$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ebe8ee12-530e-3d7b-8035-dc85dcfa9000.roa File: ebe8ee12-530e-3d7b-8035-dc85dcfa9000.roa (raw, json) Hash identifier: 0OJo29TFqii+2+kUo9JwEcwHU3pXVBrabS0oxTUKNGQ= Subject key identifier: 76:E9:27:49:C0:E7:3D:F8:5F:DE:14:7B:50:58:81:EA:C9:04:66:BF Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584EA797DF157019099A0F64C0C0 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ebe8ee12-530e-3d7b-8035-dc85dcfa9000.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 401503 IP address blocks: 67.28.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:97:df:15:70:19:09:9a:0f:64:c0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=89b214e3-9d4a-4845-901f-de4cb6f6e080 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:f6:93:00:ab:b5:68:ec:3a:76:83:38:d3:d0: 6e:c4:f1:10:5b:ce:02:c4:39:16:6d:69:5a:ea:2e: 77:c7:3e:47:51:d1:ba:9e:fb:b0:71:68:c8:59:cd: 3c:3c:50:ac:e9:0e:4e:3e:58:01:19:3e:0c:c2:a1: 7e:64:7e:03:cf:cc:b3:72:46:1a:bb:22:e5:5d:c3: 07:1f:25:89:9e:68:4d:2c:93:07:60:a6:f2:a0:17: 59:83:38:36:9c:08:9b:4e:35:6a:ac:e8:87:02:a9: 18:f0:46:98:15:e6:3c:1b:6e:52:5e:4f:56:94:91: 46:dc:32:d8:54:ca:2c:99:67:85:42:14:df:bf:86: ee:9b:df:3f:27:bc:1d:88:84:7d:5c:a0:b3:88:87: 88:32:62:5c:13:ed:12:e8:91:44:e8:86:97:87:13: 58:9f:09:77:04:b3:66:56:89:82:07:47:59:b6:b4: e5:47:cd:15:6f:51:73:f2:ed:90:d7:f2:cf:85:9a: a9:ca:24:87:80:c2:90:96:fc:b2:a4:23:3e:7a:8f: ef:87:a1:37:cd:46:97:70:ae:61:3f:6a:a2:74:b9: 8f:a7:7d:ae:69:24:6a:51:d5:bb:33:9a:88:7f:48: 7a:05:28:25:46:94:29:21:9f:19:b4:1a:b5:0f:60: 6d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:E9:27:49:C0:E7:3D:F8:5F:DE:14:7B:50:58:81:EA:C9:04:66:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ebe8ee12-530e-3d7b-8035-dc85dcfa9000.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 67.28.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:3d:f2:1b:04:ac:22:08:64:fa:a0:69:60:93:9f:82:03:98: e1:81:77:d3:dd:c7:a2:e6:bf:34:62:b2:64:47:fb:2b:6a:35: 6f:74:fc:b8:77:3c:5c:89:2c:f1:08:54:88:a6:1c:49:23:64: 70:77:ac:0b:8c:38:fa:99:6a:97:48:1c:5f:69:b9:b8:aa:37: 9f:25:89:2b:26:a2:73:11:b0:16:af:80:8f:ba:fb:ff:fd:35: 38:76:9c:70:bd:c2:46:80:8f:2c:84:0d:1f:2f:5d:a4:53:b2: 09:79:b7:20:f8:9a:05:2d:0f:04:73:fa:78:15:63:72:31:30: 2a:7a:e8:8f:c4:eb:9d:a3:80:8a:53:3c:f9:ca:3a:4e:51:e6: 60:b7:25:e4:ca:19:1d:6f:f6:5a:64:ca:d0:fe:64:6f:9e:70: fa:b5:f4:7d:e4:7e:57:a6:d5:2c:85:95:3f:76:1c:1d:88:05: dd:6c:32:19:57:e7:cd:1b:ac:72:8f:ac:cb:7f:b9:5f:03:ff: 3d:ac:47:ef:7d:41:e1:00:4a:d7:50:4c:e7:67:e5:dd:19:5e: 5d:50:d7:1a:04:fe:02:c6:1c:29:87:8a:3c:f6:e3:b6:e5:b5: 81:14:62:39:50:af:f0:31:ce:65:19:30:1f:7f:e9:ca:14:28: b2:e1:20:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nl98VcBkJmg9kwMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ODliMjE0ZTMtOWQ0YS00ODQ1LTkwMWYtZGU0Y2I2ZjZlMDgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6faTAKu1aOw6doM409BuxPEQW84CxDkWbWla 6i53xz5HUdG6nvuwcWjIWc08PFCs6Q5OPlgBGT4MwqF+ZH4Dz8yzckYauyLlXcMH HyWJnmhNLJMHYKbyoBdZgzg2nAibTjVqrOiHAqkY8EaYFeY8G25SXk9WlJFG3DLY VMosmWeFQhTfv4bum98/J7wdiIR9XKCziIeIMmJcE+0S6JFE6IaXhxNYnwl3BLNm VomCB0dZtrTlR80Vb1Fz8u2Q1/LPhZqpyiSHgMKQlvyypCM+eo/vh6E3zUaXcK5h P2qidLmPp32uaSRqUdW7M5qIf0h6BSglRpQpIZ8ZtBq1D2BtYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHbpJ0nA5z34X94Ue1BYgerJBGa/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvZWJlOGVlMTItNTMwZS0z ZDdiLTgwMzUtZGM4NWRjZmE5MDAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQxx8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFY98hsErCIIZPqgaWCTn4IDmOGBd9Pdx6LmvzRismRH+ytqNW90/Lh3 PFyJLPEIVIimHEkjZHB3rAuMOPqZapdIHF9pubiqN58liSsmonMRsBavgI+6+//9 NTh2nHC9wkaAjyyEDR8vXaRTsgl5tyD4mgUtDwRz+ngVY3IxMCp66I/E652jgIpT PPnKOk5R5mC3JeTKGR1v9lpkytD+ZG+ecPq19H3kflem1SyFlT92HB2IBd1sMhlX 580brHKPrMt/uV8D/z2sR+99QeEAStdQTOdn5d0ZXl1Q1xoE/gLGHCmHijz247bl tYEUYjlQr/AxzmUZMB9/6coUKLLhIGw= -----END CERTIFICATE-----Generated at Wed Jul 29 13:12:47 2026 by rpki-client