$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8ffd8679-e9cf-4fd4-83b3-d97aa70ecc3e/fca970f0-c6bb-3cc0-86c9-062c585e335e.roa File: fca970f0-c6bb-3cc0-86c9-062c585e335e.roa (raw, json) Hash identifier: kgOG+pQZj4gXKLebVlfkASp/zlgMzm8EgepwgfYENu0= Subject key identifier: 83:34:AA:72:8D:EC:CE:77:D0:26:F8:EF:67:09:F4:68:7F:14:EA:85 Certificate issuer: /CN=8ffd8679-e9cf-4fd4-83b3-d97aa70ecc3e Certificate serial: 010D0C9F4328584E964FA0B970F399E378DC8840 Authority key identifier: 0C:7F:51:3A:CA:E6:89:01:EF:B6:04:40:C6:22:EB:65:05:EC:5B:4A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8ffd8679-e9cf-4fd4-83b3-d97aa70ecc3e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8ffd8679-e9cf-4fd4-83b3-d97aa70ecc3e/fca970f0-c6bb-3cc0-86c9-062c585e335e.roa Signing time: Wed 22 Jul 2026 21:00:11 +0000 ROA not before: Wed 22 Jul 2026 21:00:11 +0000 ROA not after: Tue 20 Oct 2026 21:00:11 +0000 asID: 402163 IP address blocks: 23.153.212.0/24 maxlen: 24 2602:f464::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8ffd8679-e9cf-4fd4-83b3-d97aa70ecc3e/8ffd8679-e9cf-4fd4-83b3-d97aa70ecc3e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8ffd8679-e9cf-4fd4-83b3-d97aa70ecc3e/8ffd8679-e9cf-4fd4-83b3-d97aa70ecc3e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8ffd8679-e9cf-4fd4-83b3-d97aa70ecc3e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:96:4f:a0:b9:70:f3:99:e3:78:dc:88:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ffd8679-e9cf-4fd4-83b3-d97aa70ecc3e Validity Not Before: Jul 22 21:00:11 2026 GMT Not After : Oct 20 21:00:11 2026 GMT Subject: CN=b4dc0247-3c3d-4b8b-aad2-0bebeb389149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:dc:b3:fc:99:33:a9:c3:e5:d2:91:0d:6f:0c: 0f:1d:74:34:cf:6e:bd:f4:25:45:f5:2e:cf:d3:b7: 14:49:5b:02:43:3c:0e:3c:7c:cc:b7:90:09:50:93: 62:6c:dc:56:8e:97:6d:e9:2d:ce:b2:ce:2e:2e:e0: ab:5b:11:ab:6d:72:62:ed:de:07:75:88:d5:59:58: 5e:f7:1a:1d:f3:0a:91:ba:85:96:4e:2e:38:f8:17: 0a:e3:ba:c9:5e:03:a0:54:33:95:2e:fb:36:e6:aa: 09:cc:10:b2:e6:84:66:01:b6:a3:8d:77:b6:20:24: d1:e5:e7:ec:2a:36:fa:9e:4f:14:61:e3:f9:b6:1a: 75:e9:e5:af:f0:d6:d0:6d:fd:9e:a3:f7:f1:0f:0e: d9:29:3e:f0:0d:56:16:fd:dd:09:24:c2:91:5a:e7: 39:d9:e1:0d:75:a5:06:9c:9e:47:db:8c:36:4c:4b: 4d:88:61:0b:5d:d1:2c:5f:dd:a6:6e:55:b0:03:1f: 6b:ef:8e:90:9b:27:42:c4:66:e3:4b:85:8f:b2:ff: c3:f6:ac:92:13:3f:fd:c2:9a:53:88:d0:77:1d:9b: 98:c3:61:f6:97:83:44:a9:a3:e4:a6:f4:b6:92:19: bd:27:a9:24:19:4f:d2:7f:49:92:be:5d:57:c2:d4: 14:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:34:AA:72:8D:EC:CE:77:D0:26:F8:EF:67:09:F4:68:7F:14:EA:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8ffd8679-e9cf-4fd4-83b3-d97aa70ecc3e/fca970f0-c6bb-3cc0-86c9-062c585e335e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8ffd8679-e9cf-4fd4-83b3-d97aa70ecc3e/8ffd8679-e9cf-4fd4-83b3-d97aa70ecc3e.crl X509v3 Authority Key Identifier: keyid:0C:7F:51:3A:CA:E6:89:01:EF:B6:04:40:C6:22:EB:65:05:EC:5B:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8ffd8679-e9cf-4fd4-83b3-d97aa70ecc3e.cer sbgp-ipAddrBlock: critical IPv4: 23.153.212.0/24 IPv6: 2602:f464::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:b4:70:dd:9d:dc:cc:d6:c2:55:fe:4b:9a:a2:a8:ef:3b:3e: e0:9f:12:40:d1:3f:12:43:73:f3:7f:37:3b:bb:e3:3d:cc:84: d7:23:ed:d7:ae:e9:5c:77:d8:02:d8:66:5b:4e:bf:15:d6:d8: 66:7b:a0:1b:fe:42:c5:b3:07:b4:ae:0e:ff:04:d8:a6:3d:37: f9:b8:a2:9a:f7:50:03:56:21:a3:59:f5:08:1c:18:d0:94:db: 43:e4:8e:d4:86:fb:95:91:fa:9e:eb:97:60:61:35:12:f8:f5: f9:9a:80:0f:7f:7e:c2:eb:ad:14:47:c6:92:5f:ae:f5:73:7f: 74:1a:aa:8e:f5:82:fc:a8:48:2b:19:f9:46:dc:97:03:27:12: a2:be:75:34:da:b1:21:0d:c6:8d:60:48:b7:85:cd:ee:24:c8: 6d:dd:7f:9b:ae:4a:f9:2b:cb:c3:9b:41:a2:f9:18:f7:f2:e0: a7:cb:c3:91:cb:e7:33:78:c8:ab:17:56:d8:6b:f4:c6:56:fb: 51:46:6b:6c:a7:9a:0e:8f:cb:c5:99:df:2f:ea:24:5d:a8:d9: 09:43:69:b3:da:e3:6b:b1:01:17:e4:38:cf:ca:b2:31:cd:5e: a8:5c:67:5a:5e:bd:7f:7e:32:c4:f2:43:de:6c:4e:3a:62:b0: df:92:65:b6 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE6WT6C5cPOZ43jciEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGZmZDg2NzktZTljZi00ZmQ0LTgzYjMtZDk3YWE3MGVj YzNlMB4XDTI2MDcyMjIxMDAxMVoXDTI2MTAyMDIxMDAxMVowLzEtMCsGA1UEAxMk YjRkYzAyNDctM2MzZC00YjhiLWFhZDItMGJlYmViMzg5MTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNyz/JkzqcPl0pENbwwPHXQ0z2699CVF9S7P 07cUSVsCQzwOPHzMt5AJUJNibNxWjpdt6S3Oss4uLuCrWxGrbXJi7d4HdYjVWVhe 9xod8wqRuoWWTi44+BcK47rJXgOgVDOVLvs25qoJzBCy5oRmAbajjXe2ICTR5efs Kjb6nk8UYeP5thp16eWv8NbQbf2eo/fxDw7ZKT7wDVYW/d0JJMKRWuc52eENdaUG nJ5H24w2TEtNiGELXdEsX92mblWwAx9r746QmydCxGbjS4WPsv/D9qySEz/9wppT iNB3HZuYw2H2l4NEqaPkpvS2khm9J6kkGU/Sf0mSvl1XwtQUpwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFIM0qnKN7M530Cb472cJ9Gh/FOqFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS84ZmZk ODY3OS1lOWNmLTRmZDQtODNiMy1kOTdhYTcwZWNjM2UvZmNhOTcwZjAtYzZiYi0z Y2MwLTg2YzktMDYyYzU4NWUzMzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvOGZmZDg2NzktZTljZi00ZmQ0LTgz YjMtZDk3YWE3MGVjYzNlLzhmZmQ4Njc5LWU5Y2YtNGZkNC04M2IzLWQ5N2FhNzBl Y2MzZS5jcmwwHwYDVR0jBBgwFoAUDH9ROsrmiQHvtgRAxiLrZQXsW0owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS84ZmZkODY3OS1lOWNmLTRmZDQtODNiMy1kOTdh YTcwZWNjM2UuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF5nUMA4E AgACMAgDBgAmAvRkADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAYtHDdndzM1sJV/kuaoqjvOz7gnxJA0T8S Q3Pzfzc7u+M9zITXI+3Xrulcd9gC2GZbTr8V1thme6Ab/kLFswe0rg7/BNimPTf5 uKKa91ADViGjWfUIHBjQlNtD5I7UhvuVkfqe65dgYTUS+PX5moAPf37C660UR8aS X671c390GqqO9YL8qEgrGflG3JcDJxKivnU02rEhDcaNYEi3hc3uJMht3X+brkr5 K8vDm0Gi+Rj38uCny8ORy+czeMirF1bYa/TGVvtRRmtsp5oOj8vFmd8v6iRdqNkJ Q2mz2uNrsQEX5DjPyrIxzV6oXGdaXr1/fjLE8kPebE46YrDfkmW2 -----END CERTIFICATE-----Generated at Fri Jul 24 07:43:27 2026 by rpki-client