$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/25a4f200-c007-4476-b7c6-b306830b991d/087748f0-1dfe-3009-a1dc-390079e6b5d8.roa File: 087748f0-1dfe-3009-a1dc-390079e6b5d8.roa (raw, json) Hash identifier: mGklfTMk5fBLuyioH9CBXxvsYEGjIR31xam4QEzTrS0= Subject key identifier: 0B:60:AB:57:F5:FA:F1:45:24:C7:95:84:E3:2B:14:07:9F:9F:30:86 Certificate issuer: /CN=25a4f200-c007-4476-b7c6-b306830b991d Certificate serial: 010D0C9F4328584E6B0A0F6319588AB8916B7A80 Authority key identifier: A0:D9:04:58:93:D9:D7:A8:E8:A0:7A:B2:03:B4:16:8A:D8:17:22:EC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/25a4f200-c007-4476-b7c6-b306830b991d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/25a4f200-c007-4476-b7c6-b306830b991d/087748f0-1dfe-3009-a1dc-390079e6b5d8.roa Signing time: Tue 07 Jul 2026 09:00:12 +0000 ROA not before: Tue 07 Jul 2026 09:00:12 +0000 ROA not after: Mon 05 Oct 2026 09:00:12 +0000 asID: 36303 IP address blocks: 23.169.104.0/24 maxlen: 24 167.253.29.0/24 maxlen: 24 2602:fabe::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/25a4f200-c007-4476-b7c6-b306830b991d/25a4f200-c007-4476-b7c6-b306830b991d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/25a4f200-c007-4476-b7c6-b306830b991d/25a4f200-c007-4476-b7c6-b306830b991d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/25a4f200-c007-4476-b7c6-b306830b991d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6b:0a:0f:63:19:58:8a:b8:91:6b:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25a4f200-c007-4476-b7c6-b306830b991d Validity Not Before: Jul 7 09:00:12 2026 GMT Not After : Oct 5 09:00:12 2026 GMT Subject: CN=91679287-34e8-4236-9a08-d0fd42195f2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:70:ae:87:9c:01:a3:b0:35:99:a1:a5:21:47: ff:b4:46:ac:59:e0:79:4e:ca:78:27:b8:1b:a9:72: c7:f9:74:a8:cc:94:7c:5b:43:e1:39:24:44:f2:52: e2:47:48:db:c0:db:d0:49:1a:ca:93:88:d5:81:4e: a4:d8:0c:75:30:81:70:22:7e:74:40:ca:19:21:ca: 44:b9:39:04:3c:bc:e9:de:9d:18:22:57:6b:79:e4: e0:e7:17:3a:c3:0e:44:f5:26:c5:3b:23:cc:02:9b: 69:1d:3e:61:c0:32:45:9a:64:9e:4b:63:31:67:db: 0b:ba:2c:37:d3:15:37:b6:0b:8a:15:44:b2:1f:94: cc:24:88:f3:c5:54:be:25:27:a4:30:04:26:b7:12: 46:27:0c:27:75:ff:83:ab:db:ce:04:f6:f6:b0:af: 9b:38:aa:22:0d:7d:b2:f8:6f:6f:17:71:13:00:c3: ca:f1:77:14:f8:c9:85:5a:37:58:bc:22:6e:db:5e: 39:2f:1a:6f:a1:ba:75:62:53:9f:45:0b:05:f8:ec: 2a:1f:ec:3f:e4:d0:09:65:44:51:a2:22:b5:30:3c: 6c:2f:c6:af:1d:5b:67:d7:22:f7:4a:ca:11:75:56: 6d:43:55:db:a3:09:4c:3d:22:0c:26:34:3a:e2:cd: 56:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:60:AB:57:F5:FA:F1:45:24:C7:95:84:E3:2B:14:07:9F:9F:30:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/25a4f200-c007-4476-b7c6-b306830b991d/087748f0-1dfe-3009-a1dc-390079e6b5d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/25a4f200-c007-4476-b7c6-b306830b991d/25a4f200-c007-4476-b7c6-b306830b991d.crl X509v3 Authority Key Identifier: keyid:A0:D9:04:58:93:D9:D7:A8:E8:A0:7A:B2:03:B4:16:8A:D8:17:22:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/25a4f200-c007-4476-b7c6-b306830b991d.cer sbgp-ipAddrBlock: critical IPv4: 23.169.104.0/24 167.253.29.0/24 IPv6: 2602:fabe::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:00:85:a7:da:2f:0b:8d:a2:d9:aa:53:07:f3:72:79:32:f2: cc:b7:53:00:4d:92:b9:cf:02:8b:36:87:11:fd:63:38:01:d6: c4:de:e6:33:ab:04:8f:30:29:61:4e:fe:84:86:a3:02:21:36: 89:f0:8c:7b:62:a7:df:45:24:2f:74:ac:17:07:33:23:71:aa: 81:d8:d3:54:81:26:dd:1f:c3:80:93:7d:5a:fd:e2:15:01:f4: 3b:36:2a:23:48:43:7c:47:b6:90:ab:f5:f5:c4:af:ca:74:c6: 96:94:b4:ba:3c:bc:22:eb:a9:5c:4a:23:c6:9f:05:26:95:ad: b4:37:83:fa:18:5b:e5:de:05:d2:19:20:f5:d8:0a:0a:bd:e1: 08:c5:d6:f6:89:d5:d2:02:6b:2d:4f:cd:2e:b0:36:d1:2a:61: 83:8c:81:28:ca:0c:6a:87:39:73:27:89:b5:18:35:dc:2e:14: 8f:ff:6d:24:3e:59:2b:7e:bc:fc:c7:d5:92:73:f9:a3:1f:d4: 03:f1:2d:a5:7c:f6:d8:8c:a0:ae:4c:3d:57:d3:7f:1a:19:ac: d7:5c:f8:65:e3:84:1b:58:b7:61:b7:13:be:ef:53:d9:64:14: e2:fe:5c:86:39:8d:c0:8a:76:1d:74:50:ec:1d:bd:18:6b:e6: a5:36:f5:11 -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWE5rCg9jGViKuJFreoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjVhNGYyMDAtYzAwNy00NDc2LWI3YzYtYjMwNjgzMGI5 OTFkMB4XDTI2MDcwNzA5MDAxMloXDTI2MTAwNTA5MDAxMlowLzEtMCsGA1UEAxMk OTE2NzkyODctMzRlOC00MjM2LTlhMDgtZDBmZDQyMTk1ZjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHCuh5wBo7A1maGlIUf/tEasWeB5Tsp4J7gb qXLH+XSozJR8W0PhOSRE8lLiR0jbwNvQSRrKk4jVgU6k2Ax1MIFwIn50QMoZIcpE uTkEPLzp3p0YIldreeTg5xc6ww5E9SbFOyPMAptpHT5hwDJFmmSeS2MxZ9sLuiw3 0xU3tguKFUSyH5TMJIjzxVS+JSekMAQmtxJGJwwndf+Dq9vOBPb2sK+bOKoiDX2y +G9vF3ETAMPK8XcU+MmFWjdYvCJu2145Lxpvobp1YlOfRQsF+OwqH+w/5NAJZURR oiK1MDxsL8avHVtn1yL3SsoRdVZtQ1XbowlMPSIMJjQ64s1WzwIDAQABo4IDazCC A2cwHQYDVR0OBBYEFAtgq1f1+vFFJMeVhOMrFAefnzCGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yNWE0 ZjIwMC1jMDA3LTQ0NzYtYjdjNi1iMzA2ODMwYjk5MWQvMDg3NzQ4ZjAtMWRmZS0z MDA5LWExZGMtMzkwMDc5ZTZiNWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjVhNGYyMDAtYzAwNy00NDc2LWI3 YzYtYjMwNjgzMGI5OTFkLzI1YTRmMjAwLWMwMDctNDQ3Ni1iN2M2LWIzMDY4MzBi OTkxZC5jcmwwHwYDVR0jBBgwFoAUoNkEWJPZ16jooHqyA7QWitgXIuwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yNWE0ZjIwMC1jMDA3LTQ0NzYtYjdjNi1iMzA2 ODMwYjk5MWQuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF6loAwQA p/0dMA4EAgACMAgDBgAmAvq+ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAgAIWn2i8LjaLZqlMH83J5MvLM t1MATZK5zwKLNocR/WM4AdbE3uYzqwSPMClhTv6EhqMCITaJ8Ix7YqffRSQvdKwX BzMjcaqB2NNUgSbdH8OAk31a/eIVAfQ7NiojSEN8R7aQq/X1xK/KdMaWlLS6PLwi 66lcSiPGnwUmla20N4P6GFvl3gXSGSD12AoKveEIxdb2idXSAmstT80usDbRKmGD jIEoygxqhzlzJ4m1GDXcLhSP/20kPlkrfrz8x9WSc/mjH9QD8S2lfPbYjKCuTD1X 038aGazXXPhl44QbWLdhtxO+71PZZBTi/lyGOY3AinYddFDsHb0Ya+alNvUR -----END CERTIFICATE-----Generated at Fri Jul 24 04:57:43 2026 by rpki-client