$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1/70dae8bc-c10e-3297-8a58-04ae61176f17.roa File: 70dae8bc-c10e-3297-8a58-04ae61176f17.roa (raw, json) Hash identifier: wnDhmh5C8OlR0sZAEYCebDn9ngh4q7shxLK1Mpv3xts= Subject key identifier: 6D:73:47:20:99:E0:C0:44:66:23:C8:FB:6D:AD:B9:79:D8:3E:7A:30 Certificate issuer: /CN=2a576405-6d12-4321-8aff-11069dafb9f1 Certificate serial: 010D0C9F4328584EA78800257278BD0E99630180 Authority key identifier: BB:4D:83:61:A4:90:4F:28:37:18:5F:95:D5:B1:1A:01:1F:4B:15:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1/70dae8bc-c10e-3297-8a58-04ae61176f17.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 402334 IP address blocks: 23.158.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1/2a576405-6d12-4321-8aff-11069dafb9f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1/2a576405-6d12-4321-8aff-11069dafb9f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:00:25:72:78:bd:0e:99:63:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a576405-6d12-4321-8aff-11069dafb9f1 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=c3561b82-cff7-4f67-89d4-371ff98db77d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:23:9b:2c:ff:0a:0b:4e:3b:0d:c3:57:15:b8: f0:2c:a9:3b:1b:f0:02:b0:65:e3:b1:a9:ce:46:88: 3e:a6:24:29:4b:b0:67:14:89:88:6f:b9:4d:7a:ee: d0:01:2e:0a:12:e1:2a:50:1a:01:27:0d:c4:f5:ae: 0e:a3:e9:c4:90:2a:dd:37:77:b9:bf:b4:82:68:20: c4:2b:22:50:28:09:ae:a1:bf:9a:07:0d:9c:4a:3f: d0:c6:a8:88:34:1c:48:6b:a6:63:47:8b:16:3c:5b: df:1e:6f:49:51:6f:75:cd:1f:a1:c3:f4:64:cb:16: 9f:2e:33:10:cd:45:e1:a2:2c:c3:1b:0b:70:c6:be: 90:dd:25:a6:b6:6d:6f:bd:9e:ae:b7:68:57:a6:ad: f1:93:da:4e:a6:b3:27:af:fa:3d:fe:f2:88:bd:68: 04:be:15:f1:58:fa:bf:ac:95:a0:d9:e4:96:ce:b6: 66:d5:77:64:4c:9a:6c:1d:90:09:23:69:c5:47:7c: dd:9d:92:5b:88:ba:00:32:af:89:83:18:64:0d:ff: 36:5f:1a:dc:44:eb:03:86:54:21:ad:6e:71:a3:ef: 32:1b:45:db:b5:7d:10:83:83:a1:a7:60:f2:4b:f5: 5a:b9:e0:93:90:b9:f7:4d:c6:8c:e2:49:90:1a:26: af:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:73:47:20:99:E0:C0:44:66:23:C8:FB:6D:AD:B9:79:D8:3E:7A:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1/70dae8bc-c10e-3297-8a58-04ae61176f17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1/2a576405-6d12-4321-8aff-11069dafb9f1.crl X509v3 Authority Key Identifier: keyid:BB:4D:83:61:A4:90:4F:28:37:18:5F:95:D5:B1:1A:01:1F:4B:15:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1.cer sbgp-ipAddrBlock: critical IPv4: 23.158.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:04:59:ff:fc:3b:79:fb:af:a7:68:74:7f:e5:3e:38:8b:b8: 44:62:ae:b6:89:d2:fd:6f:4b:12:c9:b9:96:3d:a6:cc:48:94: 0e:0e:01:c9:52:75:1e:8e:eb:37:00:e3:d5:9b:17:b3:64:f0: 16:3f:65:e8:6c:c2:f1:2a:c5:a9:42:53:8a:3a:fc:6e:51:7e: 7a:2e:d6:4a:ff:fb:9a:5a:69:c3:04:6a:c1:df:9c:b1:24:23: ab:c7:ba:e9:86:74:f3:de:e9:a9:55:a3:8e:30:98:30:7d:d3: 04:f5:f4:5c:5c:59:7e:00:1d:ae:be:a2:10:22:0d:09:92:b6: a3:14:2f:63:d0:18:e8:e5:9d:07:9d:42:14:83:fc:8c:71:10: 66:47:46:fd:dc:10:69:49:bb:45:0e:03:4e:0e:a0:08:51:1f: 16:31:87:8a:2f:3c:98:7d:89:aa:a9:73:1d:cc:50:50:b4:65: c5:3e:91:01:82:20:c0:5b:cf:be:47:9f:32:eb:e6:82:44:0f: f8:5b:34:e5:73:73:b2:3d:f6:d7:04:8c:5e:4a:88:10:d9:9c: 6d:33:7b:8a:f0:6c:20:28:e4:c2:60:5d:6d:20:34:df:f7:84: 35:f0:8c:cf:93:5e:33:26:a7:39:2b:1f:9c:d6:72:ed:dd:84: fb:41:1d:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niAAlcni9DpljAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE1NzY0MDUtNmQxMi00MzIxLThhZmYtMTEwNjlkYWZi OWYxMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YzM1NjFiODItY2ZmNy00ZjY3LTg5ZDQtMzcxZmY5OGRiNzdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiObLP8KC047DcNXFbjwLKk7G/ACsGXjsanO Rog+piQpS7BnFImIb7lNeu7QAS4KEuEqUBoBJw3E9a4Oo+nEkCrdN3e5v7SCaCDE KyJQKAmuob+aBw2cSj/QxqiINBxIa6ZjR4sWPFvfHm9JUW91zR+hw/RkyxafLjMQ zUXhoizDGwtwxr6Q3SWmtm1vvZ6ut2hXpq3xk9pOprMnr/o9/vKIvWgEvhXxWPq/ rJWg2eSWzrZm1XdkTJpsHZAJI2nFR3zdnZJbiLoAMq+JgxhkDf82XxrcROsDhlQh rW5xo+8yG0XbtX0Qg4Ohp2DyS/VaueCTkLn3TcaM4kmQGiavRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG1zRyCZ4MBEZiPI+22tuXnYPnowMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yYTU3 NjQwNS02ZDEyLTQzMjEtOGFmZi0xMTA2OWRhZmI5ZjEvNzBkYWU4YmMtYzEwZS0z Mjk3LThhNTgtMDRhZTYxMTc2ZjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMmE1NzY0MDUtNmQxMi00MzIxLThh ZmYtMTEwNjlkYWZiOWYxLzJhNTc2NDA1LTZkMTItNDMyMS04YWZmLTExMDY5ZGFm YjlmMS5jcmwwHwYDVR0jBBgwFoAUu02DYaSQTyg3GF+V1bEaAR9LFUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yYTU3NjQwNS02ZDEyLTQzMjEtOGFmZi0xMTA2 OWRhZmI5ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF54UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGYEWf/8O3n7r6dodH/lPjiLuERirraJ0v1vSxLJuZY9psxIlA4OAclS dR6O6zcA49WbF7Nk8BY/ZehswvEqxalCU4o6/G5Rfnou1kr/+5paacMEasHfnLEk I6vHuumGdPPe6alVo44wmDB90wT19FxcWX4AHa6+ohAiDQmStqMUL2PQGOjlnQed QhSD/IxxEGZHRv3cEGlJu0UOA04OoAhRHxYxh4ovPJh9iaqpcx3MUFC0ZcU+kQGC IMBbz75HnzLr5oJED/hbNOVzc7I99tcEjF5KiBDZnG0ze4rwbCAo5MJgXW0gNN/3 hDXwjM+TXjMmpzkrH5zWcu3dhPtBHf0= -----END CERTIFICATE-----Generated at Wed Jul 29 08:41:32 2026 by rpki-client