$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/480acd92-824c-4b47-a714-6cab20e4ce2d/2b7cfae4-f410-3e89-b8d3-0485208e46bf.roa File: 2b7cfae4-f410-3e89-b8d3-0485208e46bf.roa (raw, json) Hash identifier: C9jurppu0pAPJF7VQ7icGaKWKH9neCvhlg4Xit/jVAs= Subject key identifier: 37:C7:D7:80:A5:C9:E2:36:75:FA:21:C9:7E:4C:06:7C:B7:3B:48:D9 Certificate issuer: /CN=480acd92-824c-4b47-a714-6cab20e4ce2d Certificate serial: 010D0C9F4328584EC4D7115D0D44E86046AE0A80 Authority key identifier: B7:D4:E2:DF:B4:FF:89:0E:E8:B3:DA:D9:E3:E6:8D:19:C3:F8:2B:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/480acd92-824c-4b47-a714-6cab20e4ce2d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/480acd92-824c-4b47-a714-6cab20e4ce2d/2b7cfae4-f410-3e89-b8d3-0485208e46bf.roa Signing time: Sat 08 Aug 2026 13:00:11 +0000 ROA not before: Sat 08 Aug 2026 13:00:11 +0000 ROA not after: Fri 06 Nov 2026 14:00:11 +0000 asID: 7018 IP address blocks: 23.129.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/480acd92-824c-4b47-a714-6cab20e4ce2d/480acd92-824c-4b47-a714-6cab20e4ce2d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/480acd92-824c-4b47-a714-6cab20e4ce2d/480acd92-824c-4b47-a714-6cab20e4ce2d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/480acd92-824c-4b47-a714-6cab20e4ce2d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c4:d7:11:5d:0d:44:e8:60:46:ae:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=480acd92-824c-4b47-a714-6cab20e4ce2d Validity Not Before: Aug 8 13:00:11 2026 GMT Not After : Nov 6 14:00:11 2026 GMT Subject: CN=830f6c3e-674d-4945-998c-cae714557806 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:8b:3c:21:ba:3e:c0:2b:a3:06:e8:d2:8d:bb: f3:37:24:67:99:a5:51:ff:cb:be:fa:ef:f8:9b:38: e4:8b:19:2c:12:df:10:5e:f4:91:75:9e:c1:e3:4f: 50:b2:14:49:40:9a:ca:0c:47:25:8b:e8:e7:a2:b8: ec:8e:de:82:e8:cc:7c:3d:61:d0:ea:01:c2:57:08: c8:41:ac:2c:ad:11:3d:69:12:be:e0:47:1e:9d:b0: 7e:5f:d9:7a:c2:7e:34:28:b7:16:15:59:7b:77:40: 93:ac:4a:f1:ca:b5:a4:d7:21:08:29:6c:86:2f:1e: eb:54:48:8a:42:42:48:ee:31:9c:f3:fb:0c:db:a7: 48:39:a2:37:73:d9:d2:f5:7b:85:4a:86:79:7e:c0: 1f:34:45:88:a2:d0:87:cc:dc:a4:3c:5a:04:08:16: 61:53:ca:c4:2e:c7:e8:d1:83:68:f5:bf:e4:66:72: 1c:c1:2f:12:36:81:6a:96:46:f7:90:09:4b:ac:59: 8f:0d:98:e1:1b:47:21:a3:59:bd:3e:9e:7b:82:49: 6f:d8:a7:1f:cc:5a:ee:50:bf:90:99:26:51:e8:90: 65:b1:c6:3d:e4:32:dd:36:bb:37:fd:f5:dd:ea:b0: e2:d9:ce:d0:1c:3b:66:78:09:5c:2a:9a:35:29:04: 45:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:C7:D7:80:A5:C9:E2:36:75:FA:21:C9:7E:4C:06:7C:B7:3B:48:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/480acd92-824c-4b47-a714-6cab20e4ce2d/2b7cfae4-f410-3e89-b8d3-0485208e46bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/480acd92-824c-4b47-a714-6cab20e4ce2d/480acd92-824c-4b47-a714-6cab20e4ce2d.crl X509v3 Authority Key Identifier: keyid:B7:D4:E2:DF:B4:FF:89:0E:E8:B3:DA:D9:E3:E6:8D:19:C3:F8:2B:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/480acd92-824c-4b47-a714-6cab20e4ce2d.cer sbgp-ipAddrBlock: critical IPv4: 23.129.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:b6:75:34:d0:41:45:f2:90:59:bf:0d:4a:c8:33:11:87:2e: f4:e0:43:b3:ef:0a:51:10:62:9d:a7:14:d1:df:f1:c9:b9:0f: 8b:fa:b6:ee:57:e4:26:73:3c:53:dd:e4:34:93:da:0b:a8:bb: 79:8d:57:a7:aa:53:83:84:be:77:6e:84:73:c5:f5:72:0c:35: 20:76:d5:9c:78:b5:35:7f:9f:6c:53:a7:82:b9:48:29:a2:19: b4:e5:9b:86:9f:f0:d1:38:a6:6b:5b:e1:1e:8a:01:88:54:a7: e6:f3:a0:1f:95:3e:21:cb:99:a7:29:45:35:fb:5d:e3:b6:ba: 87:ae:a0:b3:11:86:96:44:94:06:98:26:3d:fc:14:c1:ea:0f: 9c:5c:51:d1:0d:bc:b6:4c:58:a2:27:82:43:62:20:da:bd:fa: 75:9d:17:1f:18:19:f4:e0:7e:39:68:8a:39:4c:b5:47:6a:2a: 45:77:0f:6f:99:76:c0:71:50:7d:cd:1f:3d:c0:cd:99:f3:d3: 3d:8f:59:75:cd:d0:39:35:2c:8d:8e:5e:18:3a:da:7d:b7:dd: 38:f5:b2:a9:c4:17:ba:ca:4c:24:3c:46:7c:7a:1d:a2:a1:a3: 42:ba:e1:17:28:68:11:11:e5:6c:88:6c:77:8a:ff:94:5d:48: 17:28:22:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7E1xFdDUToYEauCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDgwYWNkOTItODI0Yy00YjQ3LWE3MTQtNmNhYjIwZTRj ZTJkMB4XDTI2MDgwODEzMDAxMVoXDTI2MTEwNjE0MDAxMVowLzEtMCsGA1UEAxMk ODMwZjZjM2UtNjc0ZC00OTQ1LTk5OGMtY2FlNzE0NTU3ODA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIs8Ibo+wCujBujSjbvzNyRnmaVR/8u++u/4 mzjkixksEt8QXvSRdZ7B409QshRJQJrKDEcli+jnorjsjt6C6Mx8PWHQ6gHCVwjI QawsrRE9aRK+4EcenbB+X9l6wn40KLcWFVl7d0CTrErxyrWk1yEIKWyGLx7rVEiK QkJI7jGc8/sM26dIOaI3c9nS9XuFSoZ5fsAfNEWIotCHzNykPFoECBZhU8rELsfo 0YNo9b/kZnIcwS8SNoFqlkb3kAlLrFmPDZjhG0cho1m9Pp57gklv2KcfzFruUL+Q mSZR6JBlscY95DLdNrs3/fXd6rDi2c7QHDtmeAlcKpo1KQRFCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDfH14ClyeI2dfohyX5MBny3O0jZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80ODBh Y2Q5Mi04MjRjLTRiNDctYTcxNC02Y2FiMjBlNGNlMmQvMmI3Y2ZhZTQtZjQxMC0z ZTg5LWI4ZDMtMDQ4NTIwOGU0NmJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNDgwYWNkOTItODI0Yy00YjQ3LWE3 MTQtNmNhYjIwZTRjZTJkLzQ4MGFjZDkyLTgyNGMtNGI0Ny1hNzE0LTZjYWIyMGU0 Y2UyZC5jcmwwHwYDVR0jBBgwFoAUt9Ti37T/iQ7os9rZ4+aNGcP4K8wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi80ODBhY2Q5Mi04MjRjLTRiNDctYTcxNC02Y2Fi MjBlNGNlMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4EsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAES2dTTQQUXykFm/DUrIMxGHLvTgQ7PvClEQYp2nFNHf8cm5D4v6tu5X 5CZzPFPd5DST2guou3mNV6eqU4OEvnduhHPF9XIMNSB21Zx4tTV/n2xTp4K5SCmi GbTlm4af8NE4pmtb4R6KAYhUp+bzoB+VPiHLmacpRTX7XeO2uoeuoLMRhpZElAaY Jj38FMHqD5xcUdENvLZMWKIngkNiINq9+nWdFx8YGfTgfjloijlMtUdqKkV3D2+Z dsBxUH3NHz3AzZnz0z2PWXXN0Dk1LI2OXhg62n233Tj1sqnEF7rKTCQ8Rnx6HaKh o0K64RcoaBER5WyIbHeK/5RdSBcoIrI= -----END CERTIFICATE-----Generated at Tue Sep 1 04:41:50 2026 by rpki-client