$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6283f7b1-718c-494a-9125-f81454a01548/afce5eab-0544-335c-99cb-2d69f9355be4.roa File: afce5eab-0544-335c-99cb-2d69f9355be4.roa (raw, json) Hash identifier: JOxaNzkaEssS1MNlfarYZeHt8Uo2dGcotZkpaEBotiw= Subject key identifier: 37:5C:72:C9:FF:F2:50:1D:22:AF:31:E2:DF:9E:C9:45:4D:5B:F8:F7 Certificate issuer: /CN=6283f7b1-718c-494a-9125-f81454a01548 Certificate serial: 010D0C9F4328584EA786F3C1F2599518EB9DDC80 Authority key identifier: CF:9F:E6:C6:43:5C:E9:AA:36:04:DD:E1:81:D7:1D:D1:1A:E5:86:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6283f7b1-718c-494a-9125-f81454a01548.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6283f7b1-718c-494a-9125-f81454a01548/afce5eab-0544-335c-99cb-2d69f9355be4.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 46850 IP address blocks: 23.129.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6283f7b1-718c-494a-9125-f81454a01548/6283f7b1-718c-494a-9125-f81454a01548.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6283f7b1-718c-494a-9125-f81454a01548/6283f7b1-718c-494a-9125-f81454a01548.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6283f7b1-718c-494a-9125-f81454a01548.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:86:f3:c1:f2:59:95:18:eb:9d:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6283f7b1-718c-494a-9125-f81454a01548 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=67b29e36-e81d-41c4-85c7-23a79ed59f4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:e0:6e:82:70:49:48:95:2c:dd:d7:48:70:81: 85:67:3e:c7:53:8b:77:50:77:a0:d5:4c:a2:0a:4f: ee:10:74:7e:8d:ae:16:ed:ee:8d:f6:18:07:fc:91: 47:a0:e9:f2:21:c5:67:bd:50:e6:4f:f3:d6:af:84: e6:b3:49:fc:59:3c:9f:77:0d:73:1e:51:eb:e7:14: 39:a4:dc:56:a0:c2:61:63:80:d9:ad:97:88:5a:ea: 7f:7b:a7:aa:99:a6:4e:5d:02:bd:1a:21:45:9c:49: 75:04:d9:64:62:45:e2:af:d9:37:17:08:03:7c:08: fa:5c:84:d5:b7:f1:ba:2e:ad:9b:55:a4:7c:db:9f: fc:60:80:67:ed:da:a3:17:7e:31:d5:a9:66:e7:47: c0:d0:f5:65:9a:6a:d5:2d:96:84:11:07:d4:e9:72: 73:28:75:0b:67:33:ec:85:fd:b2:81:7f:d0:de:ad: 1b:7f:e1:9b:7f:30:03:ce:4a:b1:f4:bb:a7:48:98: 49:e0:fd:4b:21:64:0d:44:68:44:38:d2:a2:79:cd: 3a:bd:1a:47:8c:22:c1:a3:81:10:32:fd:ee:27:d4: 93:c3:8c:f2:67:db:45:c0:79:96:77:4b:1f:b4:f6: 0a:fd:ee:8f:1d:95:26:67:6a:a9:12:bb:25:ac:46: 31:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:5C:72:C9:FF:F2:50:1D:22:AF:31:E2:DF:9E:C9:45:4D:5B:F8:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6283f7b1-718c-494a-9125-f81454a01548/afce5eab-0544-335c-99cb-2d69f9355be4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6283f7b1-718c-494a-9125-f81454a01548/6283f7b1-718c-494a-9125-f81454a01548.crl X509v3 Authority Key Identifier: keyid:CF:9F:E6:C6:43:5C:E9:AA:36:04:DD:E1:81:D7:1D:D1:1A:E5:86:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6283f7b1-718c-494a-9125-f81454a01548.cer sbgp-ipAddrBlock: critical IPv4: 23.129.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:08:be:a9:9f:24:0f:45:14:e5:23:90:e1:0c:b5:32:aa:05: b1:93:eb:16:82:b5:c6:19:d2:74:f5:80:98:a8:5f:ff:e4:bd: d9:44:11:e4:32:f3:01:42:c9:1e:74:b7:23:ab:b9:16:81:79: 8c:f2:33:ca:f4:7c:03:f6:3b:e1:05:04:e9:47:01:b1:e4:a3: 46:16:58:d0:fd:8c:e2:4d:f4:2b:62:6a:a3:d6:95:d2:d1:4e: e5:fe:4f:cf:2c:75:cb:ed:63:29:71:50:e9:bb:9a:4b:83:f0: c9:de:5f:fa:57:cb:14:e5:f4:d2:b5:62:f7:61:d0:08:d7:d6: 63:5a:62:b3:21:e8:b0:3a:ea:9a:18:18:fd:d9:fa:7b:6b:43: e6:db:f9:12:e7:be:31:2b:35:66:a9:1c:5d:77:bf:6d:0a:54: bc:b7:9c:c9:c6:c8:68:3d:32:e2:e9:24:15:75:69:54:ff:66: 7d:b3:56:65:45:36:11:7f:be:b0:f3:71:b6:f4:e7:56:d6:e0: 76:95:ce:d2:ac:ec:75:e1:54:c3:19:de:cb:93:ed:0a:60:50: f8:11:24:f2:3c:9a:0e:ca:4b:20:60:fa:9f:4d:48:33:be:8b: 5f:c5:e9:b3:30:e8:a5:bf:b6:d3:be:f5:a2:42:96:17:09:a0: ce:d4:84:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nhvPB8lmVGOud3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjI4M2Y3YjEtNzE4Yy00OTRhLTkxMjUtZjgxNDU0YTAx NTQ4MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NjdiMjllMzYtZTgxZC00MWM0LTg1YzctMjNhNzllZDU5ZjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOBugnBJSJUs3ddIcIGFZz7HU4t3UHeg1Uyi Ck/uEHR+ja4W7e6N9hgH/JFHoOnyIcVnvVDmT/PWr4Tms0n8WTyfdw1zHlHr5xQ5 pNxWoMJhY4DZrZeIWup/e6eqmaZOXQK9GiFFnEl1BNlkYkXir9k3FwgDfAj6XITV t/G6Lq2bVaR825/8YIBn7dqjF34x1alm50fA0PVlmmrVLZaEEQfU6XJzKHULZzPs hf2ygX/Q3q0bf+GbfzADzkqx9LunSJhJ4P1LIWQNRGhEONKiec06vRpHjCLBo4EQ Mv3uJ9STw4zyZ9tFwHmWd0sftPYK/e6PHZUmZ2qpErslrEYx/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDdccsn/8lAdIq8x4t+eyUVNW/j3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi82Mjgz ZjdiMS03MThjLTQ5NGEtOTEyNS1mODE0NTRhMDE1NDgvYWZjZTVlYWItMDU0NC0z MzVjLTk5Y2ItMmQ2OWY5MzU1YmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNjI4M2Y3YjEtNzE4Yy00OTRhLTkx MjUtZjgxNDU0YTAxNTQ4LzYyODNmN2IxLTcxOGMtNDk0YS05MTI1LWY4MTQ1NGEw MTU0OC5jcmwwHwYDVR0jBBgwFoAUz5/mxkNc6ao2BN3hgdcd0RrlhtwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi82MjgzZjdiMS03MThjLTQ5NGEtOTEyNS1mODE0 NTRhMDE1NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4GkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGYIvqmfJA9FFOUjkOEMtTKqBbGT6xaCtcYZ0nT1gJioX//kvdlEEeQy 8wFCyR50tyOruRaBeYzyM8r0fAP2O+EFBOlHAbHko0YWWND9jOJN9CtiaqPWldLR TuX+T88sdcvtYylxUOm7mkuD8MneX/pXyxTl9NK1Yvdh0AjX1mNaYrMh6LA66poY GP3Z+ntrQ+bb+RLnvjErNWapHF13v20KVLy3nMnGyGg9MuLpJBV1aVT/Zn2zVmVF NhF/vrDzcbb051bW4HaVztKs7HXhVMMZ3suT7QpgUPgRJPI8mg7KSyBg+p9NSDO+ i1/F6bMw6KW/ttO+9aJClhcJoM7UhDY= -----END CERTIFICATE-----Generated at Tue Sep 1 05:23:05 2026 by rpki-client