$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3cb207a6-bbe6-32b2-89d0-9e50e4ea56d9.roa File: 3cb207a6-bbe6-32b2-89d0-9e50e4ea56d9.roa (raw, json) Hash identifier: Z/At/fEDbTwX8j2YW289l1cEhFsBEATO1cwVY6Hf74c= Subject key identifier: 54:12:14:9F:43:2C:57:64:46:92:AC:E8:64:71:56:27:1B:36:76:8F Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584E5BAF61BDCA0578B6C554AA00 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3cb207a6-bbe6-32b2-89d0-9e50e4ea56d9.roa Signing time: Wed 01 Jul 2026 21:00:12 +0000 ROA not before: Wed 01 Jul 2026 21:00:12 +0000 ROA not after: Tue 29 Sep 2026 21:00:12 +0000 asID: 401783 IP address blocks: 173.232.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5b:af:61:bd:ca:05:78:b6:c5:54:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Jul 1 21:00:12 2026 GMT Not After : Sep 29 21:00:12 2026 GMT Subject: CN=232dc4d0-39a5-4584-adc3-fca15b69b490 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:48:1e:0d:7b:8e:5e:fe:1f:e7:32:c3:bb:8e: ea:9a:5c:83:11:fb:47:71:da:ad:3b:d7:28:0d:f4: 26:4d:53:5f:e4:2b:75:61:ed:6b:f3:c6:99:81:2e: 1d:f8:97:cb:b7:61:d2:e2:5b:e6:23:f0:0e:d5:20: a9:4d:f9:f7:3c:c8:c0:fe:bb:39:67:a6:d6:85:a2: 4e:1e:88:bd:0e:3e:db:52:54:6e:f9:da:c4:c3:79: fc:a0:d8:ba:73:09:c3:79:51:a8:28:1d:a8:63:c7: 6f:39:dc:f0:b6:03:b5:e1:48:f4:34:4f:a2:7c:93: 0a:97:fd:1e:0d:51:e0:d3:be:81:c7:67:17:36:9d: b7:85:5b:2e:a0:ed:d9:83:2c:54:13:1e:a4:f9:db: e4:45:ee:d6:13:a9:4b:49:f4:7b:90:e2:b3:39:d9: 5b:8e:ce:d5:4b:03:1a:dd:1d:79:33:03:71:1e:8e: 36:a6:e4:ea:39:6f:08:be:76:61:7b:83:c9:55:86: 1b:88:ab:21:8b:9e:82:68:0a:6c:87:e7:a8:19:93: 98:bd:f3:2f:02:85:bd:4d:14:b4:c5:5c:c2:4a:23: ba:fb:6c:e8:c1:ee:a0:5b:d2:12:ca:be:5e:d7:be: 0a:9f:1f:c6:0c:7c:a6:2d:05:52:79:c5:51:c1:c2: bc:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:12:14:9F:43:2C:57:64:46:92:AC:E8:64:71:56:27:1B:36:76:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3cb207a6-bbe6-32b2-89d0-9e50e4ea56d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 173.232.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:92:35:b8:4f:fd:0d:d0:e6:44:0c:9e:6b:38:3d:94:59:c5: 08:2f:98:42:2d:8a:3b:2e:12:49:2d:3b:1d:c8:c6:3d:f7:94: a4:fb:60:e1:dc:eb:37:ce:c8:63:ef:72:bd:30:e3:9d:29:a3: 93:ae:70:ec:6f:b9:37:f3:4d:c2:92:9e:1b:96:39:10:e1:3b: 67:6f:25:7c:e0:aa:9d:d2:1f:1d:6e:4a:fa:4d:11:7a:83:99: 8b:86:7f:49:38:15:48:f4:ff:b6:80:71:b5:a2:df:4c:88:b4: 89:fc:81:bf:7b:e1:3c:e3:d2:3e:d5:16:41:0a:df:e0:d0:cb: c4:26:0e:f2:4d:12:ac:f5:e4:70:33:5e:9d:ae:db:73:3a:c3: e5:e0:67:0e:7f:22:11:75:12:81:73:ef:06:1c:66:87:56:e8: c2:54:d8:28:0e:43:74:03:64:4e:cf:20:89:26:7c:46:1e:b0: 71:c1:f3:0a:a5:06:a5:92:96:a4:a6:4e:b0:24:7c:e6:1c:cb: d7:ad:57:6e:f4:70:95:35:f1:2d:c6:94:ef:bc:ba:77:8d:9d: 42:11:88:98:fd:3a:fb:bf:25:fa:b7:24:ac:92:55:1c:ca:55: a6:15:9a:92:46:0f:6f:4f:af:d2:a2:95:d7:86:f2:c9:26:6f: f8:af:b3:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5br2G9ygV4tsVUqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDcwMTIxMDAxMloXDTI2MDkyOTIxMDAxMlowLzEtMCsGA1UEAxMk MjMyZGM0ZDAtMzlhNS00NTg0LWFkYzMtZmNhMTViNjliNDkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEgeDXuOXv4f5zLDu47qmlyDEftHcdqtO9co DfQmTVNf5Ct1Ye1r88aZgS4d+JfLt2HS4lvmI/AO1SCpTfn3PMjA/rs5Z6bWhaJO Hoi9Dj7bUlRu+drEw3n8oNi6cwnDeVGoKB2oY8dvOdzwtgO14Uj0NE+ifJMKl/0e DVHg076Bx2cXNp23hVsuoO3ZgyxUEx6k+dvkRe7WE6lLSfR7kOKzOdlbjs7VSwMa 3R15MwNxHo42puTqOW8IvnZhe4PJVYYbiKshi56CaApsh+eoGZOYvfMvAoW9TRS0 xVzCSiO6+2zowe6gW9ISyr5e174Knx/GDHymLQVSecVRwcK8RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFQSFJ9DLFdkRpKs6GRxVicbNnaPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvM2NiMjA3YTYtYmJlNi0z MmIyLTg5ZDAtOWU1MGU0ZWE1NmQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAregXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFiSNbhP/Q3Q5kQMnms4PZRZxQgvmEItijsuEkktOx3Ixj33lKT7YOHc 6zfOyGPvcr0w450po5OucOxvuTfzTcKSnhuWORDhO2dvJXzgqp3SHx1uSvpNEXqD mYuGf0k4FUj0/7aAcbWi30yItIn8gb974Tzj0j7VFkEK3+DQy8QmDvJNEqz15HAz Xp2u23M6w+XgZw5/IhF1EoFz7wYcZodW6MJU2CgOQ3QDZE7PIIkmfEYesHHB8wql BqWSlqSmTrAkfOYcy9etV270cJU18S3GlO+8uneNnUIRiJj9Ovu/Jfq3JKySVRzK VaYVmpJGD29Pr9KildeG8skmb/ivs9k= -----END CERTIFICATE-----Generated at Tue Jul 14 15:25:16 2026 by rpki-client