$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c42e23f5-032b-4670-8e05-b4b0477e4388/8a9cbae8-b649-3428-a65a-dee741bbf2ff.roa File: 8a9cbae8-b649-3428-a65a-dee741bbf2ff.roa (raw, json) Hash identifier: 6+cjpM5pjCgazXf243YIIVvX6JKMjE7KGF1PmNBc24Q= Subject key identifier: 52:AF:E8:71:7C:C8:8C:51:BE:59:CB:16:25:F4:79:A4:37:8F:4A:E4 Certificate issuer: /CN=c42e23f5-032b-4670-8e05-b4b0477e4388 Certificate serial: 010D0C9F4328584E8B24F8FB97C65F395B9B0E00 Authority key identifier: 2E:6C:39:E3:71:14:18:83:29:2C:46:0D:E9:EC:38:AA:87:EA:7D:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c42e23f5-032b-4670-8e05-b4b0477e4388.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c42e23f5-032b-4670-8e05-b4b0477e4388/8a9cbae8-b649-3428-a65a-dee741bbf2ff.roa Signing time: Sat 18 Jul 2026 21:00:11 +0000 ROA not before: Sat 18 Jul 2026 21:00:11 +0000 ROA not after: Fri 16 Oct 2026 21:00:11 +0000 asID: 13692 IP address blocks: 192.133.23.0/24 maxlen: 24 199.195.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c42e23f5-032b-4670-8e05-b4b0477e4388/c42e23f5-032b-4670-8e05-b4b0477e4388.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c42e23f5-032b-4670-8e05-b4b0477e4388/c42e23f5-032b-4670-8e05-b4b0477e4388.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c42e23f5-032b-4670-8e05-b4b0477e4388.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8b:24:f8:fb:97:c6:5f:39:5b:9b:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c42e23f5-032b-4670-8e05-b4b0477e4388 Validity Not Before: Jul 18 21:00:11 2026 GMT Not After : Oct 16 21:00:11 2026 GMT Subject: CN=11639001-416d-42dc-bd83-d3e923369407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:64:d7:b2:3e:c5:b6:73:5a:dc:c5:0f:da:6c: 44:00:8d:fb:5c:fe:b7:5c:e0:8b:15:8b:32:67:98: 48:49:60:8b:dd:70:3f:93:b7:32:90:ef:a6:01:96: 1e:0a:ce:38:d4:eb:f6:ed:6f:c3:10:6c:0c:52:1e: fe:fc:b8:91:80:53:7b:76:65:8e:dc:c2:e1:33:d3: 7d:66:ad:42:cd:84:8f:80:ea:9f:2a:ef:32:0d:9a: a1:51:47:c5:ae:17:ac:9d:42:85:7e:4d:12:f9:02: 43:da:be:cb:2a:89:82:d9:47:10:4d:d0:08:26:81: 4d:3a:50:bc:e3:1f:67:1b:20:a0:94:85:db:5a:b3: 44:f0:ef:06:60:33:4c:30:08:51:5b:37:2e:d3:25: 3f:ae:5d:b7:25:4c:7e:60:7a:e9:ae:7f:17:81:a2: 79:47:26:0b:e2:f8:ac:01:92:4b:3c:47:43:f0:01: 77:ce:d1:6d:f6:d6:26:9f:a6:dc:50:c1:a6:8a:42: b2:11:eb:05:9f:6f:25:74:cf:20:53:d1:50:01:d8: 7d:1f:db:49:0a:a0:62:57:cb:2f:27:9e:bb:f4:b5: c1:32:32:86:f4:48:57:54:6c:de:7b:e8:15:48:c3: bc:7b:b8:dc:c7:5b:77:c5:33:67:cc:52:2f:db:e3: 10:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:AF:E8:71:7C:C8:8C:51:BE:59:CB:16:25:F4:79:A4:37:8F:4A:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c42e23f5-032b-4670-8e05-b4b0477e4388/8a9cbae8-b649-3428-a65a-dee741bbf2ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c42e23f5-032b-4670-8e05-b4b0477e4388/c42e23f5-032b-4670-8e05-b4b0477e4388.crl X509v3 Authority Key Identifier: keyid:2E:6C:39:E3:71:14:18:83:29:2C:46:0D:E9:EC:38:AA:87:EA:7D:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c42e23f5-032b-4670-8e05-b4b0477e4388.cer sbgp-ipAddrBlock: critical IPv4: 192.133.23.0/24 199.195.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:e7:7b:74:fb:4c:54:6e:bb:16:b6:21:e7:b7:5f:a4:30:5e: fc:00:e2:fa:b5:e4:00:0b:b0:0f:b6:a6:88:43:66:da:15:9c: a2:07:1a:05:aa:98:d1:b8:72:f8:2b:72:ca:e2:2c:d8:27:6b: 30:6a:81:29:9e:a8:00:56:48:45:cd:6c:ca:ab:9f:74:3a:c6: d3:f8:5d:6d:5c:fa:dd:fa:51:36:07:e2:34:d7:88:6a:18:c5: 7d:28:83:e2:bc:95:6e:b0:73:c8:ab:b2:7e:cf:15:ba:c0:d9: 31:88:bc:ca:88:cd:20:07:43:7d:fb:3f:96:af:3d:b2:b3:90: d3:9f:ee:9c:f0:34:82:74:62:b6:2f:36:f4:cf:5d:08:38:e0: 6f:97:18:bf:25:62:1a:e1:c8:ae:7b:40:94:e1:3f:0a:98:92: 47:6a:d8:44:1a:75:28:1c:1a:b5:71:6c:f5:81:04:f7:7b:81: 0a:4b:1b:96:67:b4:6c:0d:c7:dc:af:69:db:7d:42:8a:a5:c1: 4e:d0:e2:8f:c7:d7:10:75:60:25:b6:7b:de:5b:5b:f3:a5:dc: 68:51:2e:a9:36:b2:f3:9e:c4:2a:94:09:96:2c:03:36:4e:5b: f0:22:fa:05:f8:09:1f:88:10:2f:97:9b:3f:5e:20:65:e0:a6: ff:4c:90:ab -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE6LJPj7l8ZfOVubDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyZTIzZjUtMDMyYi00NjcwLThlMDUtYjRiMDQ3N2U0 Mzg4MB4XDTI2MDcxODIxMDAxMVoXDTI2MTAxNjIxMDAxMVowLzEtMCsGA1UEAxMk MTE2MzkwMDEtNDE2ZC00MmRjLWJkODMtZDNlOTIzMzY5NDA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GTXsj7FtnNa3MUP2mxEAI37XP63XOCLFYsy Z5hISWCL3XA/k7cykO+mAZYeCs441Ov27W/DEGwMUh7+/LiRgFN7dmWO3MLhM9N9 Zq1CzYSPgOqfKu8yDZqhUUfFrhesnUKFfk0S+QJD2r7LKomC2UcQTdAIJoFNOlC8 4x9nGyCglIXbWrNE8O8GYDNMMAhRWzcu0yU/rl23JUx+YHrprn8XgaJ5RyYL4vis AZJLPEdD8AF3ztFt9tYmn6bcUMGmikKyEesFn28ldM8gU9FQAdh9H9tJCqBiV8sv J5679LXBMjKG9EhXVGzee+gVSMO8e7jcx1t3xTNnzFIv2+MQ3QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFFKv6HF8yIxRvlnLFiX0eaQ3j0rkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jNDJl MjNmNS0wMzJiLTQ2NzAtOGUwNS1iNGIwNDc3ZTQzODgvOGE5Y2JhZTgtYjY0OS0z NDI4LWE2NWEtZGVlNzQxYmJmMmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzQyZTIzZjUtMDMyYi00NjcwLThl MDUtYjRiMDQ3N2U0Mzg4L2M0MmUyM2Y1LTAzMmItNDY3MC04ZTA1LWI0YjA0Nzdl NDM4OC5jcmwwHwYDVR0jBBgwFoAULmw543EUGIMpLEYN6ew4qofqfW8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jNDJlMjNmNS0wMzJiLTQ2NzAtOGUwNS1iNGIw NDc3ZTQzODguY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwIUXAwQE x8MQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIHne3T7TFRuuxa2Iee3X6QwXvwA4vq15AALsA+2pohDZtoV nKIHGgWqmNG4cvgrcsriLNgnazBqgSmeqABWSEXNbMqrn3Q6xtP4XW1c+t36UTYH 4jTXiGoYxX0og+K8lW6wc8irsn7PFbrA2TGIvMqIzSAHQ337P5avPbKzkNOf7pzw NIJ0YrYvNvTPXQg44G+XGL8lYhrhyK57QJThPwqYkkdq2EQadSgcGrVxbPWBBPd7 gQpLG5ZntGwNx9yvadt9QoqlwU7Q4o/H1xB1YCW2e95bW/Ol3GhRLqk2svOexCqU CZYsAzZOW/Ai+gX4CR+IEC+Xmz9eIGXgpv9MkKs= -----END CERTIFICATE-----Generated at Fri Jul 24 01:44:52 2026 by rpki-client