$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164/40f1be3b-21ab-3e0d-bb91-c7c31dde04b8.roa File: 40f1be3b-21ab-3e0d-bb91-c7c31dde04b8.roa (raw, json) Hash identifier: KFpOP+pC9JAQLuPSYAVi+MytLRzu1Icum4175p4mK8U= Subject key identifier: 20:C4:24:AD:38:05:E2:51:2A:16:78:3D:AD:AE:33:A7:AA:40:E5:72 Certificate issuer: /CN=2da4b7dc-6e43-4290-86d6-84e81139f164 Certificate serial: 010D0C9F4328584E5D14B22AEACB4058A491A500 Authority key identifier: 5A:2D:E2:5F:49:C9:A9:97:CE:89:B2:57:BE:A4:1F:20:8E:0E:2E:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164/40f1be3b-21ab-3e0d-bb91-c7c31dde04b8.roa Signing time: Thu 02 Jul 2026 09:00:12 +0000 ROA not before: Thu 02 Jul 2026 09:00:12 +0000 ROA not after: Wed 30 Sep 2026 09:00:12 +0000 asID: 35972 IP address blocks: 23.130.236.0/24 maxlen: 24 2602:f76d::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164/2da4b7dc-6e43-4290-86d6-84e81139f164.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164/2da4b7dc-6e43-4290-86d6-84e81139f164.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5d:14:b2:2a:ea:cb:40:58:a4:91:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2da4b7dc-6e43-4290-86d6-84e81139f164 Validity Not Before: Jul 2 09:00:12 2026 GMT Not After : Sep 30 09:00:12 2026 GMT Subject: CN=43e7d5c7-5095-4bc8-b3a8-117c640c85ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f9:8e:cd:26:83:e1:02:c0:b8:07:3d:ee:af: 81:1b:f4:30:0c:35:0c:0e:ba:e8:1f:ed:8d:81:b9: 52:0e:26:e6:dc:e7:8c:93:90:37:95:ba:c9:72:3b: e8:1d:b7:f8:bd:66:f5:c2:04:bf:6c:5f:7c:af:7d: 3c:ce:a4:c0:e4:62:17:6f:81:f2:60:2e:1e:4c:f5: 66:e6:73:3f:45:94:e4:20:ee:fe:e8:cc:96:9b:56: 21:9b:90:0f:3b:72:73:2e:3e:99:5e:47:ab:90:d8: be:9e:bd:a5:16:07:7d:28:5d:f8:0a:6d:43:6e:88: 17:7e:44:4c:26:b1:2b:63:79:6c:cb:1e:0d:65:df: 5f:81:a2:f7:4c:e6:9c:98:06:e5:ab:a3:d6:3f:94: 1d:78:99:a6:de:68:3e:18:1f:d5:9b:6d:ef:aa:19: 0d:3e:11:79:42:07:a3:cb:80:53:3f:95:4d:c3:c4: e0:ea:f2:3c:1e:ac:c8:04:22:31:60:f1:92:2b:07: df:f3:9d:ac:36:36:2b:59:94:94:71:db:34:0e:95: 55:4e:a0:a7:71:63:58:10:f7:cf:73:88:9c:ec:97: 8c:97:fb:98:9e:48:ca:45:27:f0:c4:1b:77:0a:ef: 95:b8:df:57:50:f5:9a:ac:8d:43:c5:47:c7:dc:73: bc:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:C4:24:AD:38:05:E2:51:2A:16:78:3D:AD:AE:33:A7:AA:40:E5:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164/40f1be3b-21ab-3e0d-bb91-c7c31dde04b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164/2da4b7dc-6e43-4290-86d6-84e81139f164.crl X509v3 Authority Key Identifier: keyid:5A:2D:E2:5F:49:C9:A9:97:CE:89:B2:57:BE:A4:1F:20:8E:0E:2E:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164.cer sbgp-ipAddrBlock: critical IPv4: 23.130.236.0/24 IPv6: 2602:f76d::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:1a:21:64:0c:9c:99:0d:70:9b:b6:c8:54:e5:75:85:bf:98: 02:af:cf:bc:b4:7b:6e:07:2c:7a:d6:94:1d:95:13:11:95:7f: 5d:24:eb:67:a8:44:5f:9b:81:ee:cf:2c:d9:8f:e5:60:cb:58: 10:f3:4c:5e:09:58:e4:1d:a7:d9:ea:98:a5:11:99:24:a3:79: 3a:fd:3f:0d:08:d4:51:a7:40:57:5f:1e:03:60:7f:45:83:b1: 0c:1f:16:83:00:27:95:61:d8:74:cc:9b:50:a3:0e:f7:c8:58: 1b:a8:65:1b:7c:ff:e4:30:d3:f9:4d:b1:43:6e:1c:01:d6:eb: a0:95:06:3f:58:bf:47:01:67:8b:58:9c:01:e1:78:5c:97:6d: 22:89:34:11:39:07:01:08:e4:a0:76:c4:54:38:62:0d:8f:84: 17:79:54:e4:92:74:4b:85:b8:aa:a9:97:58:13:46:a7:35:f6: 42:8c:b1:dc:c0:ac:20:e1:b9:d9:42:5a:69:95:31:56:0d:05: 32:a6:fb:e4:98:46:7d:a2:cf:c7:eb:01:7d:b9:8c:f6:c7:b7: 15:2b:ee:84:93:40:49:59:de:d1:2e:25:a4:89:90:12:53:7e: cc:cf:2e:85:a1:d2:4c:69:d3:b7:7a:76:3c:3d:3b:18:e4:1c: 97:4d:74:e8 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE5dFLIq6stAWKSRpQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRhNGI3ZGMtNmU0My00MjkwLTg2ZDYtODRlODExMzlm MTY0MB4XDTI2MDcwMjA5MDAxMloXDTI2MDkzMDA5MDAxMlowLzEtMCsGA1UEAxMk NDNlN2Q1YzctNTA5NS00YmM4LWIzYTgtMTE3YzY0MGM4NWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPmOzSaD4QLAuAc97q+BG/QwDDUMDrroH+2N gblSDibm3OeMk5A3lbrJcjvoHbf4vWb1wgS/bF98r308zqTA5GIXb4HyYC4eTPVm 5nM/RZTkIO7+6MyWm1Yhm5APO3JzLj6ZXkerkNi+nr2lFgd9KF34Cm1DbogXfkRM JrErY3lsyx4NZd9fgaL3TOacmAblq6PWP5QdeJmm3mg+GB/Vm23vqhkNPhF5Qgej y4BTP5VNw8Tg6vI8HqzIBCIxYPGSKwff852sNjYrWZSUcds0DpVVTqCncWNYEPfP c4ic7JeMl/uYnkjKRSfwxBt3Cu+VuN9XUPWarI1DxUfH3HO8UwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFCDEJK04BeJRKhZ4Pa2uM6eqQOVyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yZGE0 YjdkYy02ZTQzLTQyOTAtODZkNi04NGU4MTEzOWYxNjQvNDBmMWJlM2ItMjFhYi0z ZTBkLWJiOTEtYzdjMzFkZGUwNGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMmRhNGI3ZGMtNmU0My00MjkwLTg2 ZDYtODRlODExMzlmMTY0LzJkYTRiN2RjLTZlNDMtNDI5MC04NmQ2LTg0ZTgxMTM5 ZjE2NC5jcmwwHwYDVR0jBBgwFoAUWi3iX0nJqZfOibJXvqQfII4OLs8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yZGE0YjdkYy02ZTQzLTQyOTAtODZkNi04NGU4 MTEzOWYxNjQuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4LsMA4E AgACMAgDBgQmAvdtADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBcGiFkDJyZDXCbtshU5XWFv5gCr8+8tHtu Byx61pQdlRMRlX9dJOtnqERfm4HuzyzZj+Vgy1gQ80xeCVjkHafZ6pilEZkko3k6 /T8NCNRRp0BXXx4DYH9Fg7EMHxaDACeVYdh0zJtQow73yFgbqGUbfP/kMNP5TbFD bhwB1uuglQY/WL9HAWeLWJwB4Xhcl20iiTQROQcBCOSgdsRUOGINj4QXeVTkknRL hbiqqZdYE0anNfZCjLHcwKwg4bnZQlpplTFWDQUypvvkmEZ9os/H6wF9uYz2x7cV K+6Ek0BJWd7RLiWkiZASU37Mzy6FodJMadO3enY8PTsY5ByXTXTo -----END CERTIFICATE-----Generated at Fri Jul 24 05:47:29 2026 by rpki-client