$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab/3dc1647c-44d8-35fa-93c5-3c0a9aebdacb.roa File: 3dc1647c-44d8-35fa-93c5-3c0a9aebdacb.roa (raw, json) Hash identifier: TKCYrMm1tfCB6DDDpMBSHLzc9OGDY0vmsB/hls4TaZI= Subject key identifier: 91:20:D4:54:DB:62:79:30:CF:1E:AB:34:43:93:A7:F3:66:01:95:C4 Certificate issuer: /CN=2531a4ba-6abc-447c-add8-67edc3c483ab Certificate serial: 010D0C9F4328584E9BE511DE1FB4D19F82FA3C00 Authority key identifier: 9E:3A:9F:74:F9:6C:64:ED:63:9F:AC:81:F2:E4:37:43:2E:F6:3B:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab/3dc1647c-44d8-35fa-93c5-3c0a9aebdacb.roa Signing time: Fri 24 Jul 2026 21:00:12 +0000 ROA not before: Fri 24 Jul 2026 21:00:12 +0000 ROA not after: Thu 22 Oct 2026 21:00:12 +0000 asID: 395585 IP address blocks: 23.171.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab/2531a4ba-6abc-447c-add8-67edc3c483ab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab/2531a4ba-6abc-447c-add8-67edc3c483ab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9b:e5:11:de:1f:b4:d1:9f:82:fa:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2531a4ba-6abc-447c-add8-67edc3c483ab Validity Not Before: Jul 24 21:00:12 2026 GMT Not After : Oct 22 21:00:12 2026 GMT Subject: CN=dd72d7d5-64a1-4e03-aa99-9c5d8b0331cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:1d:0e:f2:12:2d:74:94:98:82:0f:1c:5d:6e: 06:96:33:a0:8b:ff:ec:e5:19:b2:d3:dd:93:05:8e: 3c:a5:dc:f6:a5:17:10:22:fb:96:60:76:9a:d5:4e: 7b:25:04:57:e7:46:60:81:8f:0a:45:b2:8b:b9:9a: a3:7a:68:47:2f:ef:0d:e9:11:16:cc:d2:f0:27:59: c2:60:ac:dd:5a:55:66:68:f9:96:7f:4f:a8:6f:62: 47:7a:7e:aa:5e:f2:cb:62:d5:48:04:1a:1a:3a:a5: 37:0a:c0:74:0f:0c:24:f6:5f:e3:4d:21:8d:59:f6: fc:c4:b7:e8:b3:b8:0e:f9:81:58:0c:aa:fb:8e:cc: f8:30:62:15:d8:c1:aa:af:4f:be:82:6e:36:fb:75: 01:cc:0e:0d:c2:44:86:1e:c4:72:d5:b6:56:eb:e5: 5a:af:2f:cd:3e:73:eb:36:2c:9d:8d:76:e5:e1:49: 14:4d:01:44:55:b2:23:0a:0a:fb:11:14:c9:a1:4e: 58:95:ab:be:a7:73:2b:da:97:b5:da:26:0e:52:02: 04:b5:fe:94:39:48:ef:11:04:2b:4a:fe:08:4d:72: 58:32:72:d4:c9:06:3b:19:3e:c6:cf:86:da:95:f5: f4:a4:c1:dc:b7:08:c2:a9:fa:6e:7b:e4:34:2f:dc: 15:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:20:D4:54:DB:62:79:30:CF:1E:AB:34:43:93:A7:F3:66:01:95:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab/3dc1647c-44d8-35fa-93c5-3c0a9aebdacb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab/2531a4ba-6abc-447c-add8-67edc3c483ab.crl X509v3 Authority Key Identifier: keyid:9E:3A:9F:74:F9:6C:64:ED:63:9F:AC:81:F2:E4:37:43:2E:F6:3B:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab.cer sbgp-ipAddrBlock: critical IPv4: 23.171.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:53:6c:45:2e:cc:aa:bc:8a:3c:05:bd:47:79:07:c1:71:1a: ee:a8:ea:0a:08:66:fc:17:57:e6:90:8b:90:46:cb:7c:53:33: bd:64:ca:b7:a8:7b:01:13:6b:b4:e5:b5:50:6c:ad:f5:0c:c5: c9:58:90:f8:30:7b:73:8c:f9:60:bd:47:02:b2:e1:6b:6f:93: 2a:67:3c:9b:61:c4:26:18:7e:df:6c:97:59:e5:70:c4:83:94: 0b:fb:e7:26:c9:9f:a9:6a:46:8d:aa:c1:03:54:ff:c2:26:30: 9e:dc:10:f2:04:ef:c9:76:e0:63:96:50:66:1f:1f:4a:83:4d: 37:40:41:cf:77:29:b1:cc:d0:67:ab:d6:ab:1b:50:09:66:9d: 1d:fd:01:5d:4e:f3:90:cd:92:a6:d4:c0:9e:16:f9:50:c1:ae: f9:c6:51:87:a8:f2:87:1a:40:e7:6b:ba:7e:6f:d7:37:83:64: 33:e2:0d:57:73:b7:c0:94:c6:ac:e8:f3:11:d0:23:25:f5:0e: 04:f4:0c:fb:19:af:06:bf:ef:9a:e6:e1:32:ae:93:af:25:9f: a3:e9:45:19:86:fe:15:83:33:31:aa:f3:43:19:86:2e:42:14: e0:da:76:1c:b6:e3:51:54:7a:69:a4:18:fb:3b:05:92:58:ea: f0:64:2b:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6b5RHeH7TRn4L6PAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjUzMWE0YmEtNmFiYy00NDdjLWFkZDgtNjdlZGMzYzQ4 M2FiMB4XDTI2MDcyNDIxMDAxMloXDTI2MTAyMjIxMDAxMlowLzEtMCsGA1UEAxMk ZGQ3MmQ3ZDUtNjRhMS00ZTAzLWFhOTktOWM1ZDhiMDMzMWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1x0O8hItdJSYgg8cXW4GljOgi//s5Rmy092T BY48pdz2pRcQIvuWYHaa1U57JQRX50ZggY8KRbKLuZqjemhHL+8N6REWzNLwJ1nC YKzdWlVmaPmWf0+ob2JHen6qXvLLYtVIBBoaOqU3CsB0Dwwk9l/jTSGNWfb8xLfo s7gO+YFYDKr7jsz4MGIV2MGqr0++gm42+3UBzA4NwkSGHsRy1bZW6+Vary/NPnPr NiydjXbl4UkUTQFEVbIjCgr7ERTJoU5Ylau+p3Mr2pe12iYOUgIEtf6UOUjvEQQr Sv4ITXJYMnLUyQY7GT7Gz4balfX0pMHctwjCqfpue+Q0L9wVtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJEg1FTbYnkwzx6rNEOTp/NmAZXEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yNTMx YTRiYS02YWJjLTQ0N2MtYWRkOC02N2VkYzNjNDgzYWIvM2RjMTY0N2MtNDRkOC0z NWZhLTkzYzUtM2MwYTlhZWJkYWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMjUzMWE0YmEtNmFiYy00NDdjLWFk ZDgtNjdlZGMzYzQ4M2FiLzI1MzFhNGJhLTZhYmMtNDQ3Yy1hZGQ4LTY3ZWRjM2M0 ODNhYi5jcmwwHwYDVR0jBBgwFoAUnjqfdPlsZO1jn6yB8uQ3Qy72OwowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yNTMxYTRiYS02YWJjLTQ0N2MtYWRkOC02N2Vk YzNjNDgzYWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6sAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE5TbEUuzKq8ijwFvUd5B8FxGu6o6goIZvwXV+aQi5BGy3xTM71kyreo ewETa7TltVBsrfUMxclYkPgwe3OM+WC9RwKy4WtvkypnPJthxCYYft9sl1nlcMSD lAv75ybJn6lqRo2qwQNU/8ImMJ7cEPIE78l24GOWUGYfH0qDTTdAQc93KbHM0Ger 1qsbUAlmnR39AV1O85DNkqbUwJ4W+VDBrvnGUYeo8ocaQOdrun5v1zeDZDPiDVdz t8CUxqzo8xHQIyX1DgT0DPsZrwa/75rm4TKuk68ln6PpRRmG/hWDMzGq80MZhi5C FODadhy241FUemmkGPs7BZJY6vBkK5U= -----END CERTIFICATE-----Generated at Wed Jul 29 10:56:51 2026 by rpki-client