$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/2385dbd7-2d77-33fc-8bdd-fb57b1ecda6f.roa File: 2385dbd7-2d77-33fc-8bdd-fb57b1ecda6f.roa (raw, json) Hash identifier: nChYeDg8izQB7RXn8XcR34nTLVJNsE4uu91kDbdj3x0= Subject key identifier: E6:CA:AA:39:6A:45:2B:AB:55:0F:99:6F:91:59:C0:07:01:58:20:AA Certificate issuer: /CN=3e886672-55f3-450f-ab6e-342c76f256db Certificate serial: 010D0C9F4328584E37646E1E5A68FF2B7E6D6F00 Authority key identifier: C9:F7:DA:62:04:65:82:4F:87:6B:CA:92:86:E4:16:0A:D4:F9:31:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/2385dbd7-2d77-33fc-8bdd-fb57b1ecda6f.roa Signing time: Thu 18 Jun 2026 21:00:12 +0000 ROA not before: Thu 18 Jun 2026 21:00:12 +0000 ROA not after: Wed 16 Sep 2026 21:00:12 +0000 asID: 16584 IP address blocks: 23.140.96.0/24 maxlen: 24 23.140.97.0/24 maxlen: 24 204.9.36.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:37:64:6e:1e:5a:68:ff:2b:7e:6d:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e886672-55f3-450f-ab6e-342c76f256db Validity Not Before: Jun 18 21:00:12 2026 GMT Not After : Sep 16 21:00:12 2026 GMT Subject: CN=b7105c4e-0146-41ae-a6f2-4b714056f51a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:fb:ff:a4:be:37:e1:f9:cd:d3:61:69:ae:a9: 5e:a3:d9:e1:e1:dc:4a:de:09:e5:4f:ee:85:a1:a9: 3a:0f:f3:d8:a1:0d:aa:17:b3:eb:32:ac:d0:99:2f: 8a:0b:2f:dc:95:f3:f7:4e:b1:85:6b:95:95:72:07: e4:15:7f:8e:cd:63:f9:cd:08:c5:39:81:26:4d:b6: 48:7b:6e:0d:25:7b:10:ef:d1:5c:b0:6a:14:cc:a7: 85:ea:5c:72:0c:45:e4:ad:e9:a8:c3:f9:ec:c9:53: 94:6d:a0:b3:1a:5f:28:d0:79:17:64:ae:03:92:e5: 51:2e:8f:c6:61:58:82:a3:b3:3a:b8:b4:df:98:c4: d3:50:e2:5d:b7:00:90:c1:3a:8d:38:02:0c:ab:72: f5:53:c0:74:bc:04:4d:0b:6f:0d:db:06:14:68:32: d9:37:8f:bc:54:e8:55:d0:64:10:e7:83:eb:50:cd: 5c:35:4e:0a:64:5c:ad:a9:c5:af:df:f9:0c:3e:cb: f3:ac:94:2d:c9:30:1e:10:e1:c0:01:72:77:70:40: ac:88:f0:41:1f:46:75:62:51:37:1b:30:b9:20:80: d5:91:98:5f:76:8b:f0:73:f4:89:7f:60:d9:a8:9a: e1:94:86:5b:77:7d:b5:cc:30:aa:1d:f9:9c:0b:1e: 3e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:CA:AA:39:6A:45:2B:AB:55:0F:99:6F:91:59:C0:07:01:58:20:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/2385dbd7-2d77-33fc-8bdd-fb57b1ecda6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.crl X509v3 Authority Key Identifier: keyid:C9:F7:DA:62:04:65:82:4F:87:6B:CA:92:86:E4:16:0A:D4:F9:31:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer sbgp-ipAddrBlock: critical IPv4: 23.140.96.0/23 204.9.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:d4:17:19:7b:ea:d0:b9:44:f5:89:9f:29:4e:c8:ac:f8:30: b3:c9:f6:8b:8d:3b:52:fe:75:b7:75:2c:5d:2d:32:91:8b:6f: c9:5b:4f:99:1c:2f:26:9a:90:83:f2:72:99:c2:15:75:ba:db: 65:a5:50:6a:fc:6b:d7:e3:e2:f7:c6:31:4f:47:fa:d7:5c:ce: a4:23:26:d8:23:46:37:a1:3e:b0:67:2c:c4:6d:5d:28:f5:57: d6:a6:7f:d3:a9:da:6c:ff:1a:50:5f:a9:a3:36:58:e0:ce:e3: 0b:ed:d9:23:44:69:86:e6:a2:05:34:e5:87:4e:e3:ac:21:0c: c5:d3:6d:9d:ab:cb:c3:50:d6:c9:2a:a1:a5:26:93:e3:f9:60: 4e:ab:68:48:f2:4f:5f:f1:61:64:0a:57:5e:a5:01:8d:39:13: c6:06:25:08:9c:31:f0:b6:d2:dd:62:31:16:30:04:d9:30:1b: 44:de:e1:f2:10:44:b1:82:d8:6a:b6:f1:ee:ba:04:a2:56:9e: 7c:e3:7e:df:2a:9f:19:a8:1e:cc:7b:c2:1b:63:83:4c:84:29: 7e:57:7c:7c:0f:ad:3a:f2:28:b7:a2:b8:11:a5:e7:dd:ed:c7: 43:3a:d3:12:4f:07:9d:49:ed:ba:89:69:8a:21:ed:37:15:6a: 09:11:d4:11 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE43ZG4eWmj/K35tbwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2U4ODY2NzItNTVmMy00NTBmLWFiNmUtMzQyYzc2ZjI1 NmRiMB4XDTI2MDYxODIxMDAxMloXDTI2MDkxNjIxMDAxMlowLzEtMCsGA1UEAxMk YjcxMDVjNGUtMDE0Ni00MWFlLWE2ZjItNGI3MTQwNTZmNTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPv/pL434fnN02Fprqleo9nh4dxK3gnlT+6F oak6D/PYoQ2qF7PrMqzQmS+KCy/clfP3TrGFa5WVcgfkFX+OzWP5zQjFOYEmTbZI e24NJXsQ79FcsGoUzKeF6lxyDEXkremow/nsyVOUbaCzGl8o0HkXZK4DkuVRLo/G YViCo7M6uLTfmMTTUOJdtwCQwTqNOAIMq3L1U8B0vARNC28N2wYUaDLZN4+8VOhV 0GQQ54PrUM1cNU4KZFytqcWv3/kMPsvzrJQtyTAeEOHAAXJ3cECsiPBBH0Z1YlE3 GzC5IIDVkZhfdovwc/SJf2DZqJrhlIZbd321zDCqHfmcCx4+mQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFObKqjlqRSurVQ+Zb5FZwAcBWCCqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZTg4 NjY3Mi01NWYzLTQ1MGYtYWI2ZS0zNDJjNzZmMjU2ZGIvMjM4NWRiZDctMmQ3Ny0z M2ZjLThiZGQtZmI1N2IxZWNkYTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2U4ODY2NzItNTVmMy00NTBmLWFi NmUtMzQyYzc2ZjI1NmRiLzNlODg2NjcyLTU1ZjMtNDUwZi1hYjZlLTM0MmM3NmYy NTZkYi5jcmwwHwYDVR0jBBgwFoAUyffaYgRlgk+Ha8qShuQWCtT5MZwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZTg4NjY3Mi01NWYzLTQ1MGYtYWI2ZS0zNDJj NzZmMjU2ZGIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBF4xgAwQC zAkkMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAADUFxl76tC5RPWJnylOyKz4MLPJ9ouNO1L+dbd1LF0tMpGL b8lbT5kcLyaakIPycpnCFXW622WlUGr8a9fj4vfGMU9H+tdczqQjJtgjRjehPrBn LMRtXSj1V9amf9Op2mz/GlBfqaM2WODO4wvt2SNEaYbmogU05YdO46whDMXTbZ2r y8NQ1skqoaUmk+P5YE6raEjyT1/xYWQKV16lAY05E8YGJQicMfC20t1iMRYwBNkw G0Te4fIQRLGC2Gq28e66BKJWnnzjft8qnxmoHsx7whtjg0yEKX5XfHwPrTryKLei uBGl593tx0M60xJPB51J7bqJaYoh7TcVagkR1BE= -----END CERTIFICATE-----Generated at Tue Jul 21 14:16:32 2026 by rpki-client