$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/af859d3a-f370-3b41-8740-16cfaf599d3a.roa File: af859d3a-f370-3b41-8740-16cfaf599d3a.roa (raw, json) Hash identifier: W8Znp+4mFUE9/tZ0pzJRRbUM4vGOLU4oO7VytsMEqv0= Subject key identifier: 56:56:69:8B:72:43:5A:73:41:74:24:9E:99:BA:8C:8C:8C:BC:D2:60 Certificate issuer: /CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9 Certificate serial: 010D0C9F4328584E8E2AA9B770F235D2D5562F80 Authority key identifier: CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/af859d3a-f370-3b41-8740-16cfaf599d3a.roa Signing time: Sun 19 Jul 2026 22:59:16 +0000 ROA not before: Sun 19 Jul 2026 22:59:16 +0000 ROA not after: Sat 17 Oct 2026 22:59:16 +0000 asID: 834 IP address blocks: 43.245.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8e:2a:a9:b7:70:f2:35:d2:d5:56:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9 Validity Not Before: Jul 19 22:59:16 2026 GMT Not After : Oct 17 22:59:16 2026 GMT Subject: CN=eee0624d-425c-4ab3-9113-eb805a135759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:5c:ab:83:fe:ea:01:2d:36:ec:1c:a8:db:d9: 00:b7:7e:20:e9:76:ef:2b:60:33:9b:3b:96:99:d4: 4d:81:af:27:d8:a0:08:87:af:37:5b:8e:55:fe:e2: 12:78:05:86:eb:2b:0b:d6:ef:18:f0:8a:4b:86:b4: be:cd:31:a3:70:19:54:4e:0e:e6:84:d1:a1:65:01: 09:41:e7:09:fd:78:b6:ab:b7:82:b0:b5:ac:0f:63: a2:63:c6:f3:c8:19:94:e8:8f:61:e0:85:17:7a:b3: 13:81:76:e1:a5:a9:1f:80:a7:4f:56:76:e9:a7:b1: 75:2f:ef:21:24:95:e6:c9:4c:24:a7:d3:0a:02:22: db:11:03:63:f0:74:7c:bf:b2:4c:18:fa:fb:98:7c: 72:73:fd:a3:b2:c4:f0:b9:f9:54:68:de:4b:60:04: 3e:5a:14:bf:7b:08:d5:6a:6e:5f:d1:76:06:5d:b0: 0a:1c:16:80:a6:90:41:bc:e7:14:fc:b2:1b:68:86: 97:6b:d3:d4:0f:e3:76:89:1e:c8:e4:86:7f:b5:c0: 5e:af:b6:e6:e3:50:a4:01:59:59:ff:94:cc:49:10: 95:f0:d1:4d:0f:cc:d3:8d:d6:0a:a7:fd:a0:f5:3b: 98:7f:10:17:39:68:9b:9f:30:02:41:2d:90:d2:f4: fd:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:56:69:8B:72:43:5A:73:41:74:24:9E:99:BA:8C:8C:8C:BC:D2:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/af859d3a-f370-3b41-8740-16cfaf599d3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.crl X509v3 Authority Key Identifier: keyid:CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer sbgp-ipAddrBlock: critical IPv4: 43.245.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:17:0d:76:7d:8d:ec:d9:09:a1:f1:9a:fe:0a:d4:c9:66:1b: 1c:78:37:2f:98:bb:3c:d5:9f:36:24:33:ab:d4:3f:b9:f0:1f: fa:10:9d:11:66:fb:61:23:bb:0e:c7:10:3b:7c:31:fa:65:44: 80:01:b9:a9:f2:2c:ff:47:1a:0e:0e:3d:6e:16:dd:24:bb:da: a3:5a:7a:31:e8:a3:83:ce:40:4b:b9:d9:f9:f5:5f:8e:c4:f2: df:88:dd:10:cf:09:93:46:ee:44:a9:59:0e:16:11:6e:77:d4: 34:43:62:45:94:31:20:0b:4b:49:bd:8a:9a:4a:f3:d6:1d:eb: 15:22:90:f5:b8:cd:35:e7:41:51:a6:ad:17:f6:7d:ab:3f:dc: ad:93:af:87:4a:9b:56:02:15:4d:4a:4d:a1:1d:38:48:c6:69: 10:80:45:04:4a:53:43:03:43:06:47:6c:c3:26:c4:09:10:37: 7f:ad:df:65:71:a0:61:b2:66:8f:b9:e9:f1:d4:18:5a:bd:8c: 6d:fc:9e:99:a9:77:20:4a:fe:a0:43:e2:3c:92:84:ba:ff:4c: 03:30:7a:92:df:9f:39:7a:6c:08:33:93:d4:89:28:bf:06:da: 0f:3a:6d:e1:94:65:b3:16:ce:ae:2b:07:c2:cf:52:5d:a9:7b: 07:93:1f:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6OKqm3cPI10tVWL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjAyZGM2ZTctZmExYS00YWNmLWEwMzYtNWI0NDg3MTAw ZGU5MB4XDTI2MDcxOTIyNTkxNloXDTI2MTAxNzIyNTkxNlowLzEtMCsGA1UEAxMk ZWVlMDYyNGQtNDI1Yy00YWIzLTkxMTMtZWI4MDVhMTM1NzU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVyrg/7qAS027Byo29kAt34g6XbvK2AzmzuW mdRNga8n2KAIh683W45V/uISeAWG6ysL1u8Y8IpLhrS+zTGjcBlUTg7mhNGhZQEJ QecJ/Xi2q7eCsLWsD2OiY8bzyBmU6I9h4IUXerMTgXbhpakfgKdPVnbpp7F1L+8h JJXmyUwkp9MKAiLbEQNj8HR8v7JMGPr7mHxyc/2jssTwuflUaN5LYAQ+WhS/ewjV am5f0XYGXbAKHBaAppBBvOcU/LIbaIaXa9PUD+N2iR7I5IZ/tcBer7bm41CkAVlZ /5TMSRCV8NFND8zTjdYKp/2g9TuYfxAXOWibnzACQS2Q0vT93QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFZWaYtyQ1pzQXQknpm6jIyMvNJgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iMDJk YzZlNy1mYTFhLTRhY2YtYTAzNi01YjQ0ODcxMDBkZTkvYWY4NTlkM2EtZjM3MC0z YjQxLTg3NDAtMTZjZmFmNTk5ZDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjAyZGM2ZTctZmExYS00YWNmLWEw MzYtNWI0NDg3MTAwZGU5L2IwMmRjNmU3LWZhMWEtNGFjZi1hMDM2LTViNDQ4NzEw MGRlOS5jcmwwHwYDVR0jBBgwFoAUzajON082SuE49vB+z212scrE6D4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iMDJkYzZlNy1mYTFhLTRhY2YtYTAzNi01YjQ0 ODcxMDBkZTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAK/XuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD4XDXZ9jezZCaHxmv4K1MlmGxx4Ny+YuzzVnzYkM6vUP7nwH/oQnRFm +2Ejuw7HEDt8MfplRIABuanyLP9HGg4OPW4W3SS72qNaejHoo4POQEu52fn1X47E 8t+I3RDPCZNG7kSpWQ4WEW531DRDYkWUMSALS0m9ippK89Yd6xUikPW4zTXnQVGm rRf2fas/3K2Tr4dKm1YCFU1KTaEdOEjGaRCARQRKU0MDQwZHbMMmxAkQN3+t32Vx oGGyZo+56fHUGFq9jG38npmpdyBK/qBD4jyShLr/TAMwepLfnzl6bAgzk9SJKL8G 2g86beGUZbMWzq4rB8LPUl2peweTHzA= -----END CERTIFICATE-----Generated at Fri Jul 24 13:38:15 2026 by rpki-client