$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f/1b988d6e-c498-37ed-88a5-8fc2554a27a6.roa File: 1b988d6e-c498-37ed-88a5-8fc2554a27a6.roa (raw, json) Hash identifier: RjshUGguXQY1b7y9vJ75LTaaH4MoHWMGpsGwyEuaNEw= Subject key identifier: 29:62:5E:A0:1C:4F:05:67:06:49:22:74:D6:7F:40:6E:A0:94:C7:A9 Certificate issuer: /CN=1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f Certificate serial: 010D0C9F4328584EBC7701B5A7CF5AF64D83E620 Authority key identifier: B7:57:F9:6B:5B:30:14:07:9A:7E:C9:8B:1D:DE:34:96:DD:EE:A8:50 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f/1b988d6e-c498-37ed-88a5-8fc2554a27a6.roa Signing time: Wed 05 Aug 2026 13:00:12 +0000 ROA not before: Wed 05 Aug 2026 13:00:12 +0000 ROA not after: Tue 03 Nov 2026 14:00:12 +0000 asID: 3742 IP address blocks: 23.128.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bc:77:01:b5:a7:cf:5a:f6:4d:83:e6:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f Validity Not Before: Aug 5 13:00:12 2026 GMT Not After : Nov 3 14:00:12 2026 GMT Subject: CN=74ad4bb3-bfe6-4ab8-8e9e-7cdcb20b1ab9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:1d:6e:ca:ea:37:5f:52:36:56:0e:f4:b2:1f: dd:85:c7:42:3b:2e:53:9f:57:e0:e4:fc:da:23:cf: 43:63:f3:08:75:3b:54:a2:8c:c8:71:8d:2c:40:d7: e2:d6:88:f4:44:4f:9f:6a:91:a2:f2:fb:13:ac:47: 52:98:1a:4e:ab:a6:c8:6b:43:b8:c7:b3:fd:42:7a: bd:bc:bb:2e:e3:33:98:0e:ba:11:6c:0e:75:ca:75: 59:5f:9f:ad:98:2e:92:5a:2e:13:06:1d:97:4a:e2: c2:03:8e:82:83:27:9f:33:8c:be:b1:4b:63:07:9e: 4c:f4:aa:cb:7b:43:ae:d5:79:e1:58:f6:d8:48:15: 0b:3b:99:fe:a5:78:05:f6:5a:b2:90:c4:39:7c:40: 16:2e:dc:33:04:45:a1:97:a2:47:7a:2f:c8:7f:0f: bb:88:ae:51:56:b6:2a:6e:b0:76:e9:6c:db:cd:3e: 30:df:3f:fe:2e:4a:86:b8:8c:d1:93:ac:65:0b:7b: b2:e9:22:de:1f:90:59:21:7c:19:e4:3d:cc:0d:3f: c5:62:4f:a6:00:07:d2:4f:18:cd:22:86:ab:70:ce: 9a:3e:a6:ca:3b:93:bd:b9:e8:1c:df:fa:d6:d4:c0: f6:12:8f:e6:27:2a:bd:a5:40:65:fd:25:8a:7b:c3: e0:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:62:5E:A0:1C:4F:05:67:06:49:22:74:D6:7F:40:6E:A0:94:C7:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f/1b988d6e-c498-37ed-88a5-8fc2554a27a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f.crl X509v3 Authority Key Identifier: keyid:B7:57:F9:6B:5B:30:14:07:9A:7E:C9:8B:1D:DE:34:96:DD:EE:A8:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f.cer sbgp-ipAddrBlock: critical IPv4: 23.128.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:57:74:b0:1f:6f:2c:42:03:ac:0f:53:e2:9a:d6:ad:ff:fb: b2:5c:99:83:66:5a:61:76:58:76:89:f8:d2:ec:ec:44:01:3b: a9:7b:dc:0e:83:16:86:ef:27:3b:dd:04:5c:cd:54:ab:81:94: 9b:3a:1d:96:5f:05:3c:9f:03:42:17:5c:cf:be:6f:e7:d5:33: 4c:74:2a:39:4c:87:13:52:b0:6b:74:2f:fa:38:0b:f7:90:5b: 2f:d2:2d:da:70:0b:73:31:72:ef:24:1c:6d:1c:71:b3:5e:72: e3:7c:df:ac:22:ab:63:58:16:a6:6b:97:3b:d5:3f:ba:47:f0: 57:41:5b:9d:1c:88:7f:3a:6d:e3:91:55:cf:97:1d:ca:e6:07: d7:65:99:45:3b:4e:52:eb:59:61:83:d9:74:36:e1:b2:59:03: 9a:78:95:1e:7f:53:2d:c2:df:54:5d:63:88:ad:5d:f9:e5:c5: 9e:2f:07:3d:9a:bd:18:ef:19:40:d2:eb:11:e2:21:ea:19:b4: 2d:da:50:fa:c1:3a:68:7a:40:b3:53:09:b6:f3:d8:11:7f:ce: 69:f7:9b:f1:5e:81:99:3f:65:f3:cb:51:09:ad:8d:82:e5:ec: d4:e5:b2:ed:50:1d:44:1c:b5:59:01:50:b3:89:8b:8a:42:af: 89:fb:88:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE68dwG1p89a9k2D5iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWJkOTViYjYtZjhlNi00ZDY2LThkN2ItZDVhMzQyYjM1 ODdmMB4XDTI2MDgwNTEzMDAxMloXDTI2MTEwMzE0MDAxMlowLzEtMCsGA1UEAxMk NzRhZDRiYjMtYmZlNi00YWI4LThlOWUtN2NkY2IyMGIxYWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhR1uyuo3X1I2Vg70sh/dhcdCOy5Tn1fg5Pza I89DY/MIdTtUoozIcY0sQNfi1oj0RE+fapGi8vsTrEdSmBpOq6bIa0O4x7P9Qnq9 vLsu4zOYDroRbA51ynVZX5+tmC6SWi4TBh2XSuLCA46CgyefM4y+sUtjB55M9KrL e0Ou1XnhWPbYSBULO5n+pXgF9lqykMQ5fEAWLtwzBEWhl6JHei/Ifw+7iK5RVrYq brB26WzbzT4w3z/+LkqGuIzRk6xlC3uy6SLeH5BZIXwZ5D3MDT/FYk+mAAfSTxjN IoarcM6aPqbKO5O9uegc3/rW1MD2Eo/mJyq9pUBl/SWKe8Pg/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCliXqAcTwVnBkkidNZ/QG6glMepMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xYmQ5 NWJiNi1mOGU2LTRkNjYtOGQ3Yi1kNWEzNDJiMzU4N2YvMWI5ODhkNmUtYzQ5OC0z N2VkLTg4YTUtOGZjMjU1NGEyN2E2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWJkOTViYjYtZjhlNi00ZDY2LThk N2ItZDVhMzQyYjM1ODdmLzFiZDk1YmI2LWY4ZTYtNGQ2Ni04ZDdiLWQ1YTM0MmIz NTg3Zi5jcmwwHwYDVR0jBBgwFoAUt1f5a1swFAeafsmLHd40lt3uqFAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xYmQ5NWJiNi1mOGU2LTRkNjYtOGQ3Yi1kNWEz NDJiMzU4N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4CIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFVXdLAfbyxCA6wPU+Ka1q3/+7JcmYNmWmF2WHaJ+NLs7EQBO6l73A6D FobvJzvdBFzNVKuBlJs6HZZfBTyfA0IXXM++b+fVM0x0KjlMhxNSsGt0L/o4C/eQ Wy/SLdpwC3Mxcu8kHG0ccbNecuN836wiq2NYFqZrlzvVP7pH8FdBW50ciH86beOR Vc+XHcrmB9dlmUU7TlLrWWGD2XQ24bJZA5p4lR5/Uy3C31RdY4itXfnlxZ4vBz2a vRjvGUDS6xHiIeoZtC3aUPrBOmh6QLNTCbbz2BF/zmn3m/FegZk/ZfPLUQmtjYLl 7NTlsu1QHUQctVkBULOJi4pCr4n7iBI= -----END CERTIFICATE-----Generated at Sat Sep 5 14:26:55 2026 by rpki-client