$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/affa716b-9631-4506-aee5-dc69f79f9fca/00327c20-9984-361a-853f-6cbbc1f92466.roa File: 00327c20-9984-361a-853f-6cbbc1f92466.roa (raw, json) Hash identifier: YM1Xs3rGqbtc2ZKNbr3SMuZJWp9RxM3ciRdkLLyJHM0= Subject key identifier: 57:A7:67:8D:7A:FA:A9:19:DD:61:8B:3F:1C:40:8C:4C:20:96:11:24 Certificate issuer: /CN=affa716b-9631-4506-aee5-dc69f79f9fca Certificate serial: 010D0C9F4328584EF44CCDC42A187DC54EC0DA40 Authority key identifier: 29:19:82:08:B8:76:5D:5B:AE:B9:2E:10:DA:8C:CB:F2:93:7F:A2:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/affa716b-9631-4506-aee5-dc69f79f9fca.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/affa716b-9631-4506-aee5-dc69f79f9fca/00327c20-9984-361a-853f-6cbbc1f92466.roa Signing time: Tue 25 Aug 2026 13:00:12 +0000 ROA not before: Tue 25 Aug 2026 13:00:12 +0000 ROA not after: Mon 23 Nov 2026 14:00:12 +0000 asID: 979 IP address blocks: 23.141.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/affa716b-9631-4506-aee5-dc69f79f9fca/affa716b-9631-4506-aee5-dc69f79f9fca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/affa716b-9631-4506-aee5-dc69f79f9fca/affa716b-9631-4506-aee5-dc69f79f9fca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/affa716b-9631-4506-aee5-dc69f79f9fca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:4c:cd:c4:2a:18:7d:c5:4e:c0:da:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=affa716b-9631-4506-aee5-dc69f79f9fca Validity Not Before: Aug 25 13:00:12 2026 GMT Not After : Nov 23 14:00:12 2026 GMT Subject: CN=2bd024c3-3fd4-457a-9658-a67f3deffc73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:07:ef:25:eb:ec:ed:b9:44:dd:81:e2:30:7f: 8f:e3:9d:df:e4:87:06:a7:d1:53:7d:b6:8d:a2:2d: d0:25:1a:fb:c1:21:51:97:52:80:fd:82:2c:86:80: 2a:42:98:0f:1c:38:dc:2c:4f:fe:19:85:b6:29:6a: 9a:74:53:75:ce:d1:20:47:87:49:25:14:af:82:b1: d1:3f:67:a0:21:41:bd:99:81:84:29:43:e3:f4:03: 04:10:ea:a3:72:a1:c2:a8:20:91:a1:ab:30:7d:8e: 2a:d3:22:46:9f:28:85:ef:11:17:7a:94:0d:98:40: ea:02:08:88:8d:8a:f5:5f:a7:a3:74:74:e6:1f:06: 99:a0:bb:4f:d4:2a:68:64:d4:51:7e:76:60:c8:8f: 97:c8:c3:0d:d1:10:9b:66:71:a0:69:c2:f2:7e:7a: f6:75:d9:f2:b8:cf:f4:90:ae:3f:f5:62:8b:84:0f: dd:fc:ae:8a:5c:d7:8c:17:e7:56:7a:9d:e1:ce:80: 23:c0:e2:e3:d3:73:da:5a:13:69:ed:63:98:2f:b1: c7:03:46:96:57:03:c9:64:e6:05:a2:75:9f:01:2e: d5:fa:36:2a:2c:68:5d:04:25:4e:19:a3:14:ac:43: ba:fe:65:d4:48:6e:86:9e:6e:c3:26:72:7c:63:97: 64:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:A7:67:8D:7A:FA:A9:19:DD:61:8B:3F:1C:40:8C:4C:20:96:11:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/affa716b-9631-4506-aee5-dc69f79f9fca/00327c20-9984-361a-853f-6cbbc1f92466.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/affa716b-9631-4506-aee5-dc69f79f9fca/affa716b-9631-4506-aee5-dc69f79f9fca.crl X509v3 Authority Key Identifier: keyid:29:19:82:08:B8:76:5D:5B:AE:B9:2E:10:DA:8C:CB:F2:93:7F:A2:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/affa716b-9631-4506-aee5-dc69f79f9fca.cer sbgp-ipAddrBlock: critical IPv4: 23.141.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:a4:10:81:c1:91:91:4f:62:31:63:19:d1:be:a2:d3:f9:af: 90:0c:df:2f:37:19:c1:28:ac:b8:f5:d5:77:58:8b:81:10:15: 1d:38:85:1c:a0:86:af:11:5f:9a:06:46:7d:16:92:08:6e:cf: 61:7b:39:e0:15:aa:d2:c5:c3:77:4b:27:3d:40:56:4c:5f:b9: 05:ea:51:f1:a9:3e:cf:3a:d0:3f:d0:64:96:1d:73:d2:f7:1f: f9:ff:a2:24:da:d7:fb:b6:ec:cf:11:7e:f1:9e:87:b1:c2:c6: c6:02:cb:39:62:12:df:3c:e7:ef:3a:f8:0d:44:95:a2:6f:7c: 77:1c:bb:52:51:a8:16:e3:32:d6:c8:6f:b6:90:ff:83:e1:dc: 23:a1:49:b9:29:30:72:54:98:bc:58:c5:21:88:a9:a3:ed:3a: da:c1:23:13:b8:90:18:12:0f:60:8c:d8:c1:b3:65:ce:de:ab: bb:ba:05:7a:1b:b8:4d:d0:2f:54:c8:89:71:21:fd:54:cd:77: c0:45:c1:cb:c1:a9:30:a5:e4:60:2e:ac:a6:26:04:f6:f7:00: 16:87:7f:c6:61:50:39:92:d3:ab:84:dc:2c:e2:e4:be:82:f8: f6:c5:73:26:c0:96:35:15:00:92:b4:ea:2c:e7:9d:ef:03:a8: 3d:ed:b6:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE70TM3EKhh9xU7A2kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZmYTcxNmItOTYzMS00NTA2LWFlZTUtZGM2OWY3OWY5 ZmNhMB4XDTI2MDgyNTEzMDAxMloXDTI2MTEyMzE0MDAxMlowLzEtMCsGA1UEAxMk MmJkMDI0YzMtM2ZkNC00NTdhLTk2NTgtYTY3ZjNkZWZmYzczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAfvJevs7blE3YHiMH+P453f5IcGp9FTfbaN oi3QJRr7wSFRl1KA/YIshoAqQpgPHDjcLE/+GYW2KWqadFN1ztEgR4dJJRSvgrHR P2egIUG9mYGEKUPj9AMEEOqjcqHCqCCRoaswfY4q0yJGnyiF7xEXepQNmEDqAgiI jYr1X6ejdHTmHwaZoLtP1CpoZNRRfnZgyI+XyMMN0RCbZnGgacLyfnr2ddnyuM/0 kK4/9WKLhA/d/K6KXNeMF+dWep3hzoAjwOLj03PaWhNp7WOYL7HHA0aWVwPJZOYF onWfAS7V+jYqLGhdBCVOGaMUrEO6/mXUSG6Gnm7DJnJ8Y5dk8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFenZ416+qkZ3WGLPxxAjEwglhEkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9hZmZh NzE2Yi05NjMxLTQ1MDYtYWVlNS1kYzY5Zjc5ZjlmY2EvMDAzMjdjMjAtOTk4NC0z NjFhLTg1M2YtNmNiYmMxZjkyNDY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYWZmYTcxNmItOTYzMS00NTA2LWFl ZTUtZGM2OWY3OWY5ZmNhL2FmZmE3MTZiLTk2MzEtNDUwNi1hZWU1LWRjNjlmNzlm OWZjYS5jcmwwHwYDVR0jBBgwFoAUKRmCCLh2XVuuuS4Q2ozL8pN/oskwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9hZmZhNzE2Yi05NjMxLTQ1MDYtYWVlNS1kYzY5 Zjc5ZjlmY2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF43UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmkEIHBkZFPYjFjGdG+otP5r5AM3y83GcEorLj11XdYi4EQFR04hRyg hq8RX5oGRn0Wkghuz2F7OeAVqtLFw3dLJz1AVkxfuQXqUfGpPs860D/QZJYdc9L3 H/n/oiTa1/u27M8RfvGeh7HCxsYCyzliEt885+86+A1ElaJvfHccu1JRqBbjMtbI b7aQ/4Ph3COhSbkpMHJUmLxYxSGIqaPtOtrBIxO4kBgSD2CM2MGzZc7eq7u6BXob uE3QL1TIiXEh/VTNd8BFwcvBqTCl5GAurKYmBPb3ABaHf8ZhUDmS06uE3Czi5L6C +PbFcybAljUVAJK06iznne8DqD3ttpI= -----END CERTIFICATE-----Generated at Sat Sep 19 12:42:27 2026 by rpki-client