$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0c14a26f-a249-48dd-8320-2da501e5bef1/af6aca10-2975-394a-a754-8ac50b8a81a8.roa File: af6aca10-2975-394a-a754-8ac50b8a81a8.roa (raw, json) Hash identifier: lsdNMGEQlNXSVpgmskkZYOFVlP393iC8a5KR/geE7Us= Subject key identifier: 6E:E3:6C:C7:86:D4:84:E0:9B:0F:F3:25:CD:F2:36:13:B7:7B:2A:AC Certificate issuer: /CN=0c14a26f-a249-48dd-8320-2da501e5bef1 Certificate serial: 010D0C9F4328584E8C8A42C5369AC481F363D7E0 Authority key identifier: D6:13:A8:2D:17:14:A2:53:AC:66:88:51:78:3C:D1:E8:96:29:87:90 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0c14a26f-a249-48dd-8320-2da501e5bef1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0c14a26f-a249-48dd-8320-2da501e5bef1/af6aca10-2975-394a-a754-8ac50b8a81a8.roa Signing time: Sun 19 Jul 2026 09:00:11 +0000 ROA not before: Sun 19 Jul 2026 09:00:11 +0000 ROA not after: Sat 17 Oct 2026 09:00:11 +0000 asID: 395007 IP address blocks: 23.153.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0c14a26f-a249-48dd-8320-2da501e5bef1/0c14a26f-a249-48dd-8320-2da501e5bef1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0c14a26f-a249-48dd-8320-2da501e5bef1/0c14a26f-a249-48dd-8320-2da501e5bef1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0c14a26f-a249-48dd-8320-2da501e5bef1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8c:8a:42:c5:36:9a:c4:81:f3:63:d7:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c14a26f-a249-48dd-8320-2da501e5bef1 Validity Not Before: Jul 19 09:00:11 2026 GMT Not After : Oct 17 09:00:11 2026 GMT Subject: CN=ea4fa016-e61a-4a72-af5b-b8e889ef8f6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:bc:a0:07:9f:1c:6d:0b:f4:de:54:2c:6a:83: 0f:30:98:25:1a:cb:d4:ce:bb:6a:8e:72:1b:7d:92: 41:c0:db:3c:92:17:5f:76:26:db:ac:08:0e:f4:5e: f8:b6:51:24:e2:80:36:d0:0d:71:28:fe:de:c4:6f: 72:c3:45:a9:b2:8c:e2:d4:46:dd:92:65:6a:46:78: 44:d2:e6:20:aa:a5:ad:ca:38:f3:d6:19:78:54:d0: 2f:5d:33:98:96:c8:f2:72:6b:aa:97:d4:40:85:e8: 66:6e:86:26:a0:74:47:82:1d:1e:c1:81:48:c9:52: 04:96:66:65:67:ff:78:b8:58:38:43:f9:81:9a:54: ae:f7:71:a3:36:3c:cb:3c:31:5e:66:fc:20:cb:ff: 85:8f:cf:c4:6d:a0:ea:39:55:88:59:ea:8e:8c:eb: e8:a9:9e:d4:26:1c:39:85:a5:ba:41:21:b1:26:b7: 35:3f:b6:b4:1c:3b:c4:ac:0d:d6:95:eb:fb:71:53: e8:2c:e5:28:9a:79:32:c5:23:19:10:a5:93:7e:19: fa:a7:d7:2c:99:3c:47:e5:eb:5c:aa:1c:a3:04:2e: 09:cb:fc:0c:ec:e0:08:ec:86:35:a7:33:8e:c9:4e: ee:83:2f:9e:46:e0:71:fc:a8:a3:5d:0e:8f:39:9a: e4:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:E3:6C:C7:86:D4:84:E0:9B:0F:F3:25:CD:F2:36:13:B7:7B:2A:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0c14a26f-a249-48dd-8320-2da501e5bef1/af6aca10-2975-394a-a754-8ac50b8a81a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0c14a26f-a249-48dd-8320-2da501e5bef1/0c14a26f-a249-48dd-8320-2da501e5bef1.crl X509v3 Authority Key Identifier: keyid:D6:13:A8:2D:17:14:A2:53:AC:66:88:51:78:3C:D1:E8:96:29:87:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0c14a26f-a249-48dd-8320-2da501e5bef1.cer sbgp-ipAddrBlock: critical IPv4: 23.153.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:7b:fc:22:ab:f2:cd:5a:9f:46:c2:9b:8d:bc:c9:88:8f:31: 09:4d:17:c5:ec:a0:51:43:37:15:26:2d:8f:2e:58:b0:5d:5f: 9e:9d:73:aa:51:28:d8:14:9e:38:2f:4d:26:b0:77:56:5f:8b: 58:d9:ad:14:23:db:36:21:91:ea:f2:d0:a1:a6:11:28:f7:aa: 3a:df:28:ba:6a:44:20:20:c8:d8:ff:b6:37:97:be:40:5e:79: 79:3b:a4:be:60:e9:69:97:8a:bf:b7:89:87:03:99:60:08:0f: ba:5d:12:0a:b8:d4:4f:b9:57:2b:b5:0e:71:ef:38:9a:6c:7a: e3:9f:d7:ad:36:e2:8c:eb:14:b8:46:3b:4e:00:91:bb:af:2a: f2:c8:17:76:19:94:ce:f2:73:88:c1:f7:ec:eb:80:47:49:eb: ec:6c:fc:0f:cc:20:84:29:b1:2e:b1:da:d0:95:ec:8c:59:da: 0f:24:1a:d2:c3:fb:07:fb:d9:96:4d:90:c8:f0:e7:86:c8:a2: 50:ec:88:a9:ec:a2:f5:cc:50:6b:09:45:58:87:64:a1:cf:06: 25:3f:0a:72:f2:0a:57:f1:b7:5f:9e:77:88:d1:9c:ad:59:68: ed:7f:e5:bf:06:6c:b2:e4:7b:74:c5:5f:3b:47:d1:a9:69:7b: 5e:bc:ac:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6MikLFNprEgfNj1+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMxNGEyNmYtYTI0OS00OGRkLTgzMjAtMmRhNTAxZTVi ZWYxMB4XDTI2MDcxOTA5MDAxMVoXDTI2MTAxNzA5MDAxMVowLzEtMCsGA1UEAxMk ZWE0ZmEwMTYtZTYxYS00YTcyLWFmNWItYjhlODg5ZWY4ZjZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLygB58cbQv03lQsaoMPMJglGsvUzrtqjnIb fZJBwNs8khdfdibbrAgO9F74tlEk4oA20A1xKP7exG9yw0Wpsozi1EbdkmVqRnhE 0uYgqqWtyjjz1hl4VNAvXTOYlsjycmuql9RAhehmboYmoHRHgh0ewYFIyVIElmZl Z/94uFg4Q/mBmlSu93GjNjzLPDFeZvwgy/+Fj8/EbaDqOVWIWeqOjOvoqZ7UJhw5 haW6QSGxJrc1P7a0HDvErA3Wlev7cVPoLOUomnkyxSMZEKWTfhn6p9csmTxH5etc qhyjBC4Jy/wM7OAI7IY1pzOOyU7ugy+eRuBx/KijXQ6POZrkyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG7jbMeG1ITgmw/zJc3yNhO3eyqsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8wYzE0 YTI2Zi1hMjQ5LTQ4ZGQtODMyMC0yZGE1MDFlNWJlZjEvYWY2YWNhMTAtMjk3NS0z OTRhLWE3NTQtOGFjNTBiOGE4MWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMGMxNGEyNmYtYTI0OS00OGRkLTgz MjAtMmRhNTAxZTViZWYxLzBjMTRhMjZmLWEyNDktNDhkZC04MzIwLTJkYTUwMWU1 YmVmMS5jcmwwHwYDVR0jBBgwFoAU1hOoLRcUolOsZohReDzR6JYph5AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS8wYzE0YTI2Zi1hMjQ5LTQ4ZGQtODMyMC0yZGE1 MDFlNWJlZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5k0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFF7/CKr8s1an0bCm428yYiPMQlNF8XsoFFDNxUmLY8uWLBdX56dc6pR KNgUnjgvTSawd1Zfi1jZrRQj2zYhkery0KGmESj3qjrfKLpqRCAgyNj/tjeXvkBe eXk7pL5g6WmXir+3iYcDmWAID7pdEgq41E+5Vyu1DnHvOJpseuOf16024ozrFLhG O04AkbuvKvLIF3YZlM7yc4jB9+zrgEdJ6+xs/A/MIIQpsS6x2tCV7IxZ2g8kGtLD +wf72ZZNkMjw54bIolDsiKnsovXMUGsJRViHZKHPBiU/CnLyClfxt1+ed4jRnK1Z aO1/5b8GbLLke3TFXztH0alpe168rLU= -----END CERTIFICATE-----Generated at Fri Jul 24 19:54:54 2026 by rpki-client