$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0452da18-1252-4f2f-a3b1-80b32b6d2a9b/990e62b2-cd91-3feb-804a-c376755743b3.roa File: 990e62b2-cd91-3feb-804a-c376755743b3.roa (raw, json) Hash identifier: dKQQFgN0zu7SAB0IgyNgVo2LBTEqc8S+uOKOorWh/8s= Subject key identifier: DC:AF:0E:FD:FE:59:41:58:93:1D:B9:57:F0:AA:3B:6F:4C:3B:FD:C7 Certificate issuer: /CN=0452da18-1252-4f2f-a3b1-80b32b6d2a9b Certificate serial: 010D0C9F4328584EA17AA97DD15C5729959D66F0 Authority key identifier: 29:EA:2C:26:C3:E2:D4:1D:89:87:77:34:1F:B7:E0:3C:38:87:C9:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0452da18-1252-4f2f-a3b1-80b32b6d2a9b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0452da18-1252-4f2f-a3b1-80b32b6d2a9b/990e62b2-cd91-3feb-804a-c376755743b3.roa Signing time: Sun 26 Jul 2026 21:00:11 +0000 ROA not before: Sun 26 Jul 2026 21:00:11 +0000 ROA not after: Sat 24 Oct 2026 21:00:11 +0000 asID: 215748 IP address blocks: 23.157.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0452da18-1252-4f2f-a3b1-80b32b6d2a9b/0452da18-1252-4f2f-a3b1-80b32b6d2a9b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0452da18-1252-4f2f-a3b1-80b32b6d2a9b/0452da18-1252-4f2f-a3b1-80b32b6d2a9b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0452da18-1252-4f2f-a3b1-80b32b6d2a9b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a1:7a:a9:7d:d1:5c:57:29:95:9d:66:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0452da18-1252-4f2f-a3b1-80b32b6d2a9b Validity Not Before: Jul 26 21:00:11 2026 GMT Not After : Oct 24 21:00:11 2026 GMT Subject: CN=b6e2f701-41b7-46a7-b4d9-c63a98fc6018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:d5:1f:20:2f:a5:29:e4:d2:f8:ea:3b:5e:c1: cc:ca:ef:91:97:c4:9b:2d:f5:fa:90:54:15:c0:5b: d1:91:6c:93:f8:24:5c:83:4a:ef:ec:89:d6:70:9a: 23:ec:96:97:0c:05:8e:81:22:33:71:e8:51:bc:47: 32:a2:b0:96:40:ad:ac:7e:01:20:94:b5:08:f9:ea: 5d:90:ba:fd:fe:5d:e4:df:17:9e:45:6c:0e:a4:fa: c4:01:d7:d0:70:af:5b:ee:1b:8e:36:6b:16:dc:fe: 23:39:bc:30:03:84:ab:a7:8b:c8:5c:25:05:54:ce: ae:14:e1:9d:38:a9:07:03:b6:a7:35:ec:58:6a:e9: 2a:6c:cc:b2:f0:ba:c0:49:f0:75:17:2a:77:80:82: 58:c9:1d:cb:7b:be:50:06:99:c2:ba:04:ac:6e:10: fe:07:65:1c:03:ef:0a:be:69:53:d3:3e:28:87:bb: e4:f0:51:9a:18:bb:06:24:2b:66:87:d1:1f:f0:c9: 37:5c:04:27:87:18:1c:15:92:c8:32:8e:06:09:cd: 72:8a:92:3d:db:33:35:18:55:75:c2:47:81:47:64: 20:0a:a5:6a:97:58:2e:f2:e8:37:6c:0a:c9:b2:be: ae:b0:83:df:32:3c:28:18:a9:60:dd:2f:c9:8b:88: 5c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:AF:0E:FD:FE:59:41:58:93:1D:B9:57:F0:AA:3B:6F:4C:3B:FD:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0452da18-1252-4f2f-a3b1-80b32b6d2a9b/990e62b2-cd91-3feb-804a-c376755743b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0452da18-1252-4f2f-a3b1-80b32b6d2a9b/0452da18-1252-4f2f-a3b1-80b32b6d2a9b.crl X509v3 Authority Key Identifier: keyid:29:EA:2C:26:C3:E2:D4:1D:89:87:77:34:1F:B7:E0:3C:38:87:C9:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0452da18-1252-4f2f-a3b1-80b32b6d2a9b.cer sbgp-ipAddrBlock: critical IPv4: 23.157.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:08:6d:5e:d6:1c:8c:10:1a:db:18:6a:ff:54:15:86:2b:bf: af:94:08:67:bc:9b:e4:46:91:5d:40:da:9c:d1:ac:4a:60:02: b0:5c:a7:81:e2:6a:09:ce:33:9f:4c:a8:ae:c4:34:42:e9:2f: 14:c5:d9:5a:2a:e0:85:b8:88:a6:07:ab:0c:21:e7:44:53:4e: e8:40:9d:df:5f:b7:84:4f:c4:26:f8:47:4f:7d:62:36:46:0e: 86:dd:66:fd:cb:b8:7d:79:b8:ab:e6:c5:a9:7f:f5:33:32:f3: 6e:0b:db:ff:ee:33:7e:e7:a2:0e:e8:df:ba:91:3c:12:9b:56: 06:8a:cc:37:2e:85:e3:1f:39:7e:44:8f:96:65:42:19:b7:4e: 98:66:13:de:96:f9:38:06:51:81:a8:ec:11:5f:0c:e7:47:9b: 1d:96:6d:ef:0a:42:14:33:1b:7e:43:2e:6c:05:f8:bf:17:74: d0:3e:7f:bf:76:c8:5e:f7:e4:ad:87:c7:42:8e:53:df:3d:50: 67:d7:25:8a:f3:b3:c5:c8:98:8a:25:59:9b:f4:00:06:7a:88: 15:1f:d7:5c:0b:17:d7:0c:be:35:9e:ab:06:47:60:4f:d1:34: 09:0d:19:ae:4c:cb:ba:ed:86:78:22:25:9f:c0:5b:d9:e1:f1: 8f:a9:39:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6heql90VxXKZWdZvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDQ1MmRhMTgtMTI1Mi00ZjJmLWEzYjEtODBiMzJiNmQy YTliMB4XDTI2MDcyNjIxMDAxMVoXDTI2MTAyNDIxMDAxMVowLzEtMCsGA1UEAxMk YjZlMmY3MDEtNDFiNy00NmE3LWI0ZDktYzYzYTk4ZmM2MDE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5dUfIC+lKeTS+Oo7XsHMyu+Rl8SbLfX6kFQV wFvRkWyT+CRcg0rv7InWcJoj7JaXDAWOgSIzcehRvEcyorCWQK2sfgEglLUI+epd kLr9/l3k3xeeRWwOpPrEAdfQcK9b7huONmsW3P4jObwwA4Srp4vIXCUFVM6uFOGd OKkHA7anNexYaukqbMyy8LrASfB1Fyp3gIJYyR3Le75QBpnCugSsbhD+B2UcA+8K vmlT0z4oh7vk8FGaGLsGJCtmh9Ef8Mk3XAQnhxgcFZLIMo4GCc1yipI92zM1GFV1 wkeBR2QgCqVql1gu8ug3bArJsr6usIPfMjwoGKlg3S/Ji4hc6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNyvDv3+WUFYkx25V/CqO29MO/3HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8wNDUy ZGExOC0xMjUyLTRmMmYtYTNiMS04MGIzMmI2ZDJhOWIvOTkwZTYyYjItY2Q5MS0z ZmViLTgwNGEtYzM3Njc1NTc0M2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMDQ1MmRhMTgtMTI1Mi00ZjJmLWEz YjEtODBiMzJiNmQyYTliLzA0NTJkYTE4LTEyNTItNGYyZi1hM2IxLTgwYjMyYjZk MmE5Yi5jcmwwHwYDVR0jBBgwFoAUKeosJsPi1B2Jh3c0H7fgPDiHye0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8wNDUyZGExOC0xMjUyLTRmMmYtYTNiMS04MGIz MmI2ZDJhOWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF53MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG8IbV7WHIwQGtsYav9UFYYrv6+UCGe8m+RGkV1A2pzRrEpgArBcp4Hi agnOM59MqK7ENELpLxTF2Voq4IW4iKYHqwwh50RTTuhAnd9ft4RPxCb4R099YjZG DobdZv3LuH15uKvmxal/9TMy824L2//uM37nog7o37qRPBKbVgaKzDcuheMfOX5E j5ZlQhm3TphmE96W+TgGUYGo7BFfDOdHmx2Wbe8KQhQzG35DLmwF+L8XdNA+f792 yF735K2Hx0KOU989UGfXJYrzs8XImIolWZv0AAZ6iBUf11wLF9cMvjWeqwZHYE/R NAkNGa5My7rthngiJZ/AW9nh8Y+pOXg= -----END CERTIFICATE-----Generated at Tue Jul 28 22:20:57 2026 by rpki-client