$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1/eaf6ef87-4c88-3c7d-8c7c-519b11d85408.roa File: eaf6ef87-4c88-3c7d-8c7c-519b11d85408.roa (raw, json) Hash identifier: /Y+VDOcllNjefqjHC765/fK4ADE12GvFEJrI+KGZhsg= Subject key identifier: E8:7A:03:AC:1D:D9:BD:B2:B1:A3:29:2B:18:89:DC:71:A7:DD:62:1E Certificate issuer: /CN=2a576405-6d12-4321-8aff-11069dafb9f1 Certificate serial: 010D0C9F4328584EA788003C3C3128C97C9E3800 Authority key identifier: BB:4D:83:61:A4:90:4F:28:37:18:5F:95:D5:B1:1A:01:1F:4B:15:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1/eaf6ef87-4c88-3c7d-8c7c-519b11d85408.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 202734 IP address blocks: 23.158.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1/2a576405-6d12-4321-8aff-11069dafb9f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1/2a576405-6d12-4321-8aff-11069dafb9f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:00:3c:3c:31:28:c9:7c:9e:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a576405-6d12-4321-8aff-11069dafb9f1 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=aed52851-fc7d-452f-ad34-9b981f51d5c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:fb:a1:0d:56:7a:98:13:55:71:c7:9b:cd:a1: 0b:20:53:08:f1:0c:0f:22:44:8d:88:0c:82:fd:f2: f6:7c:0e:00:2a:52:72:2f:0b:9e:95:cb:f2:49:4e: 2f:4b:fd:43:5a:c7:4f:8e:e6:0b:2d:a5:a9:4c:03: 26:74:d5:25:cc:df:99:c6:b7:16:af:db:20:c9:64: 14:8f:49:32:27:19:5d:84:fc:74:7e:9d:0f:73:25: db:60:f2:a7:4d:bf:c1:6c:e8:43:b3:4b:5c:f7:85: 4c:64:88:5d:db:ef:3c:8f:f2:5f:bc:cc:63:91:33: 0d:02:7c:22:2e:17:6e:9a:1e:aa:3a:74:53:10:1d: 1a:d9:b8:be:ee:56:f1:93:90:7a:dd:7f:8f:3b:89: 52:c6:9e:77:fd:e1:58:79:7e:1d:0b:d1:c4:e9:02: 8b:25:aa:8e:10:9e:68:c3:42:ad:6f:3d:cd:8a:0f: 37:5d:0c:68:0a:f6:8c:d2:e3:96:4f:8a:2c:ba:84: 51:e1:31:ae:93:1e:5b:b1:3e:21:0f:95:ca:6d:41: 9d:4f:41:5e:bf:bd:62:37:9a:28:79:18:ee:7d:b6: 57:6e:2f:b4:1a:00:89:55:26:31:88:af:8e:b8:a4: 3d:57:a3:c2:3c:eb:d8:e4:98:8b:c2:c3:63:19:83: 28:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:7A:03:AC:1D:D9:BD:B2:B1:A3:29:2B:18:89:DC:71:A7:DD:62:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1/eaf6ef87-4c88-3c7d-8c7c-519b11d85408.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1/2a576405-6d12-4321-8aff-11069dafb9f1.crl X509v3 Authority Key Identifier: keyid:BB:4D:83:61:A4:90:4F:28:37:18:5F:95:D5:B1:1A:01:1F:4B:15:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1.cer sbgp-ipAddrBlock: critical IPv4: 23.158.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:9c:e8:d8:9a:08:af:29:86:29:49:06:08:e2:37:27:cc:78: 95:18:c6:b4:7b:9d:45:db:85:37:b0:3d:1f:1b:ec:29:4d:ac: d9:19:43:12:57:1e:a7:e9:00:e7:ac:8d:45:fc:c3:01:8b:33: 23:aa:8e:c1:9d:2d:89:77:b3:49:ec:06:2b:b2:ed:eb:f5:61: 91:37:cc:d0:f5:3a:55:2d:ee:91:92:41:b4:c7:89:76:83:78: 60:52:fa:51:dd:54:70:b3:96:69:1e:6d:86:d5:62:2e:5a:ed: ca:a4:83:7c:f2:64:f7:96:ec:82:63:0c:ba:c4:e1:e2:6d:06: c7:b8:bd:fc:65:2f:6d:4a:62:f2:27:06:15:04:8d:a3:42:7f: a1:40:ec:d3:d9:fd:4a:73:54:e4:b0:70:dc:eb:dc:c9:65:a4: f2:02:4e:33:57:48:63:09:e8:d4:ee:21:54:f0:86:aa:fc:98: 41:a5:99:68:f9:62:37:36:b2:b2:83:a6:bc:ed:ce:79:3d:d3: 3e:b1:b1:30:74:5f:3d:ce:03:c0:2f:6a:ec:8e:7c:90:67:02: 7b:1f:19:d7:f5:e1:e5:b5:5f:0c:36:e6:3e:4a:5b:60:47:fb: 32:60:7b:27:6f:89:f8:45:9b:7b:81:8b:51:12:6e:a6:42:ad: b1:41:ba:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niAA8PDEoyXyeOAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE1NzY0MDUtNmQxMi00MzIxLThhZmYtMTEwNjlkYWZi OWYxMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YWVkNTI4NTEtZmM3ZC00NTJmLWFkMzQtOWI5ODFmNTFkNWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvuhDVZ6mBNVccebzaELIFMI8QwPIkSNiAyC /fL2fA4AKlJyLwuelcvySU4vS/1DWsdPjuYLLaWpTAMmdNUlzN+ZxrcWr9sgyWQU j0kyJxldhPx0fp0PcyXbYPKnTb/BbOhDs0tc94VMZIhd2+88j/JfvMxjkTMNAnwi Lhdumh6qOnRTEB0a2bi+7lbxk5B63X+PO4lSxp53/eFYeX4dC9HE6QKLJaqOEJ5o w0Ktbz3Nig83XQxoCvaM0uOWT4osuoRR4TGukx5bsT4hD5XKbUGdT0Fev71iN5oo eRjufbZXbi+0GgCJVSYxiK+OuKQ9V6PCPOvY5JiLwsNjGYMoMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOh6A6wd2b2ysaMpKxiJ3HGn3WIeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yYTU3 NjQwNS02ZDEyLTQzMjEtOGFmZi0xMTA2OWRhZmI5ZjEvZWFmNmVmODctNGM4OC0z YzdkLThjN2MtNTE5YjExZDg1NDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMmE1NzY0MDUtNmQxMi00MzIxLThh ZmYtMTEwNjlkYWZiOWYxLzJhNTc2NDA1LTZkMTItNDMyMS04YWZmLTExMDY5ZGFm YjlmMS5jcmwwHwYDVR0jBBgwFoAUu02DYaSQTyg3GF+V1bEaAR9LFUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yYTU3NjQwNS02ZDEyLTQzMjEtOGFmZi0xMTA2 OWRhZmI5ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF54UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG6c6NiaCK8philJBgjiNyfMeJUYxrR7nUXbhTewPR8b7ClNrNkZQxJX HqfpAOesjUX8wwGLMyOqjsGdLYl3s0nsBiuy7ev1YZE3zND1OlUt7pGSQbTHiXaD eGBS+lHdVHCzlmkebYbVYi5a7cqkg3zyZPeW7IJjDLrE4eJtBse4vfxlL21KYvIn BhUEjaNCf6FA7NPZ/UpzVOSwcNzr3MllpPICTjNXSGMJ6NTuIVTwhqr8mEGlmWj5 Yjc2srKDprztznk90z6xsTB0Xz3OA8AvauyOfJBnAnsfGdf14eW1Xww25j5KW2BH +zJgeydvifhFm3uBi1ESbqZCrbFButE= -----END CERTIFICATE-----Generated at Wed Jul 29 08:39:44 2026 by rpki-client