$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9caf23fc-9cbc-4f40-aea8-07653211f665/356a78e9-a46a-376a-a81f-b7abff68cc1f.roa File: 356a78e9-a46a-376a-a81f-b7abff68cc1f.roa (raw, json) Hash identifier: sy0wx9srs+LEHce2cdd/LR1oYJsUg+xaNCXqRum9wII= Subject key identifier: 91:03:E3:B4:DE:87:DB:DD:A4:91:45:60:68:1D:96:33:64:E7:3E:B8 Certificate issuer: /CN=9caf23fc-9cbc-4f40-aea8-07653211f665 Certificate serial: 010D0C9F4328584EE921ED9869314008DBFECE80 Authority key identifier: 4C:EC:93:B1:A1:8E:F5:C8:50:02:AE:57:40:98:F3:21:98:73:1D:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9caf23fc-9cbc-4f40-aea8-07653211f665.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9caf23fc-9cbc-4f40-aea8-07653211f665/356a78e9-a46a-376a-a81f-b7abff68cc1f.roa Signing time: Fri 21 Aug 2026 13:00:11 +0000 ROA not before: Fri 21 Aug 2026 13:00:11 +0000 ROA not after: Thu 19 Nov 2026 14:00:11 +0000 asID: 2914 IP address blocks: 23.134.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9caf23fc-9cbc-4f40-aea8-07653211f665/9caf23fc-9cbc-4f40-aea8-07653211f665.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9caf23fc-9cbc-4f40-aea8-07653211f665/9caf23fc-9cbc-4f40-aea8-07653211f665.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9caf23fc-9cbc-4f40-aea8-07653211f665.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e9:21:ed:98:69:31:40:08:db:fe:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9caf23fc-9cbc-4f40-aea8-07653211f665 Validity Not Before: Aug 21 13:00:11 2026 GMT Not After : Nov 19 14:00:11 2026 GMT Subject: CN=3c98b9db-a92d-432e-ae33-9b42c428d39a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:93:6c:8d:00:e5:5f:a7:d1:71:d6:01:5a:06: 12:14:e5:8b:d4:6c:eb:a6:40:cd:3c:5c:c4:fb:5c: f8:93:a7:be:14:80:08:47:e8:63:8c:ce:dc:c9:1d: 7f:af:30:fb:21:8a:a3:7e:e2:e8:75:95:87:df:6e: 67:0d:2b:ef:af:e8:c0:5c:cb:d8:a3:20:ff:1f:35: b0:c4:7f:61:e2:fe:74:0f:6a:a8:75:ba:cc:57:d8: 79:2d:67:93:ad:22:8a:fb:84:0d:2a:07:14:e9:34: 4a:13:a7:9a:3a:57:19:f2:5e:bf:39:9b:1d:a9:d5: 8d:ad:e5:23:ec:43:19:29:f9:29:d1:1d:01:0e:57: ba:9c:0b:36:46:35:aa:94:ea:6d:4a:8e:b6:8b:38: 82:89:c2:f9:af:d8:88:95:b6:e5:4e:64:3d:ee:1b: 9f:98:d2:79:c2:8d:19:29:f1:f0:15:69:dc:87:08: 3f:9b:28:36:cd:54:b3:d7:50:36:fa:61:b3:7b:4a: 18:80:e9:bc:a8:35:f2:b5:ee:ed:2a:e1:ca:23:94: af:b7:1e:4a:54:bf:f4:f8:df:08:c5:86:a2:46:0d: 4d:1c:d9:e8:60:a3:1a:31:a7:6e:bb:64:cc:cf:d6: 93:d8:2d:01:7e:d6:97:3b:11:79:85:2c:64:56:41: 3c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:03:E3:B4:DE:87:DB:DD:A4:91:45:60:68:1D:96:33:64:E7:3E:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9caf23fc-9cbc-4f40-aea8-07653211f665/356a78e9-a46a-376a-a81f-b7abff68cc1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9caf23fc-9cbc-4f40-aea8-07653211f665/9caf23fc-9cbc-4f40-aea8-07653211f665.crl X509v3 Authority Key Identifier: keyid:4C:EC:93:B1:A1:8E:F5:C8:50:02:AE:57:40:98:F3:21:98:73:1D:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9caf23fc-9cbc-4f40-aea8-07653211f665.cer sbgp-ipAddrBlock: critical IPv4: 23.134.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:cc:e6:fb:c1:64:50:85:db:a1:c5:2e:c8:68:5a:8c:00:7a: 32:bc:a8:27:53:35:73:60:ef:f8:78:71:6e:9a:f3:f0:46:33: b2:5f:00:78:82:42:93:fb:89:92:16:85:42:79:cf:11:a3:d8: 65:84:63:6f:0a:d2:fe:25:18:8b:89:d8:f8:cf:1d:97:b0:93: cc:aa:10:c2:df:31:bc:ef:6a:5e:e5:1d:96:5b:ae:59:de:14: ee:d4:73:21:02:45:6c:47:7e:50:e1:8e:d7:ea:fa:27:3a:46: 97:1a:bf:cf:67:a5:fe:0c:18:7f:90:31:df:99:38:22:ed:11: 6a:17:64:50:90:99:0b:28:0e:ae:9c:40:3c:4c:24:da:3e:99: df:92:06:23:88:d5:1c:d9:dd:5e:a0:fa:e4:ef:0e:e4:a5:5a: 55:fe:bc:cb:f5:6a:ac:ca:8e:05:2e:cf:34:b4:4a:a1:1c:e8: f0:64:04:8d:03:c0:1b:ac:18:04:0a:a1:cd:f4:18:1b:9d:3e: a4:3e:da:0f:47:33:7e:a4:a7:42:41:73:60:e0:c3:ae:ea:bf: 30:b8:21:4c:00:93:5d:ae:97:7a:0c:83:3e:5e:75:05:21:88: ef:1a:43:30:3c:d7:0c:96:61:28:86:47:27:41:c0:b8:3c:fa: 92:b2:77:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7pIe2YaTFACNv+zoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWNhZjIzZmMtOWNiYy00ZjQwLWFlYTgtMDc2NTMyMTFm NjY1MB4XDTI2MDgyMTEzMDAxMVoXDTI2MTExOTE0MDAxMVowLzEtMCsGA1UEAxMk M2M5OGI5ZGItYTkyZC00MzJlLWFlMzMtOWI0MmM0MjhkMzlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5NsjQDlX6fRcdYBWgYSFOWL1GzrpkDNPFzE +1z4k6e+FIAIR+hjjM7cyR1/rzD7IYqjfuLodZWH325nDSvvr+jAXMvYoyD/HzWw xH9h4v50D2qodbrMV9h5LWeTrSKK+4QNKgcU6TRKE6eaOlcZ8l6/OZsdqdWNreUj 7EMZKfkp0R0BDle6nAs2RjWqlOptSo62iziCicL5r9iIlbblTmQ97hufmNJ5wo0Z KfHwFWnchwg/myg2zVSz11A2+mGze0oYgOm8qDXyte7tKuHKI5Svtx5KVL/0+N8I xYaiRg1NHNnoYKMaMaduu2TMz9aT2C0BftaXOxF5hSxkVkE8ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJED47Teh9vdpJFFYGgdljNk5z64MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85Y2Fm MjNmYy05Y2JjLTRmNDAtYWVhOC0wNzY1MzIxMWY2NjUvMzU2YTc4ZTktYTQ2YS0z NzZhLWE4MWYtYjdhYmZmNjhjYzFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOWNhZjIzZmMtOWNiYy00ZjQwLWFl YTgtMDc2NTMyMTFmNjY1LzljYWYyM2ZjLTljYmMtNGY0MC1hZWE4LTA3NjUzMjEx ZjY2NS5jcmwwHwYDVR0jBBgwFoAUTOyTsaGO9chQAq5XQJjzIZhzHc8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85Y2FmMjNmYy05Y2JjLTRmNDAtYWVhOC0wNzY1 MzIxMWY2NjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4YkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEbM5vvBZFCF26HFLshoWowAejK8qCdTNXNg7/h4cW6a8/BGM7JfAHiC QpP7iZIWhUJ5zxGj2GWEY28K0v4lGIuJ2PjPHZewk8yqEMLfMbzval7lHZZbrlne FO7UcyECRWxHflDhjtfq+ic6Rpcav89npf4MGH+QMd+ZOCLtEWoXZFCQmQsoDq6c QDxMJNo+md+SBiOI1RzZ3V6g+uTvDuSlWlX+vMv1aqzKjgUuzzS0SqEc6PBkBI0D wBusGAQKoc30GBudPqQ+2g9HM36kp0JBc2Dgw67qvzC4IUwAk12ul3oMgz5edQUh iO8aQzA81wyWYSiGRydBwLg8+pKyd5k= -----END CERTIFICATE-----Generated at Sat Aug 22 00:04:40 2026 by rpki-client