$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/23655104-0b9e-31c6-9a5c-9c1d20fc1624.roa File: 23655104-0b9e-31c6-9a5c-9c1d20fc1624.roa (raw, json) Hash identifier: cqSRtW2pLdpwdNxQtPAPzCApHKZXYi95daMVl9/8ygY= Subject key identifier: 38:B5:42:2D:BA:1E:D0:BA:C2:38:E8:64:33:A1:6C:C1:9F:35:37:C3 Certificate issuer: /CN=dfe98912-51fc-490e-b52f-0f6db9a2847e Certificate serial: 010D0C9F4328584EA79C6DC867C58FE5942BDF80 Authority key identifier: EC:81:53:34:C0:5B:18:F9:7E:DF:43:4A:6F:1A:97:CF:A0:AF:57:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/23655104-0b9e-31c6-9a5c-9c1d20fc1624.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 208259 IP address blocks: 209.240.28.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/dfe98912-51fc-490e-b52f-0f6db9a2847e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/dfe98912-51fc-490e-b52f-0f6db9a2847e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 01 Aug 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9c:6d:c8:67:c5:8f:e5:94:2b:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfe98912-51fc-490e-b52f-0f6db9a2847e Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=1919c008-783e-4b9f-94c2-203ed1b2dbc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d3:bd:2d:a9:ea:7c:52:1e:e8:86:a7:da:c0: 4f:4e:c0:30:0c:d9:fc:8f:46:21:a6:93:0a:a9:36: 6b:09:98:91:22:1d:90:bf:6a:8b:71:d1:f1:ea:4f: e1:1f:65:81:e5:47:4a:4c:ac:e4:92:43:32:55:20: 6e:04:5c:f5:0e:7f:ec:44:b5:63:57:07:ef:14:5b: 11:4f:88:cb:dc:b3:d1:d4:5d:37:73:d7:45:01:96: 8b:82:d9:7d:3c:f3:3a:4c:3e:05:ed:22:e5:9c:54: 83:4e:82:10:35:13:91:62:19:18:84:8a:23:ba:50: 74:ed:ce:df:f8:9b:53:a0:2d:b4:02:3e:c6:27:e1: c8:d2:bb:5c:7d:d8:71:6a:83:fe:2b:71:08:df:4a: 11:95:c2:62:6d:b8:96:fd:b4:83:cd:05:2e:f3:91: d0:05:f4:48:65:56:27:26:c9:29:68:32:f1:d6:bd: 70:70:e0:06:d5:9b:bc:81:c2:87:66:b5:d3:4b:6d: 3f:b5:4a:69:95:69:90:e7:db:8a:ad:58:f6:1e:7f: 3c:58:ed:d3:80:33:82:4e:76:91:41:d1:9a:e9:c7: 8e:71:3e:fa:cb:0d:54:f5:44:88:e9:9c:ef:f2:19: 7b:60:96:c7:8b:af:37:7e:d7:8b:da:46:9d:df:f9: 97:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:B5:42:2D:BA:1E:D0:BA:C2:38:E8:64:33:A1:6C:C1:9F:35:37:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/23655104-0b9e-31c6-9a5c-9c1d20fc1624.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/dfe98912-51fc-490e-b52f-0f6db9a2847e.crl X509v3 Authority Key Identifier: keyid:EC:81:53:34:C0:5B:18:F9:7E:DF:43:4A:6F:1A:97:CF:A0:AF:57:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e.cer sbgp-ipAddrBlock: critical IPv4: 209.240.28.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:7d:b5:14:8e:92:30:b4:81:3b:9b:d2:89:b0:99:30:aa:98: 41:7f:bf:91:3c:20:16:69:ed:7b:c1:74:09:31:e1:bf:59:30: 8e:59:1e:1d:e1:38:76:7f:c0:75:f8:94:1a:96:93:f9:b7:d0: a2:b1:0f:04:42:1b:55:76:c3:01:0e:76:4f:d3:15:cf:8e:fc: 7d:b9:86:e5:ad:54:3e:73:43:d4:da:de:9b:a8:d2:52:0e:dd: 5e:b0:0e:fd:81:70:40:97:8b:c0:8c:f9:77:5b:40:e9:c8:eb: 52:4d:e4:9e:0f:7d:c8:1b:5f:a1:53:72:90:68:b3:22:f3:51: 61:43:23:5c:2b:b5:59:91:53:f4:3c:98:41:a2:dd:49:4e:6f: e0:d6:33:ad:ca:38:51:73:42:53:2d:fd:04:51:a3:60:3e:20: 03:1b:f5:ba:e4:e9:b5:da:80:35:e0:c3:5e:f4:07:8e:37:47: 5a:d9:4b:e5:05:c4:0f:a7:4c:86:be:eb:59:66:ae:31:0f:97: 55:ac:a2:5f:d2:79:8f:6c:80:1b:76:45:36:49:41:3f:41:54: c4:5c:ea:ba:2b:90:f9:58:27:c6:5a:62:73:9a:ff:d7:38:67: de:4d:a9:ac:eb:73:5f:b2:a9:31:a3:69:5d:7c:e2:83:a2:8d: 66:8d:7a:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnG3IZ8WP5ZQr34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZlOTg5MTItNTFmYy00OTBlLWI1MmYtMGY2ZGI5YTI4 NDdlMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MTkxOWMwMDgtNzgzZS00YjlmLTk0YzItMjAzZWQxYjJkYmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNO9LanqfFIe6Ian2sBPTsAwDNn8j0YhppMK qTZrCZiRIh2Qv2qLcdHx6k/hH2WB5UdKTKzkkkMyVSBuBFz1Dn/sRLVjVwfvFFsR T4jL3LPR1F03c9dFAZaLgtl9PPM6TD4F7SLlnFSDToIQNRORYhkYhIojulB07c7f +JtToC20Aj7GJ+HI0rtcfdhxaoP+K3EI30oRlcJibbiW/bSDzQUu85HQBfRIZVYn JskpaDLx1r1wcOAG1Zu8gcKHZrXTS20/tUpplWmQ59uKrVj2Hn88WO3TgDOCTnaR QdGa6ceOcT76yw1U9USI6Zzv8hl7YJbHi683fteL2kad3/mXVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDi1Qi26HtC6wjjoZDOhbMGfNTfDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kZmU5 ODkxMi01MWZjLTQ5MGUtYjUyZi0wZjZkYjlhMjg0N2UvMjM2NTUxMDQtMGI5ZS0z MWM2LTlhNWMtOWMxZDIwZmMxNjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGZlOTg5MTItNTFmYy00OTBlLWI1 MmYtMGY2ZGI5YTI4NDdlL2RmZTk4OTEyLTUxZmMtNDkwZS1iNTJmLTBmNmRiOWEy ODQ3ZS5jcmwwHwYDVR0jBBgwFoAU7IFTNMBbGPl+30NKbxqXz6CvV2kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kZmU5ODkxMi01MWZjLTQ5MGUtYjUyZi0wZjZk YjlhMjg0N2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0fAcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADV9tRSOkjC0gTub0omwmTCqmEF/v5E8IBZp7XvBdAkx4b9ZMI5ZHh3h OHZ/wHX4lBqWk/m30KKxDwRCG1V2wwEOdk/TFc+O/H25huWtVD5zQ9Ta3puo0lIO 3V6wDv2BcECXi8CM+XdbQOnI61JN5J4PfcgbX6FTcpBosyLzUWFDI1wrtVmRU/Q8 mEGi3UlOb+DWM63KOFFzQlMt/QRRo2A+IAMb9brk6bXagDXgw170B443R1rZS+UF xA+nTIa+61lmrjEPl1Wsol/SeY9sgBt2RTZJQT9BVMRc6rorkPlYJ8ZaYnOa/9c4 Z95Nqazrc1+yqTGjaV184oOijWaNenk= -----END CERTIFICATE-----Generated at Thu Jul 30 07:02:09 2026 by rpki-client