$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/1652fdb9-05d0-3c4c-a3f6-1debfcfb924e.roa File: 1652fdb9-05d0-3c4c-a3f6-1debfcfb924e.roa (raw, json) Hash identifier: iQdkjuj7Ooaiu1O+rt6sHNwiEQBm+U/MCZfd93xYpX0= Subject key identifier: 87:C9:5C:95:45:CE:F4:82:53:DC:0D:3A:13:FC:D4:45:A2:F5:91:55 Certificate issuer: /CN=b42cd78d-c3f1-471a-931a-26eaf5a872f3 Certificate serial: 010D0C9F4328584E97B50163F360775749439000 Authority key identifier: 0A:F3:1E:F6:71:CB:5B:F5:26:03:2D:37:EE:66:DD:C8:8B:6D:54:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/1652fdb9-05d0-3c4c-a3f6-1debfcfb924e.roa Signing time: Thu 23 Jul 2026 09:00:11 +0000 ROA not before: Thu 23 Jul 2026 09:00:11 +0000 ROA not after: Wed 21 Oct 2026 09:00:11 +0000 asID: 53727 IP address blocks: 23.172.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:97:b5:01:63:f3:60:77:57:49:43:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b42cd78d-c3f1-471a-931a-26eaf5a872f3 Validity Not Before: Jul 23 09:00:11 2026 GMT Not After : Oct 21 09:00:11 2026 GMT Subject: CN=bed3ea92-f720-49e2-a369-54afacb97853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:00:6f:73:07:4c:90:8a:62:d7:f7:d4:35:65: de:13:c9:95:65:32:bb:05:28:d6:e3:c5:46:e2:f7: 12:1e:cf:7a:16:c9:f2:da:c4:75:15:15:ce:7a:70: 12:cb:db:54:a4:6b:56:35:a3:f5:48:40:00:6b:ff: c8:81:af:4a:0f:ff:59:fa:07:ab:69:6b:6b:5d:04: c5:73:90:62:ad:ab:5c:b6:90:f4:4b:5b:73:69:d7: b0:31:1b:31:16:8d:ed:41:fb:15:bc:34:fe:bc:1a: 5d:6e:7c:c5:ee:6a:7d:99:c9:c5:f2:3e:98:fa:c5: 79:64:90:69:04:6d:e7:ff:32:ce:30:01:5c:5c:d5: bf:28:c1:13:16:f8:fc:d5:53:28:7b:f7:85:fc:ad: 11:ba:4a:ce:2f:75:4e:e1:1b:c0:46:09:09:44:2d: b4:c1:47:79:59:32:23:5d:f1:81:f0:51:2a:11:6c: 49:38:42:07:59:b3:5f:20:08:ad:ba:e4:c1:32:f7: 6d:c8:43:89:25:27:fe:5b:5c:09:de:26:9f:2f:3d: 21:3d:9d:17:b7:ab:75:e3:08:07:2c:72:02:9f:a4: d6:e1:b4:32:ca:26:e5:b2:9f:c8:ef:40:6a:5c:0d: bf:57:aa:fd:95:d3:8d:b4:97:91:57:46:fa:a3:cc: a4:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:C9:5C:95:45:CE:F4:82:53:DC:0D:3A:13:FC:D4:45:A2:F5:91:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/1652fdb9-05d0-3c4c-a3f6-1debfcfb924e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.crl X509v3 Authority Key Identifier: keyid:0A:F3:1E:F6:71:CB:5B:F5:26:03:2D:37:EE:66:DD:C8:8B:6D:54:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer sbgp-ipAddrBlock: critical IPv4: 23.172.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:a1:a1:fc:58:6d:2e:84:87:fd:f2:b8:66:8d:af:ae:65:1a: 7c:55:d9:9f:62:ce:d7:d0:cc:2d:c9:db:07:6b:03:6d:7a:eb: 07:4a:50:51:36:3d:64:b0:4a:c6:8d:fc:0c:11:a5:c8:0c:81: b3:c0:2c:61:f9:4b:c1:27:e6:4a:ca:01:bf:2e:6c:82:49:7e: 3b:af:89:b0:35:c1:31:3d:91:cc:45:9c:36:b8:ab:c6:9b:b2: 99:90:24:f4:49:ce:90:da:b0:2b:38:64:d1:a3:7e:ab:95:f8: e2:e8:c7:b8:07:79:33:3a:ff:a7:76:02:89:b0:88:f8:56:55: b2:9c:7d:4e:cb:90:ab:8b:ef:b6:f9:4b:46:7a:2a:db:e0:5f: 87:0b:38:f4:11:f4:0b:9f:e5:19:46:95:5c:71:31:d1:0d:1e: 5e:70:25:f2:46:60:58:c9:a6:77:a2:50:87:dc:92:64:ef:f3: 85:86:dd:72:8b:aa:ae:ae:ed:61:13:f6:57:a0:27:7e:61:57: 09:e3:d9:7b:e2:a9:79:19:75:c9:24:0c:d0:0f:fb:45:76:d6: 6d:bc:b1:c5:a3:76:9f:35:e2:95:e5:55:46:07:67:9e:d2:b8: 12:03:b6:ed:a5:99:52:fc:07:90:ad:2b:3f:cc:22:ce:60:df: 43:c9:de:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6XtQFj82B3V0lDkAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQyY2Q3OGQtYzNmMS00NzFhLTkzMWEtMjZlYWY1YTg3 MmYzMB4XDTI2MDcyMzA5MDAxMVoXDTI2MTAyMTA5MDAxMVowLzEtMCsGA1UEAxMk YmVkM2VhOTItZjcyMC00OWUyLWEzNjktNTRhZmFjYjk3ODUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQBvcwdMkIpi1/fUNWXeE8mVZTK7BSjW48VG 4vcSHs96Fsny2sR1FRXOenASy9tUpGtWNaP1SEAAa//Iga9KD/9Z+geraWtrXQTF c5BiratctpD0S1tzadewMRsxFo3tQfsVvDT+vBpdbnzF7mp9mcnF8j6Y+sV5ZJBp BG3n/zLOMAFcXNW/KMETFvj81VMoe/eF/K0RukrOL3VO4RvARgkJRC20wUd5WTIj XfGB8FEqEWxJOEIHWbNfIAituuTBMvdtyEOJJSf+W1wJ3iafLz0hPZ0Xt6t14wgH LHICn6TW4bQyyiblsp/I70BqXA2/V6r9ldONtJeRV0b6o8ykqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIfJXJVFzvSCU9wNOhP81EWi9ZFVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iNDJj ZDc4ZC1jM2YxLTQ3MWEtOTMxYS0yNmVhZjVhODcyZjMvMTY1MmZkYjktMDVkMC0z YzRjLWEzZjYtMWRlYmZjZmI5MjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjQyY2Q3OGQtYzNmMS00NzFhLTkz MWEtMjZlYWY1YTg3MmYzL2I0MmNkNzhkLWMzZjEtNDcxYS05MzFhLTI2ZWFmNWE4 NzJmMy5jcmwwHwYDVR0jBBgwFoAUCvMe9nHLW/UmAy037mbdyIttVN8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iNDJjZDc4ZC1jM2YxLTQ3MWEtOTMxYS0yNmVh ZjVhODcyZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6w4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFGhofxYbS6Eh/3yuGaNr65lGnxV2Z9iztfQzC3J2wdrA2166wdKUFE2 PWSwSsaN/AwRpcgMgbPALGH5S8En5krKAb8ubIJJfjuvibA1wTE9kcxFnDa4q8ab spmQJPRJzpDasCs4ZNGjfquV+OLox7gHeTM6/6d2AomwiPhWVbKcfU7LkKuL77b5 S0Z6KtvgX4cLOPQR9Auf5RlGlVxxMdENHl5wJfJGYFjJpneiUIfckmTv84WG3XKL qq6u7WET9legJ35hVwnj2XviqXkZdckkDNAP+0V21m28scWjdp814pXlVUYHZ57S uBIDtu2lmVL8B5CtKz/MIs5g30PJ3rA= -----END CERTIFICATE-----Generated at Fri Jul 24 12:59:05 2026 by rpki-client