$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/5d8c78b7-687e-392b-97b9-ee57e34dd94e.roa File: 5d8c78b7-687e-392b-97b9-ee57e34dd94e.roa (raw, json) Hash identifier: DD7DtB4Okw8R20TZDT3S0vbA99HpEVDxwvw+TpO3s8g= Subject key identifier: F0:4D:C6:BD:87:34:37:77:D2:BF:29:C8:0E:3F:CC:27:AC:F1:63:B6 Certificate issuer: /CN=3ee720de-c322-4bb5-b8cd-c7a3f23b92d7 Certificate serial: 010D0C9F4328584E5FDF60003D1E2D1576CFC080 Authority key identifier: 09:E5:A6:15:6F:8C:9D:40:E2:35:5F:CF:DA:0D:F5:05:3E:52:6F:E8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/5d8c78b7-687e-392b-97b9-ee57e34dd94e.roa Signing time: Fri 03 Jul 2026 09:00:12 +0000 ROA not before: Fri 03 Jul 2026 09:00:12 +0000 ROA not after: Thu 01 Oct 2026 09:00:12 +0000 asID: 26904 IP address blocks: 23.247.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5f:df:60:00:3d:1e:2d:15:76:cf:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ee720de-c322-4bb5-b8cd-c7a3f23b92d7 Validity Not Before: Jul 3 09:00:12 2026 GMT Not After : Oct 1 09:00:12 2026 GMT Subject: CN=3ed9cda7-b0c2-4340-8562-0d0924182344 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:53:1f:c2:d1:7a:1b:4d:9f:29:22:3e:88:9d: a6:74:1c:b7:b4:74:65:8f:41:c4:c9:72:1f:68:43: a4:d9:fa:c2:fa:18:0d:db:84:91:cf:2b:90:80:f6: 6c:da:9c:f9:6f:9b:f1:f5:24:52:2b:31:4f:5c:01: b2:28:01:e6:6d:bc:95:d1:8b:7e:ff:21:ed:0e:85: 20:54:6a:78:bf:e3:7b:07:c9:a9:2c:64:ca:4b:3d: b2:1f:58:df:35:10:29:32:71:2b:94:1a:04:4f:8b: 11:ca:49:8b:2d:44:12:0d:85:64:f3:5f:4e:6a:77: 9d:90:8e:ef:51:84:1e:37:bd:af:70:23:49:dd:ac: c9:ec:5d:74:b0:66:6c:7f:a1:b7:36:a2:46:62:68: d1:ee:60:90:ea:10:2e:01:a5:75:8d:f2:e6:76:7f: 4b:a8:9b:84:62:3b:ad:c2:11:60:fd:7b:de:65:fc: 37:30:df:19:01:b9:36:9e:b4:e1:14:75:cf:bf:f9: f0:c5:4a:cd:8e:2e:d5:1f:de:1d:d9:f4:9a:a4:4c: 44:24:81:61:80:2a:36:a1:83:d0:b4:e5:b9:e8:40: d0:51:d3:8e:6b:b1:f9:ab:61:7b:f8:00:fa:ef:35: c4:0b:5c:5c:37:33:0a:30:fc:41:36:06:67:40:6f: 79:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:4D:C6:BD:87:34:37:77:D2:BF:29:C8:0E:3F:CC:27:AC:F1:63:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/5d8c78b7-687e-392b-97b9-ee57e34dd94e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.crl X509v3 Authority Key Identifier: keyid:09:E5:A6:15:6F:8C:9D:40:E2:35:5F:CF:DA:0D:F5:05:3E:52:6F:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer sbgp-ipAddrBlock: critical IPv4: 23.247.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:d0:c0:23:8e:14:64:64:64:28:34:4c:4e:ea:b9:f9:af:0f: ed:94:51:6c:d9:e6:9b:b2:4c:ee:94:7f:2d:1f:1b:d7:92:74: ac:16:ae:ee:78:23:b0:7f:5c:3d:fb:56:db:82:52:84:40:ac: ae:50:18:d1:18:ec:9c:51:c5:bf:a2:83:7a:d0:33:2c:0d:32: 57:df:46:b4:b2:09:f6:71:a5:c8:c1:fc:f4:5a:bc:30:97:d6: 85:8b:47:79:ba:6f:f7:52:62:00:a9:92:14:41:c1:b6:45:ea: d7:03:e9:1d:f6:12:8d:67:ed:0a:fb:e0:f4:51:8c:c9:e1:eb: 12:5e:63:0e:03:d2:05:da:75:ff:5b:5f:c1:2c:1f:d8:66:95: 15:c4:50:9f:93:6f:01:bf:0d:4a:c3:27:73:61:93:2e:0d:2a: 25:9d:0b:c3:6b:53:23:62:76:c9:10:53:3e:53:f5:85:e6:97: a4:46:4c:22:4e:ef:39:3d:de:ce:d4:07:99:93:71:e1:49:05: c7:c7:f1:30:d7:c6:0d:83:3b:80:ef:7e:08:59:b0:ee:46:60: 8a:5f:3d:ca:22:5c:ab:ad:e8:d2:2d:8c:f2:c2:50:1b:0e:23: 97:9e:96:96:c2:a3:4a:cb:e9:33:07:2b:30:73:a3:df:b6:4f: 4f:e8:90:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5f32AAPR4tFXbPwIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2VlNzIwZGUtYzMyMi00YmI1LWI4Y2QtYzdhM2YyM2I5 MmQ3MB4XDTI2MDcwMzA5MDAxMloXDTI2MTAwMTA5MDAxMlowLzEtMCsGA1UEAxMk M2VkOWNkYTctYjBjMi00MzQwLTg1NjItMGQwOTI0MTgyMzQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklMfwtF6G02fKSI+iJ2mdBy3tHRlj0HEyXIf aEOk2frC+hgN24SRzyuQgPZs2pz5b5vx9SRSKzFPXAGyKAHmbbyV0Yt+/yHtDoUg VGp4v+N7B8mpLGTKSz2yH1jfNRApMnErlBoET4sRykmLLUQSDYVk819OanedkI7v UYQeN72vcCNJ3azJ7F10sGZsf6G3NqJGYmjR7mCQ6hAuAaV1jfLmdn9LqJuEYjut whFg/XveZfw3MN8ZAbk2nrThFHXPv/nwxUrNji7VH94d2fSapExEJIFhgCo2oYPQ tOW56EDQUdOOa7H5q2F7+AD67zXEC1xcNzMKMPxBNgZnQG952QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPBNxr2HNDd30r8pyA4/zCes8WO2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zZWU3 MjBkZS1jMzIyLTRiYjUtYjhjZC1jN2EzZjIzYjkyZDcvNWQ4Yzc4YjctNjg3ZS0z OTJiLTk3YjktZWU1N2UzNGRkOTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2VlNzIwZGUtYzMyMi00YmI1LWI4 Y2QtYzdhM2YyM2I5MmQ3LzNlZTcyMGRlLWMzMjItNGJiNS1iOGNkLWM3YTNmMjNi OTJkNy5jcmwwHwYDVR0jBBgwFoAUCeWmFW+MnUDiNV/P2g31BT5Sb+gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zZWU3MjBkZS1jMzIyLTRiYjUtYjhjZC1jN2Ez ZjIzYjkyZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF/epMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADfQwCOOFGRkZCg0TE7qufmvD+2UUWzZ5puyTO6Ufy0fG9eSdKwWru54 I7B/XD37VtuCUoRArK5QGNEY7JxRxb+ig3rQMywNMlffRrSyCfZxpcjB/PRavDCX 1oWLR3m6b/dSYgCpkhRBwbZF6tcD6R32Eo1n7Qr74PRRjMnh6xJeYw4D0gXadf9b X8EsH9hmlRXEUJ+TbwG/DUrDJ3Nhky4NKiWdC8NrUyNidskQUz5T9YXml6RGTCJO 7zk93s7UB5mTceFJBcfH8TDXxg2DO4DvfghZsO5GYIpfPcoiXKut6NItjPLCUBsO I5eelpbCo0rL6TMHKzBzo9+2T0/okJY= -----END CERTIFICATE-----Generated at Fri Jul 24 07:08:00 2026 by rpki-client