$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/2f411f0a-4589-3467-ac67-d972f19f437f.roa File: 2f411f0a-4589-3467-ac67-d972f19f437f.roa (raw, json) Hash identifier: J/tq1aW2KJBgJmwWIXie/fRjUpZw4ubevUiSkiTUWYc= Subject key identifier: A8:51:EE:EC:1F:BE:DA:0B:3D:BB:E2:24:4C:71:26:6A:28:BE:3D:76 Certificate issuer: /CN=5ddd1dc1-47e3-4a5e-af7f-944939d210c6 Certificate serial: 010D0C9F4328584EAA51964F7FB3E13038F20580 Authority key identifier: 16:F5:A0:96:E3:BD:EE:DD:97:CA:25:D1:7B:F4:DF:FF:94:B3:84:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/2f411f0a-4589-3467-ac67-d972f19f437f.roa Signing time: Thu 30 Jul 2026 01:00:12 +0000 ROA not before: Thu 30 Jul 2026 01:00:12 +0000 ROA not after: Wed 28 Oct 2026 01:00:12 +0000 asID: 399861 IP address blocks: 23.128.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 09 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:aa:51:96:4f:7f:b3:e1:30:38:f2:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ddd1dc1-47e3-4a5e-af7f-944939d210c6 Validity Not Before: Jul 30 01:00:12 2026 GMT Not After : Oct 28 01:00:12 2026 GMT Subject: CN=bc824840-83e9-46e8-8ac2-59bbcc37ea0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:11:27:38:1b:96:b2:92:4e:4a:73:d3:3f:41: 9c:71:19:cb:83:96:3c:fb:79:29:61:10:90:5d:1d: 41:1c:e9:ea:ce:9c:2d:e1:e4:95:1a:4b:1d:7a:3c: 01:cd:59:91:f3:ea:31:af:4f:95:95:ec:fe:8e:41: ed:a3:74:c1:ec:c8:ef:46:ac:ae:0b:9a:a2:20:3f: 3d:2b:d1:bc:c3:1f:45:8d:f3:f6:cf:62:2b:41:e4: c4:34:c4:fd:37:0c:42:9c:fd:eb:56:f8:12:fb:37: 91:76:90:67:dd:12:cc:28:c3:d6:6f:e7:2c:2d:21: 45:54:65:85:eb:d5:aa:0e:b7:14:b4:d2:0b:21:86: b8:e4:99:24:d7:37:a9:15:38:59:2e:e7:94:fb:f8: 80:64:74:8d:a2:b1:79:3c:28:af:b4:52:06:d5:d7: 08:3b:a8:2c:07:71:3f:26:25:f1:94:fa:b4:44:6f: 4d:c0:3f:9f:29:a7:2b:eb:d5:8a:b1:eb:9b:e7:2c: 75:a8:55:99:d8:95:2b:aa:c2:60:0d:01:de:df:5d: 0d:f2:aa:ba:15:cb:6e:a8:90:f7:67:80:3d:e0:92: 21:ef:af:86:24:5e:e5:23:2c:16:34:0a:f9:b5:d8: 5d:56:0b:49:ac:b3:ee:20:37:36:59:4c:81:ba:37: b0:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:51:EE:EC:1F:BE:DA:0B:3D:BB:E2:24:4C:71:26:6A:28:BE:3D:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/2f411f0a-4589-3467-ac67-d972f19f437f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.crl X509v3 Authority Key Identifier: keyid:16:F5:A0:96:E3:BD:EE:DD:97:CA:25:D1:7B:F4:DF:FF:94:B3:84:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.cer sbgp-ipAddrBlock: critical IPv4: 23.128.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:70:d0:52:2e:da:7c:e3:82:13:e5:e3:1b:43:66:61:7f:56: 47:9b:e7:2a:84:61:a5:bd:25:66:92:b3:45:ee:cb:57:fa:1e: cb:dd:73:f0:4f:5a:4b:02:b1:65:a1:7c:c1:c0:07:c1:32:68: e1:70:74:d8:2e:ef:7b:8f:5b:b6:d6:5e:09:c7:81:71:7e:f4: 22:d1:96:23:88:79:52:9b:64:30:b4:8e:80:ac:7d:4c:31:64: 97:6d:a4:b8:b5:a8:7b:6c:ae:a3:47:5a:98:a0:f3:36:3d:b1: 50:fc:b7:1f:02:fa:5c:ba:98:c5:18:36:43:34:c3:ac:5a:02: ef:f4:6a:61:9c:82:88:28:31:83:f3:b0:ba:4a:a6:27:3c:84: c2:59:22:83:3b:ed:3c:89:ee:27:d4:13:8f:a5:1b:d9:71:ee: 67:7b:bb:67:1e:af:64:34:7f:d6:d8:61:d4:c3:df:85:e0:97: bc:65:b3:3d:2d:de:22:fe:eb:17:54:3d:03:dc:40:94:48:be: f8:95:8c:2d:8d:54:cb:b1:61:f3:12:e0:9f:8d:9e:29:d7:a2: 1a:6f:fc:93:04:94:66:f9:d1:eb:27:db:f9:b2:5a:01:86:d0: e4:50:5d:37:e4:d3:cd:70:1a:a2:8b:a9:a0:99:40:17:73:f6: 5e:a3:9a:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6qUZZPf7PhMDjyBYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRkZDFkYzEtNDdlMy00YTVlLWFmN2YtOTQ0OTM5ZDIx MGM2MB4XDTI2MDczMDAxMDAxMloXDTI2MTAyODAxMDAxMlowLzEtMCsGA1UEAxMk YmM4MjQ4NDAtODNlOS00NmU4LThhYzItNTliYmNjMzdlYTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxEnOBuWspJOSnPTP0GccRnLg5Y8+3kpYRCQ XR1BHOnqzpwt4eSVGksdejwBzVmR8+oxr0+Vlez+jkHto3TB7MjvRqyuC5qiID89 K9G8wx9FjfP2z2IrQeTENMT9NwxCnP3rVvgS+zeRdpBn3RLMKMPWb+csLSFFVGWF 69WqDrcUtNILIYa45Jkk1zepFThZLueU+/iAZHSNorF5PCivtFIG1dcIO6gsB3E/ JiXxlPq0RG9NwD+fKacr69WKseub5yx1qFWZ2JUrqsJgDQHe310N8qq6FctuqJD3 Z4A94JIh76+GJF7lIywWNAr5tdhdVgtJrLPuIDc2WUyBujew2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKhR7uwfvtoLPbviJExxJmoovj12MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81ZGRk MWRjMS00N2UzLTRhNWUtYWY3Zi05NDQ5MzlkMjEwYzYvMmY0MTFmMGEtNDU4OS0z NDY3LWFjNjctZDk3MmYxOWY0MzdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNWRkZDFkYzEtNDdlMy00YTVlLWFm N2YtOTQ0OTM5ZDIxMGM2LzVkZGQxZGMxLTQ3ZTMtNGE1ZS1hZjdmLTk0NDkzOWQy MTBjNi5jcmwwHwYDVR0jBBgwFoAUFvWgluO97t2XyiXRe/Tf/5SzhMQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81ZGRkMWRjMS00N2UzLTRhNWUtYWY3Zi05NDQ5 MzlkMjEwYzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4D8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJZw0FIu2nzjghPl4xtDZmF/Vkeb5yqEYaW9JWaSs0Xuy1f6Hsvdc/BP WksCsWWhfMHAB8EyaOFwdNgu73uPW7bWXgnHgXF+9CLRliOIeVKbZDC0joCsfUwx ZJdtpLi1qHtsrqNHWpig8zY9sVD8tx8C+ly6mMUYNkM0w6xaAu/0amGcgogoMYPz sLpKpic8hMJZIoM77TyJ7ifUE4+lG9lx7md7u2cer2Q0f9bYYdTD34Xgl7xlsz0t 3iL+6xdUPQPcQJRIvviVjC2NVMuxYfMS4J+NninXohpv/JMElGb50esn2/myWgGG 0ORQXTfk081wGqKLqaCZQBdz9l6jmmc= -----END CERTIFICATE-----Generated at Sat Aug 8 05:15:40 2026 by rpki-client