$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/3252f01d-313a-3219-93bf-843ea033951b.roa File: 3252f01d-313a-3219-93bf-843ea033951b.roa (raw, json) Hash identifier: MaKUxXExEjcab4NpIQQsBcxp1sgKCNJitNT6X3UnsKo= Subject key identifier: 01:A4:5C:10:81:59:B9:64:14:C6:40:73:BA:81:1F:F5:34:BE:84:58 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584EB84718E2E15803F9D6D1DB40 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/3252f01d-313a-3219-93bf-843ea033951b.roa Signing time: Tue 04 Aug 2026 01:00:12 +0000 ROA not before: Tue 04 Aug 2026 01:00:12 +0000 ROA not after: Mon 02 Nov 2026 02:00:12 +0000 asID: 31898 IP address blocks: 23.239.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 30 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b8:47:18:e2:e1:58:03:f9:d6:d1:db:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Aug 4 01:00:12 2026 GMT Not After : Nov 2 02:00:12 2026 GMT Subject: CN=de43a6e0-0323-4bb2-9fe1-6c8197f20118 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:18:bf:72:80:8e:39:03:30:6c:1f:66:dd:80: 86:27:b0:9e:69:c4:00:55:7f:d9:7f:00:d2:bb:f1: 07:ff:77:7e:8f:f7:0e:15:fe:88:18:02:57:c3:9a: 97:10:0b:59:0f:1a:a9:8b:ca:18:f3:54:d4:fa:40: b3:fb:63:31:45:ad:18:36:9f:e6:56:bc:64:2a:68: 1d:26:6e:1c:20:d4:56:3c:5e:52:47:1b:27:53:67: d2:e0:05:a7:8d:42:58:98:6f:f6:19:cf:5d:a7:27: d5:7b:87:b6:ed:5c:26:40:23:ac:d2:20:8a:9d:59: c2:97:46:96:36:4d:e5:1c:ce:fa:bc:d9:1e:6e:5d: 52:f3:4e:14:07:0c:30:a2:14:3b:c6:01:62:a9:13: bf:4d:16:d7:9c:a0:5a:b1:58:6d:c4:78:32:84:fb: 85:14:2a:94:a5:89:1a:ac:a9:49:63:66:7c:8f:ee: dc:18:ae:6c:ac:91:86:cf:13:7c:6b:20:b0:8e:00: e6:71:7c:b3:0e:3c:0a:82:95:66:0f:a9:ff:11:70: 21:28:26:95:ee:c4:18:a6:9b:66:73:71:b3:aa:5c: 3e:66:4d:bc:15:fc:4a:82:ca:d7:9d:18:59:67:b7: cb:fc:c5:38:3f:44:15:6f:40:6e:bb:82:36:11:cb: 5c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:A4:5C:10:81:59:B9:64:14:C6:40:73:BA:81:1F:F5:34:BE:84:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/3252f01d-313a-3219-93bf-843ea033951b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 23.239.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:84:f2:d1:ed:d7:c1:2f:40:1a:f7:3c:a0:e4:3d:9a:3b:a8: ed:84:2e:07:70:a0:f3:0c:00:fb:72:5b:6e:c6:92:92:da:a1: 7a:05:e5:11:d6:e9:5d:50:89:a4:1a:95:e5:0a:48:2e:05:e9: 0b:c2:5d:6f:cf:1a:dc:7d:07:72:6b:3e:e8:4e:47:e8:f9:62: d0:6d:4f:0b:a7:27:c3:32:3e:06:29:2e:95:fa:50:51:2e:8f: 1e:2b:7f:ac:8e:3d:92:3d:72:af:fd:92:9a:fa:ae:ae:11:df: 46:93:c9:47:b5:78:7a:69:ac:58:8d:8b:30:1b:dc:eb:c0:40: 8c:3f:d8:64:e1:83:aa:30:49:26:f6:8b:b8:df:5c:4f:10:94: 9b:35:0f:19:ee:ed:f7:88:da:d8:09:4f:54:9b:74:a4:10:8c: 2e:f6:5a:cb:e1:fb:2e:62:07:7e:6f:c5:c3:34:e0:37:98:f2: 01:d2:5d:06:2a:4a:9d:13:0b:3c:43:e1:a7:ac:e6:73:6d:53: 0e:1f:17:7a:d1:b6:63:6f:b3:9b:c7:cb:33:23:c3:bd:49:da: ee:a5:f3:6f:9d:bb:96:2c:1f:96:ac:43:da:20:26:b6:af:c4: 31:b6:56:d5:98:08:3c:cc:61:82:9e:40:09:20:0c:48:2b:63: de:18:7c:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE64Rxji4VgD+dbR20AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI2MDgwNDAxMDAxMloXDTI2MTEwMjAyMDAxMlowLzEtMCsGA1UEAxMk ZGU0M2E2ZTAtMDMyMy00YmIyLTlmZTEtNmM4MTk3ZjIwMTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxi/coCOOQMwbB9m3YCGJ7CeacQAVX/ZfwDS u/EH/3d+j/cOFf6IGAJXw5qXEAtZDxqpi8oY81TU+kCz+2MxRa0YNp/mVrxkKmgd Jm4cINRWPF5SRxsnU2fS4AWnjUJYmG/2Gc9dpyfVe4e27VwmQCOs0iCKnVnCl0aW Nk3lHM76vNkebl1S804UBwwwohQ7xgFiqRO/TRbXnKBasVhtxHgyhPuFFCqUpYka rKlJY2Z8j+7cGK5srJGGzxN8ayCwjgDmcXyzDjwKgpVmD6n/EXAhKCaV7sQYpptm c3Gzqlw+Zk28FfxKgsrXnRhZZ7fL/MU4P0QVb0Buu4I2Ectc2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAGkXBCBWblkFMZAc7qBH/U0voRYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvMzI1MmYwMWQtMzEzYS0z MjE5LTkzYmYtODQzZWEwMzM5NTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+/7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK2E8tHt18EvQBr3PKDkPZo7qO2ELgdwoPMMAPtyW27GkpLaoXoF5RHW 6V1QiaQaleUKSC4F6QvCXW/PGtx9B3JrPuhOR+j5YtBtTwunJ8MyPgYpLpX6UFEu jx4rf6yOPZI9cq/9kpr6rq4R30aTyUe1eHpprFiNizAb3OvAQIw/2GThg6owSSb2 i7jfXE8QlJs1Dxnu7feI2tgJT1SbdKQQjC72Wsvh+y5iB35vxcM04DeY8gHSXQYq Sp0TCzxD4aes5nNtUw4fF3rRtmNvs5vHyzMjw71J2u6l82+du5YsH5asQ9ogJrav xDG2VtWYCDzMYYKeQAkgDEgrY94YfGA= -----END CERTIFICATE-----Generated at Sat Aug 29 09:06:46 2026 by rpki-client