$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b0bbd7e-cecf-4f12-9009-048c0cfbf306/9a1a3249-71dc-37a2-a7ed-633d2f6d1a2e.roa File: 9a1a3249-71dc-37a2-a7ed-633d2f6d1a2e.roa (raw, json) Hash identifier: PKrD80+KIU7vue8rnMVzAqxoFVUeRljBjHWhiPEGfpU= Subject key identifier: D7:66:9F:50:F1:88:E2:80:78:1C:88:DF:7D:F6:80:D1:08:4C:1C:21 Certificate issuer: /CN=3b0bbd7e-cecf-4f12-9009-048c0cfbf306 Certificate serial: 010D0C9F4328584EA79398A27AE028E1AA5F5C80 Authority key identifier: 63:DF:B2:A3:AB:99:A0:94:A1:BA:E8:9D:F9:47:FD:12:28:C1:AC:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b0bbd7e-cecf-4f12-9009-048c0cfbf306.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b0bbd7e-cecf-4f12-9009-048c0cfbf306/9a1a3249-71dc-37a2-a7ed-633d2f6d1a2e.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 399870 IP address blocks: 23.137.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b0bbd7e-cecf-4f12-9009-048c0cfbf306/3b0bbd7e-cecf-4f12-9009-048c0cfbf306.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b0bbd7e-cecf-4f12-9009-048c0cfbf306/3b0bbd7e-cecf-4f12-9009-048c0cfbf306.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b0bbd7e-cecf-4f12-9009-048c0cfbf306.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:93:98:a2:7a:e0:28:e1:aa:5f:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b0bbd7e-cecf-4f12-9009-048c0cfbf306 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=b06831c1-2963-4b1d-b49c-e9be3a5038b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:07:cc:00:ef:03:fc:5a:9c:0c:d1:63:82:5e: b4:3a:5d:7e:95:e5:25:f7:f6:82:ce:78:fd:f7:76: f1:dc:48:18:bc:02:d0:5d:ad:be:70:b7:ec:9d:36: f0:27:a9:59:ba:d0:99:ae:8d:d2:83:9c:f8:ea:3d: f9:04:1c:89:5a:7c:25:7f:50:1b:01:95:ee:bc:e7: 86:b0:6a:c8:64:b3:04:9c:69:4b:b8:99:6e:35:2f: 3b:17:11:c4:a2:77:aa:a6:d6:31:bf:ee:9a:3d:44: 1a:d7:9b:49:73:e6:e0:38:7d:cc:06:20:00:2a:1b: 4b:e7:07:e1:93:c0:83:b3:64:3c:9e:a2:48:3e:cd: 12:38:e9:03:73:b3:d3:b8:bb:f6:68:6a:65:be:8d: 1a:06:51:bc:72:b9:36:7a:e5:50:3d:fe:7d:40:f6: e9:1b:20:f9:5c:30:23:e0:dd:58:58:7e:d8:27:5b: be:7c:8e:03:36:b9:8f:4c:b2:a5:09:84:6c:38:27: ca:80:e0:d1:cd:76:9b:f4:db:ff:87:bc:95:18:a1: 93:a3:53:c0:de:35:cc:72:69:18:84:8d:e8:41:a9: d8:d6:48:ed:9c:a5:5b:d7:d5:f5:a4:41:96:2c:a7: c3:9f:50:75:f6:18:aa:84:83:bf:14:10:55:4d:d5: bd:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:66:9F:50:F1:88:E2:80:78:1C:88:DF:7D:F6:80:D1:08:4C:1C:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b0bbd7e-cecf-4f12-9009-048c0cfbf306/9a1a3249-71dc-37a2-a7ed-633d2f6d1a2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b0bbd7e-cecf-4f12-9009-048c0cfbf306/3b0bbd7e-cecf-4f12-9009-048c0cfbf306.crl X509v3 Authority Key Identifier: keyid:63:DF:B2:A3:AB:99:A0:94:A1:BA:E8:9D:F9:47:FD:12:28:C1:AC:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b0bbd7e-cecf-4f12-9009-048c0cfbf306.cer sbgp-ipAddrBlock: critical IPv4: 23.137.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:a7:eb:13:09:56:a6:cc:02:5e:87:87:b8:03:c6:29:6b:48: d7:dc:c6:4e:8c:39:01:f7:74:ee:1f:93:02:67:a4:ab:19:1b: 72:cb:c3:4c:40:78:a2:42:81:29:d6:03:c0:61:40:76:c8:6a: 9e:4f:d7:30:20:67:14:62:ec:0a:c1:42:9d:fd:a2:5f:2c:6f: b7:5a:8a:25:d8:0e:1a:2e:3a:cb:62:9a:80:7e:e5:23:44:18: 63:7d:e1:5a:14:62:c1:f5:59:76:69:68:77:ad:08:bd:8c:b0: 6e:78:01:3b:04:e1:7a:e5:75:d1:cf:98:87:c4:02:fa:68:86: e1:73:d2:b9:c7:55:cb:e9:f4:1e:9b:19:1c:10:c7:7c:ae:e7: f7:1f:eb:3e:52:c3:c0:af:d4:a8:a9:05:48:ca:5b:87:4c:ca: b5:6f:71:05:fb:72:48:be:bb:81:06:c1:fb:16:0e:65:7c:84: 92:84:f6:de:73:ab:1f:d9:9f:f6:60:c3:e1:ac:f7:bd:89:69: 2c:2f:6b:56:99:3d:9c:46:28:66:82:3f:ac:8e:62:2b:50:36: 41:b6:4d:fb:35:fe:be:f0:b7:6b:6b:bf:a7:31:4c:29:07:fb: de:98:d6:5f:cb:13:d9:d1:84:cf:08:2b:27:22:ef:e0:10:73: ac:14:6e:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nk5iieuAo4apfXIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2IwYmJkN2UtY2VjZi00ZjEyLTkwMDktMDQ4YzBjZmJm MzA2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YjA2ODMxYzEtMjk2My00YjFkLWI0OWMtZTliZTNhNTAzOGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5QfMAO8D/FqcDNFjgl60Ol1+leUl9/aCznj9 93bx3EgYvALQXa2+cLfsnTbwJ6lZutCZro3Sg5z46j35BByJWnwlf1AbAZXuvOeG sGrIZLMEnGlLuJluNS87FxHEoneqptYxv+6aPUQa15tJc+bgOH3MBiAAKhtL5wfh k8CDs2Q8nqJIPs0SOOkDc7PTuLv2aGplvo0aBlG8crk2euVQPf59QPbpGyD5XDAj 4N1YWH7YJ1u+fI4DNrmPTLKlCYRsOCfKgODRzXab9Nv/h7yVGKGTo1PA3jXMcmkY hI3oQanY1kjtnKVb19X1pEGWLKfDn1B19hiqhIO/FBBVTdW9zQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNdmn1DxiOKAeByI3332gNEITBwhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zYjBi YmQ3ZS1jZWNmLTRmMTItOTAwOS0wNDhjMGNmYmYzMDYvOWExYTMyNDktNzFkYy0z N2EyLWE3ZWQtNjMzZDJmNmQxYTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2IwYmJkN2UtY2VjZi00ZjEyLTkw MDktMDQ4YzBjZmJmMzA2LzNiMGJiZDdlLWNlY2YtNGYxMi05MDA5LTA0OGMwY2Zi ZjMwNi5jcmwwHwYDVR0jBBgwFoAUY9+yo6uZoJShuuid+Uf9EijBrBwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zYjBiYmQ3ZS1jZWNmLTRmMTItOTAwOS0wNDhj MGNmYmYzMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4mUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACn6xMJVqbMAl6Hh7gDxilrSNfcxk6MOQH3dO4fkwJnpKsZG3LLw0xA eKJCgSnWA8BhQHbIap5P1zAgZxRi7ArBQp39ol8sb7daiiXYDhouOstimoB+5SNE GGN94VoUYsH1WXZpaHetCL2MsG54ATsE4XrlddHPmIfEAvpohuFz0rnHVcvp9B6b GRwQx3yu5/cf6z5Sw8Cv1KipBUjKW4dMyrVvcQX7cki+u4EGwfsWDmV8hJKE9t5z qx/Zn/Zgw+Gs972JaSwva1aZPZxGKGaCP6yOYitQNkG2Tfs1/r7wt2trv6cxTCkH +96Y1l/LE9nRhM8IKyci7+AQc6wUbn0= -----END CERTIFICATE-----Generated at Tue Sep 1 04:52:03 2026 by rpki-client