$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/a05edcb1-cd53-3361-9a4a-f92812c5008e.roa File: a05edcb1-cd53-3361-9a4a-f92812c5008e.roa (raw, json) Hash identifier: L9+7KVRjl1Nz+sfjT7MmBi99lDc73cE8jp+RwGOHUdE= Subject key identifier: 37:E7:C7:EF:3F:81:31:EE:75:16:F1:D0:94:61:9F:0B:F1:13:5D:E7 Certificate issuer: /CN=9c6e9a25-1599-4e9b-a8a2-015995c805b8 Certificate serial: 010D0C9F4328584E6F3A213C04874207E6761300 Authority key identifier: 8E:F7:C9:9E:50:68:66:1B:10:0F:56:6A:37:AB:5B:FF:D4:26:8F:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/a05edcb1-cd53-3361-9a4a-f92812c5008e.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 400312 IP address blocks: 23.131.168.0/24 maxlen: 24 2602:fbf0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/9c6e9a25-1599-4e9b-a8a2-015995c805b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/9c6e9a25-1599-4e9b-a8a2-015995c805b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3a:21:3c:04:87:42:07:e6:76:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c6e9a25-1599-4e9b-a8a2-015995c805b8 Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=38ea5784-c06c-4246-8211-0c2f137df7d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:bf:c7:0a:c4:2e:9c:73:9f:a7:9d:d2:0a:b4: 6a:f5:6a:8d:98:bb:c6:08:c8:a6:6b:56:83:70:eb: a0:b4:e8:1e:38:d1:f6:b3:99:1f:fc:c4:95:23:d3: eb:3c:55:87:b0:dd:60:8c:62:3b:42:83:b9:db:27: 03:f1:45:ac:e9:97:6b:2d:b2:d7:19:9d:c2:95:c0: d2:c8:42:a3:79:28:2a:70:53:88:5d:96:07:12:37: 84:2d:37:8d:1c:9e:da:5b:7a:e5:59:be:02:82:1a: d0:17:29:9f:da:b5:5f:a9:12:65:49:b0:5a:7a:76: 28:3c:e1:66:78:98:4c:17:5e:3f:9a:70:0d:52:5c: 25:4f:5a:30:18:6c:91:47:7c:99:04:49:c2:42:14: 1f:6a:b9:82:ba:e8:d8:f8:b1:2e:86:24:57:70:47: 22:16:2b:06:c4:a2:c9:3a:3b:5d:6a:6f:5b:ab:64: 67:eb:c7:c9:da:7a:6b:53:77:ab:8d:71:ef:38:c7: b9:0a:22:2b:07:c8:2d:12:10:f7:47:09:63:1a:c4: 66:c0:1d:2d:da:f7:44:da:d3:7f:f6:57:b2:47:ee: b9:4e:c1:bb:af:84:af:f3:79:69:af:ad:ce:51:89: 03:2a:0e:88:f5:7a:8b:0f:05:ae:d1:2b:fe:6c:4f: 91:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:E7:C7:EF:3F:81:31:EE:75:16:F1:D0:94:61:9F:0B:F1:13:5D:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/a05edcb1-cd53-3361-9a4a-f92812c5008e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/9c6e9a25-1599-4e9b-a8a2-015995c805b8.crl X509v3 Authority Key Identifier: keyid:8E:F7:C9:9E:50:68:66:1B:10:0F:56:6A:37:AB:5B:FF:D4:26:8F:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8.cer sbgp-ipAddrBlock: critical IPv4: 23.131.168.0/24 IPv6: 2602:fbf0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e0:00:6e:2d:26:7f:8c:c4:46:be:69:62:22:62:32:d1:48:43: 7a:46:70:49:c2:12:e0:cd:9c:da:2b:53:ba:89:93:00:ce:2c: 6b:c0:0a:e6:ca:7f:b5:b3:fb:7f:9f:8b:c0:99:ea:5f:93:1b: 0b:8d:1c:d0:0e:41:6b:8f:22:aa:ce:44:bd:e4:64:7f:96:cc: 2e:b4:bf:52:2c:d7:8c:cf:b9:12:30:6d:18:f3:c8:35:56:0b: a3:c8:e1:63:99:c6:e6:41:e4:a7:03:61:db:a0:6e:bf:90:31: dc:f3:6c:62:85:21:eb:42:b3:f0:0f:cd:aa:a3:ab:d5:48:75: a9:82:de:83:c9:8a:e6:eb:f3:07:32:84:4f:42:fc:72:b5:d7: 62:e2:96:6e:4e:1f:a6:97:2e:d5:4a:d9:c2:2e:00:77:24:f9: 8e:8e:4d:69:ab:06:83:22:4b:2a:a5:78:20:f6:fa:fe:c2:99: 36:07:e0:5d:98:a6:64:69:4c:9f:55:2c:86:67:03:b5:ce:c3: aa:ec:5d:72:d7:4c:3b:21:9a:e5:68:f4:a4:a6:2d:ad:76:be: a1:02:28:98:a5:44:d5:c9:dc:10:e7:9d:98:52:a7:93:59:97: 0e:f3:dc:f6:10:ef:96:a7:d8:98:69:e7:2b:4c:b1:61:03:6d: ad:21:02:ae -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE5vOiE8BIdCB+Z2EwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWM2ZTlhMjUtMTU5OS00ZTliLWE4YTItMDE1OTk1Yzgw NWI4MB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk MzhlYTU3ODQtYzA2Yy00MjQ2LTgyMTEtMGMyZjEzN2RmN2QwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkb/HCsQunHOfp53SCrRq9WqNmLvGCMima1aD cOugtOgeONH2s5kf/MSVI9PrPFWHsN1gjGI7QoO52ycD8UWs6ZdrLbLXGZ3ClcDS yEKjeSgqcFOIXZYHEjeELTeNHJ7aW3rlWb4CghrQFymf2rVfqRJlSbBaenYoPOFm eJhMF14/mnANUlwlT1owGGyRR3yZBEnCQhQfarmCuujY+LEuhiRXcEciFisGxKLJ Ojtdam9bq2Rn68fJ2nprU3erjXHvOMe5CiIrB8gtEhD3RwljGsRmwB0t2vdE2tN/ 9leyR+65TsG7r4Sv83lpr63OUYkDKg6I9XqLDwWu0Sv+bE+R1wIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFDfnx+8/gTHudRbx0JRhnwvxE13nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85YzZl OWEyNS0xNTk5LTRlOWItYThhMi0wMTU5OTVjODA1YjgvYTA1ZWRjYjEtY2Q1My0z MzYxLTlhNGEtZjkyODEyYzUwMDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOWM2ZTlhMjUtMTU5OS00ZTliLWE4 YTItMDE1OTk1YzgwNWI4LzljNmU5YTI1LTE1OTktNGU5Yi1hOGEyLTAxNTk5NWM4 MDViOC5jcmwwHwYDVR0jBBgwFoAUjvfJnlBoZhsQD1ZqN6tb/9Qmj6cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85YzZlOWEyNS0xNTk5LTRlOWItYThhMi0wMTU5 OTVjODA1YjguY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF4OoMA0E AgACMAcDBQAmAvvwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAOAAbi0mf4zERr5pYiJiMtFIQ3pGcEnCEuDN nNorU7qJkwDOLGvACubKf7Wz+3+fi8CZ6l+TGwuNHNAOQWuPIqrORL3kZH+WzC60 v1Is14zPuRIwbRjzyDVWC6PI4WOZxuZB5KcDYdugbr+QMdzzbGKFIetCs/APzaqj q9VIdamC3oPJiubr8wcyhE9C/HK112Lilm5OH6aXLtVK2cIuAHck+Y6OTWmrBoMi SyqleCD2+v7CmTYH4F2YpmRpTJ9VLIZnA7XOw6rsXXLXTDshmuVo9KSmLa12vqEC KJilRNXJ3BDnnZhSp5NZlw7z3PYQ75an2Jhp5ytMsWEDba0hAq4= -----END CERTIFICATE-----Generated at Fri Jul 24 11:48:29 2026 by rpki-client