$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0e02cfee-5059-46c1-94a4-fb948d32f733/2959d7d0-71b3-320d-b3b4-97d0db6c8750.roa File: 2959d7d0-71b3-320d-b3b4-97d0db6c8750.roa (raw, json) Hash identifier: AM8dlRTxnfEf1EbUVxpPokL8wn6xqqvjWb2wFhy/FRs= Subject key identifier: 54:EA:FC:99:08:C8:0C:5A:C5:B6:DD:14:D2:E6:04:1F:7E:01:B6:B9 Certificate issuer: /CN=0e02cfee-5059-46c1-94a4-fb948d32f733 Certificate serial: 010D0C9F4328584E6C6F7725168B6BEF9B3EAEC0 Authority key identifier: C0:B3:04:21:09:55:24:F5:3D:66:F2:23:52:D9:78:87:34:AE:80:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0e02cfee-5059-46c1-94a4-fb948d32f733.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0e02cfee-5059-46c1-94a4-fb948d32f733/2959d7d0-71b3-320d-b3b4-97d0db6c8750.roa Signing time: Tue 07 Jul 2026 21:00:13 +0000 ROA not before: Tue 07 Jul 2026 21:00:13 +0000 ROA not after: Mon 05 Oct 2026 21:00:13 +0000 asID: 401111 IP address blocks: 23.152.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0e02cfee-5059-46c1-94a4-fb948d32f733/0e02cfee-5059-46c1-94a4-fb948d32f733.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0e02cfee-5059-46c1-94a4-fb948d32f733/0e02cfee-5059-46c1-94a4-fb948d32f733.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0e02cfee-5059-46c1-94a4-fb948d32f733.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6c:6f:77:25:16:8b:6b:ef:9b:3e:ae:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e02cfee-5059-46c1-94a4-fb948d32f733 Validity Not Before: Jul 7 21:00:13 2026 GMT Not After : Oct 5 21:00:13 2026 GMT Subject: CN=bf45bd7f-42c2-43de-86a8-8d996229a227 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:4f:66:e8:1a:f7:a6:07:b0:61:d4:89:ef:45: 23:da:a4:19:20:3d:54:2f:ed:02:16:e6:98:f3:88: 0e:55:38:13:dd:d6:f8:21:1e:7c:d1:86:22:af:b2: 14:05:f7:71:9c:57:d1:ec:7a:d6:85:8f:22:5c:68: 1e:d9:0f:4e:fa:dc:22:7f:8c:7c:c0:6e:6f:81:e6: 05:f4:5b:d7:62:66:f3:12:fb:55:6f:38:d1:4b:58: 1d:42:89:e2:0b:43:e3:72:c7:36:c5:b9:99:b8:b1: c4:c0:23:72:93:3f:7a:0d:f8:2a:3d:54:07:4c:73: 75:a6:78:92:f4:18:13:b5:79:a1:21:e4:2f:79:da: 7b:19:a7:f7:f4:ce:c1:86:e9:60:bb:bc:03:3b:2d: 9d:08:8c:8b:39:00:cb:59:da:18:54:d2:03:db:88: ab:ff:c5:12:08:ea:a0:31:84:e4:e0:cb:9b:d4:de: e5:e2:c9:e5:cd:75:7f:e9:5a:6c:24:7a:a9:28:ca: f5:cd:a6:13:95:dc:d8:4b:4b:b8:c8:96:20:e8:82: d3:fa:56:03:47:89:42:2c:c1:70:63:ca:42:65:79: 96:07:97:c0:da:92:ff:a2:5b:84:e9:21:46:c7:c2: f4:1b:92:17:13:1c:44:62:f4:51:86:d8:fa:78:88: 12:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:EA:FC:99:08:C8:0C:5A:C5:B6:DD:14:D2:E6:04:1F:7E:01:B6:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0e02cfee-5059-46c1-94a4-fb948d32f733/2959d7d0-71b3-320d-b3b4-97d0db6c8750.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0e02cfee-5059-46c1-94a4-fb948d32f733/0e02cfee-5059-46c1-94a4-fb948d32f733.crl X509v3 Authority Key Identifier: keyid:C0:B3:04:21:09:55:24:F5:3D:66:F2:23:52:D9:78:87:34:AE:80:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0e02cfee-5059-46c1-94a4-fb948d32f733.cer sbgp-ipAddrBlock: critical IPv4: 23.152.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:ef:b1:53:73:f7:49:73:35:ea:3d:92:69:06:fd:71:96:56: b2:83:80:28:a6:39:d7:db:01:4d:bb:34:a2:61:1a:1b:99:7a: 1e:ee:01:b0:1a:bc:f8:11:56:ea:a6:12:f5:00:aa:e9:2d:c2: 88:0d:df:d6:c5:2b:f1:85:c4:9b:2d:b6:cd:b2:ef:de:4a:e0: 92:04:51:00:12:55:1f:89:7f:55:a3:89:74:2d:8b:78:85:d5: ea:53:d4:81:87:2b:d4:e0:40:29:5e:eb:7b:f8:72:07:ea:0d: 87:5a:5e:5b:43:64:96:38:52:a2:04:25:17:9e:18:d1:be:e3: 22:31:73:55:bf:b8:bf:52:6d:5c:fe:de:4d:36:c5:dc:0d:0c: 9a:4f:9a:9a:ba:93:80:0b:90:5d:78:db:47:3c:2f:b0:56:b7: 64:6c:2e:8b:b6:b0:e3:eb:b5:0b:e2:10:d1:fe:00:e1:17:68: a2:3f:98:00:66:86:04:00:16:5b:86:cf:af:f4:71:00:5f:d9: 34:c5:5a:5a:60:3e:ea:2a:17:04:ce:5c:5f:f9:e3:57:1f:8e: 94:9b:c2:8a:89:56:12:95:50:9c:a9:2a:dc:4b:ec:79:6f:92: 80:61:30:65:ca:3e:0f:a8:57:3f:e4:5a:b3:36:63:fe:bf:ee: 0c:61:b7:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5sb3clFotr75s+rsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGUwMmNmZWUtNTA1OS00NmMxLTk0YTQtZmI5NDhkMzJm NzMzMB4XDTI2MDcwNzIxMDAxM1oXDTI2MTAwNTIxMDAxM1owLzEtMCsGA1UEAxMk YmY0NWJkN2YtNDJjMi00M2RlLTg2YTgtOGQ5OTYyMjlhMjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhk9m6Br3pgewYdSJ70Uj2qQZID1UL+0CFuaY 84gOVTgT3db4IR580YYir7IUBfdxnFfR7HrWhY8iXGge2Q9O+twif4x8wG5vgeYF 9FvXYmbzEvtVbzjRS1gdQoniC0Pjcsc2xbmZuLHEwCNykz96DfgqPVQHTHN1pniS 9BgTtXmhIeQvedp7Gaf39M7Bhulgu7wDOy2dCIyLOQDLWdoYVNID24ir/8USCOqg MYTk4Mub1N7l4snlzXV/6VpsJHqpKMr1zaYTldzYS0u4yJYg6ILT+lYDR4lCLMFw Y8pCZXmWB5fA2pL/oluE6SFGx8L0G5IXExxEYvRRhtj6eIgS/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFTq/JkIyAxaxbbdFNLmBB9+Aba5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8wZTAy Y2ZlZS01MDU5LTQ2YzEtOTRhNC1mYjk0OGQzMmY3MzMvMjk1OWQ3ZDAtNzFiMy0z MjBkLWIzYjQtOTdkMGRiNmM4NzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMGUwMmNmZWUtNTA1OS00NmMxLTk0 YTQtZmI5NDhkMzJmNzMzLzBlMDJjZmVlLTUwNTktNDZjMS05NGE0LWZiOTQ4ZDMy ZjczMy5jcmwwHwYDVR0jBBgwFoAUwLMEIQlVJPU9ZvIjUtl4hzSugFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS8wZTAyY2ZlZS01MDU5LTQ2YzEtOTRhNC1mYjk0 OGQzMmY3MzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5gUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHPvsVNz90lzNeo9kmkG/XGWVrKDgCimOdfbAU27NKJhGhuZeh7uAbAa vPgRVuqmEvUAquktwogN39bFK/GFxJstts2y795K4JIEUQASVR+Jf1WjiXQti3iF 1epT1IGHK9TgQCle63v4cgfqDYdaXltDZJY4UqIEJReeGNG+4yIxc1W/uL9SbVz+ 3k02xdwNDJpPmpq6k4ALkF1420c8L7BWt2RsLou2sOPrtQviENH+AOEXaKI/mABm hgQAFluGz6/0cQBf2TTFWlpgPuoqFwTOXF/541cfjpSbwoqJVhKVUJypKtxL7Hlv koBhMGXKPg+oVz/kWrM2Y/6/7gxht8o= -----END CERTIFICATE-----Generated at Thu Jul 23 19:10:19 2026 by rpki-client