$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f8fa851f-0c6f-44a2-8017-7b062f4d8e74/d0aa6771-362e-3935-947a-bfd5081d3828.roa File: d0aa6771-362e-3935-947a-bfd5081d3828.roa (raw, json) Hash identifier: wz7hVe+C5g5e9QBoAUpQd9iBPQgEH8kHwAyuPhO9dio= Subject key identifier: FD:DE:BC:1B:EA:57:63:1C:83:EA:31:2E:0E:65:11:1C:38:ED:D6:93 Certificate issuer: /CN=f8fa851f-0c6f-44a2-8017-7b062f4d8e74 Certificate serial: 010D0C9F4328584EC0A72878595784876B1B83C0 Authority key identifier: DF:AE:29:DC:48:23:A0:74:F5:E6:38:79:26:77:86:E8:AC:D0:6B:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f8fa851f-0c6f-44a2-8017-7b062f4d8e74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f8fa851f-0c6f-44a2-8017-7b062f4d8e74/d0aa6771-362e-3935-947a-bfd5081d3828.roa Signing time: Fri 07 Aug 2026 01:00:12 +0000 ROA not before: Fri 07 Aug 2026 01:00:12 +0000 ROA not after: Thu 05 Nov 2026 02:00:12 +0000 asID: 399340 IP address blocks: 23.180.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f8fa851f-0c6f-44a2-8017-7b062f4d8e74/f8fa851f-0c6f-44a2-8017-7b062f4d8e74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f8fa851f-0c6f-44a2-8017-7b062f4d8e74/f8fa851f-0c6f-44a2-8017-7b062f4d8e74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f8fa851f-0c6f-44a2-8017-7b062f4d8e74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c0:a7:28:78:59:57:84:87:6b:1b:83:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8fa851f-0c6f-44a2-8017-7b062f4d8e74 Validity Not Before: Aug 7 01:00:12 2026 GMT Not After : Nov 5 02:00:12 2026 GMT Subject: CN=5ca2b523-93fc-4a6f-818a-8f40b7187cf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e1:46:17:a6:fb:25:bd:2e:ca:37:b0:7a:37: 66:e3:d2:2c:2c:38:89:a1:85:10:62:77:b2:ac:ac: f5:1e:74:6e:65:56:f3:7f:3b:b3:f1:f4:f5:06:25: 21:7c:b4:26:8e:01:f3:18:d2:9f:90:ae:ef:8d:bc: 83:bf:53:2e:40:6d:e7:52:6b:89:f1:25:56:b4:e6: 7c:9d:60:e2:e9:7a:49:3e:95:47:a3:fd:cc:27:d1: 09:f5:ec:35:b5:a9:8f:8b:39:3d:67:18:35:37:0b: a4:18:a6:e9:17:61:ba:44:c9:01:78:75:8e:73:3c: 2b:43:b6:de:ea:b2:1a:5b:e5:c0:50:f1:f7:7e:a9: 44:50:e1:f2:fb:e4:c3:67:c3:0f:96:0a:22:b9:b0: 9a:a6:66:82:a5:4a:88:57:9c:0d:26:cb:14:5c:57: 1c:c6:eb:76:8f:8b:8e:32:4b:0c:83:1d:8d:bb:6f: 21:88:95:31:92:ab:22:c8:e2:dc:ae:d1:a0:4b:1b: ca:15:71:2a:0c:9e:d8:75:c4:c3:0c:f6:53:f9:35: e7:3d:d4:a2:26:2b:3a:fa:92:11:6b:e8:b4:e2:5c: 16:ed:65:f3:05:1c:da:7e:9e:48:6f:2a:61:b2:0d: ca:e5:bf:07:c2:41:f2:9a:52:f1:03:0f:78:c0:23: 78:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:DE:BC:1B:EA:57:63:1C:83:EA:31:2E:0E:65:11:1C:38:ED:D6:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f8fa851f-0c6f-44a2-8017-7b062f4d8e74/d0aa6771-362e-3935-947a-bfd5081d3828.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f8fa851f-0c6f-44a2-8017-7b062f4d8e74/f8fa851f-0c6f-44a2-8017-7b062f4d8e74.crl X509v3 Authority Key Identifier: keyid:DF:AE:29:DC:48:23:A0:74:F5:E6:38:79:26:77:86:E8:AC:D0:6B:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f8fa851f-0c6f-44a2-8017-7b062f4d8e74.cer sbgp-ipAddrBlock: critical IPv4: 23.180.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:80:64:b7:26:18:88:77:c5:35:74:ea:22:f7:b0:4e:a0:37: a7:ba:f1:1e:59:15:b2:9f:b7:71:02:af:48:cc:84:a6:45:94: d7:30:1f:ea:be:96:b9:3a:30:a1:46:1e:c8:08:dd:c4:11:cc: 9b:ba:0a:32:a0:a8:90:32:c6:6d:7b:bf:73:bb:ad:8e:a5:00: 50:f3:a2:d8:99:83:71:b6:ae:25:81:4f:05:1e:ae:03:7f:02: 45:ba:15:aa:f4:60:8a:d7:82:31:21:21:8b:e0:b6:ac:7c:1e: fc:89:5a:4b:36:b9:8a:ec:a3:02:7a:22:6b:47:7d:26:77:ea: 6d:93:4f:cb:08:d0:5e:03:94:0f:3c:c6:5c:00:dc:e6:bd:19: d9:51:ca:fe:b0:4a:ba:43:82:70:14:10:a1:d6:e9:03:cf:25: c5:85:4e:53:50:c1:61:a4:11:f0:7d:50:6c:18:9f:aa:74:54: f0:e3:d4:da:d9:6c:26:1f:6c:20:17:ad:f0:63:4c:da:2e:e9: c0:6e:ef:f3:39:77:75:a3:97:63:04:ce:2b:9a:32:66:c8:7a: 9b:46:c3:ba:41:7a:fc:85:b4:25:66:64:0d:ac:5b:c7:d3:06: 03:c1:f0:12:55:e3:89:25:42:59:77:fc:7e:12:7d:d9:c9:ff: bf:21:7c:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Apyh4WVeEh2sbg8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjhmYTg1MWYtMGM2Zi00NGEyLTgwMTctN2IwNjJmNGQ4 ZTc0MB4XDTI2MDgwNzAxMDAxMloXDTI2MTEwNTAyMDAxMlowLzEtMCsGA1UEAxMk NWNhMmI1MjMtOTNmYy00YTZmLTgxOGEtOGY0MGI3MTg3Y2Y1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuFGF6b7Jb0uyjewejdm49IsLDiJoYUQYney rKz1HnRuZVbzfzuz8fT1BiUhfLQmjgHzGNKfkK7vjbyDv1MuQG3nUmuJ8SVWtOZ8 nWDi6XpJPpVHo/3MJ9EJ9ew1tamPizk9Zxg1NwukGKbpF2G6RMkBeHWOczwrQ7be 6rIaW+XAUPH3fqlEUOHy++TDZ8MPlgoiubCapmaCpUqIV5wNJssUXFccxut2j4uO MksMgx2Nu28hiJUxkqsiyOLcrtGgSxvKFXEqDJ7YdcTDDPZT+TXnPdSiJis6+pIR a+i04lwW7WXzBRzafp5Ibyphsg3K5b8HwkHymlLxAw94wCN4WQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP3evBvqV2Mcg+oxLg5lERw47daTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mOGZh ODUxZi0wYzZmLTQ0YTItODAxNy03YjA2MmY0ZDhlNzQvZDBhYTY3NzEtMzYyZS0z OTM1LTk0N2EtYmZkNTA4MWQzODI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjhmYTg1MWYtMGM2Zi00NGEyLTgw MTctN2IwNjJmNGQ4ZTc0L2Y4ZmE4NTFmLTBjNmYtNDRhMi04MDE3LTdiMDYyZjRk OGU3NC5jcmwwHwYDVR0jBBgwFoAU364p3EgjoHT15jh5JneG6KzQa54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mOGZhODUxZi0wYzZmLTQ0YTItODAxNy03YjA2 MmY0ZDhlNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7QwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACAZLcmGIh3xTV06iL3sE6gN6e68R5ZFbKft3ECr0jMhKZFlNcwH+q+ lrk6MKFGHsgI3cQRzJu6CjKgqJAyxm17v3O7rY6lAFDzotiZg3G2riWBTwUergN/ AkW6Far0YIrXgjEhIYvgtqx8HvyJWks2uYrsowJ6ImtHfSZ36m2TT8sI0F4DlA88 xlwA3Oa9GdlRyv6wSrpDgnAUEKHW6QPPJcWFTlNQwWGkEfB9UGwYn6p0VPDj1NrZ bCYfbCAXrfBjTNou6cBu7/M5d3Wjl2MEziuaMmbIeptGw7pBevyFtCVmZA2sW8fT BgPB8BJV44klQll3/H4SfdnJ/78hfJE= -----END CERTIFICATE-----Generated at Wed Aug 26 00:40:05 2026 by rpki-client