$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8/dff59291-b5c9-3e59-b7d5-550a9ded0ade.roa File: dff59291-b5c9-3e59-b7d5-550a9ded0ade.roa (raw, json) Hash identifier: TYcG5MD4CiafrzAeEJJqtidDxUzTiStX+VdMzrRSPHQ= Subject key identifier: 08:B0:DE:A6:8E:40:68:82:5B:60:20:9C:9E:B6:02:23:D6:A7:B2:24 Certificate issuer: /CN=3d9df9b4-6f73-43c8-aacc-4d068a82c5d8 Certificate serial: 010D0C9F4328584E97B504A8695BBCFDFFF3ED00 Authority key identifier: 0D:52:33:12:BE:B4:61:AB:88:D5:F1:48:CF:BC:01:2C:2D:B6:5F:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8/dff59291-b5c9-3e59-b7d5-550a9ded0ade.roa Signing time: Thu 23 Jul 2026 09:00:11 +0000 ROA not before: Thu 23 Jul 2026 09:00:11 +0000 ROA not after: Wed 21 Oct 2026 09:00:11 +0000 asID: 16276 IP address blocks: 23.151.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:97:b5:04:a8:69:5b:bc:fd:ff:f3:ed:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d9df9b4-6f73-43c8-aacc-4d068a82c5d8 Validity Not Before: Jul 23 09:00:11 2026 GMT Not After : Oct 21 09:00:11 2026 GMT Subject: CN=0e80dd03-1804-4981-9fa1-2473186ebebb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:85:6e:c6:4b:e0:75:57:5c:8b:b7:76:a8:89: e8:62:5c:e8:dd:35:53:d2:5e:ac:fd:98:3a:24:31: cc:90:e1:4e:7a:59:85:93:92:77:dd:5f:82:90:d5: cd:2c:31:4f:d5:25:39:d6:43:a4:fd:9d:fe:e6:a0: 11:fc:2d:6d:f0:65:1f:59:f0:4a:52:6d:b8:44:13: 3d:45:27:4f:9f:46:81:f0:66:d2:5c:a6:3c:a6:46: ab:c6:47:61:f1:f1:f3:74:34:9f:9c:5f:97:4a:00: 5f:b0:fa:bb:56:00:e5:26:02:13:39:6e:42:95:ed: 65:69:ae:8f:a3:79:4e:c6:88:b0:3b:cc:8a:65:25: b6:2b:cb:8d:8f:cd:35:d6:94:e7:c1:54:8c:fe:bf: 61:69:05:c4:4f:34:10:5d:3c:cb:21:64:bb:bc:14: 3b:1c:3e:af:46:34:d5:f9:54:01:f6:7c:43:37:1e: 89:bb:75:be:2f:2d:4a:32:27:c5:80:f8:9d:b4:07: 8d:0f:00:b2:72:b5:c1:1c:86:a6:a7:e8:fd:b3:37: 05:0f:b9:ae:14:bc:bd:a6:70:be:d1:60:ee:1d:fa: 5e:65:04:6e:f2:ca:08:39:1c:3e:54:cd:1f:a6:12: a7:15:cb:78:67:a2:f5:91:f8:e1:98:35:38:64:38: a7:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:B0:DE:A6:8E:40:68:82:5B:60:20:9C:9E:B6:02:23:D6:A7:B2:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8/dff59291-b5c9-3e59-b7d5-550a9ded0ade.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8.crl X509v3 Authority Key Identifier: keyid:0D:52:33:12:BE:B4:61:AB:88:D5:F1:48:CF:BC:01:2C:2D:B6:5F:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8.cer sbgp-ipAddrBlock: critical IPv4: 23.151.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:78:b5:a1:b1:45:8a:5a:c1:77:44:30:10:db:d7:ce:a5:21: 82:8a:d9:44:f1:be:39:04:73:a2:2b:c8:e9:07:e6:4a:64:e9: 54:f0:f2:12:62:27:57:b3:06:3e:01:9f:45:c8:c8:02:fa:43: 28:24:7d:34:8e:11:ca:c8:81:fc:9e:72:fb:82:60:dc:ac:5c: 73:ec:50:28:24:eb:25:c2:3d:b7:fb:43:af:83:0b:67:8b:3f: 65:c4:6f:aa:28:dd:23:9e:ce:74:27:cc:89:00:5a:b9:cc:a8: 57:bf:88:5c:06:86:20:30:7c:64:3c:24:6e:a1:f1:28:a3:29: 97:30:11:30:19:7c:f4:7c:35:11:91:84:eb:93:95:9d:c7:27: ba:0d:f0:23:1a:07:a8:23:3d:d8:c3:7a:f2:02:ce:35:cd:66: 4c:fe:72:3e:df:42:c7:eb:c5:3f:24:2e:2f:f1:9c:98:5f:dc: 4e:dd:2b:10:8f:6b:50:14:e4:fd:35:2d:05:29:e1:ad:c5:56: 8e:a0:4d:0d:72:8d:c8:09:dd:33:97:23:06:11:63:51:fc:9a: 5d:f4:98:4a:e9:d0:9b:f4:86:19:5c:25:33:af:da:60:c7:62: f5:b4:92:ad:00:8e:73:74:74:27:24:f9:44:ba:d6:65:e6:5f: a7:c4:73:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6XtQSoaVu8/f/z7QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q5ZGY5YjQtNmY3My00M2M4LWFhY2MtNGQwNjhhODJj NWQ4MB4XDTI2MDcyMzA5MDAxMVoXDTI2MTAyMTA5MDAxMVowLzEtMCsGA1UEAxMk MGU4MGRkMDMtMTgwNC00OTgxLTlmYTEtMjQ3MzE4NmViZWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4VuxkvgdVdci7d2qInoYlzo3TVT0l6s/Zg6 JDHMkOFOelmFk5J33V+CkNXNLDFP1SU51kOk/Z3+5qAR/C1t8GUfWfBKUm24RBM9 RSdPn0aB8GbSXKY8pkarxkdh8fHzdDSfnF+XSgBfsPq7VgDlJgITOW5Cle1laa6P o3lOxoiwO8yKZSW2K8uNj8011pTnwVSM/r9haQXETzQQXTzLIWS7vBQ7HD6vRjTV +VQB9nxDNx6Ju3W+Ly1KMifFgPidtAeNDwCycrXBHIamp+j9szcFD7muFLy9pnC+ 0WDuHfpeZQRu8soIORw+VM0fphKnFct4Z6L1kfjhmDU4ZDinYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAiw3qaOQGiCW2AgnJ62AiPWp7IkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zZDlk ZjliNC02ZjczLTQzYzgtYWFjYy00ZDA2OGE4MmM1ZDgvZGZmNTkyOTEtYjVjOS0z ZTU5LWI3ZDUtNTUwYTlkZWQwYWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvM2Q5ZGY5YjQtNmY3My00M2M4LWFh Y2MtNGQwNjhhODJjNWQ4LzNkOWRmOWI0LTZmNzMtNDNjOC1hYWNjLTRkMDY4YTgy YzVkOC5jcmwwHwYDVR0jBBgwFoAUDVIzEr60YauI1fFIz7wBLC22X8QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zZDlkZjliNC02ZjczLTQzYzgtYWFjYy00ZDA2 OGE4MmM1ZDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5e4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEp4taGxRYpawXdEMBDb186lIYKK2UTxvjkEc6IryOkH5kpk6VTw8hJi J1ezBj4Bn0XIyAL6QygkfTSOEcrIgfyecvuCYNysXHPsUCgk6yXCPbf7Q6+DC2eL P2XEb6oo3SOeznQnzIkAWrnMqFe/iFwGhiAwfGQ8JG6h8SijKZcwETAZfPR8NRGR hOuTlZ3HJ7oN8CMaB6gjPdjDevICzjXNZkz+cj7fQsfrxT8kLi/xnJhf3E7dKxCP a1AU5P01LQUp4a3FVo6gTQ1yjcgJ3TOXIwYRY1H8ml30mErp0Jv0hhlcJTOv2mDH YvW0kq0AjnN0dCck+US61mXmX6fEc0o= -----END CERTIFICATE-----Generated at Fri Jul 24 07:48:09 2026 by rpki-client