$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2c2d2b6e-86ad-42ce-9f37-1c1f69efa871/9cddb93c-d15f-368f-b4c7-9146332ae632.roa File: 9cddb93c-d15f-368f-b4c7-9146332ae632.roa (raw, json) Hash identifier: cpNnPns0wuXRFiX4k1tL6If1yMjerScS2pQID2iBYwA= Subject key identifier: 43:66:BD:8C:49:DD:3E:E5:CA:EF:B4:C4:CF:C4:85:1C:99:87:7C:DC Certificate issuer: /CN=2c2d2b6e-86ad-42ce-9f37-1c1f69efa871 Certificate serial: 010D0C9F4328584EA8EC526CAECAB06D4B45CA80 Authority key identifier: 31:62:ED:F7:A2:34:9C:95:C9:82:09:B9:68:A6:96:16:A4:85:2A:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2c2d2b6e-86ad-42ce-9f37-1c1f69efa871.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2c2d2b6e-86ad-42ce-9f37-1c1f69efa871/9cddb93c-d15f-368f-b4c7-9146332ae632.roa Signing time: Wed 29 Jul 2026 13:00:12 +0000 ROA not before: Wed 29 Jul 2026 13:00:12 +0000 ROA not after: Tue 27 Oct 2026 13:00:12 +0000 asID: 401805 IP address blocks: 23.141.108.0/24 maxlen: 24 2602:f5f7::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2c2d2b6e-86ad-42ce-9f37-1c1f69efa871/2c2d2b6e-86ad-42ce-9f37-1c1f69efa871.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2c2d2b6e-86ad-42ce-9f37-1c1f69efa871/2c2d2b6e-86ad-42ce-9f37-1c1f69efa871.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2c2d2b6e-86ad-42ce-9f37-1c1f69efa871.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a8:ec:52:6c:ae:ca:b0:6d:4b:45:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c2d2b6e-86ad-42ce-9f37-1c1f69efa871 Validity Not Before: Jul 29 13:00:12 2026 GMT Not After : Oct 27 13:00:12 2026 GMT Subject: CN=236ca1d8-60da-49fb-bc93-6ac16976f817 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d7:df:04:0b:3f:12:ce:10:da:aa:f2:f1:20: 4b:c8:af:99:79:44:4b:ed:53:ce:22:d2:25:cf:62: 7c:19:35:e0:b1:c3:ff:0c:b7:e3:79:37:7b:7c:8c: 32:27:3d:56:1b:4d:0c:db:6e:6f:42:35:2c:6a:69: 81:ba:58:e7:13:49:c3:0e:44:29:02:27:5c:de:e1: a9:1e:46:9e:3e:51:6b:4a:81:dc:40:8c:cc:f5:ab: 56:15:a1:66:a9:a0:95:4a:74:3d:51:6b:b8:38:e9: 26:a2:5a:2d:59:38:2a:8c:6b:56:e0:a2:a8:8e:7e: b9:b7:42:49:81:cd:67:88:d1:8b:78:ce:d4:f2:3c: db:13:0c:1e:80:28:18:bd:a5:76:f5:11:ce:3c:44: 8e:c5:65:c7:01:50:8a:59:f0:38:40:cf:bd:ce:af: 0d:61:09:f6:26:7c:26:7f:5c:9c:72:71:cb:d5:b2: ed:ea:5d:a0:1c:e2:3d:40:07:7e:ec:e2:72:d5:3a: cd:f7:d8:4e:36:d1:8e:50:59:74:8b:98:76:a6:4a: 18:e3:45:17:f6:7e:e7:e1:ec:28:3f:88:b9:fe:c8: 74:03:b9:a9:cc:fb:b5:c9:ac:9e:83:6e:a9:dd:2b: e9:14:96:1e:db:07:9b:91:26:b4:1d:59:d7:bc:6e: 15:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:66:BD:8C:49:DD:3E:E5:CA:EF:B4:C4:CF:C4:85:1C:99:87:7C:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2c2d2b6e-86ad-42ce-9f37-1c1f69efa871/9cddb93c-d15f-368f-b4c7-9146332ae632.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2c2d2b6e-86ad-42ce-9f37-1c1f69efa871/2c2d2b6e-86ad-42ce-9f37-1c1f69efa871.crl X509v3 Authority Key Identifier: keyid:31:62:ED:F7:A2:34:9C:95:C9:82:09:B9:68:A6:96:16:A4:85:2A:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2c2d2b6e-86ad-42ce-9f37-1c1f69efa871.cer sbgp-ipAddrBlock: critical IPv4: 23.141.108.0/24 IPv6: 2602:f5f7::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:da:e1:b4:39:c9:f6:06:9a:4f:93:ab:7a:2f:cb:e0:bb:f0: 5e:ab:c5:c3:da:94:e9:10:a7:a0:78:50:d3:d1:3b:f6:de:ee: 2e:58:c1:1d:20:f6:cc:78:6a:d1:43:d3:87:f4:93:16:76:35: db:b2:08:80:79:71:de:d5:b1:d7:fb:20:f0:f4:50:5f:07:43: 15:3a:0a:91:5c:80:83:fc:66:c4:5f:27:0e:12:6d:29:04:94: 62:29:3d:37:94:a3:48:37:ae:da:da:c5:d9:b0:cc:66:06:27: 53:17:cb:20:8b:4f:bb:c0:55:82:6a:05:ad:e9:90:5a:3a:ac: 07:bd:cc:ec:97:bc:61:8b:02:f3:50:64:45:70:9a:56:67:d7: b8:36:10:f8:3b:90:76:54:75:64:b4:9f:a9:bb:7d:b8:ea:9a: a6:75:5d:0e:b5:a1:e8:38:ab:a5:7d:33:11:d4:7a:0b:0b:36: 5f:7d:58:48:16:5f:f6:b4:51:b1:37:e7:74:72:eb:93:67:d5: d2:18:5b:63:9f:bc:57:a6:ca:75:68:d8:82:b0:8a:8a:ed:de: b6:90:e0:b7:12:04:09:ba:89:30:d3:eb:6f:ff:b8:d2:9a:be: b0:34:e5:80:df:59:9c:9a:0f:ef:c0:93:5a:db:a1:40:79:0d: 33:e2:ad:c4 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE6o7FJsrsqwbUtFyoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmMyZDJiNmUtODZhZC00MmNlLTlmMzctMWMxZjY5ZWZh ODcxMB4XDTI2MDcyOTEzMDAxMloXDTI2MTAyNzEzMDAxMlowLzEtMCsGA1UEAxMk MjM2Y2ExZDgtNjBkYS00OWZiLWJjOTMtNmFjMTY5NzZmODE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztffBAs/Es4Q2qry8SBLyK+ZeURL7VPOItIl z2J8GTXgscP/DLfjeTd7fIwyJz1WG00M225vQjUsammBuljnE0nDDkQpAidc3uGp HkaePlFrSoHcQIzM9atWFaFmqaCVSnQ9UWu4OOkmolotWTgqjGtW4KKojn65t0JJ gc1niNGLeM7U8jzbEwwegCgYvaV29RHOPESOxWXHAVCKWfA4QM+9zq8NYQn2Jnwm f1yccnHL1bLt6l2gHOI9QAd+7OJy1TrN99hONtGOUFl0i5h2pkoY40UX9n7n4ewo P4i5/sh0A7mpzPu1yayeg26p3SvpFJYe2webkSa0HVnXvG4VgwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFENmvYxJ3T7lyu+0xM/EhRyZh3zcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yYzJk MmI2ZS04NmFkLTQyY2UtOWYzNy0xYzFmNjllZmE4NzEvOWNkZGI5M2MtZDE1Zi0z NjhmLWI0YzctOTE0NjMzMmFlNjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMmMyZDJiNmUtODZhZC00MmNlLTlm MzctMWMxZjY5ZWZhODcxLzJjMmQyYjZlLTg2YWQtNDJjZS05ZjM3LTFjMWY2OWVm YTg3MS5jcmwwHwYDVR0jBBgwFoAUMWLt96I0nJXJggm5aKaWFqSFKocwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yYzJkMmI2ZS04NmFkLTQyY2UtOWYzNy0xYzFm NjllZmE4NzEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF41sMA4E AgACMAgDBgAmAvX3ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBD2uG0Ocn2BppPk6t6L8vgu/Beq8XD2pTp EKegeFDT0Tv23u4uWMEdIPbMeGrRQ9OH9JMWdjXbsgiAeXHe1bHX+yDw9FBfB0MV OgqRXICD/GbEXycOEm0pBJRiKT03lKNIN67a2sXZsMxmBidTF8sgi0+7wFWCagWt 6ZBaOqwHvczsl7xhiwLzUGRFcJpWZ9e4NhD4O5B2VHVktJ+pu3246pqmdV0OtaHo OKulfTMR1HoLCzZffVhIFl/2tFGxN+d0cuuTZ9XSGFtjn7xXpsp1aNiCsIqK7d62 kOC3EgQJuokw0+tv/7jSmr6wNOWA31mcmg/vwJNa26FAeQ0z4q3E -----END CERTIFICATE-----Generated at Fri Aug 21 01:13:54 2026 by rpki-client