$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/300a18ca-a9e5-430d-b5c4-d15e88ea79a3/863f00d3-0369-3e82-aee6-58fe03be78e9.roa File: 863f00d3-0369-3e82-aee6-58fe03be78e9.roa (raw, json) Hash identifier: N72gyc3yVq64rcyH1zGwOQjGCk3eZ1USC621zkFf5vQ= Subject key identifier: EA:61:BF:F2:26:7C:15:78:E5:69:09:C9:C9:06:C9:8E:34:38:37:D7 Certificate issuer: /CN=300a18ca-a9e5-430d-b5c4-d15e88ea79a3 Certificate serial: 010D0C9F4328584E86F4FE168452AD286881DB00 Authority key identifier: 72:9F:74:7B:47:04:82:DA:57:8A:25:AE:F0:CF:9C:EF:98:1F:06:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/300a18ca-a9e5-430d-b5c4-d15e88ea79a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/300a18ca-a9e5-430d-b5c4-d15e88ea79a3/863f00d3-0369-3e82-aee6-58fe03be78e9.roa Signing time: Fri 17 Jul 2026 09:00:14 +0000 ROA not before: Fri 17 Jul 2026 09:00:14 +0000 ROA not after: Thu 15 Oct 2026 09:00:14 +0000 asID: 401553 IP address blocks: 23.131.124.0/24 maxlen: 24 2602:f75e::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/300a18ca-a9e5-430d-b5c4-d15e88ea79a3/300a18ca-a9e5-430d-b5c4-d15e88ea79a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/300a18ca-a9e5-430d-b5c4-d15e88ea79a3/300a18ca-a9e5-430d-b5c4-d15e88ea79a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/300a18ca-a9e5-430d-b5c4-d15e88ea79a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:86:f4:fe:16:84:52:ad:28:68:81:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=300a18ca-a9e5-430d-b5c4-d15e88ea79a3 Validity Not Before: Jul 17 09:00:14 2026 GMT Not After : Oct 15 09:00:14 2026 GMT Subject: CN=74e798ad-c16a-4366-b757-a32d5d81c97f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:cc:cd:5c:2b:70:4e:0c:29:0b:c5:6c:71:e1: d5:12:44:ce:8b:61:15:5b:89:98:06:b1:e2:47:c8: 6a:b4:9c:b5:aa:85:b1:43:f2:5f:8c:f7:93:57:8f: 41:03:24:b7:05:81:2b:5d:71:b5:61:f0:a7:70:87: c7:8c:42:7d:97:b5:d8:a9:bf:40:e1:4a:19:6f:ad: 59:23:72:ac:a7:e9:9d:0d:f9:2d:bf:c9:be:f2:ff: be:42:19:fc:16:dd:dd:9d:c9:b8:94:54:02:29:a7: c5:d2:52:01:d1:80:6d:b8:0a:78:d8:2f:62:c9:f7: 2f:f1:6e:87:c2:7c:50:f2:01:e6:b4:b3:cf:ad:34: 2b:ac:c4:67:5a:b8:eb:67:60:cd:de:33:02:69:53: de:1e:2c:71:dd:30:c1:e6:e6:8f:7f:ce:30:a3:2a: 95:fb:c2:fe:c1:7d:0c:f7:f9:a3:fa:53:9f:84:84: f7:f3:be:80:af:59:b5:a1:24:ae:da:7c:b2:eb:19: 6a:72:73:76:e1:13:4f:fd:c0:cb:c8:d3:80:09:f4: 28:f2:09:4e:54:52:6e:07:6e:d4:03:fc:71:f6:21: 43:a9:02:71:18:92:65:c6:3d:01:cc:46:bf:72:a1: ac:61:b7:11:10:03:0d:a8:08:2c:2d:60:02:0a:95: 4c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:61:BF:F2:26:7C:15:78:E5:69:09:C9:C9:06:C9:8E:34:38:37:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/300a18ca-a9e5-430d-b5c4-d15e88ea79a3/863f00d3-0369-3e82-aee6-58fe03be78e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/300a18ca-a9e5-430d-b5c4-d15e88ea79a3/300a18ca-a9e5-430d-b5c4-d15e88ea79a3.crl X509v3 Authority Key Identifier: keyid:72:9F:74:7B:47:04:82:DA:57:8A:25:AE:F0:CF:9C:EF:98:1F:06:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/300a18ca-a9e5-430d-b5c4-d15e88ea79a3.cer sbgp-ipAddrBlock: critical IPv4: 23.131.124.0/24 IPv6: 2602:f75e::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:c4:78:8a:79:73:53:2e:4f:79:cb:4c:a4:e8:7f:9c:4a:79: 3c:8f:2e:7d:e5:64:5f:1c:39:e7:94:d3:ed:b8:01:66:73:8d: 1f:2c:eb:7b:55:00:d3:7b:82:18:76:7e:33:c3:47:75:b0:f2: 07:a5:fa:27:f9:87:26:b8:84:05:e4:98:ab:04:0b:69:b2:f1: 99:2e:fa:a1:07:9e:75:ac:b7:5c:3d:cb:66:6d:27:48:4d:ae: 47:36:b7:3e:70:d2:48:b2:26:42:e6:5d:e0:18:bc:fd:0d:8d: 5e:b6:d6:f3:71:a4:56:43:8e:da:98:70:16:6c:03:47:2c:ae: 92:21:67:0c:25:68:20:81:28:3f:b2:e9:7e:17:50:9f:ad:87: df:15:23:8e:7d:0a:18:46:82:71:f4:f0:b2:b2:2d:2b:45:ac: f8:a2:79:4d:65:6b:23:f2:d6:c1:a7:8b:92:3f:04:e6:09:0d: 23:cd:88:51:67:cb:b7:02:7c:3f:0f:53:7c:aa:c5:c5:db:48: d5:09:d2:e0:31:c6:63:12:9e:37:23:2f:c3:6a:b9:4c:f8:92: 70:a9:8c:ce:5f:8d:0f:c9:22:a7:31:7a:58:ec:23:41:74:22: 81:fa:6f:cb:30:e5:53:1b:1c:7c:dc:dd:17:8e:e8:42:a8:a0: 9b:b0:6c:c4 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE6G9P4WhFKtKGiB2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzAwYTE4Y2EtYTllNS00MzBkLWI1YzQtZDE1ZTg4ZWE3 OWEzMB4XDTI2MDcxNzA5MDAxNFoXDTI2MTAxNTA5MDAxNFowLzEtMCsGA1UEAxMk NzRlNzk4YWQtYzE2YS00MzY2LWI3NTctYTMyZDVkODFjOTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtczNXCtwTgwpC8VsceHVEkTOi2EVW4mYBrHi R8hqtJy1qoWxQ/JfjPeTV49BAyS3BYErXXG1YfCncIfHjEJ9l7XYqb9A4UoZb61Z I3Ksp+mdDfktv8m+8v++Qhn8Ft3dncm4lFQCKafF0lIB0YBtuAp42C9iyfcv8W6H wnxQ8gHmtLPPrTQrrMRnWrjrZ2DN3jMCaVPeHixx3TDB5uaPf84woyqV+8L+wX0M 9/mj+lOfhIT3876Ar1m1oSSu2nyy6xlqcnN24RNP/cDLyNOACfQo8glOVFJuB27U A/xx9iFDqQJxGJJlxj0BzEa/cqGsYbcREAMNqAgsLWACCpVMyQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFOphv/ImfBV45WkJyckGyY40ODfXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zMDBh MThjYS1hOWU1LTQzMGQtYjVjNC1kMTVlODhlYTc5YTMvODYzZjAwZDMtMDM2OS0z ZTgyLWFlZTYtNThmZTAzYmU3OGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzAwYTE4Y2EtYTllNS00MzBkLWI1 YzQtZDE1ZTg4ZWE3OWEzLzMwMGExOGNhLWE5ZTUtNDMwZC1iNWM0LWQxNWU4OGVh NzlhMy5jcmwwHwYDVR0jBBgwFoAUcp90e0cEgtpXiiWu8M+c75gfBrowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zMDBhMThjYS1hOWU1LTQzMGQtYjVjNC1kMTVl ODhlYTc5YTMuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4N8MA4E AgACMAgDBgQmAvdeADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAvxHiKeXNTLk95y0yk6H+cSnk8jy595WRf HDnnlNPtuAFmc40fLOt7VQDTe4IYdn4zw0d1sPIHpfon+YcmuIQF5JirBAtpsvGZ LvqhB551rLdcPctmbSdITa5HNrc+cNJIsiZC5l3gGLz9DY1ettbzcaRWQ47amHAW bANHLK6SIWcMJWgggSg/sul+F1CfrYffFSOOfQoYRoJx9PCysi0rRaz4onlNZWsj 8tbBp4uSPwTmCQ0jzYhRZ8u3Anw/D1N8qsXF20jVCdLgMcZjEp43Iy/DarlM+JJw qYzOX40PySKnMXpY7CNBdCKB+m/LMOVTGxx83N0XjuhCqKCbsGzE -----END CERTIFICATE-----Generated at Fri Jul 24 13:08:09 2026 by rpki-client