$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbf89b78-1e86-4629-abdd-682f04ffb165/8b4fea1c-8e70-3ac8-8442-ec4413e86e5a.roa File: 8b4fea1c-8e70-3ac8-8442-ec4413e86e5a.roa (raw, json) Hash identifier: zpX8Y8xOJA3B1D/TERPkgBMn4cPly2KdqmsyYBmrb5A= Subject key identifier: D0:E6:BD:5E:8A:C5:6A:B6:34:45:A2:CE:DC:FA:34:17:82:49:27:4E Certificate issuer: /CN=cbf89b78-1e86-4629-abdd-682f04ffb165 Certificate serial: 010D0C9F4328584E66DA1327F69E82E757639D00 Authority key identifier: 84:7F:A2:E1:13:B7:DC:E8:49:19:47:08:83:0D:CA:2B:DA:A1:6D:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbf89b78-1e86-4629-abdd-682f04ffb165.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbf89b78-1e86-4629-abdd-682f04ffb165/8b4fea1c-8e70-3ac8-8442-ec4413e86e5a.roa Signing time: Sun 05 Jul 2026 21:00:11 +0000 ROA not before: Sun 05 Jul 2026 21:00:11 +0000 ROA not after: Sat 03 Oct 2026 21:00:11 +0000 asID: 13737 IP address blocks: 23.172.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbf89b78-1e86-4629-abdd-682f04ffb165/cbf89b78-1e86-4629-abdd-682f04ffb165.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbf89b78-1e86-4629-abdd-682f04ffb165/cbf89b78-1e86-4629-abdd-682f04ffb165.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbf89b78-1e86-4629-abdd-682f04ffb165.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:66:da:13:27:f6:9e:82:e7:57:63:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbf89b78-1e86-4629-abdd-682f04ffb165 Validity Not Before: Jul 5 21:00:11 2026 GMT Not After : Oct 3 21:00:11 2026 GMT Subject: CN=2d5a2079-cf84-4023-8261-fe400111ad3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:be:27:ac:c9:88:08:2d:33:42:81:16:e4:04: 07:99:46:c9:8f:4c:7a:5a:97:30:0c:c5:44:11:e6: ca:19:f4:18:f3:3a:e1:13:1a:22:d3:93:98:bd:02: 37:71:60:5e:75:c1:41:fb:17:45:6b:87:74:1c:2d: e9:fb:c8:b5:18:3d:22:96:75:85:5c:86:f2:b9:7c: 5d:86:a0:56:73:a2:37:1d:11:59:e6:a0:82:51:e0: 7b:2e:31:4b:c6:d4:bd:b7:49:41:c8:a9:85:b1:95: 9f:58:e4:80:08:5e:8c:57:ab:bd:2a:e0:6f:67:cf: fb:61:fd:9b:c1:2b:4a:d5:26:fb:3d:d4:9c:45:89: d3:0f:63:54:ad:13:c7:2e:92:65:0f:05:d7:3b:0d: 73:b1:0b:36:13:d6:54:18:05:3a:7e:a7:97:51:10: e5:47:d0:41:20:de:d9:cf:0c:6f:bc:8d:4d:06:5e: 0e:16:6e:65:48:e0:f5:fc:1c:9f:74:e5:ba:eb:93: e9:cf:85:33:a7:9c:2a:b8:ae:f4:53:eb:a2:3c:75: 85:25:2b:bf:d9:60:ff:a0:8b:af:40:d3:2d:f9:9e: ee:f5:17:1b:b8:75:4c:00:65:ee:14:c9:0f:26:8b: fc:48:6a:91:ba:a3:13:81:2a:e1:2d:9c:7c:66:d2: 1f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:E6:BD:5E:8A:C5:6A:B6:34:45:A2:CE:DC:FA:34:17:82:49:27:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbf89b78-1e86-4629-abdd-682f04ffb165/8b4fea1c-8e70-3ac8-8442-ec4413e86e5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbf89b78-1e86-4629-abdd-682f04ffb165/cbf89b78-1e86-4629-abdd-682f04ffb165.crl X509v3 Authority Key Identifier: keyid:84:7F:A2:E1:13:B7:DC:E8:49:19:47:08:83:0D:CA:2B:DA:A1:6D:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbf89b78-1e86-4629-abdd-682f04ffb165.cer sbgp-ipAddrBlock: critical IPv4: 23.172.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:3d:8a:51:d8:1f:96:63:24:5c:6b:5c:b8:74:6f:e1:40:c1: 3e:be:00:76:60:57:24:48:8a:bb:c6:6f:6f:b4:11:a7:e1:59: c7:58:a5:e8:ed:74:3c:e2:49:89:fc:5b:58:7b:40:93:9c:d6: 98:d7:4a:a9:29:62:bc:32:99:45:b0:21:8d:9c:c5:92:a9:60: 04:3d:9f:59:0c:82:2a:71:12:8c:2a:18:bd:41:e9:ba:c1:70: c8:c0:2a:2e:38:92:92:75:4c:14:ce:98:10:27:56:ad:f7:0f: 37:5d:81:36:c4:f9:a3:76:00:b9:83:80:cf:2a:32:c3:08:24: a1:29:8f:79:47:0d:4c:b8:7d:22:c0:28:ef:13:43:f4:33:86: bb:cd:14:45:47:90:36:1e:4f:7c:ae:92:0b:b3:a8:45:17:0b: 37:d5:30:71:39:cb:51:6d:61:db:27:fc:7a:8d:51:1a:3c:02: 0d:4a:09:9a:9d:80:e5:12:96:5e:23:ba:63:e8:44:15:91:ab: c0:17:e2:d4:68:ad:01:b7:eb:77:e8:1f:a9:b4:74:bf:86:43: ba:a2:22:b4:26:9a:1e:2e:49:38:f5:9a:b7:0b:05:b3:57:ce: e2:a0:0b:84:90:17:b1:19:3f:ff:b6:14:71:e7:b8:fe:55:6c: a6:a9:07:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5m2hMn9p6C51djnQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2JmODliNzgtMWU4Ni00NjI5LWFiZGQtNjgyZjA0ZmZi MTY1MB4XDTI2MDcwNTIxMDAxMVoXDTI2MTAwMzIxMDAxMVowLzEtMCsGA1UEAxMk MmQ1YTIwNzktY2Y4NC00MDIzLTgyNjEtZmU0MDAxMTFhZDNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmb4nrMmICC0zQoEW5AQHmUbJj0x6WpcwDMVE EebKGfQY8zrhExoi05OYvQI3cWBedcFB+xdFa4d0HC3p+8i1GD0ilnWFXIbyuXxd hqBWc6I3HRFZ5qCCUeB7LjFLxtS9t0lByKmFsZWfWOSACF6MV6u9KuBvZ8/7Yf2b wStK1Sb7PdScRYnTD2NUrRPHLpJlDwXXOw1zsQs2E9ZUGAU6fqeXURDlR9BBIN7Z zwxvvI1NBl4OFm5lSOD1/ByfdOW665Ppz4Uzp5wquK70U+uiPHWFJSu/2WD/oIuv QNMt+Z7u9RcbuHVMAGXuFMkPJov8SGqRuqMTgSrhLZx8ZtIfQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNDmvV6KxWq2NEWiztz6NBeCSSdOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jYmY4 OWI3OC0xZTg2LTQ2MjktYWJkZC02ODJmMDRmZmIxNjUvOGI0ZmVhMWMtOGU3MC0z YWM4LTg0NDItZWM0NDEzZTg2ZTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvY2JmODliNzgtMWU4Ni00NjI5LWFi ZGQtNjgyZjA0ZmZiMTY1L2NiZjg5Yjc4LTFlODYtNDYyOS1hYmRkLTY4MmYwNGZm YjE2NS5jcmwwHwYDVR0jBBgwFoAUhH+i4RO33OhJGUcIgw3KK9qhbd8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jYmY4OWI3OC0xZTg2LTQ2MjktYWJkZC02ODJm MDRmZmIxNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6yoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMU9ilHYH5ZjJFxrXLh0b+FAwT6+AHZgVyRIirvGb2+0EafhWcdYpejt dDziSYn8W1h7QJOc1pjXSqkpYrwymUWwIY2cxZKpYAQ9n1kMgipxEowqGL1B6brB cMjAKi44kpJ1TBTOmBAnVq33DzddgTbE+aN2ALmDgM8qMsMIJKEpj3lHDUy4fSLA KO8TQ/QzhrvNFEVHkDYeT3yukguzqEUXCzfVMHE5y1FtYdsn/HqNURo8Ag1KCZqd gOUSll4jumPoRBWRq8AX4tRorQG363foH6m0dL+GQ7qiIrQmmh4uSTj1mrcLBbNX zuKgC4SQF7EZP/+2FHHnuP5VbKapBzk= -----END CERTIFICATE-----Generated at Fri Jul 24 00:25:38 2026 by rpki-client