$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/cf57be58-bf9f-36ed-8c8d-829a5f932254.roa File: cf57be58-bf9f-36ed-8c8d-829a5f932254.roa (raw, json) Hash identifier: RB2aU4ID9Z04xOV28nH9xW1bM3J4cbFFNDWe/Urca9I= Subject key identifier: 26:71:DC:91:F5:E1:D8:4A:03:6F:CE:61:6A:AA:37:7B:22:63:CF:0B Certificate issuer: /CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d Certificate serial: 010D0C9F4328584EA786E241FF1CB6D917AFCC40 Authority key identifier: 7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/cf57be58-bf9f-36ed-8c8d-829a5f932254.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 23428 IP address blocks: 23.136.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:86:e2:41:ff:1c:b6:d9:17:af:cc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=d7652576-22b1-4436-ab7c-a5246b9ef9b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:05:83:14:60:48:78:2c:81:c1:33:c9:83:72: 87:16:4f:e8:56:9b:18:7c:85:1b:5a:f9:73:5b:e6: 2c:64:13:8b:ac:4c:5b:e3:90:92:5a:77:30:2f:ba: 18:9c:d2:e8:7d:6f:6f:88:0c:fa:1a:95:00:13:19: a9:59:d5:b5:20:c1:84:41:8c:9b:08:7b:06:61:74: 7e:a0:d3:f9:74:ea:7f:19:2d:58:d2:06:4f:ce:31: 33:a1:21:d5:79:2d:21:da:86:af:ce:b4:3c:ec:f4: ef:5c:d0:a7:11:96:31:89:8a:78:1c:d4:d2:87:12: a4:42:5c:be:1f:57:9d:91:3f:06:63:49:1f:73:45: e2:ac:7a:82:59:52:7e:4e:e2:45:90:0d:03:df:47: ca:13:45:89:05:3f:0b:6c:ad:9e:25:45:4d:f0:f0: a7:3c:bf:b4:04:c9:3f:c4:dd:e4:fe:f3:2a:e2:5a: 5b:87:6d:e5:7f:54:58:be:76:d6:b6:2a:39:6d:61: 4c:f7:43:d3:17:65:bc:5f:fa:a3:53:55:c7:cd:32: 26:c0:c4:c8:52:3b:e4:10:2a:c5:cd:b4:5d:82:20: a0:83:86:bb:04:c5:70:aa:ea:18:41:17:2c:53:9e: 6b:88:58:a1:94:19:03:b8:03:f0:fb:53:9e:14:42: ea:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:71:DC:91:F5:E1:D8:4A:03:6F:CE:61:6A:AA:37:7B:22:63:CF:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/cf57be58-bf9f-36ed-8c8d-829a5f932254.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl X509v3 Authority Key Identifier: keyid:7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer sbgp-ipAddrBlock: critical IPv4: 23.136.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:5b:80:85:ab:8f:f3:2d:c7:03:25:73:85:c6:ac:06:bd:5c: b5:a7:70:0d:5e:cc:9b:51:a6:07:61:08:78:3b:0c:85:39:c9: 80:17:da:64:25:97:9b:97:74:0f:04:77:bc:01:1a:e3:03:66: 60:f7:50:07:9b:cb:52:e1:ac:83:56:1b:a3:09:59:f8:76:43: ef:28:de:78:ae:8f:54:89:df:69:45:79:be:6f:bd:dc:ef:98: f0:22:6d:9c:ba:22:de:73:63:d4:10:26:7d:86:aa:2d:6d:23: a1:82:c3:31:f3:be:54:23:47:d0:55:42:f2:f3:29:07:cd:34: 8a:c1:b5:17:6e:55:8d:dd:df:e5:89:82:81:2b:24:59:55:1e: 95:8b:3a:a6:2d:ce:6c:b4:39:ac:15:a8:df:59:ec:0e:be:fe: 25:66:d0:c9:db:09:36:96:fb:3e:69:3e:2a:b4:b5:57:a1:46: 01:fc:09:b1:93:25:22:59:65:81:22:f5:41:bb:0f:69:f7:2a: 74:d4:9e:b7:cf:9c:7e:60:89:c6:3e:a1:f9:c0:20:76:4c:56: bb:4d:87:72:3a:a4:3d:f7:26:2e:5c:b8:2b:9f:45:c0:48:29: b1:4f:68:ac:8e:b3:81:bc:79:86:55:bd:99:de:da:30:2b:43: 7e:9d:a7:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nhuJB/xy22RevzEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjJmMDU4NWUtYTI4ZS00ZWFkLTliMWMtZGVmZDI5MWNl NTRkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZDc2NTI1NzYtMjJiMS00NDM2LWFiN2MtYTUyNDZiOWVmOWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAWDFGBIeCyBwTPJg3KHFk/oVpsYfIUbWvlz W+YsZBOLrExb45CSWncwL7oYnNLofW9viAz6GpUAExmpWdW1IMGEQYybCHsGYXR+ oNP5dOp/GS1Y0gZPzjEzoSHVeS0h2oavzrQ87PTvXNCnEZYxiYp4HNTShxKkQly+ H1edkT8GY0kfc0XirHqCWVJ+TuJFkA0D30fKE0WJBT8LbK2eJUVN8PCnPL+0BMk/ xN3k/vMq4lpbh23lf1RYvnbWtio5bWFM90PTF2W8X/qjU1XHzTImwMTIUjvkECrF zbRdgiCgg4a7BMVwquoYQRcsU55riFihlBkDuAPw+1OeFELqdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCZx3JH14dhKA2/OYWqqN3siY88LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMmYw NTg1ZS1hMjhlLTRlYWQtOWIxYy1kZWZkMjkxY2U1NGQvY2Y1N2JlNTgtYmY5Zi0z NmVkLThjOGQtODI5YTVmOTMyMjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjJmMDU4NWUtYTI4ZS00ZWFkLTli MWMtZGVmZDI5MWNlNTRkL2YyZjA1ODVlLWEyOGUtNGVhZC05YjFjLWRlZmQyOTFj ZTU0ZC5jcmwwHwYDVR0jBBgwFoAUe8Z4d4iTGVPnEQI5lG2LPRN6wo8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMmYwNTg1ZS1hMjhlLTRlYWQtOWIxYy1kZWZk MjkxY2U1NGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4jpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACxbgIWrj/MtxwMlc4XGrAa9XLWncA1ezJtRpgdhCHg7DIU5yYAX2mQl l5uXdA8Ed7wBGuMDZmD3UAeby1LhrINWG6MJWfh2Q+8o3niuj1SJ32lFeb5vvdzv mPAibZy6It5zY9QQJn2Gqi1tI6GCwzHzvlQjR9BVQvLzKQfNNIrBtRduVY3d3+WJ goErJFlVHpWLOqYtzmy0OawVqN9Z7A6+/iVm0MnbCTaW+z5pPiq0tVehRgH8CbGT JSJZZYEi9UG7D2n3KnTUnrfPnH5gicY+ofnAIHZMVrtNh3I6pD33Ji5cuCufRcBI KbFPaKyOs4G8eYZVvZne2jArQ36dp3o= -----END CERTIFICATE-----Generated at Wed Aug 26 02:31:00 2026 by rpki-client