$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9caf1aed-80da-474d-8e77-0000ca0d6025/4b8af66a-af1d-325a-b05b-ca5f14d05fb6.roa File: 4b8af66a-af1d-325a-b05b-ca5f14d05fb6.roa (raw, json) Hash identifier: AyUvgmNG1bH8TaMr2gf9D74VMEVjQD0ByegeBXyhdgs= Subject key identifier: 64:56:97:B3:44:C3:A2:AD:76:CD:08:40:E6:A0:56:8C:EF:A6:29:D8 Certificate issuer: /CN=9caf1aed-80da-474d-8e77-0000ca0d6025 Certificate serial: 010D0C9F4328584E5A49FAB6C6EC7C704483C9C8 Authority key identifier: 10:EB:39:3F:86:C8:66:53:C6:41:1E:D4:8D:97:EB:71:99:4C:E6:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9caf1aed-80da-474d-8e77-0000ca0d6025.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9caf1aed-80da-474d-8e77-0000ca0d6025/4b8af66a-af1d-325a-b05b-ca5f14d05fb6.roa Signing time: Wed 01 Jul 2026 09:00:12 +0000 ROA not before: Wed 01 Jul 2026 09:00:12 +0000 ROA not after: Tue 29 Sep 2026 09:00:12 +0000 asID: 401911 IP address blocks: 23.143.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9caf1aed-80da-474d-8e77-0000ca0d6025/9caf1aed-80da-474d-8e77-0000ca0d6025.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9caf1aed-80da-474d-8e77-0000ca0d6025/9caf1aed-80da-474d-8e77-0000ca0d6025.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9caf1aed-80da-474d-8e77-0000ca0d6025.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5a:49:fa:b6:c6:ec:7c:70:44:83:c9:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9caf1aed-80da-474d-8e77-0000ca0d6025 Validity Not Before: Jul 1 09:00:12 2026 GMT Not After : Sep 29 09:00:12 2026 GMT Subject: CN=d3debc51-c53f-4668-95ec-64ae1bb7905d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:8a:11:f1:c9:eb:80:ee:35:4c:e5:f9:45:c2: 53:c4:aa:d6:ce:c7:40:b5:cb:3e:4d:01:6b:ce:2b: 89:ff:e7:56:cc:70:4e:75:42:a2:35:a3:f9:4d:1b: 8b:32:0a:4f:cf:bf:e4:0a:34:a9:6c:39:49:bf:8d: dc:97:51:af:ce:1f:11:70:65:4d:08:52:1b:27:4c: f3:2d:aa:62:4c:73:c8:8f:11:56:8d:83:98:18:65: 87:80:a4:be:9a:2f:52:6c:d9:0c:c1:4e:aa:c7:79: 2c:6b:3f:53:32:c7:3d:9d:0f:d2:0c:da:59:db:5b: a6:74:f4:c6:13:ef:76:ba:5e:e5:21:8b:53:92:9b: f4:2c:87:d6:f2:e0:e6:ca:75:9f:a8:cb:a3:4e:a6: 0f:41:87:ee:19:78:78:4d:ef:ce:ae:58:28:b5:ad: 9f:0b:41:d0:a2:2b:12:ac:b5:10:fb:d7:7d:83:80: 2b:7d:72:d3:57:4c:22:d9:03:ec:97:ce:82:26:ee: b5:23:37:9b:75:c3:c6:b5:e3:00:c6:da:10:04:d7: 34:ea:7e:c1:20:2a:50:6c:57:79:d9:0a:d6:00:69: de:32:4b:23:79:cb:6e:00:3a:38:f5:cf:cf:b9:4a: 40:52:5d:ab:2f:21:e0:d8:98:fc:94:18:85:27:0a: 98:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:56:97:B3:44:C3:A2:AD:76:CD:08:40:E6:A0:56:8C:EF:A6:29:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9caf1aed-80da-474d-8e77-0000ca0d6025/4b8af66a-af1d-325a-b05b-ca5f14d05fb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9caf1aed-80da-474d-8e77-0000ca0d6025/9caf1aed-80da-474d-8e77-0000ca0d6025.crl X509v3 Authority Key Identifier: keyid:10:EB:39:3F:86:C8:66:53:C6:41:1E:D4:8D:97:EB:71:99:4C:E6:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9caf1aed-80da-474d-8e77-0000ca0d6025.cer sbgp-ipAddrBlock: critical IPv4: 23.143.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:50:18:3c:67:2b:38:b9:ba:1f:ff:fb:8e:35:b3:cf:72:6a: 3e:87:a9:ac:67:68:68:4e:ed:ca:b1:60:74:4d:ba:5a:83:f5: 71:67:3d:90:c6:63:d9:c4:82:81:6f:53:f6:f8:58:35:95:4e: 9f:e7:05:bf:48:9d:a6:c0:39:32:90:04:23:e8:02:a3:8a:61: 95:ea:d5:9e:c6:70:00:2a:d6:69:ba:7e:db:fd:0d:79:0b:bc: a9:f9:85:83:b1:13:45:72:22:f1:90:77:02:42:fa:a8:37:86: 6e:8f:aa:e2:52:c7:d9:53:69:83:02:74:b9:a8:6a:77:a5:bf: 67:de:f4:d6:9d:30:f0:75:8b:c9:9d:d4:7c:68:78:e8:0e:51: b8:e9:8a:a7:e8:ef:14:25:cb:8c:07:02:59:8e:91:7f:e0:d8: 9d:b7:cd:78:48:6d:56:f0:36:1f:67:34:7b:0b:2d:71:5d:93: cc:94:95:f2:1b:46:a0:5f:00:c0:f5:3b:37:3d:b5:20:38:19: d2:aa:25:35:8a:61:20:91:bf:1d:07:03:33:9d:95:4a:6b:f5: 99:5f:d1:c1:ec:60:cf:18:6b:dc:1d:8b:5f:73:2b:5a:58:1a: 05:14:53:0b:e3:df:f8:da:b7:d6:2b:66:08:53:63:3e:81:bf: b6:15:11:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5aSfq2xux8cESDycgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWNhZjFhZWQtODBkYS00NzRkLThlNzctMDAwMGNhMGQ2 MDI1MB4XDTI2MDcwMTA5MDAxMloXDTI2MDkyOTA5MDAxMlowLzEtMCsGA1UEAxMk ZDNkZWJjNTEtYzUzZi00NjY4LTk1ZWMtNjRhZTFiYjc5MDVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9ooR8cnrgO41TOX5RcJTxKrWzsdAtcs+TQFr ziuJ/+dWzHBOdUKiNaP5TRuLMgpPz7/kCjSpbDlJv43cl1Gvzh8RcGVNCFIbJ0zz LapiTHPIjxFWjYOYGGWHgKS+mi9SbNkMwU6qx3ksaz9TMsc9nQ/SDNpZ21umdPTG E+92ul7lIYtTkpv0LIfW8uDmynWfqMujTqYPQYfuGXh4Te/Orlgota2fC0HQoisS rLUQ+9d9g4ArfXLTV0wi2QPsl86CJu61IzebdcPGteMAxtoQBNc06n7BICpQbFd5 2QrWAGneMksjectuADo49c/PuUpAUl2rLyHg2Jj8lBiFJwqY2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGRWl7NEw6Ktds0IQOagVozvpinYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85Y2Fm MWFlZC04MGRhLTQ3NGQtOGU3Ny0wMDAwY2EwZDYwMjUvNGI4YWY2NmEtYWYxZC0z MjVhLWIwNWItY2E1ZjE0ZDA1ZmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOWNhZjFhZWQtODBkYS00NzRkLThl NzctMDAwMGNhMGQ2MDI1LzljYWYxYWVkLTgwZGEtNDc0ZC04ZTc3LTAwMDBjYTBk NjAyNS5jcmwwHwYDVR0jBBgwFoAUEOs5P4bIZlPGQR7UjZfrcZlM5iswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85Y2FmMWFlZC04MGRhLTQ3NGQtOGU3Ny0wMDAw Y2EwZDYwMjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF490MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5QGDxnKzi5uh//+441s89yaj6HqaxnaGhO7cqxYHRNulqD9XFnPZDG Y9nEgoFvU/b4WDWVTp/nBb9InabAOTKQBCPoAqOKYZXq1Z7GcAAq1mm6ftv9DXkL vKn5hYOxE0VyIvGQdwJC+qg3hm6PquJSx9lTaYMCdLmoanelv2fe9NadMPB1i8md 1HxoeOgOUbjpiqfo7xQly4wHAlmOkX/g2J23zXhIbVbwNh9nNHsLLXFdk8yUlfIb RqBfAMD1Ozc9tSA4GdKqJTWKYSCRvx0HAzOdlUpr9Zlf0cHsYM8Ya9wdi19zK1pY GgUUUwvj3/jat9YrZghTYz6Bv7YVEVE= -----END CERTIFICATE-----Generated at Mon Jul 6 21:10:02 2026 by rpki-client