$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/4e651070-49d3-379c-9ddb-1c9815e02a76.roa File: 4e651070-49d3-379c-9ddb-1c9815e02a76.roa (raw, json) Hash identifier: w4sTcYJ50ql92Jr+Aia3v2ItymrIqGZRhfaoGngVi88= Subject key identifier: FF:39:55:5A:9F:C4:AA:72:B3:B7:31:4C:18:BB:76:02:79:E6:EF:82 Certificate issuer: /CN=9faf7a12-0176-44f9-9938-7bbccac3d238 Certificate serial: 010D0C9F4328584E90BA4C67E200B9FD7E59AD00 Authority key identifier: 27:F5:34:9F:8C:B1:FD:33:07:55:93:76:CC:BC:45:98:C1:2E:B5:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/4e651070-49d3-379c-9ddb-1c9815e02a76.roa Signing time: Mon 20 Jul 2026 21:00:11 +0000 ROA not before: Mon 20 Jul 2026 21:00:11 +0000 ROA not after: Sun 18 Oct 2026 21:00:11 +0000 asID: 30399 IP address blocks: 23.152.40.0/24 maxlen: 24 23.152.41.0/24 maxlen: 24 2602:fa82::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/9faf7a12-0176-44f9-9938-7bbccac3d238.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/9faf7a12-0176-44f9-9938-7bbccac3d238.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:90:ba:4c:67:e2:00:b9:fd:7e:59:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9faf7a12-0176-44f9-9938-7bbccac3d238 Validity Not Before: Jul 20 21:00:11 2026 GMT Not After : Oct 18 21:00:11 2026 GMT Subject: CN=f070b1e8-92c6-4d29-a08b-d1b71082151b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:3c:75:97:22:02:14:0e:74:2a:54:e5:8d:5e: 45:48:90:6f:0e:2c:b2:20:88:0a:40:1b:a5:7c:dd: f6:5a:bd:e6:14:11:82:bd:92:40:16:0b:b4:6d:a8: 25:91:b3:bd:96:84:18:02:94:f8:2d:cd:9e:93:a4: 3e:a0:8f:13:41:e3:92:13:b2:91:12:c8:df:2f:d3: 44:05:a2:de:f1:c1:3f:c9:72:1d:1a:e8:4e:fb:a9: ba:5d:7d:37:2a:db:ab:c0:fa:3f:8b:5c:db:cb:a1: a9:d7:97:f9:46:18:a0:de:bd:e9:a5:cf:73:ca:50: 11:e4:f3:50:e4:d5:98:ba:ea:34:ee:61:fa:3b:08: 12:30:ae:d7:91:c7:1b:73:d9:d8:24:63:7e:41:bc: 9d:b5:12:55:39:a1:50:2a:98:f1:c6:ee:04:79:5b: 53:b2:b6:2b:46:e9:d0:36:6d:e6:66:40:52:20:88: 8d:4e:ca:17:65:53:31:8c:c4:ba:79:ce:7d:c0:9a: 1a:96:41:0d:51:c8:8f:22:f7:af:62:bd:5b:d3:c9: 7b:53:9c:a3:1d:ac:a3:70:0e:bd:eb:07:95:d3:e1: 69:23:bc:39:e4:2b:30:02:08:27:53:29:57:6c:87: 02:c8:8b:bd:dd:7f:41:9f:65:6a:37:cf:26:62:0c: 23:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:39:55:5A:9F:C4:AA:72:B3:B7:31:4C:18:BB:76:02:79:E6:EF:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/4e651070-49d3-379c-9ddb-1c9815e02a76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/9faf7a12-0176-44f9-9938-7bbccac3d238.crl X509v3 Authority Key Identifier: keyid:27:F5:34:9F:8C:B1:FD:33:07:55:93:76:CC:BC:45:98:C1:2E:B5:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238.cer sbgp-ipAddrBlock: critical IPv4: 23.152.40.0/23 IPv6: 2602:fa82::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:a8:24:c8:3a:6d:ab:cb:bf:35:b7:72:7d:97:24:25:d5:7a: 83:ed:42:1a:27:d0:71:ce:3a:0a:8b:8e:f1:07:cb:10:14:22: 08:a6:0a:f6:fc:0b:17:68:74:89:c6:e7:9c:54:6a:6d:82:bd: 95:b9:2c:d5:a9:57:76:26:bc:aa:06:51:49:a6:d7:18:4e:06: 78:f3:30:bb:d2:9d:dd:bf:f5:fa:25:0b:03:82:ce:14:09:65: 2a:3f:ea:a2:60:0a:54:7b:58:c5:11:f6:db:68:8d:89:88:54: 14:75:2d:af:cb:b7:bf:ce:01:c7:84:98:0a:5f:86:1a:ed:74: 06:e1:05:fe:07:a8:3e:e9:e2:56:41:91:f2:80:f7:96:4d:e7: c8:6f:5a:c3:f9:e6:95:82:d6:d5:88:ae:7a:e4:29:23:83:1b: 2f:97:be:12:a3:3e:b0:2d:94:8c:9e:9d:2f:4f:c5:5a:e2:65: 5c:e8:bb:37:fe:72:8c:36:25:02:8d:12:82:7d:8b:ec:85:81: 81:eb:46:df:3b:54:33:62:66:24:11:c3:9e:3a:8c:03:26:e3: 84:f2:24:f8:57:b3:59:78:fd:88:2b:20:d4:81:59:ab:26:22: c0:47:49:0c:4e:e2:29:91:84:10:d6:45:71:11:7c:cc:4a:57: 5e:70:61:3d -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE6Qukxn4gC5/X5ZrQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWZhZjdhMTItMDE3Ni00NGY5LTk5MzgtN2JiY2NhYzNk MjM4MB4XDTI2MDcyMDIxMDAxMVoXDTI2MTAxODIxMDAxMVowLzEtMCsGA1UEAxMk ZjA3MGIxZTgtOTJjNi00ZDI5LWEwOGItZDFiNzEwODIxNTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzx1lyICFA50KlTljV5FSJBvDiyyIIgKQBul fN32Wr3mFBGCvZJAFgu0baglkbO9loQYApT4Lc2ek6Q+oI8TQeOSE7KREsjfL9NE BaLe8cE/yXIdGuhO+6m6XX03KturwPo/i1zby6Gp15f5Rhig3r3ppc9zylAR5PNQ 5NWYuuo07mH6OwgSMK7Xkccbc9nYJGN+QbydtRJVOaFQKpjxxu4EeVtTsrYrRunQ Nm3mZkBSIIiNTsoXZVMxjMS6ec59wJoalkENUciPIvevYr1b08l7U5yjHayjcA69 6weV0+FpI7w55CswAggnUylXbIcCyIu93X9Bn2VqN88mYgwj/wIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFP85VVqfxKpys7cxTBi7dgJ55u+CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85ZmFm N2ExMi0wMTc2LTQ0ZjktOTkzOC03YmJjY2FjM2QyMzgvNGU2NTEwNzAtNDlkMy0z NzljLTlkZGItMWM5ODE1ZTAyYTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWZhZjdhMTItMDE3Ni00NGY5LTk5 MzgtN2JiY2NhYzNkMjM4LzlmYWY3YTEyLTAxNzYtNDRmOS05OTM4LTdiYmNjYWMz ZDIzOC5jcmwwHwYDVR0jBBgwFoAUJ/U0n4yx/TMHVZN2zLxFmMEutRAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85ZmFmN2ExMi0wMTc2LTQ0ZjktOTkzOC03YmJj Y2FjM2QyMzguY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQBF5goMA4E AgACMAgDBgQmAvqCADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAkqCTIOm2ry781t3J9lyQl1XqD7UIaJ9Bx zjoKi47xB8sQFCIIpgr2/AsXaHSJxuecVGptgr2VuSzVqVd2JryqBlFJptcYTgZ4 8zC70p3dv/X6JQsDgs4UCWUqP+qiYApUe1jFEfbbaI2JiFQUdS2vy7e/zgHHhJgK X4Ya7XQG4QX+B6g+6eJWQZHygPeWTefIb1rD+eaVgtbViK565Ckjgxsvl74Soz6w LZSMnp0vT8Va4mVc6Ls3/nKMNiUCjRKCfYvshYGB60bfO1QzYmYkEcOeOowDJuOE 8iT4V7NZeP2IKyDUgVmrJiLAR0kMTuIpkYQQ1kVxEXzMSldecGE9 -----END CERTIFICATE-----Generated at Fri Jul 24 02:03:24 2026 by rpki-client