$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78/f2b2ef5e-e197-3273-9721-b9a575e1ad08.roa File: f2b2ef5e-e197-3273-9721-b9a575e1ad08.roa (raw, json) Hash identifier: ut5Qa96q3IAHgv/aV9Y/AcWMd5k0e4ynXQ8IkxPiR8s= Subject key identifier: 5D:09:E8:46:5A:37:F5:2E:6C:A8:C2:62:5D:D1:06:E0:DB:5A:B6:52 Certificate issuer: /CN=42eee53c-f373-4efe-aed3-4c501c9dde78 Certificate serial: 010D0C9F4328584E37647D88DD6FCA9C284DD780 Authority key identifier: A0:35:2C:B8:0B:B4:72:AB:EE:B9:9C:1B:4A:68:ED:08:B8:A1:FD:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78/f2b2ef5e-e197-3273-9721-b9a575e1ad08.roa Signing time: Thu 18 Jun 2026 21:00:12 +0000 ROA not before: Thu 18 Jun 2026 21:00:12 +0000 ROA not after: Wed 16 Sep 2026 21:00:12 +0000 asID: 401474 IP address blocks: 23.129.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78/42eee53c-f373-4efe-aed3-4c501c9dde78.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78/42eee53c-f373-4efe-aed3-4c501c9dde78.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:37:64:7d:88:dd:6f:ca:9c:28:4d:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42eee53c-f373-4efe-aed3-4c501c9dde78 Validity Not Before: Jun 18 21:00:12 2026 GMT Not After : Sep 16 21:00:12 2026 GMT Subject: CN=1ccb4ee5-6f16-4c78-80bc-69a98a9c8a5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:7a:0d:65:7a:71:90:b1:e3:61:e6:3b:f2:80: 30:a4:78:54:ee:ac:0f:a4:07:0a:e2:37:5a:e6:6c: ab:e7:35:6c:65:84:df:ed:f5:cd:80:11:78:63:a8: 9d:fc:f5:21:95:7f:0b:d1:bc:63:5b:3b:e0:ed:c7: 10:f3:81:8f:9f:06:aa:18:db:1f:9e:58:da:a0:04: bc:a5:47:bf:de:11:d6:81:e9:b4:eb:03:4c:02:11: 9d:cd:bd:d7:c0:a7:ad:35:0f:19:35:12:96:b3:c0: ae:5b:b2:08:c8:8b:5b:bc:fb:c2:65:f8:01:ca:74: 12:67:52:b7:39:d8:09:28:37:e0:9e:7d:5c:41:fb: d0:84:28:ac:4c:6f:15:8a:32:b2:84:7a:3f:af:47: ac:82:1b:0c:7c:ba:dd:d2:04:96:f5:f8:5c:d2:12: 7d:31:32:51:6a:b2:fb:cb:d6:d2:3f:74:60:50:35: 79:94:bc:f0:f9:50:32:64:9e:68:5a:6f:56:a9:b0: f7:a3:5f:4a:94:fa:7e:7d:79:f9:db:4a:e1:90:77: 94:9e:6c:b3:ab:b4:b3:09:81:4d:3a:98:9a:f7:e9: 4d:fd:d9:54:ca:89:47:05:b5:b2:05:da:d5:47:65: 7e:7f:b1:c0:53:e9:05:9d:72:df:d0:70:61:36:2d: 16:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:09:E8:46:5A:37:F5:2E:6C:A8:C2:62:5D:D1:06:E0:DB:5A:B6:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78/f2b2ef5e-e197-3273-9721-b9a575e1ad08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78/42eee53c-f373-4efe-aed3-4c501c9dde78.crl X509v3 Authority Key Identifier: keyid:A0:35:2C:B8:0B:B4:72:AB:EE:B9:9C:1B:4A:68:ED:08:B8:A1:FD:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78.cer sbgp-ipAddrBlock: critical IPv4: 23.129.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:03:92:7e:c2:b6:f2:87:d6:37:8f:b7:c8:26:66:e4:0b:2d: 87:36:c0:2a:bb:80:71:36:c9:a5:dd:28:31:1c:b2:17:6e:8a: 48:ca:83:86:9f:e2:b8:1d:a6:c4:aa:a2:60:0a:91:19:25:5a: 39:9d:fc:fd:ca:42:cf:9f:0a:6c:26:ab:ef:c6:a4:9c:69:32: d2:37:70:57:e4:f0:e4:06:ce:4d:e1:07:f4:61:ee:ce:2d:76: 1d:1d:cb:6c:ef:65:f5:34:e5:68:0f:74:51:e3:9f:75:b3:55: b3:b9:90:91:6d:fb:a2:be:55:9f:b5:f3:59:9d:c9:a9:91:0e: da:21:99:f0:c8:e1:ad:ea:41:1a:87:b2:59:de:59:db:c8:67: 30:77:07:de:8a:2b:e6:ef:78:71:de:66:76:0e:b8:cb:47:62: 63:57:d3:5f:81:f1:3b:03:00:f8:e3:ad:22:5e:e2:12:05:0a: ca:9d:4a:45:69:df:33:cb:a8:20:ae:67:d6:64:d1:88:ff:63: 63:73:0a:ad:6f:da:cc:f2:2a:34:4d:b3:41:4d:fc:06:c5:42: 1c:34:e8:19:fa:6b:4a:30:59:f6:43:8e:9f:22:05:0c:a8:31: fd:30:98:a9:15:f6:93:4a:3e:37:da:36:33:de:a8:8a:ef:68: be:30:a7:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE43ZH2I3W/KnChN14AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDJlZWU1M2MtZjM3My00ZWZlLWFlZDMtNGM1MDFjOWRk ZTc4MB4XDTI2MDYxODIxMDAxMloXDTI2MDkxNjIxMDAxMlowLzEtMCsGA1UEAxMk MWNjYjRlZTUtNmYxNi00Yzc4LTgwYmMtNjlhOThhOWM4YTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXoNZXpxkLHjYeY78oAwpHhU7qwPpAcK4jda 5myr5zVsZYTf7fXNgBF4Y6id/PUhlX8L0bxjWzvg7ccQ84GPnwaqGNsfnljaoAS8 pUe/3hHWgem06wNMAhGdzb3XwKetNQ8ZNRKWs8CuW7IIyItbvPvCZfgBynQSZ1K3 OdgJKDfgnn1cQfvQhCisTG8VijKyhHo/r0esghsMfLrd0gSW9fhc0hJ9MTJRarL7 y9bSP3RgUDV5lLzw+VAyZJ5oWm9WqbD3o19KlPp+fXn520rhkHeUnmyzq7SzCYFN Opia9+lN/dlUyolHBbWyBdrVR2V+f7HAU+kFnXLf0HBhNi0WdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF0J6EZaN/UubKjCYl3RBuDbWrZSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80MmVl ZTUzYy1mMzczLTRlZmUtYWVkMy00YzUwMWM5ZGRlNzgvZjJiMmVmNWUtZTE5Ny0z MjczLTk3MjEtYjlhNTc1ZTFhZDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNDJlZWU1M2MtZjM3My00ZWZlLWFl ZDMtNGM1MDFjOWRkZTc4LzQyZWVlNTNjLWYzNzMtNGVmZS1hZWQzLTRjNTAxYzlk ZGU3OC5jcmwwHwYDVR0jBBgwFoAUoDUsuAu0cqvuuZwbSmjtCLih/ccwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi80MmVlZTUzYy1mMzczLTRlZmUtYWVkMy00YzUw MWM5ZGRlNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4EMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADwDkn7CtvKH1jePt8gmZuQLLYc2wCq7gHE2yaXdKDEcshduikjKg4af 4rgdpsSqomAKkRklWjmd/P3KQs+fCmwmq+/GpJxpMtI3cFfk8OQGzk3hB/Rh7s4t dh0dy2zvZfU05WgPdFHjn3WzVbO5kJFt+6K+VZ+181mdyamRDtohmfDI4a3qQRqH slneWdvIZzB3B96KK+bveHHeZnYOuMtHYmNX01+B8TsDAPjjrSJe4hIFCsqdSkVp 3zPLqCCuZ9Zk0Yj/Y2NzCq1v2szyKjRNs0FN/AbFQhw06Bn6a0owWfZDjp8iBQyo Mf0wmKkV9pNKPjfaNjPeqIrvaL4wp9M= -----END CERTIFICATE-----Generated at Fri Jul 24 12:09:47 2026 by rpki-client