$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e/aff7f59a-de88-3f24-af6f-6932047f3217.roa File: aff7f59a-de88-3f24-af6f-6932047f3217.roa (raw, json) Hash identifier: v43JB4H487hJWmiYi3uLYRiyVlh659/ius7TYQK4wnc= Subject key identifier: BE:0F:7A:11:5B:A6:6C:CD:58:27:59:8E:FC:5D:31:27:D0:AD:EE:55 Certificate issuer: /CN=18f4eabf-2388-491f-922c-4973961dfd2e Certificate serial: 010D0C9F4328584EA7980AAEC573B485B110C080 Authority key identifier: 8B:8D:19:D1:85:FA:D9:E9:5B:06:4E:69:0A:0C:34:7B:6B:68:73:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e/aff7f59a-de88-3f24-af6f-6932047f3217.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 33099 IP address blocks: 23.157.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e/18f4eabf-2388-491f-922c-4973961dfd2e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e/18f4eabf-2388-491f-922c-4973961dfd2e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:98:0a:ae:c5:73:b4:85:b1:10:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18f4eabf-2388-491f-922c-4973961dfd2e Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=b158af87-2d4d-4acf-8196-080eedc5a020 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:73:70:32:4c:bb:44:38:fd:e8:31:1b:4b:05: 9d:8e:8f:c1:14:56:cf:b4:4b:92:46:f6:a6:27:7d: d6:20:28:24:89:13:a9:4d:21:b4:08:1c:c2:ba:c5: 3c:2f:96:c3:59:63:fc:d0:71:dc:bd:4f:21:38:fd: 10:27:39:78:b9:e4:be:32:77:c7:54:f0:77:19:7e: 29:1a:13:6a:3b:61:23:d8:9c:8a:53:f6:b1:b6:fc: dd:75:8d:cb:ca:59:44:80:d1:bf:13:f2:5f:24:80: a4:bd:7b:da:a6:c6:2d:e4:28:78:9d:35:1c:5e:79: e0:3b:b5:24:b7:38:d4:7b:d9:11:5f:a3:0d:cc:80: 4b:26:22:94:6e:5c:a7:b5:f0:24:5a:f7:74:bb:57: f7:83:3d:55:03:78:56:a2:e4:df:2e:ed:bd:c3:dd: 40:7f:a4:84:2e:b3:54:0f:ab:31:32:7c:8c:23:d1: e7:38:fb:a9:ff:bc:8c:57:81:dd:82:f8:a3:b7:46: 9f:fb:22:b7:19:97:60:16:5b:05:35:48:5d:91:0f: a4:06:25:85:29:ea:13:e9:20:12:41:ea:ed:a5:0f: 63:74:e2:ae:51:3e:91:90:8d:77:f6:c2:8b:7f:79: a7:c3:5f:2e:6c:a6:51:f5:14:ea:da:07:d2:66:e4: 6b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:0F:7A:11:5B:A6:6C:CD:58:27:59:8E:FC:5D:31:27:D0:AD:EE:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e/aff7f59a-de88-3f24-af6f-6932047f3217.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e/18f4eabf-2388-491f-922c-4973961dfd2e.crl X509v3 Authority Key Identifier: keyid:8B:8D:19:D1:85:FA:D9:E9:5B:06:4E:69:0A:0C:34:7B:6B:68:73:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e.cer sbgp-ipAddrBlock: critical IPv4: 23.157.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:29:e7:77:49:ad:d6:25:2b:bf:9e:2b:03:15:a5:72:9c:73: 7a:3e:56:3e:f0:15:da:5d:a9:30:49:f6:76:62:9d:86:80:5e: 6f:75:b1:94:c7:8d:6c:c4:6c:95:0c:b7:4d:14:96:00:70:ab: dc:a9:51:dc:39:59:c9:c5:c6:5f:2a:fa:9d:55:98:1b:c0:de: bb:8a:c4:1b:5f:d9:e0:26:df:64:9e:42:eb:0a:fe:5d:9d:c2: 6f:90:a7:f0:3d:a2:3b:be:a5:55:24:d6:62:98:77:47:ff:9e: 08:75:b3:3f:f1:02:f3:dc:10:48:30:76:90:f5:60:44:57:1a: 20:c5:2b:d0:34:df:8b:3f:25:6c:39:68:af:c1:e0:38:f0:5f: 40:15:f0:ae:6c:2e:e4:22:bc:93:8f:c9:c2:60:c1:6c:ce:23: d2:56:2e:a5:51:dd:78:f0:0b:ff:90:a5:d8:54:a0:40:9c:6d: 91:78:07:b1:61:a9:ea:b1:94:ee:26:14:b2:27:27:32:b9:a9: 09:63:db:3e:d1:03:5d:67:f9:41:fc:00:c3:56:d1:76:58:e5: ab:ed:08:b7:fb:f0:9a:b0:3f:1d:46:d6:dd:fc:82:8e:06:2c: 1f:2b:8b:48:ad:82:aa:ec:6e:0e:3f:b2:b9:c5:c1:ca:2c:84: 99:4f:e3:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmAquxXO0hbEQwIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMThmNGVhYmYtMjM4OC00OTFmLTkyMmMtNDk3Mzk2MWRm ZDJlMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YjE1OGFmODctMmQ0ZC00YWNmLTgxOTYtMDgwZWVkYzVhMDIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3NwMky7RDj96DEbSwWdjo/BFFbPtEuSRvam J33WICgkiROpTSG0CBzCusU8L5bDWWP80HHcvU8hOP0QJzl4ueS+MnfHVPB3GX4p GhNqO2Ej2JyKU/axtvzddY3LyllEgNG/E/JfJICkvXvapsYt5Ch4nTUcXnngO7Uk tzjUe9kRX6MNzIBLJiKUblyntfAkWvd0u1f3gz1VA3hWouTfLu29w91Af6SELrNU D6sxMnyMI9HnOPup/7yMV4Hdgvijt0af+yK3GZdgFlsFNUhdkQ+kBiWFKeoT6SAS QertpQ9jdOKuUT6RkI139sKLf3mnw18ubKZR9RTq2gfSZuRrvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL4PehFbpmzNWCdZjvxdMSfQre5VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xOGY0 ZWFiZi0yMzg4LTQ5MWYtOTIyYy00OTczOTYxZGZkMmUvYWZmN2Y1OWEtZGU4OC0z ZjI0LWFmNmYtNjkzMjA0N2YzMjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMThmNGVhYmYtMjM4OC00OTFmLTky MmMtNDk3Mzk2MWRmZDJlLzE4ZjRlYWJmLTIzODgtNDkxZi05MjJjLTQ5NzM5NjFk ZmQyZS5jcmwwHwYDVR0jBBgwFoAUi40Z0YX62elbBk5pCgw0e2toc/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xOGY0ZWFiZi0yMzg4LTQ5MWYtOTIyYy00OTcz OTYxZGZkMmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF53oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJgp53dJrdYlK7+eKwMVpXKcc3o+Vj7wFdpdqTBJ9nZinYaAXm91sZTH jWzEbJUMt00UlgBwq9ypUdw5WcnFxl8q+p1VmBvA3ruKxBtf2eAm32SeQusK/l2d wm+Qp/A9oju+pVUk1mKYd0f/ngh1sz/xAvPcEEgwdpD1YERXGiDFK9A034s/JWw5 aK/B4DjwX0AV8K5sLuQivJOPycJgwWzOI9JWLqVR3XjwC/+QpdhUoECcbZF4B7Fh qeqxlO4mFLInJzK5qQlj2z7RA11n+UH8AMNW0XZY5avtCLf78JqwPx1G1t38go4G LB8ri0itgqrsbg4/srnFwcoshJlP4xQ= -----END CERTIFICATE-----Generated at Wed Jul 29 05:53:44 2026 by rpki-client