$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211/2307101c-a448-3f6e-b60c-140a7a61a087.roa File: 2307101c-a448-3f6e-b60c-140a7a61a087.roa (raw, json) Hash identifier: OrQEUvnN2cje2NoK35iHcosTmjZ9IAnYVEUf6E6pyCw= Subject key identifier: 48:3C:A4:8E:77:FD:A1:4B:0E:3C:A5:0E:22:50:B3:DB:A9:5B:CD:B3 Certificate issuer: /CN=8825e8fb-1b9c-43c4-8f9f-40df1c716211 Certificate serial: 010D0C9F4328584E7E94F906C151FD1A4E785A80 Authority key identifier: D4:C5:80:8B:1B:8C:EF:EB:84:32:DD:06:33:18:88:53:D4:A4:B0:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211/2307101c-a448-3f6e-b60c-140a7a61a087.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 399825 IP address blocks: 23.177.144.0/24 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211/8825e8fb-1b9c-43c4-8f9f-40df1c716211.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211/8825e8fb-1b9c-43c4-8f9f-40df1c716211.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:f9:06:c1:51:fd:1a:4e:78:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8825e8fb-1b9c-43c4-8f9f-40df1c716211 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=5f46186c-acbf-489b-8629-411cd294c4aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:58:98:61:36:91:13:79:30:d0:52:21:98:8e: d4:ca:29:67:9a:0a:9c:ca:fb:64:8d:5f:c8:24:6a: e7:04:5f:a0:dc:46:8f:13:4b:45:7a:51:c1:3d:84: 31:4c:c7:cf:f2:ac:e4:4a:d4:ce:19:84:11:93:39: 3b:3e:e6:03:8e:ef:91:b3:df:a9:1c:cb:85:44:e6: e3:f1:b4:9f:c9:69:b2:ec:88:e4:0b:e4:9f:20:95: 95:58:84:c8:a3:b5:64:48:a9:54:55:ae:cd:ee:cf: d8:8e:b1:ce:4d:27:10:88:83:4d:74:a6:e3:17:1b: 27:cc:41:ed:f9:0c:79:59:77:2d:5a:0e:43:b7:a8: 13:74:01:fc:78:af:55:91:b1:ec:7e:b2:07:b3:7d: 2b:c9:bb:4e:21:16:a8:09:f0:f3:63:07:3a:07:41: e0:f4:f2:6d:4b:97:e8:20:7b:ff:69:45:71:d0:ce: a8:4a:4c:6d:21:c2:c2:3d:3e:fc:59:ea:60:83:6c: 4e:9c:35:af:02:3e:b5:cc:fb:d5:1d:88:ba:53:24: 25:cd:d4:2b:8e:b3:ca:c0:d3:d8:42:53:f9:1d:4f: c0:72:8e:5d:31:f1:fa:81:2b:6b:80:a9:5b:d0:9b: 14:91:b6:10:c1:cb:46:4c:a5:69:58:a6:c4:46:2a: f6:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:3C:A4:8E:77:FD:A1:4B:0E:3C:A5:0E:22:50:B3:DB:A9:5B:CD:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211/2307101c-a448-3f6e-b60c-140a7a61a087.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211/8825e8fb-1b9c-43c4-8f9f-40df1c716211.crl X509v3 Authority Key Identifier: keyid:D4:C5:80:8B:1B:8C:EF:EB:84:32:DD:06:33:18:88:53:D4:A4:B0:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211.cer sbgp-ipAddrBlock: critical IPv4: 23.177.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:99:78:1d:89:18:a4:1f:8d:29:c0:f8:33:de:79:ad:02:39: 2f:64:d3:e4:de:9c:d3:1e:83:a9:63:73:df:53:f6:de:46:80: dd:68:56:a1:e9:c0:7c:87:af:dd:0e:c7:48:8a:a0:63:a2:6c: 5b:38:05:6c:8c:f1:5e:5d:09:6d:f7:0c:c6:05:37:43:77:09: 8d:4f:84:bf:32:97:f0:4b:b5:09:e5:37:71:51:25:54:8e:a2: 0e:c9:62:9e:35:89:1e:ef:f5:37:bd:8a:b0:f0:bf:2f:91:35: 0f:1a:2d:04:3a:59:a9:49:95:6a:72:b4:2e:b0:c9:8a:79:23: ee:40:de:3f:9b:ec:2e:bc:b7:d8:7f:e4:d0:94:9a:8d:ec:ad: 53:7d:86:ec:64:48:89:0d:d8:75:7e:60:dd:e3:8e:5b:e0:bc: 13:39:f2:20:4c:9a:9f:fb:60:07:83:96:01:68:ce:36:d0:b5: 10:03:4a:b2:9a:27:fa:ba:5e:1c:af:8f:f5:6f:6a:bb:eb:06: d6:83:32:03:53:b7:96:a9:04:55:94:34:92:45:ea:79:c8:5d: 62:5d:a2:4a:86:89:af:ae:4a:20:70:ea:5c:72:0e:36:16:aa: 85:54:9e:87:80:06:29:0c:ad:e1:bd:74:95:92:27:a5:3f:29: 78:e8:60:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lPkGwVH9Gk54WoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODgyNWU4ZmItMWI5Yy00M2M0LThmOWYtNDBkZjFjNzE2 MjExMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk NWY0NjE4NmMtYWNiZi00ODliLTg2MjktNDExY2QyOTRjNGFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmliYYTaRE3kw0FIhmI7UyilnmgqcyvtkjV/I JGrnBF+g3EaPE0tFelHBPYQxTMfP8qzkStTOGYQRkzk7PuYDju+Rs9+pHMuFRObj 8bSfyWmy7IjkC+SfIJWVWITIo7VkSKlUVa7N7s/YjrHOTScQiINNdKbjFxsnzEHt +Qx5WXctWg5Dt6gTdAH8eK9VkbHsfrIHs30rybtOIRaoCfDzYwc6B0Hg9PJtS5fo IHv/aUVx0M6oSkxtIcLCPT78Wepgg2xOnDWvAj61zPvVHYi6UyQlzdQrjrPKwNPY QlP5HU/Aco5dMfH6gStrgKlb0JsUkbYQwctGTKVpWKbERir2IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEg8pI53/aFLDjylDiJQs9upW82zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84ODI1 ZThmYi0xYjljLTQzYzQtOGY5Zi00MGRmMWM3MTYyMTEvMjMwNzEwMWMtYTQ0OC0z ZjZlLWI2MGMtMTQwYTdhNjFhMDg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODgyNWU4ZmItMWI5Yy00M2M0LThm OWYtNDBkZjFjNzE2MjExLzg4MjVlOGZiLTFiOWMtNDNjNC04ZjlmLTQwZGYxYzcx NjIxMS5jcmwwHwYDVR0jBBgwFoAU1MWAixuM7+uEMt0GMxiIU9SksN0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84ODI1ZThmYi0xYjljLTQzYzQtOGY5Zi00MGRm MWM3MTYyMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7GQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJqZeB2JGKQfjSnA+DPeea0COS9k0+TenNMeg6ljc99T9t5GgN1oVqHp wHyHr90Ox0iKoGOibFs4BWyM8V5dCW33DMYFN0N3CY1PhL8yl/BLtQnlN3FRJVSO og7JYp41iR7v9Te9irDwvy+RNQ8aLQQ6WalJlWpytC6wyYp5I+5A3j+b7C68t9h/ 5NCUmo3srVN9huxkSIkN2HV+YN3jjlvgvBM58iBMmp/7YAeDlgFozjbQtRADSrKa J/q6Xhyvj/VvarvrBtaDMgNTt5apBFWUNJJF6nnIXWJdokqGia+uSiBw6lxyDjYW qoVUnoeABikMreG9dJWSJ6U/KXjoYJo= -----END CERTIFICATE-----Generated at Fri Jul 24 19:09:12 2026 by rpki-client