$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b25db122-9955-42d2-8413-be2d15a44347/db1c5ced-133b-3fa2-85a3-ec9c6ede35d1.roa File: db1c5ced-133b-3fa2-85a3-ec9c6ede35d1.roa (raw, json) Hash identifier: ZZvRx5DIeS+D59wCrVcYCkCo4846Cp+g9vZ915EvtvM= Subject key identifier: 52:0C:6C:01:3E:5D:49:CB:0D:8E:D9:4A:67:B1:65:9D:E4:A8:ED:A5 Certificate issuer: /CN=b25db122-9955-42d2-8413-be2d15a44347 Certificate serial: 010D0C9F4328584EC20C617B813FFA329BAA3300 Authority key identifier: 6E:4C:48:6C:3B:E6:A0:EC:D5:78:BA:4A:C2:97:8B:D8:17:90:AF:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b25db122-9955-42d2-8413-be2d15a44347.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b25db122-9955-42d2-8413-be2d15a44347/db1c5ced-133b-3fa2-85a3-ec9c6ede35d1.roa Signing time: Fri 07 Aug 2026 13:00:11 +0000 ROA not before: Fri 07 Aug 2026 13:00:11 +0000 ROA not after: Thu 05 Nov 2026 14:00:11 +0000 asID: 401859 IP address blocks: 23.142.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b25db122-9955-42d2-8413-be2d15a44347/b25db122-9955-42d2-8413-be2d15a44347.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b25db122-9955-42d2-8413-be2d15a44347/b25db122-9955-42d2-8413-be2d15a44347.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b25db122-9955-42d2-8413-be2d15a44347.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c2:0c:61:7b:81:3f:fa:32:9b:aa:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b25db122-9955-42d2-8413-be2d15a44347 Validity Not Before: Aug 7 13:00:11 2026 GMT Not After : Nov 5 14:00:11 2026 GMT Subject: CN=bdd29018-c8de-42a2-9b83-c31c364ae542 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3c:66:57:6d:58:89:40:5b:56:92:3d:a4:c6: 0b:9a:e1:6a:16:8d:da:9c:1b:e9:c7:04:ea:e9:b6: bf:9f:3d:86:ec:92:61:87:8c:19:14:c4:38:f9:51: 65:5b:e1:16:a1:ee:d4:6a:6b:c4:d3:2c:42:88:34: 7c:ee:03:96:b4:a3:f1:a8:37:f3:4e:eb:89:76:f9: 23:62:6b:be:24:97:b8:f2:0f:f1:b0:dd:4c:d0:b6: 2a:d3:24:0a:37:17:ff:c8:9a:9a:13:b2:ec:d2:9a: a6:db:98:35:66:6f:6c:65:90:75:a1:e5:db:85:03: 61:1f:e7:0c:6a:d7:c2:6e:36:93:84:c9:a5:b6:87: d2:24:1e:ba:45:94:f1:ea:f1:d0:e7:be:7f:12:f3: e8:49:fc:97:da:dd:e3:1c:3f:0a:b0:00:bf:6c:2e: 4e:2c:19:12:e9:7d:77:ec:68:e9:b5:ff:53:ad:4e: e0:d6:fa:2b:06:04:85:b3:fd:b0:65:2b:20:6d:31: b5:11:58:6c:b4:88:43:a8:c5:1e:07:78:2c:e6:bf: b9:dc:b2:7d:c4:c6:aa:73:0f:b6:bd:fc:7f:ee:cf: 98:df:51:da:ff:0a:bd:06:0c:0d:41:8c:8a:52:08: bd:df:38:c1:40:91:8b:55:15:78:7a:9f:68:ef:39: d5:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:0C:6C:01:3E:5D:49:CB:0D:8E:D9:4A:67:B1:65:9D:E4:A8:ED:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b25db122-9955-42d2-8413-be2d15a44347/db1c5ced-133b-3fa2-85a3-ec9c6ede35d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b25db122-9955-42d2-8413-be2d15a44347/b25db122-9955-42d2-8413-be2d15a44347.crl X509v3 Authority Key Identifier: keyid:6E:4C:48:6C:3B:E6:A0:EC:D5:78:BA:4A:C2:97:8B:D8:17:90:AF:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b25db122-9955-42d2-8413-be2d15a44347.cer sbgp-ipAddrBlock: critical IPv4: 23.142.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:41:c0:39:34:80:4d:5a:21:9e:e4:47:ce:f4:5a:bb:1c:9f: 2f:f3:9d:78:b7:4d:ad:6d:81:d5:fe:9e:6d:6f:59:d4:c0:57: 0e:0b:56:c2:87:17:b3:40:7a:ad:5e:62:83:28:81:3b:74:21: 79:8d:6d:db:8e:d2:d9:6f:4d:2e:79:c9:5c:d0:c4:db:32:31: f0:d0:64:00:f0:15:fc:16:88:ca:52:6e:78:91:d2:e2:5a:cd: 6c:9f:44:20:33:7e:7c:01:c0:f4:38:77:1e:ba:3c:bc:aa:2d: 41:fe:27:9a:fa:0d:54:8e:af:52:fa:d3:cf:3d:8a:be:a2:9d: f7:5e:e1:68:46:3c:11:d7:0b:e5:c2:cf:b3:aa:4b:cd:7f:78: f0:c7:f7:b7:fb:59:26:45:c3:d3:d0:b1:47:a2:6c:a3:79:f5: 7d:e2:67:82:ab:98:38:54:60:4c:11:f6:83:ff:8a:b8:a6:74: 02:64:56:b9:7c:e7:a6:ac:37:5f:5a:48:cf:a2:f5:4f:65:12: d0:9e:2f:a5:09:25:69:e7:8f:eb:f6:de:a0:07:97:93:9f:96: 76:d4:00:c8:63:28:9e:b7:8c:e7:b6:42:10:cb:a4:3b:11:03: a6:12:9d:29:44:c6:00:84:77:30:a8:43:2b:f6:15:c3:aa:84: 3d:19:e2:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7CDGF7gT/6MpuqMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjI1ZGIxMjItOTk1NS00MmQyLTg0MTMtYmUyZDE1YTQ0 MzQ3MB4XDTI2MDgwNzEzMDAxMVoXDTI2MTEwNTE0MDAxMVowLzEtMCsGA1UEAxMk YmRkMjkwMTgtYzhkZS00MmEyLTliODMtYzMxYzM2NGFlNTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDxmV21YiUBbVpI9pMYLmuFqFo3anBvpxwTq 6ba/nz2G7JJhh4wZFMQ4+VFlW+EWoe7UamvE0yxCiDR87gOWtKPxqDfzTuuJdvkj Ymu+JJe48g/xsN1M0LYq0yQKNxf/yJqaE7Ls0pqm25g1Zm9sZZB1oeXbhQNhH+cM atfCbjaThMmltofSJB66RZTx6vHQ575/EvPoSfyX2t3jHD8KsAC/bC5OLBkS6X13 7Gjptf9TrU7g1vorBgSFs/2wZSsgbTG1EVhstIhDqMUeB3gs5r+53LJ9xMaqcw+2 vfx/7s+Y31Ha/wq9BgwNQYyKUgi93zjBQJGLVRV4ep9o7znVlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFIMbAE+XUnLDY7ZSmexZZ3kqO2lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iMjVk YjEyMi05OTU1LTQyZDItODQxMy1iZTJkMTVhNDQzNDcvZGIxYzVjZWQtMTMzYi0z ZmEyLTg1YTMtZWM5YzZlZGUzNWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYjI1ZGIxMjItOTk1NS00MmQyLTg0 MTMtYmUyZDE1YTQ0MzQ3L2IyNWRiMTIyLTk5NTUtNDJkMi04NDEzLWJlMmQxNWE0 NDM0Ny5jcmwwHwYDVR0jBBgwFoAUbkxIbDvmoOzVeLpKwpeL2BeQr+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iMjVkYjEyMi05OTU1LTQyZDItODQxMy1iZTJk MTVhNDQzNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF46cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFtBwDk0gE1aIZ7kR870Wrscny/znXi3Ta1tgdX+nm1vWdTAVw4LVsKH F7NAeq1eYoMogTt0IXmNbduO0tlvTS55yVzQxNsyMfDQZADwFfwWiMpSbniR0uJa zWyfRCAzfnwBwPQ4dx66PLyqLUH+J5r6DVSOr1L60889ir6infde4WhGPBHXC+XC z7OqS81/ePDH97f7WSZFw9PQsUeibKN59X3iZ4KrmDhUYEwR9oP/irimdAJkVrl8 56asN19aSM+i9U9lEtCeL6UJJWnnj+v23qAHl5OflnbUAMhjKJ63jOe2QhDLpDsR A6YSnSlExgCEdzCoQyv2FcOqhD0Z4tk= -----END CERTIFICATE-----Generated at Fri Aug 21 01:13:56 2026 by rpki-client