$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e/a49bf951-af88-38e3-8f94-50c2ce38d3f2.roa File: a49bf951-af88-38e3-8f94-50c2ce38d3f2.roa (raw, json) Hash identifier: LOePtIfqsrDyGnJuXtf9Zf8is/AVaTKlW07m4vt3fb4= Subject key identifier: A3:28:42:BC:EE:11:33:57:01:86:D2:5F:1F:3B:B1:F8:F4:3D:0E:D4 Certificate issuer: /CN=0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e Certificate serial: 010D0C9F4328584E4C54AF0F58999BE274514840 Authority key identifier: 75:2D:2A:A1:9B:59:55:05:98:0B:6E:05:8C:DD:34:F5:FA:FE:32:4F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e/a49bf951-af88-38e3-8f94-50c2ce38d3f2.roa Signing time: Fri 26 Jun 2026 09:00:12 +0000 ROA not before: Fri 26 Jun 2026 09:00:12 +0000 ROA not after: Thu 24 Sep 2026 09:00:12 +0000 asID: 21939 IP address blocks: 23.144.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4c:54:af:0f:58:99:9b:e2:74:51:48:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e Validity Not Before: Jun 26 09:00:12 2026 GMT Not After : Sep 24 09:00:12 2026 GMT Subject: CN=97fa8fbb-1521-46b3-a156-87807419cf3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:a7:38:e4:ad:90:87:59:4f:87:39:0d:25:80: 77:f2:0c:34:57:88:92:e6:c1:4f:d1:2c:22:3c:39: 4d:ab:fc:44:14:d5:20:14:0e:50:9c:a5:16:15:31: 82:a6:2d:4b:53:a4:f9:37:50:06:f9:bf:61:2c:c4: 24:55:12:14:2b:cd:28:54:03:3b:19:0c:48:c3:2f: 5a:7b:4f:f5:2c:cc:47:1b:9b:69:3b:11:b4:6d:58: 7a:1a:9d:9f:c9:43:cd:45:5a:00:53:00:50:04:36: 22:69:5e:0c:09:31:dd:59:f0:bc:8a:bd:99:8b:c8: 07:f6:05:48:a3:5d:5a:6c:84:e7:bd:b1:5b:c0:91: bb:1b:1a:f1:a8:8a:dc:93:80:2e:1c:a5:d1:cb:2b: 94:12:2d:62:e5:66:03:33:a0:4f:97:61:2e:8a:a0: 7b:fe:b0:5f:e4:73:cb:f2:74:99:33:ff:d7:b7:a5: 68:4c:73:85:31:84:9b:fc:66:75:17:37:83:4a:73: 07:66:ac:43:d5:cd:13:48:17:c6:2a:d6:6a:87:47: b6:68:8e:b8:81:12:eb:17:dc:48:ae:4a:56:3a:a2: a8:d4:90:81:2d:01:5f:23:74:72:28:66:09:ad:d1: b5:63:9b:b5:ea:76:09:b8:e9:61:14:7f:13:7c:9b: 6d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:28:42:BC:EE:11:33:57:01:86:D2:5F:1F:3B:B1:F8:F4:3D:0E:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e/a49bf951-af88-38e3-8f94-50c2ce38d3f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e.crl X509v3 Authority Key Identifier: keyid:75:2D:2A:A1:9B:59:55:05:98:0B:6E:05:8C:DD:34:F5:FA:FE:32:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e.cer sbgp-ipAddrBlock: critical IPv4: 23.144.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:ee:d8:3c:d9:a4:7e:22:0a:54:0f:01:7c:ff:d6:47:b8:dd: 82:03:05:61:9e:07:66:42:4c:c5:44:34:08:36:1e:7d:de:07: 58:82:a7:06:cb:c7:b3:b7:e7:12:93:a6:9d:b4:b2:eb:66:fd: 03:93:4e:f6:7a:e2:5b:c2:46:d7:4a:3a:d8:81:50:a1:2b:7d: 4b:73:12:10:a6:2a:b2:cf:e9:65:66:a3:3f:ba:97:c2:b0:bb: 0f:8f:02:dc:51:84:b3:32:24:59:33:a9:57:3b:c3:e2:25:51: 24:43:4a:04:04:0c:4b:af:06:21:dd:32:bd:9e:f3:f9:a4:a7: bf:c0:d3:54:f4:e6:4d:31:4a:e5:0b:9f:cc:e4:10:f2:1b:bb: d9:a8:9f:7d:11:21:f9:3b:40:7b:fe:01:1f:51:89:ba:29:ac: 08:3b:e2:5a:40:fc:3b:68:4e:24:bd:7e:9f:22:2d:8e:da:af: 5a:5e:4a:b5:84:fc:2d:11:7b:84:11:54:c3:4f:0e:5a:ca:75: d3:1a:8b:56:70:ce:80:4a:be:a9:48:6f:d9:0d:1e:69:1e:64: 66:83:e9:af:1d:eb:1e:74:39:4d:8d:98:2d:d0:69:eb:c2:23: e5:d8:d1:62:7e:4f:5d:a3:eb:4f:ca:64:ed:5b:d0:a0:db:96: ea:85:4d:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5MVK8PWJmb4nRRSEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGI2MWRiOGItNTFkNi00NjRjLTlkZTktNmUwYTdiNmEz ZjVlMB4XDTI2MDYyNjA5MDAxMloXDTI2MDkyNDA5MDAxMlowLzEtMCsGA1UEAxMk OTdmYThmYmItMTUyMS00NmIzLWExNTYtODc4MDc0MTljZjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA66c45K2Qh1lPhzkNJYB38gw0V4iS5sFP0Swi PDlNq/xEFNUgFA5QnKUWFTGCpi1LU6T5N1AG+b9hLMQkVRIUK80oVAM7GQxIwy9a e0/1LMxHG5tpOxG0bVh6Gp2fyUPNRVoAUwBQBDYiaV4MCTHdWfC8ir2Zi8gH9gVI o11abITnvbFbwJG7GxrxqIrck4AuHKXRyyuUEi1i5WYDM6BPl2EuiqB7/rBf5HPL 8nSZM//Xt6VoTHOFMYSb/GZ1FzeDSnMHZqxD1c0TSBfGKtZqh0e2aI64gRLrF9xI rkpWOqKo1JCBLQFfI3RyKGYJrdG1Y5u16nYJuOlhFH8TfJttewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKMoQrzuETNXAYbSXx87sfj0PQ7UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wYjYx ZGI4Yi01MWQ2LTQ2NGMtOWRlOS02ZTBhN2I2YTNmNWUvYTQ5YmY5NTEtYWY4OC0z OGUzLThmOTQtNTBjMmNlMzhkM2YyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGI2MWRiOGItNTFkNi00NjRjLTlk ZTktNmUwYTdiNmEzZjVlLzBiNjFkYjhiLTUxZDYtNDY0Yy05ZGU5LTZlMGE3YjZh M2Y1ZS5jcmwwHwYDVR0jBBgwFoAUdS0qoZtZVQWYC24FjN009fr+Mk8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wYjYxZGI4Yi01MWQ2LTQ2NGMtOWRlOS02ZTBh N2I2YTNmNWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5CUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzu2DzZpH4iClQPAXz/1ke43YIDBWGeB2ZCTMVENAg2Hn3eB1iCpwbL x7O35xKTpp20sutm/QOTTvZ64lvCRtdKOtiBUKErfUtzEhCmKrLP6WVmoz+6l8Kw uw+PAtxRhLMyJFkzqVc7w+IlUSRDSgQEDEuvBiHdMr2e8/mkp7/A01T05k0xSuUL n8zkEPIbu9mon30RIfk7QHv+AR9RiboprAg74lpA/DtoTiS9fp8iLY7ar1peSrWE /C0Re4QRVMNPDlrKddMai1ZwzoBKvqlIb9kNHmkeZGaD6a8d6x50OU2NmC3QaevC I+XY0WJ+T12j60/KZO1b0KDbluqFTeE= -----END CERTIFICATE-----Generated at Fri Jul 24 14:40:11 2026 by rpki-client