$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ce3f1cab-5a87-4be3-8a2e-fc12e5ee6319/5519e4f6-5a45-36a9-9ac1-79f93fdae779.roa File: 5519e4f6-5a45-36a9-9ac1-79f93fdae779.roa (raw, json) Hash identifier: QAPpx+H1rBDtbVcjdJW+cNWDvDdkvyXVpdUBbl7IN4o= Subject key identifier: 64:35:6E:FF:5C:04:30:CD:66:5C:99:91:EB:DA:B1:A6:DD:79:64:F8 Certificate issuer: /CN=ce3f1cab-5a87-4be3-8a2e-fc12e5ee6319 Certificate serial: 010D0C9F4328584E9A7FD7B6CFBD04BDD4730180 Authority key identifier: 95:56:29:DD:34:D3:01:75:63:6E:F7:37:07:EC:8B:3C:6E:B3:72:36 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ce3f1cab-5a87-4be3-8a2e-fc12e5ee6319.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ce3f1cab-5a87-4be3-8a2e-fc12e5ee6319/5519e4f6-5a45-36a9-9ac1-79f93fdae779.roa Signing time: Fri 24 Jul 2026 09:00:12 +0000 ROA not before: Fri 24 Jul 2026 09:00:12 +0000 ROA not after: Thu 22 Oct 2026 09:00:12 +0000 asID: 26939 IP address blocks: 23.130.220.0/24 maxlen: 24 2602:f76b::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ce3f1cab-5a87-4be3-8a2e-fc12e5ee6319/ce3f1cab-5a87-4be3-8a2e-fc12e5ee6319.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ce3f1cab-5a87-4be3-8a2e-fc12e5ee6319/ce3f1cab-5a87-4be3-8a2e-fc12e5ee6319.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ce3f1cab-5a87-4be3-8a2e-fc12e5ee6319.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9a:7f:d7:b6:cf:bd:04:bd:d4:73:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce3f1cab-5a87-4be3-8a2e-fc12e5ee6319 Validity Not Before: Jul 24 09:00:12 2026 GMT Not After : Oct 22 09:00:12 2026 GMT Subject: CN=ea758cf8-3bb9-4c40-9b9f-c0989d7436ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:58:b4:ce:82:a9:3c:1a:df:4d:02:0f:c4:fe: ac:fb:da:6a:cd:f4:b7:ef:69:a2:03:08:21:18:77: 9f:93:23:74:98:ab:c0:12:61:bc:e2:1a:66:e2:ce: 64:b3:92:d5:6e:3f:67:8f:b1:a4:d7:d0:43:8b:07: 70:43:95:ed:26:37:09:ab:19:63:88:c6:5a:b7:b6: 9c:1d:9a:9a:55:60:d0:f3:3f:c5:7f:39:e6:0e:ae: d9:e1:e0:a2:84:c8:87:65:9e:af:cb:76:e0:54:90: bd:59:03:fd:0b:81:2b:57:e6:57:ab:43:04:50:7d: 14:7d:fe:5f:a1:e5:cf:e8:14:f4:07:b9:de:94:6d: c2:d8:5f:e6:b5:b9:94:84:26:06:b6:d0:49:b0:13: 82:18:21:99:3c:e8:80:bf:0e:9b:73:ac:7c:aa:6c: a1:6d:6d:ff:09:b8:79:d4:d1:0e:59:df:a0:3c:b0: c8:ab:c2:54:84:be:44:28:75:86:e2:9c:71:07:29: bb:71:5a:ed:76:56:d2:42:da:b5:31:af:48:fc:ba: 71:b5:ff:8e:2a:ba:fa:71:54:d6:78:fe:e5:12:57: 36:50:13:13:57:66:06:30:d8:7b:a1:4c:4b:20:bf: e1:e9:22:ec:cf:2a:7e:fb:26:94:89:2e:76:e4:f7: 2f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:35:6E:FF:5C:04:30:CD:66:5C:99:91:EB:DA:B1:A6:DD:79:64:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ce3f1cab-5a87-4be3-8a2e-fc12e5ee6319/5519e4f6-5a45-36a9-9ac1-79f93fdae779.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ce3f1cab-5a87-4be3-8a2e-fc12e5ee6319/ce3f1cab-5a87-4be3-8a2e-fc12e5ee6319.crl X509v3 Authority Key Identifier: keyid:95:56:29:DD:34:D3:01:75:63:6E:F7:37:07:EC:8B:3C:6E:B3:72:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ce3f1cab-5a87-4be3-8a2e-fc12e5ee6319.cer sbgp-ipAddrBlock: critical IPv4: 23.130.220.0/24 IPv6: 2602:f76b::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:d4:47:34:95:6a:93:37:f7:db:9c:52:6d:6c:f8:03:d1:c5: 34:d5:4c:05:9d:26:ea:a2:b9:52:b6:ee:a8:d3:07:5c:76:07: 8e:38:7c:f4:c6:6e:f0:67:c8:5b:1c:0f:a0:75:0e:41:8b:4c: 77:f2:8a:d7:8d:a6:df:76:dc:a7:1d:87:56:e0:58:f6:6f:08: 2c:8f:50:12:19:be:fc:2b:1e:1a:ff:63:8e:9e:03:30:b1:73: 7a:84:8c:f7:a4:36:f8:0e:bd:2c:8a:f3:7c:35:39:63:9d:fa: 3e:55:24:05:f3:d5:f6:fa:f5:ff:87:8a:88:76:a9:5d:a6:a0: 8e:46:19:9f:2d:77:66:fe:a7:23:0f:fb:51:c0:05:44:43:37: 74:ac:62:d5:9c:5f:15:fd:e3:d2:08:6c:2e:6a:9f:3f:13:1e: a7:d5:4a:01:8b:ef:5d:0f:d3:88:43:57:3b:62:f4:05:df:33: 47:dc:8e:68:b0:c8:f9:c8:ae:bd:2c:a0:23:b5:f0:1e:2c:66: bf:a0:b6:23:f6:50:62:3d:33:14:97:cc:d9:e7:fd:e1:12:50: fd:de:e5:04:77:d7:ca:8e:98:7e:77:fe:00:84:1a:e7:fe:c7: 16:81:67:36:5c:67:ce:46:06:7d:62:66:18:66:af:95:e9:95: e3:d6:56:df -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE6af9e2z70EvdRzAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2UzZjFjYWItNWE4Ny00YmUzLThhMmUtZmMxMmU1ZWU2 MzE5MB4XDTI2MDcyNDA5MDAxMloXDTI2MTAyMjA5MDAxMlowLzEtMCsGA1UEAxMk ZWE3NThjZjgtM2JiOS00YzQwLTliOWYtYzA5ODlkNzQzNmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFi0zoKpPBrfTQIPxP6s+9pqzfS372miAwgh GHefkyN0mKvAEmG84hpm4s5ks5LVbj9nj7Gk19BDiwdwQ5XtJjcJqxljiMZat7ac HZqaVWDQ8z/FfznmDq7Z4eCihMiHZZ6vy3bgVJC9WQP9C4ErV+ZXq0MEUH0Uff5f oeXP6BT0B7nelG3C2F/mtbmUhCYGttBJsBOCGCGZPOiAvw6bc6x8qmyhbW3/Cbh5 1NEOWd+gPLDIq8JUhL5EKHWG4pxxBym7cVrtdlbSQtq1Ma9I/Lpxtf+OKrr6cVTW eP7lElc2UBMTV2YGMNh7oUxLIL/h6SLszyp++yaUiS525Pcv+QIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFGQ1bv9cBDDNZlyZkevasabdeWT4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZTNm MWNhYi01YTg3LTRiZTMtOGEyZS1mYzEyZTVlZTYzMTkvNTUxOWU0ZjYtNWE0NS0z NmE5LTlhYzEtNzlmOTNmZGFlNzc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2UzZjFjYWItNWE4Ny00YmUzLThh MmUtZmMxMmU1ZWU2MzE5L2NlM2YxY2FiLTVhODctNGJlMy04YTJlLWZjMTJlNWVl NjMxOS5jcmwwHwYDVR0jBBgwFoAUlVYp3TTTAXVjbvc3B+yLPG6zcjYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZTNmMWNhYi01YTg3LTRiZTMtOGEyZS1mYzEy ZTVlZTYzMTkuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4LcMA4E AgACMAgDBgQmAvdrADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBb1Ec0lWqTN/fbnFJtbPgD0cU01UwFnSbq orlStu6o0wdcdgeOOHz0xm7wZ8hbHA+gdQ5Bi0x38orXjabfdtynHYdW4Fj2bwgs j1ASGb78Kx4a/2OOngMwsXN6hIz3pDb4Dr0sivN8NTljnfo+VSQF89X2+vX/h4qI dqldpqCORhmfLXdm/qcjD/tRwAVEQzd0rGLVnF8V/ePSCGwuap8/Ex6n1UoBi+9d D9OIQ1c7YvQF3zNH3I5osMj5yK69LKAjtfAeLGa/oLYj9lBiPTMUl8zZ5/3hElD9 3uUEd9fKjph+d/4AhBrn/scWgWc2XGfORgZ9YmYYZq+V6ZXj1lbf -----END CERTIFICATE-----Generated at Fri Jul 24 17:09:20 2026 by rpki-client