$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/23f81894-2f7e-328f-bc1f-b6a7eb26f895.roa File: 23f81894-2f7e-328f-bc1f-b6a7eb26f895.roa (raw, json) Hash identifier: x4cFY3+uDth8gcJWrJY3OjAyjZX+ix/h2OJJxItCc7o= Subject key identifier: 56:EC:64:FA:CB:00:35:0D:41:F7:AF:FA:B4:02:49:F5:2D:AB:D0:BF Certificate issuer: /CN=a7840f46-b135-4a45-8c47-daede4b0b707 Certificate serial: 010D0C9F4328584E7204C2CBD556AEA09DBED450 Authority key identifier: 91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/23f81894-2f7e-328f-bc1f-b6a7eb26f895.roa Signing time: Thu 09 Jul 2026 21:00:11 +0000 ROA not before: Thu 09 Jul 2026 21:00:11 +0000 ROA not after: Wed 07 Oct 2026 21:00:11 +0000 asID: 12213 IP address blocks: 131.226.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:72:04:c2:cb:d5:56:ae:a0:9d:be:d4:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7840f46-b135-4a45-8c47-daede4b0b707 Validity Not Before: Jul 9 21:00:11 2026 GMT Not After : Oct 7 21:00:11 2026 GMT Subject: CN=b8ef2728-5654-4cb4-8296-12d2c7405253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:19:67:66:48:09:88:4b:35:07:15:fd:ae:04: 84:b8:be:07:64:b4:75:97:35:f9:66:ea:64:a3:f3: c5:a5:27:e0:d6:4c:6d:a3:24:d3:8f:5a:1e:bb:6f: c0:48:be:a7:00:3a:a9:e0:ae:61:d9:a5:3b:2c:89: 97:05:0b:ba:13:5e:6d:de:51:29:b9:f7:28:8a:fd: 79:7c:f7:a9:07:fc:52:98:5b:6d:8c:37:85:9a:f3: 53:9e:98:1b:50:e6:2a:16:1d:8c:df:83:1f:56:20: 0c:3a:1a:9d:be:f2:2f:ea:87:df:88:c0:ea:9e:2a: 2b:cc:17:2e:a6:3c:d2:ad:3e:c2:7b:bc:9c:da:39: c4:93:58:68:7d:09:d9:bf:42:68:b9:8c:05:1d:4c: 6d:8b:93:5b:39:44:4e:7a:ed:c2:e7:65:ab:d5:f3: 14:12:7f:27:4d:b5:10:da:fa:55:c1:25:cd:77:ae: a7:e1:22:a5:8b:79:33:bb:33:fb:10:e0:a4:99:1f: 54:07:17:e6:14:21:ab:bc:90:de:87:f7:dd:b5:d3: 7b:b7:e5:00:57:2b:79:cc:10:44:d4:20:0c:05:e6: 6b:dd:08:42:ab:2e:9a:bb:09:a4:8f:3a:56:6d:81: 97:30:70:b9:5c:de:ae:e9:f6:ee:60:dc:fe:1b:48: 19:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:EC:64:FA:CB:00:35:0D:41:F7:AF:FA:B4:02:49:F5:2D:AB:D0:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/23f81894-2f7e-328f-bc1f-b6a7eb26f895.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl X509v3 Authority Key Identifier: keyid:91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer sbgp-ipAddrBlock: critical IPv4: 131.226.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:ed:e7:32:12:f8:15:48:fa:a2:0a:22:3d:67:8b:eb:f1:9d: 2b:ee:47:66:13:f8:6f:23:40:fd:e2:29:6c:20:6e:af:84:61: e9:42:fc:f5:46:66:6f:71:12:97:78:d4:af:24:84:58:8c:b9: fc:b6:9b:19:83:8a:5d:3f:a2:2c:61:92:15:91:79:de:e5:f6: 56:22:e2:a1:8b:36:aa:2c:9b:ea:26:94:42:28:13:09:d9:6a: 77:2c:f6:82:3c:ab:6f:22:2e:8c:49:af:56:ef:73:58:d5:da: 93:17:0d:29:d0:12:d6:42:88:90:fb:a8:d1:dc:06:38:11:67: f9:f5:4b:f4:81:ac:33:7e:5a:40:69:f8:01:9f:fc:e3:fa:94: d7:e5:36:1c:d5:25:32:fc:0c:65:9a:26:32:ba:a3:1b:70:35: 3d:5d:f4:4d:c3:0c:c2:64:d8:b9:c6:b6:8a:72:2b:85:6f:35: c6:7f:63:23:58:6a:78:a7:82:94:93:e5:cc:cd:7a:c1:20:f0: b8:ae:90:68:2b:c9:85:04:fb:8b:fc:95:df:51:55:17:c1:ff: 61:de:da:79:8c:5f:85:7a:14:2a:8f:ce:d0:3f:16:ce:6c:b0: c1:2d:90:dd:86:18:88:62:9c:70:64:65:ec:ca:03:91:ca:5c: a3:73:21:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5yBMLL1VauoJ2+1FAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc4NDBmNDYtYjEzNS00YTQ1LThjNDctZGFlZGU0YjBi NzA3MB4XDTI2MDcwOTIxMDAxMVoXDTI2MTAwNzIxMDAxMVowLzEtMCsGA1UEAxMk YjhlZjI3MjgtNTY1NC00Y2I0LTgyOTYtMTJkMmM3NDA1MjUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRlnZkgJiEs1BxX9rgSEuL4HZLR1lzX5Zupk o/PFpSfg1kxtoyTTj1oeu2/ASL6nADqp4K5h2aU7LImXBQu6E15t3lEpufcoiv15 fPepB/xSmFttjDeFmvNTnpgbUOYqFh2M34MfViAMOhqdvvIv6offiMDqniorzBcu pjzSrT7Ce7yc2jnEk1hofQnZv0JouYwFHUxti5NbOUROeu3C52Wr1fMUEn8nTbUQ 2vpVwSXNd66n4SKli3kzuzP7EOCkmR9UBxfmFCGrvJDeh/fdtdN7t+UAVyt5zBBE 1CAMBeZr3QhCqy6auwmkjzpWbYGXMHC5XN6u6fbuYNz+G0gZJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFbsZPrLADUNQfev+rQCSfUtq9C/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hNzg0 MGY0Ni1iMTM1LTRhNDUtOGM0Ny1kYWVkZTRiMGI3MDcvMjNmODE4OTQtMmY3ZS0z MjhmLWJjMWYtYjZhN2ViMjZmODk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTc4NDBmNDYtYjEzNS00YTQ1LThj NDctZGFlZGU0YjBiNzA3L2E3ODQwZjQ2LWIxMzUtNGE0NS04YzQ3LWRhZWRlNGIw YjcwNy5jcmwwHwYDVR0jBBgwFoAUkXwZ6lZt7d6ge9kx5g0uw1oWE84wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hNzg0MGY0Ni1iMTM1LTRhNDUtOGM0Ny1kYWVk ZTRiMGI3MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGg+LAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvt5zIS+BVI+qIKIj1ni+vxnSvuR2YT+G8jQP3iKWwgbq+EYelC/PVG Zm9xEpd41K8khFiMufy2mxmDil0/oixhkhWRed7l9lYi4qGLNqosm+omlEIoEwnZ ancs9oI8q28iLoxJr1bvc1jV2pMXDSnQEtZCiJD7qNHcBjgRZ/n1S/SBrDN+WkBp +AGf/OP6lNflNhzVJTL8DGWaJjK6oxtwNT1d9E3DDMJk2LnGtopyK4VvNcZ/YyNY aningpST5czNesEg8LiukGgryYUE+4v8ld9RVRfB/2He2nmMX4V6FCqPztA/Fs5s sMEtkN2GGIhinHBkZezKA5HKXKNzIaw= -----END CERTIFICATE-----Generated at Fri Jul 24 04:24:29 2026 by rpki-client