$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/23d392e4-2725-3bfe-903b-f5b2b65af9d2.roa File: 23d392e4-2725-3bfe-903b-f5b2b65af9d2.roa (raw, json) Hash identifier: I2iywPvE8oJsyozss9L5B1FT9PbmCalr1dCp0SNI+xQ= Subject key identifier: 23:F7:2B:09:88:96:41:2C:D3:1A:44:12:CF:1D:89:6F:C1:36:DE:33 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584EA7A0B5728AAA9E522542C8C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/23d392e4-2725-3bfe-903b-f5b2b65af9d2.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 19905 IP address blocks: 173.18.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:a0:b5:72:8a:aa:9e:52:25:42:c8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=2839a2f4-8d3b-4919-8dc2-4afa3ae62f89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d2:95:89:ee:c2:7e:91:20:1c:23:63:33:41: b9:41:e5:8c:31:78:0a:66:18:f3:37:36:8c:20:f7: ec:f8:05:21:3d:8d:cf:46:2e:61:e3:16:f6:63:b0: 65:0b:e2:7f:37:e7:e4:b5:66:1b:f4:84:fc:80:56: 71:86:fe:04:9e:51:ac:5b:72:95:a4:3b:22:cf:26: 36:7f:c0:45:2a:98:a7:a9:fc:7b:d1:d6:8f:3b:b6: e6:d0:7f:ba:ba:84:04:63:ec:af:32:8e:50:22:c0: 48:0f:84:20:ea:1d:c0:d8:bb:58:36:df:7d:6b:20: 8f:d3:48:b7:bd:eb:bd:2b:48:9d:9f:60:e3:51:76: 78:96:5b:bc:52:b3:20:e4:6e:52:2b:d3:3f:67:e6: ce:f5:91:c9:85:83:e6:bc:fd:4f:13:0f:ea:af:1e: 2e:c4:e4:6a:2e:8c:0f:9b:8a:b5:fa:b8:41:85:57: 83:e7:ba:c4:7e:0f:ef:4a:26:d5:21:26:fe:b6:5f: d0:96:37:20:c0:8e:32:db:26:c4:78:91:51:25:be: a9:86:95:6b:64:53:41:ff:11:b6:13:30:39:2e:aa: 48:37:5e:c0:42:9f:00:38:b9:83:dc:ee:30:33:10: ab:dc:df:af:4a:79:59:70:79:4d:66:9d:16:36:0a: 6c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:F7:2B:09:88:96:41:2C:D3:1A:44:12:CF:1D:89:6F:C1:36:DE:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/23d392e4-2725-3bfe-903b-f5b2b65af9d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.18.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:7c:aa:3f:bc:40:e2:44:0a:7e:f6:14:ea:03:69:27:64:98: be:69:5f:44:fb:0c:9a:a3:8d:98:08:5e:bd:03:bd:40:9c:24: a0:51:ef:ed:51:54:16:f2:f8:e5:cd:d2:8e:7e:73:33:7d:ed: 42:f2:7b:d4:58:4d:19:b8:7f:5e:a7:73:b6:fc:ee:a1:43:6b: 1c:4e:45:a3:a9:e7:96:27:b0:0d:c7:b8:03:3a:70:bc:63:2d: 96:2b:23:f4:ec:8a:41:9d:5f:37:c0:3d:bd:b2:d4:63:31:51: 94:9c:4a:38:02:0d:46:58:d9:45:de:26:d8:88:12:08:4f:2b: 06:96:87:99:39:1a:ce:a7:bd:19:8d:18:8b:89:d2:fe:f7:07: fd:40:76:d4:1a:d6:8e:e4:8a:dd:6f:a5:73:55:06:75:fb:43: 23:08:cc:ae:83:e0:c1:21:8b:1f:36:9d:a3:f4:64:59:25:70: 48:15:4e:32:f6:2c:30:e2:53:25:a9:fe:90:40:9b:fe:1e:94: 2f:b8:1c:57:d3:c7:1f:fb:67:69:7a:d0:1e:d2:dc:39:b0:3f: 2e:f0:c3:2b:f2:15:25:56:ca:00:b3:d1:59:e9:bf:ac:7e:78: 31:aa:a2:33:b0:cc:69:3c:4c:cc:3d:19:70:4c:ab:99:da:0b: 16:43:bd:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6noLVyiqqeUiVCyMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MjgzOWEyZjQtOGQzYi00OTE5LThkYzItNGFmYTNhZTYyZjg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9KVie7CfpEgHCNjM0G5QeWMMXgKZhjzNzaM IPfs+AUhPY3PRi5h4xb2Y7BlC+J/N+fktWYb9IT8gFZxhv4EnlGsW3KVpDsizyY2 f8BFKpinqfx70daPO7bm0H+6uoQEY+yvMo5QIsBID4Qg6h3A2LtYNt99ayCP00i3 veu9K0idn2DjUXZ4llu8UrMg5G5SK9M/Z+bO9ZHJhYPmvP1PEw/qrx4uxORqLowP m4q1+rhBhVeD57rEfg/vSibVISb+tl/QljcgwI4y2ybEeJFRJb6phpVrZFNB/xG2 EzA5LqpIN17AQp8AOLmD3O4wMxCr3N+vSnlZcHlNZp0WNgpszQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCP3KwmIlkEs0xpEEs8diW/BNt4zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjNkMzkyZTQtMjcyNS0z YmZlLTkwM2ItZjViMmI2NWFmOWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRLpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHd8qj+8QOJECn72FOoDaSdkmL5pX0T7DJqjjZgIXr0DvUCcJKBR7+1R VBby+OXN0o5+czN97ULye9RYTRm4f16nc7b87qFDaxxORaOp55YnsA3HuAM6cLxj LZYrI/TsikGdXzfAPb2y1GMxUZScSjgCDUZY2UXeJtiIEghPKwaWh5k5Gs6nvRmN GIuJ0v73B/1AdtQa1o7kit1vpXNVBnX7QyMIzK6D4MEhix82naP0ZFklcEgVTjL2 LDDiUyWp/pBAm/4elC+4HFfTxx/7Z2l60B7S3DmwPy7wwyvyFSVWygCz0Vnpv6x+ eDGqojOwzGk8TMw9GXBMq5naCxZDvXM= -----END CERTIFICATE-----Generated at Wed Jul 29 04:56:41 2026 by rpki-client