$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/04efd7cc-0d91-448d-bd9a-256355cac421/f82d27d7-2db7-3397-a9ad-9d81a07e456b.roa File: f82d27d7-2db7-3397-a9ad-9d81a07e456b.roa (raw, json) Hash identifier: wf5iBgE15l9xJpC7Hlo2rIxk9wo8UuRM0VhuqS0Z0cI= Subject key identifier: 50:1E:4F:1F:A1:6D:40:79:F7:53:24:D7:21:CA:07:96:87:B3:FA:53 Certificate issuer: /CN=04efd7cc-0d91-448d-bd9a-256355cac421 Certificate serial: 010D0C9F4328584EA5AA9A359806DC9F2FDB5080 Authority key identifier: 2C:AF:48:10:50:AB:80:1B:43:FC:88:46:91:F1:4E:9A:B6:BA:A8:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/04efd7cc-0d91-448d-bd9a-256355cac421.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/04efd7cc-0d91-448d-bd9a-256355cac421/f82d27d7-2db7-3397-a9ad-9d81a07e456b.roa Signing time: Tue 28 Jul 2026 09:00:11 +0000 ROA not before: Tue 28 Jul 2026 09:00:11 +0000 ROA not after: Mon 26 Oct 2026 09:00:11 +0000 asID: 402363 IP address blocks: 23.157.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/04efd7cc-0d91-448d-bd9a-256355cac421/04efd7cc-0d91-448d-bd9a-256355cac421.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/04efd7cc-0d91-448d-bd9a-256355cac421/04efd7cc-0d91-448d-bd9a-256355cac421.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/04efd7cc-0d91-448d-bd9a-256355cac421.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a5:aa:9a:35:98:06:dc:9f:2f:db:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04efd7cc-0d91-448d-bd9a-256355cac421 Validity Not Before: Jul 28 09:00:11 2026 GMT Not After : Oct 26 09:00:11 2026 GMT Subject: CN=2b9daf4a-c4f6-42e6-938d-41aa861b4699 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:4a:c0:67:14:04:55:43:9a:26:6a:3a:e3:bf: 77:f4:ed:35:5c:3b:98:47:1d:a2:38:ae:ec:43:9e: 0a:c0:45:5f:f9:f4:11:c4:9e:25:c4:4c:81:15:3b: a3:31:6c:9f:c3:9a:f5:d7:e2:c1:09:dc:6b:62:80: 4a:82:c9:ce:34:ea:21:bf:8c:c0:02:37:08:d3:08: 85:22:4c:dd:5f:7b:41:35:b3:38:70:3c:f6:09:63: 81:f5:15:77:16:07:b4:7b:33:20:98:b0:56:9e:23: 3b:d7:e0:b1:1f:fe:fc:00:5b:6f:b5:84:bf:c5:79: a5:c1:bc:39:2c:91:62:4a:6d:d7:1e:76:4a:5f:b0: f4:f6:37:80:9f:26:04:c6:6e:93:c3:58:f1:ba:8b: b4:a2:14:cd:03:73:69:a3:d2:35:07:3e:f1:28:8b: c4:02:b5:d0:e1:fa:eb:dd:7c:eb:a2:c7:7c:de:bd: 52:e3:0e:2b:a9:6d:b6:38:9e:17:16:4f:4a:cd:e6: 0e:5a:20:0d:2e:54:0e:4b:6b:58:c1:3a:48:54:d2: a7:e8:80:af:c2:28:2b:2d:5c:22:3b:42:8a:b4:dd: 44:65:3a:ff:0c:60:35:ff:b4:e4:1d:f0:37:a1:30: d0:ee:80:32:72:98:e4:ac:ca:48:7b:7e:9e:25:0b: 3d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:1E:4F:1F:A1:6D:40:79:F7:53:24:D7:21:CA:07:96:87:B3:FA:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/04efd7cc-0d91-448d-bd9a-256355cac421/f82d27d7-2db7-3397-a9ad-9d81a07e456b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/04efd7cc-0d91-448d-bd9a-256355cac421/04efd7cc-0d91-448d-bd9a-256355cac421.crl X509v3 Authority Key Identifier: keyid:2C:AF:48:10:50:AB:80:1B:43:FC:88:46:91:F1:4E:9A:B6:BA:A8:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/04efd7cc-0d91-448d-bd9a-256355cac421.cer sbgp-ipAddrBlock: critical IPv4: 23.157.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:79:3e:1e:79:fe:65:53:b1:af:ab:34:cb:7c:1f:4c:ec:7c: 67:cb:ee:78:0c:04:a3:d2:69:f9:99:0e:28:c7:37:83:97:cc: f7:a8:f1:d1:94:57:14:42:98:71:bc:67:c9:2d:34:82:db:c2: a0:0c:80:88:e0:ae:1c:c6:43:55:76:63:c4:8d:61:43:c2:99: d1:3f:f4:a5:2e:75:92:ea:0a:48:67:21:23:7d:05:11:3a:1a: 21:72:5a:a3:5d:60:f0:c4:c7:84:38:00:96:60:6d:56:86:23: dd:c6:25:12:72:54:80:c6:35:f6:86:34:d3:fc:06:71:1c:8a: ec:53:e1:25:d1:63:c0:a0:20:bd:67:9f:f6:bc:4f:52:a3:16: 6c:0b:70:be:95:64:dd:81:f6:23:a9:f7:1b:65:39:4b:15:9b: 43:12:9d:30:b1:f8:65:11:8b:03:6d:c1:58:dd:07:28:7c:fe: 36:10:db:02:7a:a0:90:39:5c:c3:01:32:94:e6:23:a6:6a:2f: 3a:96:3d:79:6c:e7:25:d3:55:a1:5d:32:2d:e2:38:ad:b9:b4: 6f:bf:ea:b1:18:6a:21:3a:c3:73:bb:dc:6f:91:f9:b7:f4:5e: 65:15:e2:33:de:4d:5e:72:e2:4a:b9:b2:53:be:08:3c:98:ad: 76:3a:18:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6lqpo1mAbcny/bUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDRlZmQ3Y2MtMGQ5MS00NDhkLWJkOWEtMjU2MzU1Y2Fj NDIxMB4XDTI2MDcyODA5MDAxMVoXDTI2MTAyNjA5MDAxMVowLzEtMCsGA1UEAxMk MmI5ZGFmNGEtYzRmNi00MmU2LTkzOGQtNDFhYTg2MWI0Njk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0rAZxQEVUOaJmo647939O01XDuYRx2iOK7s Q54KwEVf+fQRxJ4lxEyBFTujMWyfw5r11+LBCdxrYoBKgsnONOohv4zAAjcI0wiF IkzdX3tBNbM4cDz2CWOB9RV3Fge0ezMgmLBWniM71+CxH/78AFtvtYS/xXmlwbw5 LJFiSm3XHnZKX7D09jeAnyYExm6Tw1jxuou0ohTNA3Npo9I1Bz7xKIvEArXQ4frr 3Xzrosd83r1S4w4rqW22OJ4XFk9KzeYOWiANLlQOS2tYwTpIVNKn6ICvwigrLVwi O0KKtN1EZTr/DGA1/7TkHfA3oTDQ7oAycpjkrMpIe36eJQs9MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFAeTx+hbUB591Mk1yHKB5aHs/pTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8wNGVm ZDdjYy0wZDkxLTQ0OGQtYmQ5YS0yNTYzNTVjYWM0MjEvZjgyZDI3ZDctMmRiNy0z Mzk3LWE5YWQtOWQ4MWEwN2U0NTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMDRlZmQ3Y2MtMGQ5MS00NDhkLWJk OWEtMjU2MzU1Y2FjNDIxLzA0ZWZkN2NjLTBkOTEtNDQ4ZC1iZDlhLTI1NjM1NWNh YzQyMS5jcmwwHwYDVR0jBBgwFoAULK9IEFCrgBtD/IhGkfFOmra6qDcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8wNGVmZDdjYy0wZDkxLTQ0OGQtYmQ5YS0yNTYz NTVjYWM0MjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF53sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE95Ph55/mVTsa+rNMt8H0zsfGfL7ngMBKPSafmZDijHN4OXzPeo8dGU VxRCmHG8Z8ktNILbwqAMgIjgrhzGQ1V2Y8SNYUPCmdE/9KUudZLqCkhnISN9BRE6 GiFyWqNdYPDEx4Q4AJZgbVaGI93GJRJyVIDGNfaGNNP8BnEciuxT4SXRY8CgIL1n n/a8T1KjFmwLcL6VZN2B9iOp9xtlOUsVm0MSnTCx+GURiwNtwVjdByh8/jYQ2wJ6 oJA5XMMBMpTmI6ZqLzqWPXls5yXTVaFdMi3iOK25tG+/6rEYaiE6w3O73G+R+bf0 XmUV4jPeTV5y4kq5slO+CDyYrXY6GDw= -----END CERTIFICATE-----Generated at Tue Jul 28 23:39:39 2026 by rpki-client