$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7/3eb42a5a-0fa5-3564-a10d-1674d389315c.roa File: 3eb42a5a-0fa5-3564-a10d-1674d389315c.roa (raw, json) Hash identifier: xXAh7wNHTg/HlA3txWe0OBpluai64ZrSawVZdeYbYlQ= Subject key identifier: 13:57:D1:13:BE:FD:1C:5A:B0:1D:11:65:34:6B:6F:4F:53:3C:5B:BD Certificate issuer: /CN=b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7 Certificate serial: 010D0C9F4328584E37647836915A857379016800 Authority key identifier: 6C:59:DF:4F:1E:39:6F:89:97:D1:38:C1:0D:8B:81:BC:54:BC:EB:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7/3eb42a5a-0fa5-3564-a10d-1674d389315c.roa Signing time: Thu 18 Jun 2026 21:00:12 +0000 ROA not before: Thu 18 Jun 2026 21:00:12 +0000 ROA not after: Wed 16 Sep 2026 21:00:12 +0000 asID: 40343 IP address blocks: 23.168.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:37:64:78:36:91:5a:85:73:79:01:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7 Validity Not Before: Jun 18 21:00:12 2026 GMT Not After : Sep 16 21:00:12 2026 GMT Subject: CN=9bda668d-5c3d-49f7-9769-c19bdac195af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:87:df:00:46:62:45:a7:82:64:ab:5d:07:5a: dd:e4:2a:08:98:3e:25:8e:e9:07:cc:8c:f7:31:e0: 7b:b7:9c:8e:18:93:97:7b:89:d6:52:60:87:81:d5: fb:c5:60:0a:39:11:a6:9e:62:1c:b3:87:e0:82:dd: 9a:25:4b:4a:4e:39:c5:6c:a5:f8:a2:39:24:61:45: a0:d0:ae:f7:44:76:00:58:98:ab:87:0d:3a:c5:c7: 30:d8:d7:f3:6e:26:f6:c5:3d:39:f3:8f:76:cf:d6: 71:9e:5c:0e:f9:ad:d3:83:19:66:b0:5c:23:75:6d: f6:2c:8f:05:71:a5:58:d2:4f:a2:6d:02:61:04:4a: 23:aa:e1:4c:3c:24:c5:ff:b5:7c:41:43:9d:e6:d4: 3a:d8:d7:7a:82:73:08:04:8c:0c:27:9f:ef:4d:58: 2e:5d:70:76:5e:35:dc:67:60:da:0a:bd:05:dd:40: 09:8a:df:f7:01:cf:0a:3b:84:f3:d4:71:2d:8b:65: 8b:4c:1e:d9:08:35:51:1a:13:8b:9e:92:05:2b:ea: 3c:1b:6c:1e:58:c2:6e:a0:fe:51:de:b8:cc:79:72: 04:29:2f:1c:2f:be:d3:ca:67:b1:2e:72:8e:a9:c4: 3b:b2:80:0e:16:22:ab:28:68:3e:cb:00:d4:99:64: 40:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:57:D1:13:BE:FD:1C:5A:B0:1D:11:65:34:6B:6F:4F:53:3C:5B:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7/3eb42a5a-0fa5-3564-a10d-1674d389315c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7.crl X509v3 Authority Key Identifier: keyid:6C:59:DF:4F:1E:39:6F:89:97:D1:38:C1:0D:8B:81:BC:54:BC:EB:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7.cer sbgp-ipAddrBlock: critical IPv4: 23.168.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:0c:78:0a:29:42:58:21:a5:2a:7d:65:16:cd:d2:3b:cf:2a: bf:66:69:28:30:72:26:29:ca:15:1c:53:96:b4:5f:95:18:f9: dc:96:7a:80:11:41:84:27:53:48:7c:c1:8e:01:2d:a2:80:91: 65:48:a3:4e:b8:1c:26:ef:86:ad:9d:c3:8c:14:9a:28:39:ff: cd:9d:dc:03:e7:89:b2:73:3e:21:94:36:48:a4:54:26:1b:ac: c0:12:17:3c:5c:d3:55:79:6a:c6:c2:fd:d7:cd:b6:eb:60:ce: 17:11:84:8d:e4:69:03:7a:ca:1f:07:5c:0e:db:b7:47:e3:7e: 97:23:29:9f:c4:25:50:a9:52:0b:b8:b9:cf:74:09:c0:a1:df: dd:58:48:ac:4a:9f:b7:2a:29:d5:21:32:2e:cb:86:6d:53:f9: 85:95:36:39:22:41:94:04:cb:6b:1e:4f:7d:a4:ab:48:5c:ee: b3:84:a8:54:aa:d5:51:09:21:50:fe:d0:ec:9f:7e:46:df:f4: d2:db:c0:33:7c:1a:34:a8:a6:2e:08:69:cf:11:2e:4f:8f:92: c7:46:26:50:09:ef:1b:f3:36:f3:ed:95:86:01:36:ca:0a:9f: 72:96:23:14:4e:19:d7:41:71:71:e0:bb:1d:80:61:16:ce:1d: 1f:d7:b0:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE43ZHg2kVqFc3kBaAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjY1NGViNjMtMWJiYi00N2NjLThmYzMtZjQ1YTliMmE2 OWE3MB4XDTI2MDYxODIxMDAxMloXDTI2MDkxNjIxMDAxMlowLzEtMCsGA1UEAxMk OWJkYTY2OGQtNWMzZC00OWY3LTk3NjktYzE5YmRhYzE5NWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4ffAEZiRaeCZKtdB1rd5CoImD4ljukHzIz3 MeB7t5yOGJOXe4nWUmCHgdX7xWAKORGmnmIcs4fggt2aJUtKTjnFbKX4ojkkYUWg 0K73RHYAWJirhw06xccw2Nfzbib2xT058492z9ZxnlwO+a3TgxlmsFwjdW32LI8F caVY0k+ibQJhBEojquFMPCTF/7V8QUOd5tQ62Nd6gnMIBIwMJ5/vTVguXXB2XjXc Z2DaCr0F3UAJit/3Ac8KO4Tz1HEti2WLTB7ZCDVRGhOLnpIFK+o8G2weWMJuoP5R 3rjMeXIEKS8cL77TymexLnKOqcQ7soAOFiKrKGg+ywDUmWRAfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBNX0RO+/RxasB0RZTRrb09TPFu9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iNjU0 ZWI2My0xYmJiLTQ3Y2MtOGZjMy1mNDVhOWIyYTY5YTcvM2ViNDJhNWEtMGZhNS0z NTY0LWExMGQtMTY3NGQzODkzMTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjY1NGViNjMtMWJiYi00N2NjLThm YzMtZjQ1YTliMmE2OWE3L2I2NTRlYjYzLTFiYmItNDdjYy04ZmMzLWY0NWE5YjJh NjlhNy5jcmwwHwYDVR0jBBgwFoAUbFnfTx45b4mX0TjBDYuBvFS868MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iNjU0ZWI2My0xYmJiLTQ3Y2MtOGZjMy1mNDVh OWIyYTY5YTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6hAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHwMeAopQlghpSp9ZRbN0jvPKr9maSgwciYpyhUcU5a0X5UY+dyWeoAR QYQnU0h8wY4BLaKAkWVIo064HCbvhq2dw4wUmig5/82d3APnibJzPiGUNkikVCYb rMASFzxc01V5asbC/dfNtutgzhcRhI3kaQN6yh8HXA7bt0fjfpcjKZ/EJVCpUgu4 uc90CcCh391YSKxKn7cqKdUhMi7Lhm1T+YWVNjkiQZQEy2seT32kq0hc7rOEqFSq 1VEJIVD+0Oyffkbf9NLbwDN8GjSopi4Iac8RLk+PksdGJlAJ7xvzNvPtlYYBNsoK n3KWIxROGddBcXHgux2AYRbOHR/XsK0= -----END CERTIFICATE-----Generated at Mon Jul 13 12:49:42 2026 by rpki-client