$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4a214c14-52f7-4b21-a2ec-7e64e41ea27d/397f62d5-6cea-3c3d-a28a-35f9d78df2f7.roa File: 397f62d5-6cea-3c3d-a28a-35f9d78df2f7.roa (raw, json) Hash identifier: 1Fn/PxHydHtR9o/Iwt/5jFCzX5O0zTZoyBXSVPHa8ME= Subject key identifier: 1B:37:2F:51:6B:E5:CE:E1:0A:BB:27:61:06:08:AD:E1:ED:2D:69:86 Certificate issuer: /CN=4a214c14-52f7-4b21-a2ec-7e64e41ea27d Certificate serial: 010D0C9F4328584E991A52C3630B921CBDB85500 Authority key identifier: 18:F9:DA:91:FD:FC:57:A5:28:F5:40:9B:11:CD:B8:2D:D9:A9:0B:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4a214c14-52f7-4b21-a2ec-7e64e41ea27d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4a214c14-52f7-4b21-a2ec-7e64e41ea27d/397f62d5-6cea-3c3d-a28a-35f9d78df2f7.roa Signing time: Thu 23 Jul 2026 21:00:11 +0000 ROA not before: Thu 23 Jul 2026 21:00:11 +0000 ROA not after: Wed 21 Oct 2026 21:00:11 +0000 asID: 399463 IP address blocks: 23.169.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4a214c14-52f7-4b21-a2ec-7e64e41ea27d/4a214c14-52f7-4b21-a2ec-7e64e41ea27d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4a214c14-52f7-4b21-a2ec-7e64e41ea27d/4a214c14-52f7-4b21-a2ec-7e64e41ea27d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4a214c14-52f7-4b21-a2ec-7e64e41ea27d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:99:1a:52:c3:63:0b:92:1c:bd:b8:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a214c14-52f7-4b21-a2ec-7e64e41ea27d Validity Not Before: Jul 23 21:00:11 2026 GMT Not After : Oct 21 21:00:11 2026 GMT Subject: CN=8f32c476-b8a6-4f8e-9f97-a898ccdcd2d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5f:fb:ba:cf:c6:15:e1:13:06:84:38:48:63: ac:89:ba:ce:30:49:fe:a5:21:23:72:3a:48:4e:fe: 5a:58:14:10:da:82:73:ea:b6:e7:18:08:ef:91:a9: a4:75:65:9f:69:43:3c:db:42:f4:01:ec:a6:09:44: a8:59:ea:d2:91:24:87:8d:43:87:54:20:93:f3:d1: 38:68:c0:22:0f:48:f7:0a:61:04:25:33:a4:1d:b9: 6a:26:f6:1b:a1:48:b0:97:4f:31:75:19:54:30:70: f3:0d:ae:d9:b1:15:3e:48:0a:09:4d:db:37:4b:aa: 7e:eb:a8:be:07:c0:35:70:2d:c9:af:67:86:d6:5b: 65:bf:3e:39:cd:b9:a7:f6:4b:35:f4:94:b4:8a:00: 55:f6:69:7f:18:96:da:03:24:b5:2f:20:66:fd:93: 6c:25:c0:46:7a:9a:f9:1c:a1:00:f5:b0:43:c2:07: d2:63:ba:3c:3c:0f:fe:7a:1e:89:d4:50:78:27:a4: 42:56:9f:05:62:32:dd:1d:0b:79:cd:ba:fa:c5:84: 65:e9:3d:f4:b3:15:92:57:71:12:73:6b:8d:bf:09: d0:db:7d:d9:cb:67:3c:60:3f:23:2a:74:5b:40:42: 42:8a:e4:13:da:66:c6:35:32:62:c7:09:a7:d0:cd: 0a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:37:2F:51:6B:E5:CE:E1:0A:BB:27:61:06:08:AD:E1:ED:2D:69:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4a214c14-52f7-4b21-a2ec-7e64e41ea27d/397f62d5-6cea-3c3d-a28a-35f9d78df2f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4a214c14-52f7-4b21-a2ec-7e64e41ea27d/4a214c14-52f7-4b21-a2ec-7e64e41ea27d.crl X509v3 Authority Key Identifier: keyid:18:F9:DA:91:FD:FC:57:A5:28:F5:40:9B:11:CD:B8:2D:D9:A9:0B:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4a214c14-52f7-4b21-a2ec-7e64e41ea27d.cer sbgp-ipAddrBlock: critical IPv4: 23.169.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:3c:1f:bd:74:50:84:88:f0:2a:1c:e2:44:ed:10:26:f7:2d: 71:0b:78:3d:0e:0b:cd:87:d0:68:e7:a7:a4:e8:62:52:a7:d8: 77:89:b3:1e:6a:5e:1f:2c:81:4b:0a:55:54:13:ac:e1:32:61: 63:63:eb:54:d3:a5:10:35:2c:0b:d4:77:ce:d8:27:cd:c1:ef: 24:86:d4:8c:52:bc:15:df:35:0b:64:a6:ae:93:3e:e5:94:59: af:c8:44:8b:1f:f3:d4:de:bb:47:64:c8:8a:16:97:c1:ed:83: 57:ec:5a:c3:a0:f4:10:fc:3a:fd:53:fa:65:df:bc:4e:5f:c1: b3:5f:91:58:b1:e2:5b:32:e7:6d:67:3c:dd:e0:a9:ee:2d:31: 21:9f:69:22:7b:46:4e:bd:48:bd:44:b6:2e:46:29:0d:b4:d5: 94:72:07:ba:c9:dd:35:df:a5:96:c4:c9:1d:51:2d:77:fd:f5: 0f:e0:e6:89:51:1b:7d:c3:19:be:d9:a1:a8:05:f0:01:97:c8: 9b:18:d2:bb:ff:e6:9b:7d:47:fd:53:29:3d:f8:dc:53:02:7a: c6:d5:41:79:4a:4f:17:e1:b9:91:c3:a5:b5:31:fb:24:cc:17: 59:0b:0a:9a:e2:b7:f6:67:cf:2e:99:fd:ed:13:54:f2:4e:05: c9:bf:fe:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ZGlLDYwuSHL24VQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEyMTRjMTQtNTJmNy00YjIxLWEyZWMtN2U2NGU0MWVh MjdkMB4XDTI2MDcyMzIxMDAxMVoXDTI2MTAyMTIxMDAxMVowLzEtMCsGA1UEAxMk OGYzMmM0NzYtYjhhNi00ZjhlLTlmOTctYTg5OGNjZGNkMmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1/7us/GFeETBoQ4SGOsibrOMEn+pSEjcjpI Tv5aWBQQ2oJz6rbnGAjvkamkdWWfaUM820L0AeymCUSoWerSkSSHjUOHVCCT89E4 aMAiD0j3CmEEJTOkHblqJvYboUiwl08xdRlUMHDzDa7ZsRU+SAoJTds3S6p+66i+ B8A1cC3Jr2eG1ltlvz45zbmn9ks19JS0igBV9ml/GJbaAyS1LyBm/ZNsJcBGepr5 HKEA9bBDwgfSY7o8PA/+eh6J1FB4J6RCVp8FYjLdHQt5zbr6xYRl6T30sxWSV3ES c2uNvwnQ233Zy2c8YD8jKnRbQEJCiuQT2mbGNTJixwmn0M0KZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBs3L1Fr5c7hCrsnYQYIreHtLWmGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi80YTIx NGMxNC01MmY3LTRiMjEtYTJlYy03ZTY0ZTQxZWEyN2QvMzk3ZjYyZDUtNmNlYS0z YzNkLWEyOGEtMzVmOWQ3OGRmMmY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNGEyMTRjMTQtNTJmNy00YjIxLWEy ZWMtN2U2NGU0MWVhMjdkLzRhMjE0YzE0LTUyZjctNGIyMS1hMmVjLTdlNjRlNDFl YTI3ZC5jcmwwHwYDVR0jBBgwFoAUGPnakf38V6Uo9UCbEc24LdmpC8MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi80YTIxNGMxNC01MmY3LTRiMjEtYTJlYy03ZTY0 ZTQxZWEyN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6kQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACk8H710UISI8Coc4kTtECb3LXELeD0OC82H0Gjnp6ToYlKn2HeJsx5q Xh8sgUsKVVQTrOEyYWNj61TTpRA1LAvUd87YJ83B7ySG1IxSvBXfNQtkpq6TPuWU Wa/IRIsf89Teu0dkyIoWl8Htg1fsWsOg9BD8Ov1T+mXfvE5fwbNfkVix4lsy521n PN3gqe4tMSGfaSJ7Rk69SL1Eti5GKQ201ZRyB7rJ3TXfpZbEyR1RLXf99Q/g5olR G33DGb7ZoagF8AGXyJsY0rv/5pt9R/1TKT343FMCesbVQXlKTxfhuZHDpbUx+yTM F1kLCprit/Znzy6Z/e0TVPJOBcm//ps= -----END CERTIFICATE-----Generated at Fri Jul 24 04:13:10 2026 by rpki-client