$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e/ad20c86a-0cdb-3038-930f-35b57b1e5885.roa File: ad20c86a-0cdb-3038-930f-35b57b1e5885.roa (raw, json) Hash identifier: aLphVXD0dNLgaHgqZbYL5rcLb42VMnruGMcg0xvrAxQ= Subject key identifier: 78:E5:C7:32:BA:6A:30:88:05:FC:F9:17:C3:8F:17:63:AF:71:34:91 Certificate issuer: /CN=0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e Certificate serial: 010D0C9F4328584E8F54FFF892595350C600A000 Authority key identifier: 75:2D:2A:A1:9B:59:55:05:98:0B:6E:05:8C:DD:34:F5:FA:FE:32:4F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e/ad20c86a-0cdb-3038-930f-35b57b1e5885.roa Signing time: Mon 20 Jul 2026 09:00:11 +0000 ROA not before: Mon 20 Jul 2026 09:00:11 +0000 ROA not after: Sun 18 Oct 2026 09:00:11 +0000 asID: 40581 IP address blocks: 23.144.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8f:54:ff:f8:92:59:53:50:c6:00:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e Validity Not Before: Jul 20 09:00:11 2026 GMT Not After : Oct 18 09:00:11 2026 GMT Subject: CN=00f5d5a1-2d71-439f-b324-e54fa1aceea1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:e4:4b:88:20:d8:31:0b:61:21:f0:c6:fe:ec: 5c:0d:a4:0c:94:9e:86:37:34:c3:93:94:af:d6:d4: f5:d6:c5:c3:e9:20:cc:5f:e7:ee:e8:36:9f:36:ea: d9:47:af:fa:6c:d9:14:4f:cd:17:c8:48:4f:ec:18: 0a:47:c8:43:60:07:a7:ee:4a:88:36:84:50:12:a4: 66:19:ff:21:42:85:88:f2:37:3d:a2:45:cc:51:fa: 57:0e:18:dc:df:5b:6c:87:38:05:0a:0a:3c:c5:d0: e4:01:28:b2:66:5f:06:1e:f9:be:95:d8:a9:77:e1: b2:cc:5b:61:08:dc:c0:f9:3b:42:47:fe:5d:d4:6a: 8e:7e:32:1c:59:e9:27:58:87:fa:87:54:0a:76:36: c4:da:54:8b:c2:2b:53:57:e9:ae:4f:ce:85:a3:b4: 33:8b:02:f5:d9:38:66:16:1e:6c:ee:98:bb:9a:eb: 02:80:d4:43:36:4c:8a:fb:2c:5b:f7:4b:d6:6d:63: 81:02:89:3b:35:36:ce:69:43:fa:3f:68:46:8f:cc: 13:76:5e:2a:27:48:34:93:27:da:10:01:6d:73:a6: 71:55:c8:7f:78:d9:04:44:29:75:76:98:75:92:59: fe:11:59:1d:da:4a:41:c8:9f:b5:db:f6:49:58:ac: 6a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:E5:C7:32:BA:6A:30:88:05:FC:F9:17:C3:8F:17:63:AF:71:34:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e/ad20c86a-0cdb-3038-930f-35b57b1e5885.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e.crl X509v3 Authority Key Identifier: keyid:75:2D:2A:A1:9B:59:55:05:98:0B:6E:05:8C:DD:34:F5:FA:FE:32:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e.cer sbgp-ipAddrBlock: critical IPv4: 23.144.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:21:d8:4d:79:4a:67:86:9b:49:15:f5:92:ab:f6:f3:7b:a0: e3:a5:8a:a2:89:ae:e0:4d:64:1c:f6:6b:04:c4:f9:3b:a7:9e: 4d:37:62:3c:f6:46:6f:ae:a7:9e:60:39:20:07:b8:72:ef:af: 0e:27:93:86:78:7d:73:2c:a5:a8:70:cb:de:93:4d:66:2e:c3: fb:6b:b7:d4:b5:7c:1e:6f:44:f3:5b:ac:3b:a1:f5:31:94:ca: 3a:4f:d6:5d:b9:62:9d:b2:cc:b4:42:af:20:1b:56:c4:bf:72: f5:9c:fa:b8:1a:6c:d4:30:0f:ce:04:b3:4d:2e:86:a5:e5:dd: 13:e4:c3:31:90:d0:77:ce:9d:6a:1a:ab:3d:42:46:c0:0c:4d: 5c:b9:50:45:f9:68:cc:09:d2:82:9d:10:53:12:6f:ce:39:91: e3:dc:1b:30:b0:be:63:6c:c6:c0:42:91:a1:b7:2f:17:4f:05: 1a:03:32:d5:4c:61:ec:86:6e:9c:6d:42:24:ca:0d:0f:29:a5: 7e:9f:65:43:7c:61:c7:9c:1b:66:a3:5a:fa:4d:5e:5e:1f:d8: a4:c5:17:ed:1b:84:88:fe:df:79:57:ac:ab:cb:c6:3b:09:d2: 21:bd:cc:7b:78:87:e3:9e:8a:43:5f:1f:52:9e:d0:f5:c3:3d: b1:cd:ac:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6PVP/4kllTUMYAoAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGI2MWRiOGItNTFkNi00NjRjLTlkZTktNmUwYTdiNmEz ZjVlMB4XDTI2MDcyMDA5MDAxMVoXDTI2MTAxODA5MDAxMVowLzEtMCsGA1UEAxMk MDBmNWQ1YTEtMmQ3MS00MzlmLWIzMjQtZTU0ZmExYWNlZWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+RLiCDYMQthIfDG/uxcDaQMlJ6GNzTDk5Sv 1tT11sXD6SDMX+fu6DafNurZR6/6bNkUT80XyEhP7BgKR8hDYAen7kqINoRQEqRm Gf8hQoWI8jc9okXMUfpXDhjc31tshzgFCgo8xdDkASiyZl8GHvm+ldipd+GyzFth CNzA+TtCR/5d1GqOfjIcWeknWIf6h1QKdjbE2lSLwitTV+muT86Fo7QziwL12Thm Fh5s7pi7musCgNRDNkyK+yxb90vWbWOBAok7NTbOaUP6P2hGj8wTdl4qJ0g0kyfa EAFtc6ZxVch/eNkERCl1dph1kln+EVkd2kpByJ+12/ZJWKxqVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHjlxzK6ajCIBfz5F8OPF2OvcTSRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wYjYx ZGI4Yi01MWQ2LTQ2NGMtOWRlOS02ZTBhN2I2YTNmNWUvYWQyMGM4NmEtMGNkYi0z MDM4LTkzMGYtMzViNTdiMWU1ODg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGI2MWRiOGItNTFkNi00NjRjLTlk ZTktNmUwYTdiNmEzZjVlLzBiNjFkYjhiLTUxZDYtNDY0Yy05ZGU5LTZlMGE3YjZh M2Y1ZS5jcmwwHwYDVR0jBBgwFoAUdS0qoZtZVQWYC24FjN009fr+Mk8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wYjYxZGI4Yi01MWQ2LTQ2NGMtOWRlOS02ZTBh N2I2YTNmNWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5CUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAUh2E15SmeGm0kV9ZKr9vN7oOOliqKJruBNZBz2awTE+Tunnk03Yjz2 Rm+up55gOSAHuHLvrw4nk4Z4fXMspahwy96TTWYuw/trt9S1fB5vRPNbrDuh9TGU yjpP1l25Yp2yzLRCryAbVsS/cvWc+rgabNQwD84Es00uhqXl3RPkwzGQ0HfOnWoa qz1CRsAMTVy5UEX5aMwJ0oKdEFMSb845kePcGzCwvmNsxsBCkaG3LxdPBRoDMtVM YeyGbpxtQiTKDQ8ppX6fZUN8YcecG2ajWvpNXl4f2KTFF+0bhIj+33lXrKvLxjsJ 0iG9zHt4h+OeikNfH1Ke0PXDPbHNrL4= -----END CERTIFICATE-----Generated at Fri Jul 24 12:20:41 2026 by rpki-client