$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8fdb6fd9-d643-44d1-acb6-3624d356baf0/7602061e-6053-300f-a9d4-d9f7db98f2da.roa File: 7602061e-6053-300f-a9d4-d9f7db98f2da.roa (raw, json) Hash identifier: qKPFaExIjgzhRcEclU7yQBmwECc5TvJYhCVQPAAO5nE= Subject key identifier: C7:77:D8:22:A4:A1:AC:07:4C:8E:9E:38:83:F6:1B:59:79:1F:62:07 Certificate issuer: /CN=8fdb6fd9-d643-44d1-acb6-3624d356baf0 Certificate serial: 010D0C9F4328584E9D4AB96B6D2DB504B76F1290 Authority key identifier: B5:85:79:67:67:50:1A:12:2C:8C:D2:2B:0E:2C:4C:13:3F:A5:D9:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8fdb6fd9-d643-44d1-acb6-3624d356baf0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8fdb6fd9-d643-44d1-acb6-3624d356baf0/7602061e-6053-300f-a9d4-d9f7db98f2da.roa Signing time: Sat 25 Jul 2026 09:00:11 +0000 ROA not before: Sat 25 Jul 2026 09:00:11 +0000 ROA not after: Fri 23 Oct 2026 09:00:11 +0000 asID: 7361 IP address blocks: 23.152.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8fdb6fd9-d643-44d1-acb6-3624d356baf0/8fdb6fd9-d643-44d1-acb6-3624d356baf0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8fdb6fd9-d643-44d1-acb6-3624d356baf0/8fdb6fd9-d643-44d1-acb6-3624d356baf0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8fdb6fd9-d643-44d1-acb6-3624d356baf0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9d:4a:b9:6b:6d:2d:b5:04:b7:6f:12:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fdb6fd9-d643-44d1-acb6-3624d356baf0 Validity Not Before: Jul 25 09:00:11 2026 GMT Not After : Oct 23 09:00:11 2026 GMT Subject: CN=9b6406cf-9c87-49af-b56d-70227beb217d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b7:60:9b:8b:98:c0:b3:47:d5:47:a2:b6:80: 0f:8f:36:d3:b9:fd:64:b4:9b:05:32:37:91:56:4c: 7a:30:47:6b:9c:30:4c:eb:3b:cd:9c:1d:fc:c4:de: 29:07:66:91:41:84:86:32:54:64:12:21:1c:3c:24: 83:84:6d:89:7c:09:73:86:67:a5:f5:24:b3:68:2a: 6d:90:a1:eb:1c:93:82:7c:3c:b1:eb:91:50:f9:37: 6e:c2:9d:72:1a:31:8c:5a:4e:fa:2c:ae:1d:79:db: a0:bb:72:a0:6c:b5:fa:dc:e2:09:65:1e:dd:22:e0: a6:1b:e2:e2:a0:13:f8:23:03:35:68:09:87:62:7a: dc:1a:f2:6b:66:c5:3f:44:85:ae:7d:9c:69:ac:72: f4:0f:4d:39:c6:7d:7e:78:44:0f:e2:3e:4c:e7:e5: 8f:99:e6:72:eb:4a:5e:0c:1f:f3:38:bb:1f:2d:e1: 0f:45:4e:69:a4:ed:2c:95:12:52:bb:8d:8f:c6:54: b5:fe:52:20:66:20:09:86:58:cf:f5:81:66:d1:7f: c3:af:39:4e:5f:1b:6c:76:95:1e:43:8e:e4:1c:18: 02:26:0d:bd:0c:dc:65:36:61:50:63:db:df:a8:43: 63:8c:83:9d:0d:4e:7c:33:1f:ff:10:c2:cb:6b:13: 4f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:77:D8:22:A4:A1:AC:07:4C:8E:9E:38:83:F6:1B:59:79:1F:62:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8fdb6fd9-d643-44d1-acb6-3624d356baf0/7602061e-6053-300f-a9d4-d9f7db98f2da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8fdb6fd9-d643-44d1-acb6-3624d356baf0/8fdb6fd9-d643-44d1-acb6-3624d356baf0.crl X509v3 Authority Key Identifier: keyid:B5:85:79:67:67:50:1A:12:2C:8C:D2:2B:0E:2C:4C:13:3F:A5:D9:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8fdb6fd9-d643-44d1-acb6-3624d356baf0.cer sbgp-ipAddrBlock: critical IPv4: 23.152.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:ce:6b:02:dc:4b:7e:fd:5f:d5:d5:1b:6e:98:7b:59:18:b4: 37:0e:6c:a3:21:e3:05:95:c0:14:61:bd:23:fd:a0:0c:6e:ac: f5:31:f8:46:61:78:68:75:e0:a7:f1:a6:07:f3:c0:80:d2:fd: e4:1a:75:7d:42:33:7f:76:c5:2c:c9:7a:1f:bf:c5:b8:36:79: 0d:ec:e8:fb:48:9a:7d:5b:3b:ae:0d:68:62:25:81:03:1f:2c: 61:9b:5a:3b:5d:12:1a:56:68:07:1f:c8:6d:e0:32:90:ba:3d: 6d:6e:2a:55:ad:92:8f:f0:07:21:35:3a:13:09:a4:ce:d4:ad: 21:67:6a:ca:4d:6c:c1:47:07:af:73:1b:0a:5f:5d:c0:3a:84: c2:d2:f7:d1:3c:20:c6:0e:aa:40:ad:31:a8:92:4f:af:43:96: d4:8f:1c:2c:40:4f:7c:43:f9:8d:22:c8:e6:62:9f:28:07:05: e9:93:bd:d7:c3:f9:2c:3f:f8:cd:95:db:c5:06:38:37:66:22: 69:c1:49:01:16:cd:c1:bf:99:0f:1f:92:36:d6:63:6c:98:85: 4c:54:0e:9f:fc:4f:a0:da:cf:ac:f0:75:7e:f0:db:9e:1d:a5: 54:7d:7a:52:64:47:a8:14:4b:6c:4a:f8:ec:c5:e4:54:61:66: d0:da:f5:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6dSrlrbS21BLdvEpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGZkYjZmZDktZDY0My00NGQxLWFjYjYtMzYyNGQzNTZi YWYwMB4XDTI2MDcyNTA5MDAxMVoXDTI2MTAyMzA5MDAxMVowLzEtMCsGA1UEAxMk OWI2NDA2Y2YtOWM4Ny00OWFmLWI1NmQtNzAyMjdiZWIyMTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbdgm4uYwLNH1UeitoAPjzbTuf1ktJsFMjeR Vkx6MEdrnDBM6zvNnB38xN4pB2aRQYSGMlRkEiEcPCSDhG2JfAlzhmel9SSzaCpt kKHrHJOCfDyx65FQ+Tduwp1yGjGMWk76LK4dedugu3KgbLX63OIJZR7dIuCmG+Li oBP4IwM1aAmHYnrcGvJrZsU/RIWufZxprHL0D005xn1+eEQP4j5M5+WPmeZy60pe DB/zOLsfLeEPRU5ppO0slRJSu42PxlS1/lIgZiAJhljP9YFm0X/DrzlOXxtsdpUe Q47kHBgCJg29DNxlNmFQY9vfqENjjIOdDU58Mx//EMLLaxNPlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMd32CKkoawHTI6eOIP2G1l5H2IHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84ZmRi NmZkOS1kNjQzLTQ0ZDEtYWNiNi0zNjI0ZDM1NmJhZjAvNzYwMjA2MWUtNjA1My0z MDBmLWE5ZDQtZDlmN2RiOThmMmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOGZkYjZmZDktZDY0My00NGQxLWFj YjYtMzYyNGQzNTZiYWYwLzhmZGI2ZmQ5LWQ2NDMtNDRkMS1hY2I2LTM2MjRkMzU2 YmFmMC5jcmwwHwYDVR0jBBgwFoAUtYV5Z2dQGhIsjNIrDixMEz+l2VswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84ZmRiNmZkOS1kNjQzLTQ0ZDEtYWNiNi0zNjI0 ZDM1NmJhZjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5iUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJbOawLcS379X9XVG26Ye1kYtDcObKMh4wWVwBRhvSP9oAxurPUx+EZh eGh14KfxpgfzwIDS/eQadX1CM392xSzJeh+/xbg2eQ3s6PtImn1bO64NaGIlgQMf LGGbWjtdEhpWaAcfyG3gMpC6PW1uKlWtko/wByE1OhMJpM7UrSFnaspNbMFHB69z GwpfXcA6hMLS99E8IMYOqkCtMaiST69DltSPHCxAT3xD+Y0iyOZinygHBemTvdfD +Sw/+M2V28UGODdmImnBSQEWzcG/mQ8fkjbWY2yYhUxUDp/8T6Daz6zwdX7w254d pVR9elJkR6gUS2xK+OzF5FRhZtDa9aI= -----END CERTIFICATE-----Generated at Wed Jul 29 00:35:38 2026 by rpki-client