$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6cb2f24e-d112-4b22-a030-f85e88a245a8/cfa1fe0f-0368-33da-a131-dbb8902281a7.roa File: cfa1fe0f-0368-33da-a131-dbb8902281a7.roa (raw, json) Hash identifier: ngiSPxWjinWXYT+QzVmuNlVZ6RUlKn+DNIlViwtZfnY= Subject key identifier: D3:73:9B:03:23:9E:2F:94:00:F7:FE:46:59:D9:86:05:F6:73:A4:73 Certificate issuer: /CN=6cb2f24e-d112-4b22-a030-f85e88a245a8 Certificate serial: 010D0C9F4328584E41CEDE78E785C7DC7FFD3700 Authority key identifier: 7A:F4:0D:F0:19:77:78:E5:5C:3F:D8:F1:43:0A:C8:0C:0A:6D:0A:4A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6cb2f24e-d112-4b22-a030-f85e88a245a8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6cb2f24e-d112-4b22-a030-f85e88a245a8/cfa1fe0f-0368-33da-a131-dbb8902281a7.roa Signing time: Mon 22 Jun 2026 14:32:52 +0000 ROA not before: Mon 22 Jun 2026 14:32:52 +0000 ROA not after: Sun 20 Sep 2026 14:32:52 +0000 asID: 400045 IP address blocks: 23.159.180.0/24 maxlen: 24 2602:293::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6cb2f24e-d112-4b22-a030-f85e88a245a8/6cb2f24e-d112-4b22-a030-f85e88a245a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6cb2f24e-d112-4b22-a030-f85e88a245a8/6cb2f24e-d112-4b22-a030-f85e88a245a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6cb2f24e-d112-4b22-a030-f85e88a245a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:41:ce:de:78:e7:85:c7:dc:7f:fd:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cb2f24e-d112-4b22-a030-f85e88a245a8 Validity Not Before: Jun 22 14:32:52 2026 GMT Not After : Sep 20 14:32:52 2026 GMT Subject: CN=4866c098-20d4-436d-9a6c-91336796d048 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:b2:99:c8:29:27:92:d1:f1:9b:9b:d5:af:e9: 40:15:42:0c:6f:fd:e4:e1:0d:1f:f1:de:0c:73:f1: 95:fa:15:ab:70:62:ca:04:8e:6a:3a:2f:5f:bd:49: f3:b2:b7:cc:a7:bc:32:8d:40:98:f6:ab:0e:b0:3e: 08:e7:f7:75:04:7b:09:a2:33:3c:22:ac:be:7c:91: 50:4c:3a:6f:d0:77:72:3b:40:66:dd:09:1c:32:9c: 15:ec:d3:06:d4:f4:67:ee:61:ed:72:cd:f1:e1:eb: b9:59:10:ec:8b:e7:04:2b:51:4e:8a:a1:40:55:ee: 49:2f:99:da:24:f4:db:2c:f7:13:35:2b:72:e9:49: 73:bd:96:47:e4:5e:96:28:c2:f9:a5:9d:d0:f1:7f: a1:e8:cc:7e:88:20:28:8a:73:6b:9e:e8:e9:dd:78: 9e:a2:3d:6c:ca:8a:2a:3f:b8:03:ab:9b:1b:99:f3: 3f:04:f5:64:69:4f:04:84:80:80:77:00:b9:d9:c0: ea:72:3f:5f:34:67:68:7a:73:10:c6:21:06:92:17: d4:46:4f:c6:e0:63:38:e8:22:b8:cf:aa:15:96:21: c1:f7:18:25:55:54:ca:d7:19:b3:5f:5e:f7:cd:61: c9:6d:11:b1:c8:e0:5b:2e:e8:07:23:32:3a:b0:23: a4:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:73:9B:03:23:9E:2F:94:00:F7:FE:46:59:D9:86:05:F6:73:A4:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6cb2f24e-d112-4b22-a030-f85e88a245a8/cfa1fe0f-0368-33da-a131-dbb8902281a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6cb2f24e-d112-4b22-a030-f85e88a245a8/6cb2f24e-d112-4b22-a030-f85e88a245a8.crl X509v3 Authority Key Identifier: keyid:7A:F4:0D:F0:19:77:78:E5:5C:3F:D8:F1:43:0A:C8:0C:0A:6D:0A:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6cb2f24e-d112-4b22-a030-f85e88a245a8.cer sbgp-ipAddrBlock: critical IPv4: 23.159.180.0/24 IPv6: 2602:293::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:07:96:9f:b6:c5:e4:54:5e:9c:f3:c0:12:71:8b:d7:cc:18: 62:0e:16:7f:4e:90:9d:7c:cf:a9:a1:06:75:7c:a4:9e:75:be: b3:24:8f:ed:b7:32:dc:cc:77:d7:49:2f:f8:2b:f9:bb:c4:e9: 1c:c2:c9:9e:ec:12:c0:d2:5e:bf:09:13:cb:08:a8:c2:c8:e6: 1f:54:33:1b:35:90:4f:5d:0b:96:37:3d:72:ac:d4:74:10:4b: 82:a9:31:cf:8f:81:ec:81:f6:b4:2b:a4:7c:c3:bf:2d:4a:53: 16:99:12:ba:47:60:54:3b:34:28:ce:d2:f5:b3:eb:54:83:35: 8e:ad:50:b5:a3:a6:9d:92:4a:94:ad:f8:8d:c4:80:6a:dc:51: 12:2c:82:53:48:6e:92:33:eb:0f:1e:3f:a5:ad:54:96:f8:3a: 44:84:eb:c2:c5:37:06:e3:fb:c3:f3:40:bf:fc:14:e1:0d:31: b8:31:10:08:30:a7:d7:32:b6:88:b7:74:df:31:e7:e9:aa:47: 3f:60:c1:85:73:e9:b7:37:17:3d:06:f4:b5:6d:75:5c:38:c8: 5e:20:f9:8c:29:8a:ca:7d:18:eb:be:0f:82:b4:24:e1:03:6c: e7:50:ca:5b:73:c7:b4:c0:a6:26:37:64:77:9e:a7:d6:82:8d: 1e:ad:d9:95 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE5Bzt5454XH3H/9NwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmNiMmYyNGUtZDExMi00YjIyLWEwMzAtZjg1ZTg4YTI0 NWE4MB4XDTI2MDYyMjE0MzI1MloXDTI2MDkyMDE0MzI1MlowLzEtMCsGA1UEAxMk NDg2NmMwOTgtMjBkNC00MzZkLTlhNmMtOTEzMzY3OTZkMDQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6bKZyCknktHxm5vVr+lAFUIMb/3k4Q0f8d4M c/GV+hWrcGLKBI5qOi9fvUnzsrfMp7wyjUCY9qsOsD4I5/d1BHsJojM8Iqy+fJFQ TDpv0HdyO0Bm3QkcMpwV7NMG1PRn7mHtcs3x4eu5WRDsi+cEK1FOiqFAVe5JL5na JPTbLPcTNSty6UlzvZZH5F6WKML5pZ3Q8X+h6Mx+iCAoinNrnujp3Xieoj1syooq P7gDq5sbmfM/BPVkaU8EhICAdwC52cDqcj9fNGdoenMQxiEGkhfURk/G4GM46CK4 z6oVliHB9xglVVTK1xmzX173zWHJbRGxyOBbLugHIzI6sCOkQwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFNNzmwMjni+UAPf+RlnZhgX2c6RzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi82Y2Iy ZjI0ZS1kMTEyLTRiMjItYTAzMC1mODVlODhhMjQ1YTgvY2ZhMWZlMGYtMDM2OC0z M2RhLWExMzEtZGJiODkwMjI4MWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNmNiMmYyNGUtZDExMi00YjIyLWEw MzAtZjg1ZTg4YTI0NWE4LzZjYjJmMjRlLWQxMTItNGIyMi1hMDMwLWY4NWU4OGEy NDVhOC5jcmwwHwYDVR0jBBgwFoAUevQN8Bl3eOVcP9jxQwrIDAptCkowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi82Y2IyZjI0ZS1kMTEyLTRiMjItYTAzMC1mODVl ODhhMjQ1YTguY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF5+0MA4E AgACMAgDBgAmAgKTADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA+B5aftsXkVF6c88AScYvXzBhiDhZ/TpCd fM+poQZ1fKSedb6zJI/ttzLczHfXSS/4K/m7xOkcwsme7BLA0l6/CRPLCKjCyOYf VDMbNZBPXQuWNz1yrNR0EEuCqTHPj4Hsgfa0K6R8w78tSlMWmRK6R2BUOzQoztL1 s+tUgzWOrVC1o6adkkqUrfiNxIBq3FESLIJTSG6SM+sPHj+lrVSW+DpEhOvCxTcG 4/vD80C//BThDTG4MRAIMKfXMraIt3TfMefpqkc/YMGFc+m3Nxc9BvS1bXVcOMhe IPmMKYrKfRjrvg+CtCThA2znUMpbc8e0wKYmN2R3nqfWgo0erdmV -----END CERTIFICATE-----Generated at Fri Jul 24 13:26:49 2026 by rpki-client