$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9e180184-106e-41ea-a049-5451e20c2840/40bcea70-8fcd-385a-a3c2-2c5fa5e55fa3.roa File: 40bcea70-8fcd-385a-a3c2-2c5fa5e55fa3.roa (raw, json) Hash identifier: 2/UoLiKNPooujOiZapMuHxgpoKmioGBCLTckHI77NCY= Subject key identifier: BB:8F:BC:EE:09:4C:87:0B:A0:DF:42:6F:21:C2:1B:8C:14:F3:E4:C3 Certificate issuer: /CN=9e180184-106e-41ea-a049-5451e20c2840 Certificate serial: 010D0C9F4328584E5A49FBEBCD5523A5CD714DC0 Authority key identifier: AC:0A:2F:67:F9:65:3C:E3:67:93:67:32:95:E2:99:0D:41:8A:86:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9e180184-106e-41ea-a049-5451e20c2840.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9e180184-106e-41ea-a049-5451e20c2840/40bcea70-8fcd-385a-a3c2-2c5fa5e55fa3.roa Signing time: Wed 01 Jul 2026 09:00:12 +0000 ROA not before: Wed 01 Jul 2026 09:00:12 +0000 ROA not after: Tue 29 Sep 2026 09:00:12 +0000 asID: 401511 IP address blocks: 23.129.228.0/24 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9e180184-106e-41ea-a049-5451e20c2840/9e180184-106e-41ea-a049-5451e20c2840.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9e180184-106e-41ea-a049-5451e20c2840/9e180184-106e-41ea-a049-5451e20c2840.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9e180184-106e-41ea-a049-5451e20c2840.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5a:49:fb:eb:cd:55:23:a5:cd:71:4d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e180184-106e-41ea-a049-5451e20c2840 Validity Not Before: Jul 1 09:00:12 2026 GMT Not After : Sep 29 09:00:12 2026 GMT Subject: CN=12e36beb-61f7-4a75-b0bf-caf44657f39c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f2:ce:40:51:a4:00:e6:96:63:95:ee:cd:e4: e4:da:3c:f7:da:fe:bb:cd:7a:3b:3b:79:8d:1e:e9: b5:ba:c4:ca:11:e5:18:ab:9c:2d:80:71:2f:b0:ce: 29:f3:b5:7c:f1:21:cb:51:1f:09:6f:0f:d0:4a:8d: 1a:21:1b:b1:19:53:1f:64:92:a4:12:cf:36:14:dc: 41:99:f1:34:dd:68:e4:5f:3d:17:6e:88:36:11:52: e3:d1:46:f9:a2:fe:da:0b:71:81:5e:5e:22:98:08: 61:1c:8c:c5:50:4b:78:6e:6d:88:84:42:21:73:93: 0c:fe:74:5a:27:ca:bb:63:e5:fa:c1:3a:7c:a6:88: e7:db:a8:12:64:44:bf:00:81:34:8c:36:80:38:cc: 22:f8:29:a7:20:6c:48:32:36:55:4c:47:7c:5f:7f: b8:dd:99:59:8c:c9:10:a4:f4:d4:8e:cd:5b:64:52: 3a:68:a9:98:54:d0:17:c8:08:d6:0e:d2:dc:3c:94: e3:e3:ca:b6:6f:90:e9:88:38:e1:ca:0e:8a:15:01: 98:9b:fe:d7:8b:b8:67:05:10:17:62:a1:52:de:37: d8:d5:d6:71:32:19:6e:9c:e4:45:39:42:32:3b:08: 0c:c5:45:68:19:df:08:8b:98:4e:5d:f6:cf:fd:11: 2f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:8F:BC:EE:09:4C:87:0B:A0:DF:42:6F:21:C2:1B:8C:14:F3:E4:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9e180184-106e-41ea-a049-5451e20c2840/40bcea70-8fcd-385a-a3c2-2c5fa5e55fa3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9e180184-106e-41ea-a049-5451e20c2840/9e180184-106e-41ea-a049-5451e20c2840.crl X509v3 Authority Key Identifier: keyid:AC:0A:2F:67:F9:65:3C:E3:67:93:67:32:95:E2:99:0D:41:8A:86:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9e180184-106e-41ea-a049-5451e20c2840.cer sbgp-ipAddrBlock: critical IPv4: 23.129.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:67:d7:48:40:88:cf:59:00:de:e4:e1:5e:54:e7:ae:be:b8: af:84:b1:be:bd:50:74:ba:52:f4:51:72:8f:00:8a:50:c7:bf: fb:4a:ed:7a:f8:98:05:be:ae:ec:97:15:d2:11:1d:52:d0:a9: e9:0b:70:84:d2:91:85:2b:a4:ce:2e:ff:5e:d1:7c:0b:78:a5: ed:bd:b0:c2:5f:53:50:d0:d4:7d:fd:0f:4f:e7:1a:a0:06:19: 1f:6a:d1:a9:c6:6a:f7:e3:fe:d5:8b:30:2f:ab:74:24:6a:27: 74:61:6e:95:fc:9b:6b:2b:84:ab:9a:bf:dd:f4:78:7a:05:17: 0b:02:b0:36:9f:3f:d1:b1:34:ef:af:21:b5:04:22:cc:07:f7: 84:d1:2f:ed:ad:6d:de:09:00:9c:13:67:bc:35:52:ec:16:62: d9:fc:fb:cd:66:6b:a8:0c:41:ab:83:2f:e6:c9:d6:d7:e0:16: f9:31:bc:14:69:63:a1:b2:19:77:9a:a3:74:2c:e4:12:a0:9f: 86:b1:83:8e:31:3b:57:53:0b:18:6f:49:02:cc:d1:16:67:aa: a8:65:79:2d:2d:da:a2:c9:9d:c2:1f:5a:5c:bf:62:71:79:d3: a9:e0:53:3f:72:8f:94:11:e6:bb:d3:c3:88:7e:18:78:b0:db: 2b:f0:49:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5aSfvrzVUjpc1xTcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWUxODAxODQtMTA2ZS00MWVhLWEwNDktNTQ1MWUyMGMy ODQwMB4XDTI2MDcwMTA5MDAxMloXDTI2MDkyOTA5MDAxMlowLzEtMCsGA1UEAxMk MTJlMzZiZWItNjFmNy00YTc1LWIwYmYtY2FmNDQ2NTdmMzljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/LOQFGkAOaWY5XuzeTk2jz32v67zXo7O3mN Hum1usTKEeUYq5wtgHEvsM4p87V88SHLUR8Jbw/QSo0aIRuxGVMfZJKkEs82FNxB mfE03WjkXz0Xbog2EVLj0Ub5ov7aC3GBXl4imAhhHIzFUEt4bm2IhEIhc5MM/nRa J8q7Y+X6wTp8pojn26gSZES/AIE0jDaAOMwi+CmnIGxIMjZVTEd8X3+43ZlZjMkQ pPTUjs1bZFI6aKmYVNAXyAjWDtLcPJTj48q2b5DpiDjhyg6KFQGYm/7Xi7hnBRAX YqFS3jfY1dZxMhlunORFOUIyOwgMxUVoGd8Ii5hOXfbP/REvlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLuPvO4JTIcLoN9CbyHCG4wU8+TDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85ZTE4 MDE4NC0xMDZlLTQxZWEtYTA0OS01NDUxZTIwYzI4NDAvNDBiY2VhNzAtOGZjZC0z ODVhLWEzYzItMmM1ZmE1ZTU1ZmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOWUxODAxODQtMTA2ZS00MWVhLWEw NDktNTQ1MWUyMGMyODQwLzllMTgwMTg0LTEwNmUtNDFlYS1hMDQ5LTU0NTFlMjBj Mjg0MC5jcmwwHwYDVR0jBBgwFoAUrAovZ/llPONnk2cyleKZDUGKhh0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85ZTE4MDE4NC0xMDZlLTQxZWEtYTA0OS01NDUx ZTIwYzI4NDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4HkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH1n10hAiM9ZAN7k4V5U566+uK+Esb69UHS6UvRRco8AilDHv/tK7Xr4 mAW+ruyXFdIRHVLQqekLcITSkYUrpM4u/17RfAt4pe29sMJfU1DQ1H39D0/nGqAG GR9q0anGavfj/tWLMC+rdCRqJ3RhbpX8m2srhKuav930eHoFFwsCsDafP9GxNO+v IbUEIswH94TRL+2tbd4JAJwTZ7w1UuwWYtn8+81ma6gMQauDL+bJ1tfgFvkxvBRp Y6GyGXeao3Qs5BKgn4axg44xO1dTCxhvSQLM0RZnqqhleS0t2qLJncIfWly/YnF5 06ngUz9yj5QR5rvTw4h+GHiw2yvwSRI= -----END CERTIFICATE-----Generated at Mon Jul 6 20:09:54 2026 by rpki-client