$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b0012f3-7f7d-46a7-80c4-e0836ff85f7d/7f43fe88-d0be-3a4c-95ea-e56c7bd3370b.roa File: 7f43fe88-d0be-3a4c-95ea-e56c7bd3370b.roa (raw, json) Hash identifier: /FWWZH+PpYN1/cbIhThsXNz0EQGXepQEPYNitNejf6A= Subject key identifier: 2D:CE:C3:D3:25:72:E1:7A:B5:68:FC:3B:C2:EE:12:8A:DC:AF:77:1D Certificate issuer: /CN=2b0012f3-7f7d-46a7-80c4-e0836ff85f7d Certificate serial: 010D0C9F4328584E534F3930EBABE79163597C80 Authority key identifier: 09:0D:93:FD:90:BB:C3:30:A7:31:00:6B:CD:D4:34:7C:9E:1E:98:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b0012f3-7f7d-46a7-80c4-e0836ff85f7d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b0012f3-7f7d-46a7-80c4-e0836ff85f7d/7f43fe88-d0be-3a4c-95ea-e56c7bd3370b.roa Signing time: Sun 28 Jun 2026 21:00:11 +0000 ROA not before: Sun 28 Jun 2026 21:00:11 +0000 ROA not after: Sat 26 Sep 2026 21:00:11 +0000 asID: 214483 IP address blocks: 23.150.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b0012f3-7f7d-46a7-80c4-e0836ff85f7d/2b0012f3-7f7d-46a7-80c4-e0836ff85f7d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b0012f3-7f7d-46a7-80c4-e0836ff85f7d/2b0012f3-7f7d-46a7-80c4-e0836ff85f7d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b0012f3-7f7d-46a7-80c4-e0836ff85f7d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:53:4f:39:30:eb:ab:e7:91:63:59:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b0012f3-7f7d-46a7-80c4-e0836ff85f7d Validity Not Before: Jun 28 21:00:11 2026 GMT Not After : Sep 26 21:00:11 2026 GMT Subject: CN=d4b7e371-8851-4aab-ad5c-eb6c278637dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:eb:f8:90:b5:2d:16:03:78:e5:7d:c0:df:0d: 32:ec:02:ac:92:56:3d:bf:43:75:7f:8c:c9:9c:23: 33:de:cf:06:04:5f:19:a1:9e:89:1a:77:54:57:14: 5d:06:97:ab:b3:12:57:a6:50:21:ac:8f:9b:d4:f3: 6a:eb:2f:cf:bf:0a:be:ac:ed:7d:f8:6d:01:7f:6e: 7e:98:79:b3:b4:21:74:e9:98:87:de:36:9b:dd:d3: 7c:f4:26:ba:d8:df:df:8c:33:e4:ac:69:4e:b9:e2: 31:31:77:4a:a1:90:52:5f:22:a3:b1:27:27:98:71: 1a:a6:80:a8:7d:af:40:f7:c5:a1:56:09:ec:32:8b: 75:e4:06:08:3d:b8:54:f0:4a:a1:39:13:5c:74:84: 86:7c:0e:5a:c9:1a:3e:9b:de:ff:d0:08:11:be:06: 35:d9:de:d0:c1:00:6e:41:4c:e6:75:63:39:77:be: a3:ea:40:61:a2:44:3c:7a:11:2e:ae:60:a1:0d:32: e5:dd:a1:6f:13:9d:18:c7:97:84:20:a5:2e:8e:c9: b3:92:2b:67:74:68:f4:a1:95:bd:b6:11:39:56:e2: cf:50:57:7a:fc:af:43:b4:42:d0:61:98:08:47:8d: 56:e9:f8:dc:9e:79:36:5f:a7:7b:de:e1:62:80:2a: 35:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:CE:C3:D3:25:72:E1:7A:B5:68:FC:3B:C2:EE:12:8A:DC:AF:77:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b0012f3-7f7d-46a7-80c4-e0836ff85f7d/7f43fe88-d0be-3a4c-95ea-e56c7bd3370b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b0012f3-7f7d-46a7-80c4-e0836ff85f7d/2b0012f3-7f7d-46a7-80c4-e0836ff85f7d.crl X509v3 Authority Key Identifier: keyid:09:0D:93:FD:90:BB:C3:30:A7:31:00:6B:CD:D4:34:7C:9E:1E:98:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b0012f3-7f7d-46a7-80c4-e0836ff85f7d.cer sbgp-ipAddrBlock: critical IPv4: 23.150.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:01:89:b8:79:41:19:ee:0e:c4:d9:23:f7:07:52:38:1a:02: f9:58:41:a0:82:20:e5:28:34:c4:8f:79:c7:81:37:d6:65:1e: 53:94:50:b4:f6:b0:73:cc:30:d2:20:cf:38:d8:e2:00:57:a9: f7:7c:b1:8f:72:83:a0:2c:b2:5d:62:45:7c:02:81:c3:ca:a9: 5a:74:30:39:62:8f:cb:44:e7:14:cf:9f:b2:56:b5:d4:be:87: 35:ce:13:fc:90:5a:55:10:87:55:8d:80:02:b0:ff:f7:61:29: 63:72:ac:d1:e4:58:d5:e0:40:15:19:f2:bb:11:6a:f4:89:6a: 0a:2e:d4:96:96:36:e1:f1:b6:45:20:9d:5e:6d:9e:1b:27:32: e5:00:bb:96:52:5a:ea:99:e5:97:06:48:1c:df:73:ec:9a:3d: 99:eb:50:46:d8:f1:15:ca:2e:44:0d:fc:ab:79:60:54:8a:18: cd:10:41:55:8d:cd:3d:0d:26:1a:79:c0:11:02:d0:58:e0:29: ef:d8:e2:f2:9a:98:cb:d3:a3:a1:d8:d8:41:f4:09:fc:0f:e5: 1c:4a:b3:23:b9:54:1a:be:e8:83:21:78:7b:4e:c2:ea:bf:2a: 32:fc:32:2e:04:51:7a:df:ae:04:27:f0:e4:6f:b5:4c:73:f2: f1:fd:7a:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5TTzkw66vnkWNZfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmIwMDEyZjMtN2Y3ZC00NmE3LTgwYzQtZTA4MzZmZjg1 ZjdkMB4XDTI2MDYyODIxMDAxMVoXDTI2MDkyNjIxMDAxMVowLzEtMCsGA1UEAxMk ZDRiN2UzNzEtODg1MS00YWFiLWFkNWMtZWI2YzI3ODYzN2RkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+v4kLUtFgN45X3A3w0y7AKsklY9v0N1f4zJ nCMz3s8GBF8ZoZ6JGndUVxRdBpersxJXplAhrI+b1PNq6y/Pvwq+rO19+G0Bf25+ mHmztCF06ZiH3jab3dN89Ca62N/fjDPkrGlOueIxMXdKoZBSXyKjsScnmHEapoCo fa9A98WhVgnsMot15AYIPbhU8EqhORNcdISGfA5ayRo+m97/0AgRvgY12d7QwQBu QUzmdWM5d76j6kBhokQ8ehEurmChDTLl3aFvE50Yx5eEIKUujsmzkitndGj0oZW9 thE5VuLPUFd6/K9DtELQYZgIR41W6fjcnnk2X6d73uFigCo1mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC3Ow9MlcuF6tWj8O8LuEorcr3cdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8yYjAw MTJmMy03ZjdkLTQ2YTctODBjNC1lMDgzNmZmODVmN2QvN2Y0M2ZlODgtZDBiZS0z YTRjLTk1ZWEtZTU2YzdiZDMzNzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMmIwMDEyZjMtN2Y3ZC00NmE3LTgw YzQtZTA4MzZmZjg1ZjdkLzJiMDAxMmYzLTdmN2QtNDZhNy04MGM0LWUwODM2ZmY4 NWY3ZC5jcmwwHwYDVR0jBBgwFoAUCQ2T/ZC7wzCnMQBrzdQ0fJ4emBYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8yYjAwMTJmMy03ZjdkLTQ2YTctODBjNC1lMDgz NmZmODVmN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5YcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADkBibh5QRnuDsTZI/cHUjgaAvlYQaCCIOUoNMSPeceBN9ZlHlOUULT2 sHPMMNIgzzjY4gBXqfd8sY9yg6Assl1iRXwCgcPKqVp0MDlij8tE5xTPn7JWtdS+ hzXOE/yQWlUQh1WNgAKw//dhKWNyrNHkWNXgQBUZ8rsRavSJagou1JaWNuHxtkUg nV5tnhsnMuUAu5ZSWuqZ5ZcGSBzfc+yaPZnrUEbY8RXKLkQN/Kt5YFSKGM0QQVWN zT0NJhp5wBEC0FjgKe/Y4vKamMvTo6HY2EH0CfwP5RxKsyO5VBq+6IMheHtOwuq/ KjL8Mi4EUXrfrgQn8ORvtUxz8vH9erk= -----END CERTIFICATE-----Generated at Fri Jul 24 06:18:22 2026 by rpki-client