$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/d68b1747-8766-30c7-9761-0368f3106f64.roa File: d68b1747-8766-30c7-9761-0368f3106f64.roa (raw, json) Hash identifier: R78tc6076q83g90VEoPHPLj0eauCiHomTKKbUVRg370= Subject key identifier: B0:03:76:12:9B:0A:C0:10:0E:B6:26:8A:35:C7:A6:84:3C:E5:19:88 Certificate issuer: /CN=b35fc23a-e422-4c61-a25a-b73b0963b6f7 Certificate serial: 010D0C9F4328584E736A256C5155DFA0DCE951BA Authority key identifier: 8D:2F:5E:64:9C:37:77:AC:CC:4E:75:18:07:BF:9C:67:69:6A:1D:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/d68b1747-8766-30c7-9761-0368f3106f64.roa Signing time: Fri 10 Jul 2026 09:00:12 +0000 ROA not before: Fri 10 Jul 2026 09:00:12 +0000 ROA not after: Thu 08 Oct 2026 09:00:12 +0000 asID: 30690 IP address blocks: 23.171.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/b35fc23a-e422-4c61-a25a-b73b0963b6f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/b35fc23a-e422-4c61-a25a-b73b0963b6f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:73:6a:25:6c:51:55:df:a0:dc:e9:51:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b35fc23a-e422-4c61-a25a-b73b0963b6f7 Validity Not Before: Jul 10 09:00:12 2026 GMT Not After : Oct 8 09:00:12 2026 GMT Subject: CN=4c927eed-ea47-44f2-9551-b34edebb8df6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ef:62:2b:2a:15:46:83:3f:d1:35:8a:08:7b: 96:5f:54:18:a9:08:8f:17:aa:d3:7e:c7:2c:e4:5e: 77:22:af:ca:96:33:7a:27:8d:eb:9b:c8:13:8d:87: 6e:3a:60:d5:a0:ee:a3:3a:7f:eb:5f:d8:cb:88:b3: 30:dd:08:9e:2c:0c:ba:4c:13:0e:8a:e3:c4:00:6a: 7c:8b:aa:9b:d7:56:75:28:e4:86:87:85:dd:ff:3c: a4:bd:87:e6:06:a7:20:02:2d:3c:29:31:1e:fb:d1: 74:b5:1d:18:a0:92:aa:63:6f:f6:1e:f0:97:03:05: 36:36:61:39:82:ab:c3:72:4b:ba:9b:43:87:03:a9: ae:af:26:1a:ae:09:d2:ab:b4:41:0d:93:2e:87:f6: 2d:2c:76:ca:3c:22:42:68:fb:29:4e:30:95:05:d4: 0b:d6:b1:70:79:d9:20:98:6b:70:79:4a:ba:13:52: f6:6e:4b:3c:42:dc:18:57:90:9e:19:4f:02:43:15: b8:1a:15:4d:93:00:8a:d1:a2:b6:a5:0e:2a:e6:02: fe:93:d3:c9:e9:36:b4:31:42:81:e7:f9:71:60:50: 17:37:9f:6b:62:4d:36:1d:e6:e6:7c:ff:86:24:ac: b6:8d:6c:e4:81:1c:a8:f0:81:42:03:1f:98:2d:2c: 17:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:03:76:12:9B:0A:C0:10:0E:B6:26:8A:35:C7:A6:84:3C:E5:19:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/d68b1747-8766-30c7-9761-0368f3106f64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/b35fc23a-e422-4c61-a25a-b73b0963b6f7.crl X509v3 Authority Key Identifier: keyid:8D:2F:5E:64:9C:37:77:AC:CC:4E:75:18:07:BF:9C:67:69:6A:1D:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7.cer sbgp-ipAddrBlock: critical IPv4: 23.171.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:05:c7:60:35:e1:19:f3:9c:00:37:8c:f2:94:d1:b3:53:74: c9:d7:8e:1d:23:2c:70:ec:c7:cc:be:da:69:e0:be:b5:f2:b9: 1d:94:92:bf:ac:12:66:ac:cf:75:b0:8e:46:84:a4:ae:f4:fb: 82:56:d1:94:38:85:c3:3e:78:a3:4d:ce:7a:a0:8f:59:2a:b6: d9:21:67:b0:dc:da:c6:52:d5:65:b2:b9:05:3b:db:28:90:99: bb:b1:01:9d:ef:71:52:2f:41:0a:06:7a:e1:dc:37:ae:73:32: d6:6b:22:f2:a7:f7:99:b9:05:ec:96:36:94:7d:db:94:85:81: bd:23:2a:e2:9f:69:3d:44:cf:65:01:83:41:47:63:65:a8:c8: 2e:dc:a9:c5:97:45:dc:c9:7d:e5:8c:1a:70:f6:c2:ca:74:88: 4d:57:f7:3f:cc:99:65:14:fa:35:ac:f9:75:54:51:22:6c:47: d0:a4:47:c9:02:89:f7:de:81:10:69:cd:60:8a:be:83:69:b3: a3:9c:73:bb:9d:2b:00:03:ed:6a:ae:83:c9:44:8f:53:84:56: f7:8d:50:83:b8:0c:ae:23:89:ee:f7:33:ae:91:69:a7:88:d3: 2f:69:27:f4:10:05:a0:45:8f:59:c6:4c:38:bf:18:42:98:1a: cd:bd:2f:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5zaiVsUVXfoNzpUbowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjM1ZmMyM2EtZTQyMi00YzYxLWEyNWEtYjczYjA5NjNi NmY3MB4XDTI2MDcxMDA5MDAxMloXDTI2MTAwODA5MDAxMlowLzEtMCsGA1UEAxMk NGM5MjdlZWQtZWE0Ny00NGYyLTk1NTEtYjM0ZWRlYmI4ZGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmu9iKyoVRoM/0TWKCHuWX1QYqQiPF6rTfscs 5F53Iq/KljN6J43rm8gTjYduOmDVoO6jOn/rX9jLiLMw3QieLAy6TBMOiuPEAGp8 i6qb11Z1KOSGh4Xd/zykvYfmBqcgAi08KTEe+9F0tR0YoJKqY2/2HvCXAwU2NmE5 gqvDcku6m0OHA6muryYargnSq7RBDZMuh/YtLHbKPCJCaPspTjCVBdQL1rFwedkg mGtweUq6E1L2bks8QtwYV5CeGU8CQxW4GhVNkwCK0aK2pQ4q5gL+k9PJ6Ta0MUKB 5/lxYFAXN59rYk02HebmfP+GJKy2jWzkgRyo8IFCAx+YLSwXCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLADdhKbCsAQDrYmijXHpoQ85RmIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iMzVm YzIzYS1lNDIyLTRjNjEtYTI1YS1iNzNiMDk2M2I2ZjcvZDY4YjE3NDctODc2Ni0z MGM3LTk3NjEtMDM2OGYzMTA2ZjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjM1ZmMyM2EtZTQyMi00YzYxLWEy NWEtYjczYjA5NjNiNmY3L2IzNWZjMjNhLWU0MjItNGM2MS1hMjVhLWI3M2IwOTYz YjZmNy5jcmwwHwYDVR0jBBgwFoAUjS9eZJw3d6zMTnUYB7+cZ2lqHf4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iMzVmYzIzYS1lNDIyLTRjNjEtYTI1YS1iNzNi MDk2M2I2ZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6tIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABUFx2A14RnznAA3jPKU0bNTdMnXjh0jLHDsx8y+2mngvrXyuR2Ukr+s Emasz3WwjkaEpK70+4JW0ZQ4hcM+eKNNznqgj1kqttkhZ7Dc2sZS1WWyuQU72yiQ mbuxAZ3vcVIvQQoGeuHcN65zMtZrIvKn95m5BeyWNpR925SFgb0jKuKfaT1Ez2UB g0FHY2WoyC7cqcWXRdzJfeWMGnD2wsp0iE1X9z/MmWUU+jWs+XVUUSJsR9CkR8kC iffegRBpzWCKvoNps6Occ7udKwAD7Wqug8lEj1OEVveNUIO4DK4jie73M66RaaeI 0y9pJ/QQBaBFj1nGTDi/GEKYGs29L9w= -----END CERTIFICATE-----Generated at Thu Jul 23 21:45:17 2026 by rpki-client