$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afc1ad95-28db-45b7-b1d9-4d82eb1631e8/d8c81ca0-e26d-316c-a8b0-6be255cb8421.roa File: d8c81ca0-e26d-316c-a8b0-6be255cb8421.roa (raw, json) Hash identifier: 6tGhM23Pa9619Ajr2qHz4xzvfHDggmLl775/22dVqMA= Subject key identifier: D6:D2:A3:19:80:F7:DF:73:5A:A1:2A:CF:72:6D:B9:F2:78:9A:2C:13 Certificate issuer: /CN=afc1ad95-28db-45b7-b1d9-4d82eb1631e8 Certificate serial: 010D0C9F4328584EA795CE3F4DFB834014D08380 Authority key identifier: 19:AF:B7:62:91:E6:FE:1F:FF:48:41:17:9C:7D:3E:A5:33:AF:B3:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afc1ad95-28db-45b7-b1d9-4d82eb1631e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afc1ad95-28db-45b7-b1d9-4d82eb1631e8/d8c81ca0-e26d-316c-a8b0-6be255cb8421.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 394880 IP address blocks: 123.100.232.0/24 maxlen: 24 205.210.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afc1ad95-28db-45b7-b1d9-4d82eb1631e8/afc1ad95-28db-45b7-b1d9-4d82eb1631e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afc1ad95-28db-45b7-b1d9-4d82eb1631e8/afc1ad95-28db-45b7-b1d9-4d82eb1631e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afc1ad95-28db-45b7-b1d9-4d82eb1631e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:95:ce:3f:4d:fb:83:40:14:d0:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afc1ad95-28db-45b7-b1d9-4d82eb1631e8 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=c375a295-bf1d-4e82-9ea9-b0f0a1db9354 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:05:69:bd:c3:80:36:b0:fc:65:0c:39:52:8e: 45:e0:8b:8e:80:7d:9a:7a:6c:4d:8e:9b:ed:99:f8: 17:60:74:35:15:c7:e2:8f:88:7b:9b:ea:d1:fb:46: 9c:5b:f2:af:c1:4d:0c:6e:c8:e8:75:8d:cf:ff:91: 35:a0:df:82:fc:32:7c:e9:98:98:a8:11:c1:8c:54: d7:25:9c:0d:43:2d:87:89:1f:ad:70:d7:f9:08:4d: 25:de:0b:72:70:d3:56:a3:63:f2:6e:3a:39:12:3f: b7:ee:cd:4a:0e:71:29:c3:80:a1:c9:8c:3d:1a:48: 0c:93:8d:b5:09:2f:5a:b9:d8:48:17:22:19:be:1b: 36:41:35:53:10:2f:bb:61:a1:b1:4c:24:a3:df:73: 48:c3:e6:f7:99:28:69:72:33:d6:db:61:33:16:f8: 46:fc:29:7f:c8:b8:d5:56:bf:25:f1:36:8a:0b:9b: e2:15:c0:99:5c:8b:06:4e:e9:06:cc:f5:f5:dd:9d: af:f8:2b:f3:78:51:03:57:42:be:8f:b5:6a:66:5f: 95:8d:55:66:b4:00:77:c9:92:45:3d:6b:89:36:77: 33:cf:9e:3d:20:ae:dc:66:e8:07:4b:71:6c:15:84: 5c:d7:b0:a5:f7:24:ce:8e:6c:07:04:41:c2:dc:6a: e2:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:D2:A3:19:80:F7:DF:73:5A:A1:2A:CF:72:6D:B9:F2:78:9A:2C:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afc1ad95-28db-45b7-b1d9-4d82eb1631e8/d8c81ca0-e26d-316c-a8b0-6be255cb8421.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afc1ad95-28db-45b7-b1d9-4d82eb1631e8/afc1ad95-28db-45b7-b1d9-4d82eb1631e8.crl X509v3 Authority Key Identifier: keyid:19:AF:B7:62:91:E6:FE:1F:FF:48:41:17:9C:7D:3E:A5:33:AF:B3:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afc1ad95-28db-45b7-b1d9-4d82eb1631e8.cer sbgp-ipAddrBlock: critical IPv4: 123.100.232.0/24 205.210.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:af:01:e2:79:ca:4e:67:4f:3e:65:7b:30:d3:5a:c1:c6:64: b9:08:8a:94:a6:83:46:f7:a1:99:89:94:42:1f:cb:27:2e:7c: dd:d0:60:b0:a2:ff:26:eb:b0:d3:27:50:c9:dd:3b:13:a1:87: b2:55:fe:fc:9a:3a:3f:6f:6d:16:9a:1e:ea:aa:8e:6c:f3:7d: e8:c7:86:3c:ee:44:d8:d4:47:08:1a:8a:60:fc:06:ec:50:78: 74:e5:af:1a:f2:90:2a:32:5c:bf:33:13:91:bc:d1:8f:3a:68: 1d:f6:7a:ec:2e:f0:53:1f:eb:94:dd:63:2a:df:4a:00:f5:7e: c1:22:18:be:c2:cf:ff:65:22:d3:67:b6:fa:60:1e:15:61:90: 4a:70:49:b8:f9:49:d3:93:7e:d7:e0:09:cd:e7:32:f0:b6:8a: b4:2e:74:fc:ca:26:02:d7:8c:44:b0:ac:c5:b3:92:27:47:17: 0f:09:63:7c:53:46:ca:e8:2e:4a:93:06:c5:a2:0f:10:1c:ec: 4f:24:a6:3c:45:78:d4:e5:61:d2:4f:fb:77:5a:f9:0d:68:c6: 02:40:f3:3c:1e:f0:48:a1:86:ad:4a:fe:8e:a4:f2:53:37:4d: 80:5d:e1:61:c4:3d:57:17:ac:94:76:13:30:c3:87:e1:4e:cf: ee:f2:74:27 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE6nlc4/TfuDQBTQg4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZjMWFkOTUtMjhkYi00NWI3LWIxZDktNGQ4MmViMTYz MWU4MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YzM3NWEyOTUtYmYxZC00ZTgyLTllYTktYjBmMGExZGI5MzU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwVpvcOANrD8ZQw5Uo5F4IuOgH2aemxNjpvt mfgXYHQ1Fcfij4h7m+rR+0acW/KvwU0MbsjodY3P/5E1oN+C/DJ86ZiYqBHBjFTX JZwNQy2HiR+tcNf5CE0l3gtycNNWo2Pybjo5Ej+37s1KDnEpw4ChyYw9GkgMk421 CS9audhIFyIZvhs2QTVTEC+7YaGxTCSj33NIw+b3mShpcjPW22EzFvhG/Cl/yLjV Vr8l8TaKC5viFcCZXIsGTukGzPX13Z2v+CvzeFEDV0K+j7VqZl+VjVVmtAB3yZJF PWuJNnczz549IK7cZugHS3FsFYRc17Cl9yTOjmwHBEHC3Gri4wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFNbSoxmA999zWqEqz3JtufJ4miwTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9hZmMx YWQ5NS0yOGRiLTQ1YjctYjFkOS00ZDgyZWIxNjMxZTgvZDhjODFjYTAtZTI2ZC0z MTZjLWE4YjAtNmJlMjU1Y2I4NDIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYWZjMWFkOTUtMjhkYi00NWI3LWIx ZDktNGQ4MmViMTYzMWU4L2FmYzFhZDk1LTI4ZGItNDViNy1iMWQ5LTRkODJlYjE2 MzFlOC5jcmwwHwYDVR0jBBgwFoAUGa+3YpHm/h//SEEXnH0+pTOvs40wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9hZmMxYWQ5NS0yOGRiLTQ1YjctYjFkOS00ZDgy ZWIxNjMxZTguY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAe2ToAwQA zdLhMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFSvAeJ5yk5nTz5lezDTWsHGZLkIipSmg0b3oZmJlEIfyycu fN3QYLCi/ybrsNMnUMndOxOhh7JV/vyaOj9vbRaaHuqqjmzzfejHhjzuRNjURwga imD8BuxQeHTlrxrykCoyXL8zE5G80Y86aB32euwu8FMf65TdYyrfSgD1fsEiGL7C z/9lItNntvpgHhVhkEpwSbj5SdOTftfgCc3nMvC2irQudPzKJgLXjESwrMWzkidH Fw8JY3xTRsroLkqTBsWiDxAc7E8kpjxFeNTlYdJP+3da+Q1oxgJA8zwe8Eihhq1K /o6k8lM3TYBd4WHEPVcXrJR2EzDDh+FOz+7ydCc= -----END CERTIFICATE-----Generated at Wed Jul 29 03:52:13 2026 by rpki-client