$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a590b75-f68e-4b76-ac6c-42096c2d7738/d8b37bd7-5020-3ad9-a437-682d4f786e55.roa File: d8b37bd7-5020-3ad9-a437-682d4f786e55.roa (raw, json) Hash identifier: eJIaGBMlEqtfxxyejMVpm+dFNeC5BXB6XxcpDI8q1kw= Subject key identifier: 85:36:0D:DF:19:C4:C0:A7:F6:6E:EA:6B:71:20:AB:F9:8F:BE:81:17 Certificate issuer: /CN=0a590b75-f68e-4b76-ac6c-42096c2d7738 Certificate serial: 010D0C9F4328584E7E95062E4221D87465192DD0 Authority key identifier: 5B:E3:C8:58:A6:2A:D0:83:69:51:79:6E:D1:EE:39:7D:0E:7F:14:8C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a590b75-f68e-4b76-ac6c-42096c2d7738.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a590b75-f68e-4b76-ac6c-42096c2d7738/d8b37bd7-5020-3ad9-a437-682d4f786e55.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 214483 IP address blocks: 23.149.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a590b75-f68e-4b76-ac6c-42096c2d7738/0a590b75-f68e-4b76-ac6c-42096c2d7738.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a590b75-f68e-4b76-ac6c-42096c2d7738/0a590b75-f68e-4b76-ac6c-42096c2d7738.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a590b75-f68e-4b76-ac6c-42096c2d7738.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:95:06:2e:42:21:d8:74:65:19:2d:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a590b75-f68e-4b76-ac6c-42096c2d7738 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=3e0db700-2731-4adb-be45-d8b5782a80b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:75:c5:45:59:7f:94:8d:9a:9d:63:5e:a2:9e: cf:49:6c:42:41:bd:84:59:cf:55:33:0f:0d:cc:c6: fe:57:84:72:54:73:62:df:c6:68:68:46:72:dc:17: 92:54:7b:50:72:c2:a8:24:3c:38:2c:4c:27:9e:1f: b2:27:a5:2d:bb:7e:f6:5f:4f:68:2a:15:99:43:d2: a4:24:ed:f9:60:11:33:49:17:69:03:fe:3b:17:82: c4:8d:a3:10:e1:76:d7:fd:8f:90:62:13:60:f2:6a: 6d:68:90:9b:d1:d6:49:b1:5f:3b:5d:78:88:fa:a7: bc:35:e3:89:ce:d5:60:96:fd:f3:c4:56:55:79:19: 6e:46:6b:59:b1:0f:5f:df:5c:f7:01:e5:25:e4:e8: a6:ca:a1:9f:d5:2d:f6:74:c0:e0:48:e2:4a:5b:9c: 56:69:9b:6d:ec:a8:07:0a:de:cc:15:33:36:e4:27: 0e:99:b0:19:25:e0:a9:38:d0:dc:11:59:03:bd:6d: a2:8c:56:55:c2:bd:7f:36:92:f7:00:c3:f0:2d:cb: ec:4f:76:7a:59:39:6c:4a:40:6f:17:62:43:20:2a: 52:63:53:12:1e:7d:04:ba:00:06:a3:ac:4d:55:f6: 1f:9a:00:6f:c1:b0:98:16:8f:d4:9c:f3:57:70:f4: 5a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:36:0D:DF:19:C4:C0:A7:F6:6E:EA:6B:71:20:AB:F9:8F:BE:81:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a590b75-f68e-4b76-ac6c-42096c2d7738/d8b37bd7-5020-3ad9-a437-682d4f786e55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a590b75-f68e-4b76-ac6c-42096c2d7738/0a590b75-f68e-4b76-ac6c-42096c2d7738.crl X509v3 Authority Key Identifier: keyid:5B:E3:C8:58:A6:2A:D0:83:69:51:79:6E:D1:EE:39:7D:0E:7F:14:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a590b75-f68e-4b76-ac6c-42096c2d7738.cer sbgp-ipAddrBlock: critical IPv4: 23.149.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:47:b7:b1:4a:26:20:ab:33:5f:73:ec:bc:67:24:0f:39:f0: 01:e4:ed:bb:49:ca:fb:96:e1:ff:ad:fe:95:fe:74:ec:82:08: 6c:d9:2c:46:90:a9:61:ae:50:77:59:3c:1f:ea:6c:2c:d7:1b: 30:e2:d0:5e:25:fa:e0:04:6a:e0:d8:93:f2:c7:11:19:3d:c0: 3f:76:95:9b:57:64:0b:7a:6e:fe:d8:b6:25:f7:2f:36:e2:56: 37:38:4c:3b:0b:d0:3f:50:b6:1b:3e:b5:88:1d:d4:9f:90:e4: 99:fc:9d:c9:e7:76:a1:5d:b1:74:f7:28:51:57:f8:f6:20:57: e6:8f:26:18:52:ee:3b:97:77:ef:e7:a5:65:14:cc:0c:48:af: e9:81:e3:1c:3e:b2:bb:18:1c:0e:aa:e2:1a:6b:35:3d:07:b8: 2a:29:54:4d:b5:0a:9d:33:ca:c3:5d:79:9a:20:13:a9:de:26: be:27:09:3a:93:8b:fc:54:27:21:3d:3c:c0:06:30:19:e1:47: 7e:9d:f1:d5:47:f4:20:27:e8:57:cd:a8:c9:a4:69:71:be:14: f8:6f:7f:ea:e0:34:04:0b:10:64:e9:14:35:73:56:4d:f0:04: e6:36:ef:0b:41:e0:91:73:8d:77:98:09:6b:25:b7:27:61:50: a6:0c:9c:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lQYuQiHYdGUZLdAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE1OTBiNzUtZjY4ZS00Yjc2LWFjNmMtNDIwOTZjMmQ3 NzM4MB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk M2UwZGI3MDAtMjczMS00YWRiLWJlNDUtZDhiNTc4MmE4MGI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnXFRVl/lI2anWNeop7PSWxCQb2EWc9VMw8N zMb+V4RyVHNi38ZoaEZy3BeSVHtQcsKoJDw4LEwnnh+yJ6Utu372X09oKhWZQ9Kk JO35YBEzSRdpA/47F4LEjaMQ4XbX/Y+QYhNg8mptaJCb0dZJsV87XXiI+qe8NeOJ ztVglv3zxFZVeRluRmtZsQ9f31z3AeUl5OimyqGf1S32dMDgSOJKW5xWaZtt7KgH Ct7MFTM25CcOmbAZJeCpONDcEVkDvW2ijFZVwr1/NpL3AMPwLcvsT3Z6WTlsSkBv F2JDICpSY1MSHn0EugAGo6xNVfYfmgBvwbCYFo/UnPNXcPRa9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIU2Dd8ZxMCn9m7qa3Egq/mPvoEXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8wYTU5 MGI3NS1mNjhlLTRiNzYtYWM2Yy00MjA5NmMyZDc3MzgvZDhiMzdiZDctNTAyMC0z YWQ5LWE0MzctNjgyZDRmNzg2ZTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMGE1OTBiNzUtZjY4ZS00Yjc2LWFj NmMtNDIwOTZjMmQ3NzM4LzBhNTkwYjc1LWY2OGUtNGI3Ni1hYzZjLTQyMDk2YzJk NzczOC5jcmwwHwYDVR0jBBgwFoAUW+PIWKYq0INpUXlu0e45fQ5/FIwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8wYTU5MGI3NS1mNjhlLTRiNzYtYWM2Yy00MjA5 NmMyZDc3MzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5V0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVHt7FKJiCrM19z7LxnJA858AHk7btJyvuW4f+t/pX+dOyCCGzZLEaQ qWGuUHdZPB/qbCzXGzDi0F4l+uAEauDYk/LHERk9wD92lZtXZAt6bv7YtiX3Lzbi Vjc4TDsL0D9Qths+tYgd1J+Q5Jn8ncnndqFdsXT3KFFX+PYgV+aPJhhS7juXd+/n pWUUzAxIr+mB4xw+srsYHA6q4hprNT0HuCopVE21Cp0zysNdeZogE6neJr4nCTqT i/xUJyE9PMAGMBnhR36d8dVH9CAn6FfNqMmkaXG+FPhvf+rgNAQLEGTpFDVzVk3w BOY27wtB4JFzjXeYCWsltydhUKYMnJY= -----END CERTIFICATE-----Generated at Fri Jul 24 01:54:21 2026 by rpki-client