$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/862a9ade-3d88-4730-8033-1414625d565b/930237d2-7c98-3e15-b444-d23772ae4891.roa File: 930237d2-7c98-3e15-b444-d23772ae4891.roa (raw, json) Hash identifier: f3HZ+zM/z2cfnHAu4/onWOyIULx5MkwSSvblGTNV6bE= Subject key identifier: FF:66:8E:ED:36:19:3E:05:DE:EA:71:EA:DB:C5:13:3C:B0:0D:3C:A4 Certificate issuer: /CN=862a9ade-3d88-4730-8033-1414625d565b Certificate serial: 010D0C9F4328584EA0155149029C5434B25EA1F0 Authority key identifier: 2C:E1:46:DA:DF:D5:E4:78:2E:B1:F4:E3:E1:6F:6E:E5:18:EA:C4:EE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/862a9ade-3d88-4730-8033-1414625d565b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/862a9ade-3d88-4730-8033-1414625d565b/930237d2-7c98-3e15-b444-d23772ae4891.roa Signing time: Sun 26 Jul 2026 09:00:12 +0000 ROA not before: Sun 26 Jul 2026 09:00:12 +0000 ROA not after: Sat 24 Oct 2026 09:00:12 +0000 asID: 400593 IP address blocks: 23.131.108.0/24 maxlen: 24 2602:f75d::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/862a9ade-3d88-4730-8033-1414625d565b/862a9ade-3d88-4730-8033-1414625d565b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/862a9ade-3d88-4730-8033-1414625d565b/862a9ade-3d88-4730-8033-1414625d565b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/862a9ade-3d88-4730-8033-1414625d565b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a0:15:51:49:02:9c:54:34:b2:5e:a1:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=862a9ade-3d88-4730-8033-1414625d565b Validity Not Before: Jul 26 09:00:12 2026 GMT Not After : Oct 24 09:00:12 2026 GMT Subject: CN=0ea4d798-6dd2-4ffd-81b5-3b181f17d467 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:af:aa:70:a5:a3:62:24:b1:d3:55:8e:25:f7: 31:66:47:fb:96:5e:d9:7a:34:77:49:1f:1b:cf:f2: dc:a6:5e:e4:c9:b1:c6:5d:15:ff:81:82:c7:ea:2d: ee:26:d7:53:a1:71:61:3e:ba:ac:22:04:93:e7:26: d8:b1:8d:c8:08:8a:bc:f1:66:00:82:9c:a1:55:b2: b3:12:20:10:f4:f4:07:ee:ba:59:fd:38:86:e8:84: 5d:5e:9e:c0:a2:88:43:e2:2d:07:7b:e4:8c:a9:95: c7:f3:ab:b7:f0:0b:02:13:af:5a:f0:45:d1:7f:32: 67:b0:3a:52:fa:7c:58:54:35:82:c5:47:fb:e8:2b: ca:3f:46:ee:84:ac:58:c2:d8:e0:fb:d6:17:d0:bc: 61:89:01:dc:e1:99:fa:6d:68:4d:39:1d:ba:8f:5b: 39:c2:f1:5b:af:fa:2a:5a:e2:27:87:9e:ca:77:dd: f1:fe:f4:6c:72:30:80:90:0e:4c:92:32:85:a6:26: 12:1b:26:58:d8:55:01:9d:4b:cb:5b:b4:53:d3:e4: 15:68:19:71:15:69:5d:08:b2:7d:6f:37:fe:99:87: e1:c8:b3:b8:f7:74:52:aa:32:6c:c3:ea:af:9d:04: b7:f1:72:52:59:84:48:33:4d:32:7e:bc:ff:95:0a: 55:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:66:8E:ED:36:19:3E:05:DE:EA:71:EA:DB:C5:13:3C:B0:0D:3C:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/862a9ade-3d88-4730-8033-1414625d565b/930237d2-7c98-3e15-b444-d23772ae4891.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/862a9ade-3d88-4730-8033-1414625d565b/862a9ade-3d88-4730-8033-1414625d565b.crl X509v3 Authority Key Identifier: keyid:2C:E1:46:DA:DF:D5:E4:78:2E:B1:F4:E3:E1:6F:6E:E5:18:EA:C4:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/862a9ade-3d88-4730-8033-1414625d565b.cer sbgp-ipAddrBlock: critical IPv4: 23.131.108.0/24 IPv6: 2602:f75d::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:b2:95:90:02:78:02:96:dc:d8:ca:73:f6:78:7c:31:32:de: 3e:eb:79:58:e1:ea:0a:ba:fc:fe:e9:45:37:b3:19:74:48:7b: d6:36:8b:c4:34:53:a8:d0:ac:05:a7:c3:b4:b1:71:fd:44:cd: c2:52:64:c0:78:98:c6:69:53:56:21:1a:96:d9:76:78:4c:d6: fb:c2:12:09:49:61:c7:a0:bd:85:84:0d:f1:a6:24:7f:03:9d: 01:71:f5:fd:d6:86:27:41:e5:0b:cc:dd:05:d9:57:c3:27:d2: 43:08:3f:b9:b4:aa:78:cd:fd:15:f1:a2:d5:d9:2b:bf:b2:48: d5:10:57:7b:d6:1d:05:76:fe:51:83:23:a2:1f:72:46:24:3d: 88:25:a3:05:0f:08:e2:1b:d3:e6:25:ed:35:19:26:3b:8c:5c: 58:dc:ee:68:45:41:b2:b3:11:91:29:74:af:c6:33:d5:85:9e: 6b:68:e2:86:ea:e4:b4:20:d5:d7:91:ec:47:75:6a:02:b0:b0: 93:e8:90:e2:bd:0b:e0:a3:55:1d:e5:88:9b:84:c3:ae:fe:20: e4:93:6a:e3:30:cf:08:60:c5:7a:59:ee:02:ba:4e:ff:3c:dd: 41:27:06:b9:cd:07:1b:ef:db:b7:88:5f:ad:91:10:93:82:22: 77:d8:7b:be -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE6gFVFJApxUNLJeofAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODYyYTlhZGUtM2Q4OC00NzMwLTgwMzMtMTQxNDYyNWQ1 NjViMB4XDTI2MDcyNjA5MDAxMloXDTI2MTAyNDA5MDAxMlowLzEtMCsGA1UEAxMk MGVhNGQ3OTgtNmRkMi00ZmZkLTgxYjUtM2IxODFmMTdkNDY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6+qcKWjYiSx01WOJfcxZkf7ll7ZejR3SR8b z/Lcpl7kybHGXRX/gYLH6i3uJtdToXFhPrqsIgST5ybYsY3ICIq88WYAgpyhVbKz EiAQ9PQH7rpZ/TiG6IRdXp7AoohD4i0He+SMqZXH86u38AsCE69a8EXRfzJnsDpS +nxYVDWCxUf76CvKP0buhKxYwtjg+9YX0LxhiQHc4Zn6bWhNOR26j1s5wvFbr/oq WuInh57Kd93x/vRscjCAkA5MkjKFpiYSGyZY2FUBnUvLW7RT0+QVaBlxFWldCLJ9 bzf+mYfhyLO493RSqjJsw+qvnQS38XJSWYRIM00yfrz/lQpVEwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFP9mju02GT4F3upx6tvFEzywDTykMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84NjJh OWFkZS0zZDg4LTQ3MzAtODAzMy0xNDE0NjI1ZDU2NWIvOTMwMjM3ZDItN2M5OC0z ZTE1LWI0NDQtZDIzNzcyYWU0ODkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvODYyYTlhZGUtM2Q4OC00NzMwLTgw MzMtMTQxNDYyNWQ1NjViLzg2MmE5YWRlLTNkODgtNDczMC04MDMzLTE0MTQ2MjVk NTY1Yi5jcmwwHwYDVR0jBBgwFoAULOFG2t/V5HgusfTj4W9u5RjqxO4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84NjJhOWFkZS0zZDg4LTQ3MzAtODAzMy0xNDE0 NjI1ZDU2NWIuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4NsMA4E AgACMAgDBgQmAvddADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA8spWQAngCltzYynP2eHwxMt4+63lY4eoK uvz+6UU3sxl0SHvWNovENFOo0KwFp8O0sXH9RM3CUmTAeJjGaVNWIRqW2XZ4TNb7 whIJSWHHoL2FhA3xpiR/A50BcfX91oYnQeULzN0F2VfDJ9JDCD+5tKp4zf0V8aLV 2Su/skjVEFd71h0Fdv5RgyOiH3JGJD2IJaMFDwjiG9PmJe01GSY7jFxY3O5oRUGy sxGRKXSvxjPVhZ5raOKG6uS0INXXkexHdWoCsLCT6JDivQvgo1Ud5YibhMOu/iDk k2rjMM8IYMV6We4Cuk7/PN1BJwa5zQcb79u3iF+tkRCTgiJ32Hu+ -----END CERTIFICATE-----Generated at Mon Jul 27 18:57:44 2026 by rpki-client