$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1/afe04a10-6d20-3764-bd84-54723556b6bc.roa File: afe04a10-6d20-3764-bd84-54723556b6bc.roa (raw, json) Hash identifier: weYgF5asNboSq4is+lFu04KeVRhUmhhu8cRlEevNh1M= Subject key identifier: 44:1B:48:5C:9A:1A:D2:4A:22:32:08:91:57:3C:C1:02:A8:44:74:C5 Certificate issuer: /CN=1f1cdae5-b041-4993-963d-6f855f74efa1 Certificate serial: 010D0C9F4328584E66DA14A6AC6D77FA87DA9280 Authority key identifier: 3E:A4:0D:8F:72:F2:B1:37:64:7A:4B:F7:58:E7:87:77:5C:A5:BE:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1/afe04a10-6d20-3764-bd84-54723556b6bc.roa Signing time: Sun 05 Jul 2026 21:00:11 +0000 ROA not before: Sun 05 Jul 2026 21:00:11 +0000 ROA not after: Sat 03 Oct 2026 21:00:11 +0000 asID: 54082 IP address blocks: 23.168.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1/1f1cdae5-b041-4993-963d-6f855f74efa1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1/1f1cdae5-b041-4993-963d-6f855f74efa1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:66:da:14:a6:ac:6d:77:fa:87:da:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f1cdae5-b041-4993-963d-6f855f74efa1 Validity Not Before: Jul 5 21:00:11 2026 GMT Not After : Oct 3 21:00:11 2026 GMT Subject: CN=ec5a90da-9240-4af8-b947-4eed6cc3e9e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:31:6b:7a:7d:39:9a:3e:83:44:eb:31:3f:bc: e4:3a:f7:6e:0a:d6:7c:3b:78:dc:67:7a:b3:d8:e3: fa:49:6a:b0:86:96:46:de:2a:84:e3:79:84:7d:7a: f9:53:dc:57:74:f7:ed:4e:f7:7e:ad:f0:9c:28:2d: 9d:87:ec:cb:1b:3c:9a:6a:62:e6:78:fd:ed:d1:9b: 6a:04:45:c1:0b:d7:d2:14:84:73:02:fd:5e:7f:a8: 84:ad:25:ba:83:44:aa:df:c1:89:8c:3e:a9:98:b5: a7:43:b3:a6:6b:9b:21:5d:77:6d:65:19:47:c1:f1: e1:79:a2:83:59:46:8d:86:79:ec:72:55:90:15:ae: 0c:ea:65:79:c6:d2:48:0f:03:6a:3d:67:51:85:8c: 07:32:a8:e1:91:33:c1:87:6a:94:00:a9:8d:d2:35: 93:66:a6:c2:d0:0a:90:96:d5:af:23:db:d2:05:82: c2:e0:3a:cc:ee:96:b0:94:9b:e6:53:b5:25:af:08: d5:8e:55:6f:6f:13:f2:6d:bc:3c:f1:2a:88:f8:51: c7:34:66:b4:9c:51:22:c1:de:ff:4a:8c:25:fb:95: 07:15:f4:0e:94:1d:4f:c2:29:09:d4:36:f6:65:cb: fa:3e:a5:a6:50:65:6a:9d:39:44:8a:39:45:7c:24: 2e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:1B:48:5C:9A:1A:D2:4A:22:32:08:91:57:3C:C1:02:A8:44:74:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1/afe04a10-6d20-3764-bd84-54723556b6bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1/1f1cdae5-b041-4993-963d-6f855f74efa1.crl X509v3 Authority Key Identifier: keyid:3E:A4:0D:8F:72:F2:B1:37:64:7A:4B:F7:58:E7:87:77:5C:A5:BE:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1.cer sbgp-ipAddrBlock: critical IPv4: 23.168.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:30:8a:3b:8e:f4:4f:45:c8:22:cc:5a:bd:88:f7:95:80:6b: fb:2c:e0:ef:72:ea:6b:c0:fa:04:a8:84:00:22:9d:ef:62:3b: 83:0d:a6:d4:25:44:5b:e4:d8:7b:d7:37:fa:85:36:4e:c3:c0: f1:3b:d0:9c:49:9d:7e:2f:5e:4d:43:02:e8:85:fb:a1:10:8e: eb:3c:62:53:b0:20:a9:33:e5:d4:c5:70:9f:3e:3c:d8:2c:d2: d1:f6:de:ad:5d:78:60:16:b7:1d:44:96:7e:61:88:6b:b1:45: b1:2a:98:6a:a4:75:8b:06:55:eb:5f:c6:4c:1b:18:e3:18:1e: ed:52:93:e6:80:61:ef:52:ba:c1:fa:35:e1:46:77:b7:d8:39: 61:55:c3:f3:cf:91:61:2e:6e:1d:51:d9:1a:51:b3:dc:f9:c9: 76:32:e6:31:e0:fb:db:16:58:0e:6b:c4:58:fa:0b:55:b9:ee: cf:12:f1:e9:5e:20:d6:82:c6:0f:c1:a9:cd:2d:b9:8d:0e:8f: e1:2b:4b:73:3b:e5:12:68:9e:18:54:bc:b9:ea:99:db:bd:b5: 6d:f9:c8:1d:0e:fa:2e:3d:39:52:52:62:43:d8:78:39:ed:8d: 0f:67:7b:83:5f:04:f7:b8:72:df:11:0f:90:12:63:62:fd:56: d6:1b:a7:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5m2hSmrG13+ofakoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWYxY2RhZTUtYjA0MS00OTkzLTk2M2QtNmY4NTVmNzRl ZmExMB4XDTI2MDcwNTIxMDAxMVoXDTI2MTAwMzIxMDAxMVowLzEtMCsGA1UEAxMk ZWM1YTkwZGEtOTI0MC00YWY4LWI5NDctNGVlZDZjYzNlOWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2TFren05mj6DROsxP7zkOvduCtZ8O3jcZ3qz 2OP6SWqwhpZG3iqE43mEfXr5U9xXdPftTvd+rfCcKC2dh+zLGzyaamLmeP3t0Ztq BEXBC9fSFIRzAv1ef6iErSW6g0Sq38GJjD6pmLWnQ7Oma5shXXdtZRlHwfHheaKD WUaNhnnsclWQFa4M6mV5xtJIDwNqPWdRhYwHMqjhkTPBh2qUAKmN0jWTZqbC0AqQ ltWvI9vSBYLC4DrM7pawlJvmU7UlrwjVjlVvbxPybbw88SqI+FHHNGa0nFEiwd7/ Sowl+5UHFfQOlB1PwikJ1Db2Zcv6PqWmUGVqnTlEijlFfCQuuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEQbSFyaGtJKIjIIkVc8wQKoRHTFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xZjFj ZGFlNS1iMDQxLTQ5OTMtOTYzZC02Zjg1NWY3NGVmYTEvYWZlMDRhMTAtNmQyMC0z NzY0LWJkODQtNTQ3MjM1NTZiNmJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMWYxY2RhZTUtYjA0MS00OTkzLTk2 M2QtNmY4NTVmNzRlZmExLzFmMWNkYWU1LWIwNDEtNDk5My05NjNkLTZmODU1Zjc0 ZWZhMS5jcmwwHwYDVR0jBBgwFoAUPqQNj3LysTdkekv3WOeHd1ylvpMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xZjFjZGFlNS1iMDQxLTQ5OTMtOTYzZC02Zjg1 NWY3NGVmYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6hoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGAwijuO9E9FyCLMWr2I95WAa/ss4O9y6mvA+gSohAAine9iO4MNptQl RFvk2HvXN/qFNk7DwPE70JxJnX4vXk1DAuiF+6EQjus8YlOwIKkz5dTFcJ8+PNgs 0tH23q1deGAWtx1Eln5hiGuxRbEqmGqkdYsGVetfxkwbGOMYHu1Sk+aAYe9SusH6 NeFGd7fYOWFVw/PPkWEubh1R2RpRs9z5yXYy5jHg+9sWWA5rxFj6C1W57s8S8ele INaCxg/Bqc0tuY0Oj+ErS3M75RJonhhUvLnqmdu9tW35yB0O+i49OVJSYkPYeDnt jQ9ne4NfBPe4ct8RD5ASY2L9VtYbpyo= -----END CERTIFICATE-----Generated at Sat Jul 25 00:27:32 2026 by rpki-client