$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/43379ab9-295c-4f8d-ac17-431c5c7004aa/0decc770-7996-3ee0-b8a1-f6778d297f96.roa File: 0decc770-7996-3ee0-b8a1-f6778d297f96.roa (raw, json) Hash identifier: uNMd3KnA00aRfM9qgidXMphPWa/LbFRytURCRxo+WB4= Subject key identifier: 2F:01:4B:89:E5:0E:28:11:07:2D:DD:93:F9:5F:44:4C:8D:05:CF:46 Certificate issuer: /CN=43379ab9-295c-4f8d-ac17-431c5c7004aa Certificate serial: 010D0C9F4328584EA79A02EE14233BCF15DD0100 Authority key identifier: 0D:6F:8F:C3:21:98:89:1F:27:96:A0:80:A4:F3:F8:FC:D6:53:E3:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/43379ab9-295c-4f8d-ac17-431c5c7004aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/43379ab9-295c-4f8d-ac17-431c5c7004aa/0decc770-7996-3ee0-b8a1-f6778d297f96.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 153771 IP address blocks: 23.176.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/43379ab9-295c-4f8d-ac17-431c5c7004aa/43379ab9-295c-4f8d-ac17-431c5c7004aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/43379ab9-295c-4f8d-ac17-431c5c7004aa/43379ab9-295c-4f8d-ac17-431c5c7004aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/43379ab9-295c-4f8d-ac17-431c5c7004aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9a:02:ee:14:23:3b:cf:15:dd:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43379ab9-295c-4f8d-ac17-431c5c7004aa Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=9640dbb0-d09e-4a56-ba75-1335376d91a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4c:3b:6f:99:df:f7:20:a0:cb:f7:2f:ad:a1: 6b:f1:4e:5b:01:62:26:a4:13:c6:3d:6d:40:aa:96: 71:3b:e3:1d:31:59:ac:c8:69:ba:b1:09:38:b9:d2: 82:f0:0d:56:67:67:29:28:12:81:fc:b6:34:cd:af: f7:c1:cb:48:40:c4:87:89:08:e4:d2:78:ef:f4:23: b8:96:6f:a2:c9:73:84:a6:53:4f:8e:36:66:22:0f: cc:e6:87:86:90:3c:c3:5b:2c:59:2a:f7:2a:64:85: a7:0f:9f:8a:47:9d:cc:b5:5b:d5:da:0a:84:29:7c: 6e:ec:f4:91:e6:25:df:bb:9e:37:8e:c7:98:b3:64: 98:1c:43:a9:a6:99:4b:d6:64:df:95:8c:d3:0a:e7: d1:d4:ce:71:e5:8f:c7:11:da:af:ff:1c:14:6b:d4: 5d:a2:a5:5d:f5:2a:9e:45:57:c0:72:10:75:d5:2e: d9:df:4c:0c:e6:f9:d4:51:33:bb:ab:9b:bc:22:db: 8f:f0:56:6f:e1:0d:00:c6:a9:5e:a8:ec:42:14:49: 48:3d:0d:ed:6c:b6:9e:f8:ca:85:41:73:77:67:40: 28:e6:e3:dd:bd:14:31:a8:f9:b8:6a:af:51:51:26: ee:a6:14:f6:01:c8:29:11:7e:35:f1:9c:48:c7:63: 2a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:01:4B:89:E5:0E:28:11:07:2D:DD:93:F9:5F:44:4C:8D:05:CF:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/43379ab9-295c-4f8d-ac17-431c5c7004aa/0decc770-7996-3ee0-b8a1-f6778d297f96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/43379ab9-295c-4f8d-ac17-431c5c7004aa/43379ab9-295c-4f8d-ac17-431c5c7004aa.crl X509v3 Authority Key Identifier: keyid:0D:6F:8F:C3:21:98:89:1F:27:96:A0:80:A4:F3:F8:FC:D6:53:E3:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/43379ab9-295c-4f8d-ac17-431c5c7004aa.cer sbgp-ipAddrBlock: critical IPv4: 23.176.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:fb:f5:ed:20:2b:05:8c:5c:a1:6c:18:ca:c9:21:3a:8c:73: 91:59:c4:66:d9:9f:0c:6b:ad:41:90:0b:5d:ad:5b:f7:f5:ba: 01:9f:1c:01:5d:9d:5f:43:db:a1:09:af:b8:61:52:d5:71:30: 7d:5c:30:5c:d0:2a:ef:39:13:b4:80:95:46:6b:c5:59:ac:86: bd:4c:30:d8:93:38:a3:de:27:14:a3:12:46:d5:a5:04:ab:be: f1:e1:b6:1c:8d:6e:e4:a0:21:91:29:06:b5:26:39:7d:60:86: c1:fa:8b:c4:00:e1:86:01:23:3b:eb:77:9f:c1:79:43:3f:57: 44:93:53:a8:c4:e0:79:c1:57:d3:d0:18:d4:66:47:91:cf:69: 12:31:c4:1f:c2:47:58:6d:78:8f:79:17:92:1b:b8:a4:9b:43: 1b:01:5d:46:f6:84:f6:64:0f:ce:e2:28:8b:e6:c3:46:0d:00: 1a:a5:c3:ef:5c:64:01:1d:51:91:38:67:d6:5a:56:00:90:56: dc:02:c0:8f:82:0a:1c:47:46:78:7c:ef:62:b3:fb:6e:19:b9: f4:7a:79:55:b8:94:73:ba:04:49:be:7f:e4:3c:9f:52:06:1b: 6c:ea:ab:9c:47:7d:ac:27:e1:df:a2:b8:19:4c:cf:fb:18:38: a3:e2:e7:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmgLuFCM7zxXdAQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDMzNzlhYjktMjk1Yy00ZjhkLWFjMTctNDMxYzVjNzAw NGFhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OTY0MGRiYjAtZDA5ZS00YTU2LWJhNzUtMTMzNTM3NmQ5MWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0w7b5nf9yCgy/cvraFr8U5bAWImpBPGPW1A qpZxO+MdMVmsyGm6sQk4udKC8A1WZ2cpKBKB/LY0za/3wctIQMSHiQjk0njv9CO4 lm+iyXOEplNPjjZmIg/M5oeGkDzDWyxZKvcqZIWnD5+KR53MtVvV2gqEKXxu7PSR 5iXfu543jseYs2SYHEOppplL1mTflYzTCufR1M5x5Y/HEdqv/xwUa9RdoqVd9Sqe RVfAchB11S7Z30wM5vnUUTO7q5u8ItuP8FZv4Q0AxqleqOxCFElIPQ3tbLae+MqF QXN3Z0Ao5uPdvRQxqPm4aq9RUSbuphT2AcgpEX418ZxIx2MqAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC8BS4nlDigRBy3dk/lfREyNBc9GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi80MzM3 OWFiOS0yOTVjLTRmOGQtYWMxNy00MzFjNWM3MDA0YWEvMGRlY2M3NzAtNzk5Ni0z ZWUwLWI4YTEtZjY3NzhkMjk3Zjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNDMzNzlhYjktMjk1Yy00ZjhkLWFj MTctNDMxYzVjNzAwNGFhLzQzMzc5YWI5LTI5NWMtNGY4ZC1hYzE3LTQzMWM1Yzcw MDRhYS5jcmwwHwYDVR0jBBgwFoAUDW+PwyGYiR8nlqCApPP4/NZT40IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi80MzM3OWFiOS0yOTVjLTRmOGQtYWMxNy00MzFj NWM3MDA0YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7BYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI779e0gKwWMXKFsGMrJITqMc5FZxGbZnwxrrUGQC12tW/f1ugGfHAFd nV9D26EJr7hhUtVxMH1cMFzQKu85E7SAlUZrxVmshr1MMNiTOKPeJxSjEkbVpQSr vvHhthyNbuSgIZEpBrUmOX1ghsH6i8QA4YYBIzvrd5/BeUM/V0STU6jE4HnBV9PQ GNRmR5HPaRIxxB/CR1hteI95F5IbuKSbQxsBXUb2hPZkD87iKIvmw0YNABqlw+9c ZAEdUZE4Z9ZaVgCQVtwCwI+CChxHRnh872Kz+24ZufR6eVW4lHO6BEm+f+Q8n1IG G2zqq5xHfawn4d+iuBlMz/sYOKPi50M= -----END CERTIFICATE-----Generated at Wed Jul 29 13:35:06 2026 by rpki-client