$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/fc89a642-5803-37de-88d2-fbe8648bdde9.roa File: fc89a642-5803-37de-88d2-fbe8648bdde9.roa (raw, json) Hash identifier: i8OhIyUHYLaOCYyTLqdV9ZP3t9QekZBo6S1u0GszRpI= Subject key identifier: 08:A3:7F:17:FA:D2:16:EA:EC:C3:82:20:50:5A:4C:62:36:E0:3F:93 Certificate issuer: /CN=4aa1bbde-87c2-49af-9803-d7934d656ff3 Certificate serial: 010D0C9F4328584E6F3A2C1BADECF8EB20F81900 Authority key identifier: EC:8C:03:31:03:DC:6A:88:5B:2B:77:1B:9D:2E:FC:79:9A:DA:90:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/fc89a642-5803-37de-88d2-fbe8648bdde9.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 397646 IP address blocks: 23.137.208.0/24 maxlen: 24 2602:fdcb::/36 maxlen: 37 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3a:2c:1b:ad:ec:f8:eb:20:f8:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4aa1bbde-87c2-49af-9803-d7934d656ff3 Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=44e6cfed-b837-4c71-913f-2ed69971792a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:01:9f:5a:2e:77:e8:d7:c0:d6:1c:da:8f:ad: 94:e7:80:75:e6:c2:54:b3:9b:21:64:7d:c9:0c:16: de:35:4f:e1:51:8e:78:cd:6e:b3:ac:72:92:af:b3: d6:01:41:02:92:93:81:ba:10:ff:7e:31:28:06:64: d3:d8:ae:8f:65:78:54:cd:b2:b2:9d:f4:55:26:11: d7:c1:70:4e:e0:b2:8a:4b:f7:7a:df:0c:17:ce:4f: 89:2f:6b:e7:5a:c8:18:e5:7b:f6:d7:2c:57:63:f6: 85:54:37:5d:07:b4:da:e6:6e:8d:37:1f:55:8e:1e: 47:eb:c1:76:10:01:ae:a7:3a:5b:a4:5a:63:9b:1b: be:47:86:de:e3:59:ad:82:a7:b3:4d:30:57:42:a9: e7:54:c6:ec:06:09:c2:16:93:7a:f9:1d:5e:b5:9e: d6:c3:c0:90:6e:a9:0b:db:1c:0b:24:60:92:66:87: 43:e7:34:c8:bc:cf:79:b4:1f:81:fd:da:17:87:3a: 7b:c1:1d:b7:42:0b:03:0c:36:e6:ca:d6:d9:ee:c0: 76:f1:f5:c6:e4:c0:06:28:a6:56:1f:5f:ab:95:71: e0:d1:7f:7c:c6:77:b6:e5:42:77:5b:1f:40:8b:74: a4:74:c4:4a:df:c3:7c:ff:b6:6b:99:a5:10:01:5b: 73:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:A3:7F:17:FA:D2:16:EA:EC:C3:82:20:50:5A:4C:62:36:E0:3F:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/fc89a642-5803-37de-88d2-fbe8648bdde9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.crl X509v3 Authority Key Identifier: keyid:EC:8C:03:31:03:DC:6A:88:5B:2B:77:1B:9D:2E:FC:79:9A:DA:90:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3.cer sbgp-ipAddrBlock: critical IPv4: 23.137.208.0/24 IPv6: 2602:fdcb::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:40:67:fd:86:9b:3d:e7:a4:f4:c9:ef:f6:c4:68:12:66:99: a8:65:ea:e4:c9:8f:b1:9d:95:d0:ba:34:24:e9:96:20:f6:1c: dd:d1:a1:72:92:14:40:37:46:14:95:29:cd:fb:79:08:d4:d2: 1f:b6:43:34:6f:c5:c3:fb:82:b6:91:65:e9:86:a2:b9:e0:fe: a4:96:0e:48:9a:a6:fc:fa:e1:05:d3:17:d9:00:86:d2:4a:95: be:42:0e:be:45:9a:e8:ca:44:d8:56:7f:ce:79:e8:06:6a:47: ee:2e:14:d7:73:76:78:38:d9:f0:c9:f2:d5:a9:26:bb:f2:16: 72:ee:43:4c:76:bb:81:39:2c:64:73:1c:85:a7:34:73:2e:60: c5:9b:2b:45:29:52:b1:e2:be:61:0c:94:ad:df:a1:b6:24:c7: 56:07:05:54:0d:92:6d:f8:21:60:1b:13:d0:69:a5:7f:c1:04: 26:5d:39:0e:be:5a:0d:a9:70:2a:fa:ef:53:d7:fa:e6:c0:52: 68:af:95:1b:63:1e:9c:58:46:c5:ca:3b:9d:1d:1d:88:77:ff: c4:dd:ea:fc:72:6c:9c:eb:81:d5:22:21:40:89:56:81:8a:0f: f1:6e:2d:50:d3:86:17:b6:a5:7e:32:a3:4b:a0:22:a8:4f:43: 69:32:83:5b -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE5vOiwbrez46yD4GQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFhMWJiZGUtODdjMi00OWFmLTk4MDMtZDc5MzRkNjU2 ZmYzMB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk NDRlNmNmZWQtYjgzNy00YzcxLTkxM2YtMmVkNjk5NzE3OTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQGfWi536NfA1hzaj62U54B15sJUs5shZH3J DBbeNU/hUY54zW6zrHKSr7PWAUECkpOBuhD/fjEoBmTT2K6PZXhUzbKynfRVJhHX wXBO4LKKS/d63wwXzk+JL2vnWsgY5Xv21yxXY/aFVDddB7Ta5m6NNx9Vjh5H68F2 EAGupzpbpFpjmxu+R4be41mtgqezTTBXQqnnVMbsBgnCFpN6+R1etZ7Ww8CQbqkL 2xwLJGCSZodD5zTIvM95tB+B/doXhzp7wR23QgsDDDbmytbZ7sB28fXG5MAGKKZW H1+rlXHg0X98xne25UJ3Wx9Ai3SkdMRK38N8/7ZrmaUQAVtz1wIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFAijfxf60hbq7MOCIFBaTGI24D+TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80YWEx YmJkZS04N2MyLTQ5YWYtOTgwMy1kNzkzNGQ2NTZmZjMvZmM4OWE2NDItNTgwMy0z N2RlLTg4ZDItZmJlODY0OGJkZGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGFhMWJiZGUtODdjMi00OWFmLTk4 MDMtZDc5MzRkNjU2ZmYzLzRhYTFiYmRlLTg3YzItNDlhZi05ODAzLWQ3OTM0ZDY1 NmZmMy5jcmwwHwYDVR0jBBgwFoAU7IwDMQPcaohbK3cbnS78eZrakOswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YWExYmJkZS04N2MyLTQ5YWYtOTgwMy1kNzkz NGQ2NTZmZjMuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4nQMA4E AgACMAgDBgQmAv3LADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAWQGf9hps956T0ye/2xGgSZpmoZerkyY+x nZXQujQk6ZYg9hzd0aFykhRAN0YUlSnN+3kI1NIftkM0b8XD+4K2kWXphqK54P6k lg5Imqb8+uEF0xfZAIbSSpW+Qg6+RZroykTYVn/OeegGakfuLhTXc3Z4ONnwyfLV qSa78hZy7kNMdruBOSxkcxyFpzRzLmDFmytFKVKx4r5hDJSt36G2JMdWBwVUDZJt +CFgGxPQaaV/wQQmXTkOvloNqXAq+u9T1/rmwFJor5UbYx6cWEbFyjudHR2Id//E 3er8cmyc64HVIiFAiVaBig/xbi1Q04YXtqV+MqNLoCKoT0NpMoNb -----END CERTIFICATE-----Generated at Fri Jul 24 00:50:50 2026 by rpki-client