$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/897be676-f6c1-4efc-8bef-a425edb4f479/e3f8bda7-2eeb-3dcd-8242-3a497f478b8c.roa File: e3f8bda7-2eeb-3dcd-8242-3a497f478b8c.roa (raw, json) Hash identifier: WB3Rjqqprf9bA1mTrGKEbPw1VbckNFmpRqThY4uTED8= Subject key identifier: CB:E7:76:AB:E4:99:98:D7:28:04:6C:77:F7:A1:C5:B1:1B:03:B6:A7 Certificate issuer: /CN=897be676-f6c1-4efc-8bef-a425edb4f479 Certificate serial: 010D0C9F4328584EC4D7114F7F78107669A6BA00 Authority key identifier: C8:BA:3D:7B:FD:79:A2:67:06:5E:EB:F0:4E:03:A9:64:77:91:44:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/897be676-f6c1-4efc-8bef-a425edb4f479.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/897be676-f6c1-4efc-8bef-a425edb4f479/e3f8bda7-2eeb-3dcd-8242-3a497f478b8c.roa Signing time: Sat 08 Aug 2026 13:00:11 +0000 ROA not before: Sat 08 Aug 2026 13:00:11 +0000 ROA not after: Fri 06 Nov 2026 14:00:11 +0000 asID: 7018 IP address blocks: 23.129.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/897be676-f6c1-4efc-8bef-a425edb4f479/897be676-f6c1-4efc-8bef-a425edb4f479.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/897be676-f6c1-4efc-8bef-a425edb4f479/897be676-f6c1-4efc-8bef-a425edb4f479.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/897be676-f6c1-4efc-8bef-a425edb4f479.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c4:d7:11:4f:7f:78:10:76:69:a6:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=897be676-f6c1-4efc-8bef-a425edb4f479 Validity Not Before: Aug 8 13:00:11 2026 GMT Not After : Nov 6 14:00:11 2026 GMT Subject: CN=ca2acae7-ce79-4a81-8eba-d3593f8752e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:30:4b:0d:21:dd:e9:17:b9:ca:e2:bd:94:47: 04:7b:67:d8:85:e9:11:b6:4e:76:ca:06:d0:64:21: 8a:bf:6e:72:9e:51:09:70:5e:3f:8f:39:b3:9d:00: b9:6e:ce:f9:33:15:3a:5f:51:d7:d0:b9:a3:68:c3: 78:96:0a:a9:ec:f2:e6:50:03:c2:b6:86:8e:e0:e7: 3c:a9:65:cb:2d:e0:ac:44:41:fd:6a:0f:62:ce:ed: 26:68:9a:23:10:9f:b3:9d:7c:e4:61:97:1d:75:95: d1:e5:0c:54:27:0b:69:62:2a:69:c8:04:97:87:92: 3f:3d:ce:4d:0f:eb:be:3d:13:f3:9f:38:07:43:28: 88:00:eb:1c:35:32:10:43:b4:6d:c8:a3:2f:b2:d9: 31:6f:9f:6e:d9:21:97:eb:4a:b0:db:c2:f3:41:e6: 3b:a2:d8:62:3f:c0:81:10:db:6a:0d:39:fd:a4:91: 69:a8:8b:83:44:ea:c5:2b:3e:10:c8:32:0e:8d:c0: 8c:04:c4:a5:de:7b:30:27:66:f5:61:0f:4c:28:86: 5f:89:ca:8e:49:9d:69:99:c5:9e:c4:e1:39:66:94: 8d:64:39:b7:4d:27:6c:72:d8:7e:5c:67:de:82:97: 12:ae:d4:90:7e:bf:6c:0b:25:32:85:f4:ed:dc:cb: 5a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:E7:76:AB:E4:99:98:D7:28:04:6C:77:F7:A1:C5:B1:1B:03:B6:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/897be676-f6c1-4efc-8bef-a425edb4f479/e3f8bda7-2eeb-3dcd-8242-3a497f478b8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/897be676-f6c1-4efc-8bef-a425edb4f479/897be676-f6c1-4efc-8bef-a425edb4f479.crl X509v3 Authority Key Identifier: keyid:C8:BA:3D:7B:FD:79:A2:67:06:5E:EB:F0:4E:03:A9:64:77:91:44:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/897be676-f6c1-4efc-8bef-a425edb4f479.cer sbgp-ipAddrBlock: critical IPv4: 23.129.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:70:f3:81:66:63:2d:ab:73:c8:d5:55:2a:b4:c1:fe:5b:1e: 26:95:75:e5:41:8e:91:98:90:3d:e6:5e:1c:72:c0:a2:60:eb: 01:6a:d9:6d:37:dc:28:72:d0:de:0b:74:ff:2d:95:ee:42:0f: d4:9a:c2:34:3f:6e:4b:b4:32:ab:1c:d2:37:3d:56:d6:83:81: 04:65:20:e9:08:fe:df:0f:7d:22:43:a6:cb:97:d0:a2:02:4f: 78:78:4e:f8:c5:85:69:aa:e7:7b:7f:be:68:6e:60:fd:12:bb: 68:7e:58:e5:02:8b:47:ce:ba:79:91:5d:41:2f:f7:1d:4d:c4: 28:67:0b:ec:34:5f:da:1b:f9:3e:68:56:4f:cf:b4:51:18:4e: 34:03:49:b7:7b:ef:bf:82:16:8d:c0:d2:50:03:45:a3:6d:70: b0:3a:db:f2:5a:b9:e3:ff:87:59:75:e6:e7:b3:7e:b2:81:84: cf:75:af:6f:9c:a9:61:c3:19:42:73:38:76:23:be:00:18:41: a3:0c:7c:d5:f4:ee:74:46:2a:85:b0:97:7e:b1:71:b3:61:e0: 61:c6:df:aa:9c:da:69:de:49:3b:ad:29:cf:a1:f2:20:d4:82: ea:79:b5:32:98:4f:ab:18:f7:35:ed:40:48:47:f2:61:2a:06: 03:e5:09:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7E1xFPf3gQdmmmugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODk3YmU2NzYtZjZjMS00ZWZjLThiZWYtYTQyNWVkYjRm NDc5MB4XDTI2MDgwODEzMDAxMVoXDTI2MTEwNjE0MDAxMVowLzEtMCsGA1UEAxMk Y2EyYWNhZTctY2U3OS00YTgxLThlYmEtZDM1OTNmODc1MmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDBLDSHd6Re5yuK9lEcEe2fYhekRtk52ygbQ ZCGKv25ynlEJcF4/jzmznQC5bs75MxU6X1HX0LmjaMN4lgqp7PLmUAPCtoaO4Oc8 qWXLLeCsREH9ag9izu0maJojEJ+znXzkYZcddZXR5QxUJwtpYippyASXh5I/Pc5N D+u+PRPznzgHQyiIAOscNTIQQ7RtyKMvstkxb59u2SGX60qw28LzQeY7othiP8CB ENtqDTn9pJFpqIuDROrFKz4QyDIOjcCMBMSl3nswJ2b1YQ9MKIZficqOSZ1pmcWe xOE5ZpSNZDm3TSdscth+XGfegpcSrtSQfr9sCyUyhfTt3MtaxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMvndqvkmZjXKARsd/ehxbEbA7anMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84OTdi ZTY3Ni1mNmMxLTRlZmMtOGJlZi1hNDI1ZWRiNGY0NzkvZTNmOGJkYTctMmVlYi0z ZGNkLTgyNDItM2E0OTdmNDc4YjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvODk3YmU2NzYtZjZjMS00ZWZjLThi ZWYtYTQyNWVkYjRmNDc5Lzg5N2JlNjc2LWY2YzEtNGVmYy04YmVmLWE0MjVlZGI0 ZjQ3OS5jcmwwHwYDVR0jBBgwFoAUyLo9e/15omcGXuvwTgOpZHeRROQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84OTdiZTY3Ni1mNmMxLTRlZmMtOGJlZi1hNDI1 ZWRiNGY0NzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4GcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHVw84FmYy2rc8jVVSq0wf5bHiaVdeVBjpGYkD3mXhxywKJg6wFq2W03 3Chy0N4LdP8tle5CD9SawjQ/bku0Mqsc0jc9VtaDgQRlIOkI/t8PfSJDpsuX0KIC T3h4TvjFhWmq53t/vmhuYP0Su2h+WOUCi0fOunmRXUEv9x1NxChnC+w0X9ob+T5o Vk/PtFEYTjQDSbd777+CFo3A0lADRaNtcLA62/JaueP/h1l15uezfrKBhM91r2+c qWHDGUJzOHYjvgAYQaMMfNX07nRGKoWwl36xcbNh4GHG36qc2mneSTutKc+h8iDU gup5tTKYT6sY9zXtQEhH8mEqBgPlCew= -----END CERTIFICATE-----Generated at Tue Sep 1 04:41:43 2026 by rpki-client