$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d7f7925-1c13-4bc8-bda4-43bd8af82fe3/afe8120a-69d1-34fa-83db-c6fd11615b6d.roa File: afe8120a-69d1-34fa-83db-c6fd11615b6d.roa (raw, json) Hash identifier: xBMdJEq7SFudDGYXlZqGrDFbTtBcMCSHVgiBB+WCl+g= Subject key identifier: DC:B6:20:F0:21:69:EF:8D:69:36:C4:FB:B4:0B:22:14:02:08:15:E7 Certificate issuer: /CN=6d7f7925-1c13-4bc8-bda4-43bd8af82fe3 Certificate serial: 010D0C9F4328584E48247C12917ECE31180E5C00 Authority key identifier: 51:F2:64:E1:0A:95:A7:56:CA:B1:00:1F:64:96:DA:11:93:C2:A7:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d7f7925-1c13-4bc8-bda4-43bd8af82fe3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d7f7925-1c13-4bc8-bda4-43bd8af82fe3/afe8120a-69d1-34fa-83db-c6fd11615b6d.roa Signing time: Wed 24 Jun 2026 21:00:12 +0000 ROA not before: Wed 24 Jun 2026 21:00:12 +0000 ROA not after: Tue 22 Sep 2026 21:00:12 +0000 asID: 979 IP address blocks: 23.144.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d7f7925-1c13-4bc8-bda4-43bd8af82fe3/6d7f7925-1c13-4bc8-bda4-43bd8af82fe3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d7f7925-1c13-4bc8-bda4-43bd8af82fe3/6d7f7925-1c13-4bc8-bda4-43bd8af82fe3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d7f7925-1c13-4bc8-bda4-43bd8af82fe3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:48:24:7c:12:91:7e:ce:31:18:0e:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d7f7925-1c13-4bc8-bda4-43bd8af82fe3 Validity Not Before: Jun 24 21:00:12 2026 GMT Not After : Sep 22 21:00:12 2026 GMT Subject: CN=c51d02b2-5a86-4ca6-a9b4-a4ac3d37ff57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:59:1d:c5:ec:43:aa:fd:e8:37:ba:1c:a0:21: 2e:b1:da:ae:1d:b2:c2:0f:16:6b:60:0e:80:45:a1: 46:4d:2e:7c:36:32:68:60:6f:ac:13:e3:f3:4e:d1: 6d:1b:d6:52:80:72:82:d1:e6:c7:2e:80:df:0e:4e: 73:0b:76:9e:ef:ac:e8:11:7c:9b:d5:2d:41:38:47: cd:3a:a1:b7:56:be:cf:ca:12:26:72:4c:fe:7a:b3: ec:64:76:48:3a:ee:3e:80:de:c5:ec:34:34:01:ae: 80:44:db:02:48:fa:f1:da:12:98:7a:3e:9a:23:fa: 11:93:3a:57:f1:5a:aa:40:e4:ec:50:cc:8a:ed:ff: 45:8a:f6:37:78:05:1b:6a:34:27:46:ae:c4:84:de: 3d:aa:e2:12:d3:f9:a4:28:8d:87:d2:68:af:85:b8: 3e:7d:39:26:97:74:38:a1:21:e2:75:ca:66:36:5a: f7:a6:86:30:81:67:b2:eb:56:41:86:3f:c5:db:33: 50:38:cd:f9:8d:1e:9e:58:29:35:ec:fd:07:d1:92: 19:91:d5:e2:2a:04:ae:84:f2:10:12:43:61:d8:b3: a0:e3:29:ef:50:59:06:5b:8e:82:1e:bb:a9:7e:c9: 44:16:0e:b8:4e:05:dc:50:82:8b:3d:0c:69:e8:5a: 22:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:B6:20:F0:21:69:EF:8D:69:36:C4:FB:B4:0B:22:14:02:08:15:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d7f7925-1c13-4bc8-bda4-43bd8af82fe3/afe8120a-69d1-34fa-83db-c6fd11615b6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d7f7925-1c13-4bc8-bda4-43bd8af82fe3/6d7f7925-1c13-4bc8-bda4-43bd8af82fe3.crl X509v3 Authority Key Identifier: keyid:51:F2:64:E1:0A:95:A7:56:CA:B1:00:1F:64:96:DA:11:93:C2:A7:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d7f7925-1c13-4bc8-bda4-43bd8af82fe3.cer sbgp-ipAddrBlock: critical IPv4: 23.144.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:ec:03:02:6d:a1:01:48:df:71:c0:0b:df:f7:b6:3b:22:af: 34:55:d1:b9:0a:2f:28:ed:47:65:10:34:49:33:ca:50:70:e3: 42:0d:71:1f:4e:ef:08:d0:e9:0b:16:0e:2c:7f:2d:30:48:18: 82:8e:10:c2:2b:c9:44:71:df:84:9c:3d:f6:98:4c:c4:27:a5: d1:86:46:29:6a:16:83:34:90:6f:fa:ee:8c:ec:da:fd:66:e7: de:f7:4b:ec:b5:77:58:07:78:e6:49:fc:b7:59:34:7d:96:b2: 85:0a:81:41:c0:ad:eb:dc:f3:f8:99:16:20:e5:fb:b2:21:bd: 89:27:86:08:3e:1b:a6:bb:78:47:53:8c:8c:92:2d:fd:6b:f0: 7a:07:80:b4:22:57:b2:6e:50:ad:10:27:11:7d:60:a4:0f:bd: b8:39:fd:dc:25:fb:56:3e:ba:1a:dc:de:96:fb:64:90:96:63: 79:70:c9:77:e7:ce:82:58:d5:7f:7b:ed:0f:aa:9f:a8:fa:ad: c7:ba:55:cd:0c:62:f6:fe:09:1c:37:d1:5d:8a:cd:91:87:e9: a4:ff:d4:8e:ca:33:84:fc:fc:ba:ff:3e:19:40:fc:f5:fb:49: 16:59:1b:c6:13:38:d7:3e:8c:41:c4:f0:8c:4d:13:e7:40:bd: 12:eb:bd:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5IJHwSkX7OMRgOXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ3Zjc5MjUtMWMxMy00YmM4LWJkYTQtNDNiZDhhZjgy ZmUzMB4XDTI2MDYyNDIxMDAxMloXDTI2MDkyMjIxMDAxMlowLzEtMCsGA1UEAxMk YzUxZDAyYjItNWE4Ni00Y2E2LWE5YjQtYTRhYzNkMzdmZjU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlkdxexDqv3oN7ocoCEusdquHbLCDxZrYA6A RaFGTS58NjJoYG+sE+PzTtFtG9ZSgHKC0ebHLoDfDk5zC3ae76zoEXyb1S1BOEfN OqG3Vr7PyhImckz+erPsZHZIOu4+gN7F7DQ0Aa6ARNsCSPrx2hKYej6aI/oRkzpX 8VqqQOTsUMyK7f9FivY3eAUbajQnRq7EhN49quIS0/mkKI2H0mivhbg+fTkml3Q4 oSHidcpmNlr3poYwgWey61ZBhj/F2zNQOM35jR6eWCk17P0H0ZIZkdXiKgSuhPIQ EkNh2LOg4ynvUFkGW46CHrupfslEFg64TgXcUIKLPQxp6FoibQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNy2IPAhae+NaTbE+7QLIhQCCBXnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi82ZDdm NzkyNS0xYzEzLTRiYzgtYmRhNC00M2JkOGFmODJmZTMvYWZlODEyMGEtNjlkMS0z NGZhLTgzZGItYzZmZDExNjE1YjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNmQ3Zjc5MjUtMWMxMy00YmM4LWJk YTQtNDNiZDhhZjgyZmUzLzZkN2Y3OTI1LTFjMTMtNGJjOC1iZGE0LTQzYmQ4YWY4 MmZlMy5jcmwwHwYDVR0jBBgwFoAUUfJk4QqVp1bKsQAfZJbaEZPCp0gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi82ZDdmNzkyNS0xYzEzLTRiYzgtYmRhNC00M2Jk OGFmODJmZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5BEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIrsAwJtoQFI33HAC9/3tjsirzRV0bkKLyjtR2UQNEkzylBw40INcR9O 7wjQ6QsWDix/LTBIGIKOEMIryURx34ScPfaYTMQnpdGGRilqFoM0kG/67ozs2v1m 5973S+y1d1gHeOZJ/LdZNH2WsoUKgUHArevc8/iZFiDl+7IhvYknhgg+G6a7eEdT jIySLf1r8HoHgLQiV7JuUK0QJxF9YKQPvbg5/dwl+1Y+uhrc3pb7ZJCWY3lwyXfn zoJY1X977Q+qn6j6rce6Vc0MYvb+CRw30V2KzZGH6aT/1I7KM4T8/Lr/PhlA/PX7 SRZZG8YTONc+jEHE8IxNE+dAvRLrvQw= -----END CERTIFICATE-----Generated at Thu Jul 23 22:33:54 2026 by rpki-client