw3rqcgOuNsD7ZASEwau0narA96V6Prk4nCjlkPj/1P0V YzY04IjrT6Uyb5yHDVJ3dGiIY2q2e4XoxnPbKXOI235fgRICLfzP7Uyz5jbIPNHn 0pVtEuxkJztHbIaKKxuDNCSmIqNpwA/SWL29hc9l7fArDQ7ZwobH0fTcRjh03G/0 uI2nZIJdbL2ghJewaFIZ7rfL6xZP/FoRPPnk0DdFUJ/2dv48NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCjjPrdTX4Wi0POB00qmcgF2/rgdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yNTNm Mzg1Yi1mZWI0LTRiMjItOTQ0Ny01MDJkNmUzYTY5YWMvOGZiYTFlNTQtM2Y2Yy0z NDY4LWJkMTctZGNkZGNmYTM4NTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjUzZjM4NWItZmViNC00YjIyLTk0 NDctNTAyZDZlM2E2OWFjLzI1M2YzODViLWZlYjQtNGIyMi05NDQ3LTUwMmQ2ZTNh NjlhYy5jcmwwHwYDVR0jBBgwFoAUkUpN/2Rq2ifzR3KSCn3ur07uzf8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yNTNmMzg1Yi1mZWI0LTRiMjItOTQ0Ny01MDJk NmUzYTY5YWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4wcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIx600iL1HdJip05zM8NqAMQ7Kb3ryEjIXujZ89Jq23hSmQXVa+PhoAQ vdZR/T8l/NHjXLaWk5JOORtZpP4okVU/wNrU8NnI1zWPVKxgmAJsIvhtoZXpdc1b 5G+NfJEF3YBh356lGJXhlKcDFQ4cZ29l5mwBbbBsWZ5UsoeV8a1a3+LhVBFUtEGe iG/fEarUXY5Y6nrH2CeQQxOZgr4p+VES0TJdn8O8uTvg6w1NFaIbaucsshjbfEjU UguAX3U1GlQkyCH6U6K0MNKZlMNxSJCdX3AZoOWt2oQDquEeal/PUOfE5iAgF5VO uO9RLSa9LLenTFIMU2relBGVJIbgp/c= -----END CERTIFICATE-----Generated at Sat Sep 5 04:32:09 2026 by rpki-client