$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e010bbaf-5843-4b16-89f9-4401d345db94/3ded7133-2047-3542-9ee3-1874a34023c7.roa File: 3ded7133-2047-3542-9ee3-1874a34023c7.roa (raw, json) Hash identifier: Z9o0uKuiV9ABJIL5HHJOLWiXFA6J/CVRyHxy2qu7r9Y= Subject key identifier: 60:47:F0:EC:E3:17:4E:0E:52:C9:9A:C5:66:10:56:E1:F8:0F:F4:50 Certificate issuer: /CN=e010bbaf-5843-4b16-89f9-4401d345db94 Certificate serial: 010D0C9F4328584EA79C99F980533C33DD836000 Authority key identifier: 61:D5:B9:92:11:DF:90:C2:D3:44:48:10:2E:44:6E:E3:4C:28:65:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e010bbaf-5843-4b16-89f9-4401d345db94.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e010bbaf-5843-4b16-89f9-4401d345db94/3ded7133-2047-3542-9ee3-1874a34023c7.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 401973 IP address blocks: 23.146.172.0/24 maxlen: 24 2602:f535::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e010bbaf-5843-4b16-89f9-4401d345db94/e010bbaf-5843-4b16-89f9-4401d345db94.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e010bbaf-5843-4b16-89f9-4401d345db94/e010bbaf-5843-4b16-89f9-4401d345db94.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e010bbaf-5843-4b16-89f9-4401d345db94.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 14 Aug 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9c:99:f9:80:53:3c:33:dd:83:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e010bbaf-5843-4b16-89f9-4401d345db94 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=3fa14ef3-7469-4857-83e1-4f47fcc50479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c0:37:33:a1:d7:73:cf:b4:9d:2f:3d:3e:fb: c1:cc:6e:0a:0b:c2:42:65:5d:a3:cb:d4:e8:c4:0e: 7d:b1:14:cc:b9:08:25:94:00:1b:d7:4a:c0:65:a6: c8:4f:37:37:ea:79:c0:94:5e:07:96:67:e3:1e:37: 80:2e:69:0d:48:ff:e7:fe:51:3c:e4:a0:f8:82:08: 0d:fb:01:26:72:63:39:48:de:40:99:7e:1f:88:bd: 26:17:1d:e8:e7:f5:8e:fb:37:50:a7:65:68:f7:ac: 68:53:5e:d7:07:d5:91:72:23:71:cb:74:5b:10:b1: 07:99:0a:0d:31:9f:2d:0e:24:4e:95:13:28:d3:bd: e2:0a:97:dc:97:52:22:70:28:88:6d:38:fc:ed:43: 76:5c:53:46:1f:a0:a4:f0:a6:2a:40:49:cb:fa:34: 8b:f0:53:31:d6:4a:0e:07:86:13:20:12:d5:71:53: 30:fe:04:3e:81:c5:92:b7:13:90:ca:27:40:ab:6c: 60:16:fb:6e:ec:10:ff:79:45:24:33:89:5b:07:fc: 47:1b:da:92:c3:84:b1:c4:51:35:17:b6:3b:c6:54: 73:be:5c:0a:22:3d:fd:d9:d8:5f:ca:d7:52:6e:f6: 2c:5a:f7:5d:52:9d:9d:0a:fa:24:22:91:bc:19:60: 87:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:47:F0:EC:E3:17:4E:0E:52:C9:9A:C5:66:10:56:E1:F8:0F:F4:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e010bbaf-5843-4b16-89f9-4401d345db94/3ded7133-2047-3542-9ee3-1874a34023c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e010bbaf-5843-4b16-89f9-4401d345db94/e010bbaf-5843-4b16-89f9-4401d345db94.crl X509v3 Authority Key Identifier: keyid:61:D5:B9:92:11:DF:90:C2:D3:44:48:10:2E:44:6E:E3:4C:28:65:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e010bbaf-5843-4b16-89f9-4401d345db94.cer sbgp-ipAddrBlock: critical IPv4: 23.146.172.0/24 IPv6: 2602:f535::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:6e:76:46:08:c1:15:81:02:0c:c5:64:ef:8d:1d:a0:10:2f: 16:84:0f:1d:d1:25:4c:ce:70:93:0d:62:b4:d6:88:f2:9a:ae: 6d:39:55:48:62:20:d0:de:0b:b3:7b:35:2b:bd:85:4e:0f:f3: 51:bc:58:44:3b:ce:2e:56:db:57:9b:d6:7e:7d:53:67:a1:09: 50:95:b4:ea:88:01:2d:2d:73:7d:0a:5f:49:55:c8:8f:dc:79: 9f:e9:d7:40:7d:a6:57:39:c4:af:b3:dd:09:0a:50:41:5b:cc: cb:41:88:3e:da:e2:30:76:f0:c0:2e:71:ab:ff:2d:49:83:a7: 09:f6:f6:6a:8f:2a:be:a3:ad:ed:34:ae:82:6c:e1:f9:7e:4b: 68:c3:2a:50:f2:1c:b0:7b:e3:1a:bf:c1:40:d9:b5:06:19:a2: 10:87:5c:87:90:39:64:9c:37:59:48:c3:2b:fe:c4:71:bf:e3: 26:ca:98:60:b3:19:b2:90:75:1b:0a:99:19:07:59:6d:9a:b0: a1:0c:17:05:c2:ea:17:1b:12:35:5a:00:49:21:7b:a4:6f:84: 65:0c:16:1f:29:36:64:08:d6:13:65:77:fd:0c:32:81:42:64: fd:22:bd:0b:18:6f:68:48:45:b9:d0:e9:c9:db:e8:2c:c3:c0: d5:cb:49:09 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE6nnJn5gFM8M92DYAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTAxMGJiYWYtNTg0My00YjE2LTg5ZjktNDQwMWQzNDVk Yjk0MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk M2ZhMTRlZjMtNzQ2OS00ODU3LTgzZTEtNGY0N2ZjYzUwNDc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsA3M6HXc8+0nS89PvvBzG4KC8JCZV2jy9To xA59sRTMuQgllAAb10rAZabITzc36nnAlF4HlmfjHjeALmkNSP/n/lE85KD4gggN +wEmcmM5SN5AmX4fiL0mFx3o5/WO+zdQp2Vo96xoU17XB9WRciNxy3RbELEHmQoN MZ8tDiROlRMo073iCpfcl1IicCiIbTj87UN2XFNGH6Ck8KYqQEnL+jSL8FMx1koO B4YTIBLVcVMw/gQ+gcWStxOQyidAq2xgFvtu7BD/eUUkM4lbB/xHG9qSw4SxxFE1 F7Y7xlRzvlwKIj392dhfytdSbvYsWvddUp2dCvokIpG8GWCHMwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFGBH8OzjF04OUsmaxWYQVuH4D/RQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9lMDEw YmJhZi01ODQzLTRiMTYtODlmOS00NDAxZDM0NWRiOTQvM2RlZDcxMzMtMjA0Ny0z NTQyLTllZTMtMTg3NGEzNDAyM2M3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZTAxMGJiYWYtNTg0My00YjE2LTg5 ZjktNDQwMWQzNDVkYjk0L2UwMTBiYmFmLTU4NDMtNGIxNi04OWY5LTQ0MDFkMzQ1 ZGI5NC5jcmwwHwYDVR0jBBgwFoAUYdW5khHfkMLTREgQLkRu40woZbcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9lMDEwYmJhZi01ODQzLTRiMTYtODlmOS00NDAx ZDM0NWRiOTQuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF5KsMA4E AgACMAgDBgAmAvU1ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB4bnZGCMEVgQIMxWTvjR2gEC8WhA8d0SVM znCTDWK01ojymq5tOVVIYiDQ3guzezUrvYVOD/NRvFhEO84uVttXm9Z+fVNnoQlQ lbTqiAEtLXN9Cl9JVciP3Hmf6ddAfaZXOcSvs90JClBBW8zLQYg+2uIwdvDALnGr /y1Jg6cJ9vZqjyq+o63tNK6CbOH5fktowypQ8hywe+Mav8FA2bUGGaIQh1yHkDlk nDdZSMMr/sRxv+MmyphgsxmykHUbCpkZB1ltmrChDBcFwuoXGxI1WgBJIXukb4Rl DBYfKTZkCNYTZXf9DDKBQmT9Ir0LGG9oSEW50OnJ2+gsw8DVy0kJ -----END CERTIFICATE-----Generated at Thu Aug 13 09:25:52 2026 by rpki-client