$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/43ba2928-8b99-4e95-865c-b82d26de7be9/acfede50-0a76-3f2b-aaf0-f71153f77789.roa File: acfede50-0a76-3f2b-aaf0-f71153f77789.roa (raw, json) Hash identifier: oL7+swU6NHOQac1KAf86scGbanucQyomoHT8l4cxIVE= Subject key identifier: 82:1C:6E:32:D8:71:F2:A7:8E:F7:C4:3C:89:A4:4B:E5:73:89:F3:97 Certificate issuer: /CN=43ba2928-8b99-4e95-865c-b82d26de7be9 Certificate serial: 010D0C9F4328584E9384FB3C84C192B7EA48CFC0 Authority key identifier: E1:23:0F:1D:10:77:CB:45:75:A8:5F:35:56:3E:40:AF:B8:19:C2:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/43ba2928-8b99-4e95-865c-b82d26de7be9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/43ba2928-8b99-4e95-865c-b82d26de7be9/acfede50-0a76-3f2b-aaf0-f71153f77789.roa Signing time: Tue 21 Jul 2026 21:00:12 +0000 ROA not before: Tue 21 Jul 2026 21:00:12 +0000 ROA not after: Mon 19 Oct 2026 21:00:12 +0000 asID: 979 IP address blocks: 23.140.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/43ba2928-8b99-4e95-865c-b82d26de7be9/43ba2928-8b99-4e95-865c-b82d26de7be9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/43ba2928-8b99-4e95-865c-b82d26de7be9/43ba2928-8b99-4e95-865c-b82d26de7be9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/43ba2928-8b99-4e95-865c-b82d26de7be9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:93:84:fb:3c:84:c1:92:b7:ea:48:cf:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43ba2928-8b99-4e95-865c-b82d26de7be9 Validity Not Before: Jul 21 21:00:12 2026 GMT Not After : Oct 19 21:00:12 2026 GMT Subject: CN=cc61a9bb-7465-4e8e-ba24-2539ca584491 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:05:c3:8d:57:a2:2f:b2:50:a1:19:d6:81:2f: eb:3d:48:1b:5d:80:1e:30:85:dc:94:c2:b0:cc:1e: e5:4e:79:d4:c5:9f:6d:61:8e:17:59:11:79:58:8d: d2:88:3c:ff:00:e9:0f:fd:db:cd:33:74:85:8e:d1: c0:a4:b4:9d:52:60:d1:d8:60:b2:3b:55:cc:7b:f8: 6d:91:70:60:78:2d:10:c2:94:91:44:a9:75:db:f6: fe:5a:e3:32:bf:c0:2c:63:a8:50:b1:4d:fb:39:6a: 20:0e:eb:55:61:34:4a:2e:d9:9a:4f:c4:00:97:d7: ff:83:54:fe:93:ad:f5:5e:86:fc:8c:2f:c4:80:bd: 55:71:8b:ca:31:3b:a7:45:7f:53:f7:f6:16:28:3b: 5e:85:c1:10:30:e0:81:1a:86:83:cf:bf:b3:24:99: a5:c3:f7:8f:20:83:0b:c2:92:79:48:96:f5:1b:1f: ca:fb:05:51:95:ed:f6:bf:6a:01:a7:f8:f4:0c:eb: bc:6b:70:0a:4c:ce:f2:c6:f3:d6:77:13:3a:cd:78: 5b:2b:14:70:ca:6f:f3:4d:97:3f:9c:11:89:5e:7b: f9:d8:41:76:8e:a9:9e:8c:f2:bc:d6:f9:f6:1d:ed: 6b:64:82:ba:98:44:aa:36:4d:30:a9:de:6d:a7:39: df:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:1C:6E:32:D8:71:F2:A7:8E:F7:C4:3C:89:A4:4B:E5:73:89:F3:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/43ba2928-8b99-4e95-865c-b82d26de7be9/acfede50-0a76-3f2b-aaf0-f71153f77789.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/43ba2928-8b99-4e95-865c-b82d26de7be9/43ba2928-8b99-4e95-865c-b82d26de7be9.crl X509v3 Authority Key Identifier: keyid:E1:23:0F:1D:10:77:CB:45:75:A8:5F:35:56:3E:40:AF:B8:19:C2:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/43ba2928-8b99-4e95-865c-b82d26de7be9.cer sbgp-ipAddrBlock: critical IPv4: 23.140.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:f7:43:79:c9:f8:5d:ec:09:41:2f:e2:8e:5b:5a:8d:0a:c3: cd:b6:74:62:18:f2:54:7f:b6:ed:3f:89:e3:68:f0:eb:99:73: 10:88:9a:8d:f9:04:ac:b9:2e:9f:34:6d:c7:9e:98:10:e8:be: 23:bf:f3:c9:65:bc:06:9f:c0:e5:61:d5:d7:63:70:be:9f:7a: 6f:7b:41:b2:5c:5b:43:4a:71:84:30:71:4d:fa:21:8e:82:a6: be:b6:f6:09:51:6c:50:6d:e0:9b:c9:13:9c:37:07:1d:be:e3: 51:4f:40:f2:36:99:d2:8d:a1:51:23:7e:2a:06:94:4a:bf:6c: 48:a1:e5:6a:ef:f1:c4:31:e9:74:29:29:94:9b:56:30:af:ec: 71:d0:60:de:4d:e1:e4:44:5e:43:e1:ed:19:19:fd:67:61:a1: fb:b2:23:d2:6c:ef:69:c9:6f:d1:40:cf:d7:99:bf:b5:75:f8: 0e:a1:ec:d5:de:59:b0:14:36:af:7b:a0:52:83:48:c4:9e:df: dd:cc:06:1b:68:5f:14:ea:03:47:63:22:2f:0c:02:2f:fa:27: 45:9b:d7:77:5f:be:07:aa:6e:ac:89:a1:c0:a7:14:d2:5c:a0: d2:b7:e6:e7:86:50:08:c4:56:4a:8e:f4:17:13:f2:9f:a6:7d: b1:5c:61:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ThPs8hMGSt+pIz8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDNiYTI5MjgtOGI5OS00ZTk1LTg2NWMtYjgyZDI2ZGU3 YmU5MB4XDTI2MDcyMTIxMDAxMloXDTI2MTAxOTIxMDAxMlowLzEtMCsGA1UEAxMk Y2M2MWE5YmItNzQ2NS00ZThlLWJhMjQtMjUzOWNhNTg0NDkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAXDjVeiL7JQoRnWgS/rPUgbXYAeMIXclMKw zB7lTnnUxZ9tYY4XWRF5WI3SiDz/AOkP/dvNM3SFjtHApLSdUmDR2GCyO1XMe/ht kXBgeC0QwpSRRKl12/b+WuMyv8AsY6hQsU37OWogDutVYTRKLtmaT8QAl9f/g1T+ k631Xob8jC/EgL1VcYvKMTunRX9T9/YWKDtehcEQMOCBGoaDz7+zJJmlw/ePIIML wpJ5SJb1Gx/K+wVRle32v2oBp/j0DOu8a3AKTM7yxvPWdxM6zXhbKxRwym/zTZc/ nBGJXnv52EF2jqmejPK81vn2He1rZIK6mESqNk0wqd5tpznfmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIIcbjLYcfKnjvfEPImkS+VzifOXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80M2Jh MjkyOC04Yjk5LTRlOTUtODY1Yy1iODJkMjZkZTdiZTkvYWNmZWRlNTAtMGE3Ni0z ZjJiLWFhZjAtZjcxMTUzZjc3Nzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNDNiYTI5MjgtOGI5OS00ZTk1LTg2 NWMtYjgyZDI2ZGU3YmU5LzQzYmEyOTI4LThiOTktNGU5NS04NjVjLWI4MmQyNmRl N2JlOS5jcmwwHwYDVR0jBBgwFoAU4SMPHRB3y0V1qF81Vj5Ar7gZwoEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC80M2JhMjkyOC04Yjk5LTRlOTUtODY1Yy1iODJk MjZkZTdiZTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4x8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFf3Q3nJ+F3sCUEv4o5bWo0Kw822dGIY8lR/tu0/ieNo8OuZcxCImo35 BKy5Lp80bceemBDoviO/88llvAafwOVh1ddjcL6fem97QbJcW0NKcYQwcU36IY6C pr629glRbFBt4JvJE5w3Bx2+41FPQPI2mdKNoVEjfioGlEq/bEih5Wrv8cQx6XQp KZSbVjCv7HHQYN5N4eREXkPh7RkZ/WdhofuyI9Js72nJb9FAz9eZv7V1+A6h7NXe WbAUNq97oFKDSMSe393MBhtoXxTqA0djIi8MAi/6J0Wb13dfvgeqbqyJocCnFNJc oNK35ueGUAjEVkqO9BcT8p+mfbFcYVo= -----END CERTIFICATE-----Generated at Fri Jul 24 15:51:03 2026 by rpki-client