$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/bf924dbd-34bc-3c73-9911-e6e933405f1e.roa File: bf924dbd-34bc-3c73-9911-e6e933405f1e.roa (raw, json) Hash identifier: nS+xM3CB5btvAYWZuT/yyEbUkgvFvloLqiwZQmreCc8= Subject key identifier: EB:AF:C6:59:B6:7D:F3:29:89:89:78:51:76:6C:D4:C4:AD:CE:D1:9F Certificate issuer: /CN=3ee720de-c322-4bb5-b8cd-c7a3f23b92d7 Certificate serial: 010D0C9F4328584F02422AB9A6885AB835205930 Authority key identifier: 09:E5:A6:15:6F:8C:9D:40:E2:35:5F:CF:DA:0D:F5:05:3E:52:6F:E8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/bf924dbd-34bc-3c73-9911-e6e933405f1e.roa Signing time: Sun 30 Aug 2026 13:00:11 +0000 ROA not before: Sun 30 Aug 2026 13:00:11 +0000 ROA not after: Sat 28 Nov 2026 14:00:11 +0000 asID: 26904 IP address blocks: 23.247.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:02:42:2a:b9:a6:88:5a:b8:35:20:59:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ee720de-c322-4bb5-b8cd-c7a3f23b92d7 Validity Not Before: Aug 30 13:00:11 2026 GMT Not After : Nov 28 14:00:11 2026 GMT Subject: CN=a48b64f1-1a13-4a6b-9c57-911bcf6f1487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0e:34:19:64:1f:5d:2d:89:d2:01:52:a0:e4: 29:7b:71:e5:f4:65:d2:cc:b2:e6:b4:fe:d3:14:34: 72:05:b7:ac:46:82:8b:f1:05:f4:7a:bf:16:6f:33: 9d:b0:f3:89:42:24:86:42:ca:d0:9d:58:6f:5b:59: 6a:b1:9c:76:72:46:37:9a:4f:1c:fb:5b:50:a2:28: 3f:d4:2c:89:c4:15:5a:e9:83:77:15:c2:41:b6:38: dd:70:6b:64:2b:ec:dd:5b:80:63:56:e8:f2:0f:67: 7a:1a:c6:73:3a:ee:b7:29:65:56:35:3c:87:f1:75: 64:ae:19:bb:68:2b:f6:58:25:10:21:78:08:f1:56: a2:48:14:cd:c0:43:1f:db:a3:0f:3f:a2:8f:4b:76: 35:f1:f1:1e:98:24:08:ce:de:3f:e6:7c:80:d5:6b: db:dc:e7:a2:f9:1a:dd:a8:b2:29:57:4c:32:50:d8: c4:ab:6c:5c:19:70:81:ed:bd:9c:a6:30:2c:be:d9: a4:87:6c:9a:ef:70:d4:e3:02:ec:51:09:56:5e:f6: ad:67:1f:ff:73:9c:8d:c1:9e:05:f4:60:78:dc:38: 06:ac:6b:eb:b0:13:fc:3e:e3:a5:60:e8:04:c0:29: 2f:c9:6c:50:6a:a7:a2:d4:37:ab:a1:e3:4a:0d:88: 46:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:AF:C6:59:B6:7D:F3:29:89:89:78:51:76:6C:D4:C4:AD:CE:D1:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/bf924dbd-34bc-3c73-9911-e6e933405f1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.crl X509v3 Authority Key Identifier: keyid:09:E5:A6:15:6F:8C:9D:40:E2:35:5F:CF:DA:0D:F5:05:3E:52:6F:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer sbgp-ipAddrBlock: critical IPv4: 23.247.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:42:15:dd:33:f4:49:1d:b0:f5:1f:6e:f2:88:92:20:17:cf: d7:c4:56:dd:b7:f0:ab:15:c0:7b:f6:aa:30:17:c0:53:8f:22: 64:9a:da:42:a6:46:a4:80:e8:8c:25:bc:81:d5:f2:3b:45:32: 25:79:74:ff:2e:b9:97:e7:45:61:d8:c1:c8:5e:03:1a:66:24: e4:e0:fe:fe:b8:49:b1:59:49:35:93:62:e1:c4:e9:0b:f8:ab: 31:2e:0b:e1:dc:f8:44:91:79:4d:16:1e:c4:99:b4:9c:8b:06: 45:41:fb:e3:1b:b9:e6:b3:86:58:c5:46:0d:09:4a:e7:06:9d: 67:46:93:3e:4b:d1:60:a9:9f:02:b3:68:c3:35:dd:14:4f:9e: 8e:32:14:37:2d:63:e5:79:60:39:50:15:af:a8:14:83:37:cf: 92:72:a6:8d:3e:0c:ef:e3:ba:d3:e0:ec:14:96:0a:b6:56:b2: fc:f4:f1:af:35:8a:74:9f:6d:c8:19:cf:5f:94:b9:52:a4:5b: 99:26:31:ce:63:9c:1c:a3:9f:20:a0:3d:d3:e7:54:7e:ba:ca: cb:26:49:d0:60:b0:19:2c:58:da:16:fc:43:2f:e7:84:7d:f0: 3c:03:f6:98:d0:d7:9e:5e:e8:1f:97:40:4a:a5:44:99:3e:0c: 11:0f:0a:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8CQiq5pohauDUgWTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2VlNzIwZGUtYzMyMi00YmI1LWI4Y2QtYzdhM2YyM2I5 MmQ3MB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk YTQ4YjY0ZjEtMWExMy00YTZiLTljNTctOTExYmNmNmYxNDg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQ40GWQfXS2J0gFSoOQpe3Hl9GXSzLLmtP7T FDRyBbesRoKL8QX0er8WbzOdsPOJQiSGQsrQnVhvW1lqsZx2ckY3mk8c+1tQoig/ 1CyJxBVa6YN3FcJBtjjdcGtkK+zdW4BjVujyD2d6GsZzOu63KWVWNTyH8XVkrhm7 aCv2WCUQIXgI8VaiSBTNwEMf26MPP6KPS3Y18fEemCQIzt4/5nyA1Wvb3Oei+Rrd qLIpV0wyUNjEq2xcGXCB7b2cpjAsvtmkh2ya73DU4wLsUQlWXvatZx//c5yNwZ4F 9GB43DgGrGvrsBP8PuOlYOgEwCkvyWxQaqei1DeroeNKDYhGYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOuvxlm2ffMpiYl4UXZs1MStztGfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zZWU3 MjBkZS1jMzIyLTRiYjUtYjhjZC1jN2EzZjIzYjkyZDcvYmY5MjRkYmQtMzRiYy0z YzczLTk5MTEtZTZlOTMzNDA1ZjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2VlNzIwZGUtYzMyMi00YmI1LWI4 Y2QtYzdhM2YyM2I5MmQ3LzNlZTcyMGRlLWMzMjItNGJiNS1iOGNkLWM3YTNmMjNi OTJkNy5jcmwwHwYDVR0jBBgwFoAUCeWmFW+MnUDiNV/P2g31BT5Sb+gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zZWU3MjBkZS1jMzIyLTRiYjUtYjhjZC1jN2Ez ZjIzYjkyZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF/eqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIRCFd0z9EkdsPUfbvKIkiAXz9fEVt238KsVwHv2qjAXwFOPImSa2kKm RqSA6IwlvIHV8jtFMiV5dP8uuZfnRWHYwcheAxpmJOTg/v64SbFZSTWTYuHE6Qv4 qzEuC+Hc+ESReU0WHsSZtJyLBkVB++MbueazhljFRg0JSucGnWdGkz5L0WCpnwKz aMM13RRPno4yFDctY+V5YDlQFa+oFIM3z5Jypo0+DO/jutPg7BSWCrZWsvz08a81 inSfbcgZz1+UuVKkW5kmMc5jnByjnyCgPdPnVH66yssmSdBgsBksWNoW/EMv54R9 8DwD9pjQ155e6B+XQEqlRJk+DBEPClQ= -----END CERTIFICATE-----Generated at Tue Sep 22 13:19:48 2026 by rpki-client