$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dafb7b4c-08cc-4d76-ada2-b572a2d233a9/7c20deec-1152-3c56-8ea4-d899a929dad8.roa File: 7c20deec-1152-3c56-8ea4-d899a929dad8.roa (raw, json) Hash identifier: knUphKqdiUBnyNjYfBsuM+vh+3EGRBKSy3wMbXlmETE= Subject key identifier: 61:A2:2C:E6:D6:0B:26:92:20:F6:83:40:78:9D:7A:A1:34:0C:E1:B2 Certificate issuer: /CN=dafb7b4c-08cc-4d76-ada2-b572a2d233a9 Certificate serial: 010D0C9F4328584EF717623E65DA5976CF92E480 Authority key identifier: 35:7F:E0:80:07:13:C0:91:F4:F7:40:D0:BA:63:B9:0A:E8:F5:B3:11 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dafb7b4c-08cc-4d76-ada2-b572a2d233a9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dafb7b4c-08cc-4d76-ada2-b572a2d233a9/7c20deec-1152-3c56-8ea4-d899a929dad8.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 398193 IP address blocks: 23.165.112.0/24 maxlen: 24 148.59.95.0/24 maxlen: 24 2602:fd18::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dafb7b4c-08cc-4d76-ada2-b572a2d233a9/dafb7b4c-08cc-4d76-ada2-b572a2d233a9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dafb7b4c-08cc-4d76-ada2-b572a2d233a9/dafb7b4c-08cc-4d76-ada2-b572a2d233a9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dafb7b4c-08cc-4d76-ada2-b572a2d233a9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:62:3e:65:da:59:76:cf:92:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dafb7b4c-08cc-4d76-ada2-b572a2d233a9 Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=fc8e91f6-2001-430d-8918-08f1143a3f0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:8f:42:2e:b4:f5:af:51:1d:43:aa:f9:cb:2f: 38:ca:77:6d:88:6d:9b:44:ee:81:70:ab:2c:66:47: e6:57:0b:77:58:0d:d2:d3:83:89:d4:f6:ce:88:d5: d1:c8:ca:27:9e:c1:92:7d:23:79:a5:67:a3:df:ba: b2:dc:40:3c:d4:17:24:a8:88:50:4e:31:f6:cd:2b: cd:48:61:5e:be:8f:37:7c:31:d8:d0:be:fb:3e:a0: c4:ba:e4:fc:e7:20:cc:52:e1:53:c7:44:b9:54:b1: 55:44:8d:a5:67:0c:5d:5b:69:f6:d1:47:d7:fe:12: fd:d8:b5:47:1a:75:5d:77:d0:6c:3a:c4:01:e8:73: f7:0b:a7:2c:3d:96:ca:08:a4:4a:1d:4b:00:91:58: 9e:d4:4f:c0:57:fd:04:84:ec:d6:d7:34:51:b0:f1: 68:0d:4b:69:e9:dc:bc:fc:fe:73:13:f2:3a:63:04: 70:32:0f:e8:e5:5e:f1:d5:20:58:b1:f4:ae:31:98: 9d:3e:1a:27:15:3b:1c:f4:e6:8f:86:9f:8a:02:26: 1b:c2:15:cd:90:81:1b:84:10:5d:fc:7b:be:17:27: 8f:2d:f5:01:8f:3f:94:b3:b3:b6:a5:04:1a:8a:84: c3:ad:4c:5a:7d:aa:1d:48:38:9d:a5:83:9b:1a:53: 04:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:A2:2C:E6:D6:0B:26:92:20:F6:83:40:78:9D:7A:A1:34:0C:E1:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dafb7b4c-08cc-4d76-ada2-b572a2d233a9/7c20deec-1152-3c56-8ea4-d899a929dad8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dafb7b4c-08cc-4d76-ada2-b572a2d233a9/dafb7b4c-08cc-4d76-ada2-b572a2d233a9.crl X509v3 Authority Key Identifier: keyid:35:7F:E0:80:07:13:C0:91:F4:F7:40:D0:BA:63:B9:0A:E8:F5:B3:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dafb7b4c-08cc-4d76-ada2-b572a2d233a9.cer sbgp-ipAddrBlock: critical IPv4: 23.165.112.0/24 148.59.95.0/24 IPv6: 2602:fd18::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:c8:31:e1:48:c3:03:33:9b:c2:37:61:80:cb:09:99:ea:50: f3:23:06:2e:b7:45:05:84:7b:97:9a:9a:e9:31:9c:5f:89:cf: 64:f4:ec:9b:87:b9:fe:d1:bd:ef:56:13:f9:00:c9:d1:22:cd: 15:ee:5d:68:f7:b3:9f:13:f3:b9:3d:03:27:b8:65:b0:59:55: f2:c7:52:ae:64:18:bf:21:b6:e8:8e:f1:7a:bd:90:f3:55:82: 23:ad:1b:50:2a:08:d9:82:0b:1b:44:69:a5:a8:13:0e:62:87: 8f:8b:84:83:b2:10:57:37:c6:fc:c1:4b:b4:c2:4b:39:e3:d0: 95:2c:17:e5:e3:b3:0d:8c:bd:d9:aa:ab:a5:c7:6b:22:cf:b3: a6:41:56:54:f0:90:a9:f9:14:96:1c:fb:63:57:11:e2:58:31: 6e:4f:9f:9f:45:08:da:de:34:8b:f3:7b:12:48:5a:30:75:e4: 16:ee:bc:44:ca:a2:4b:4d:e4:67:69:0b:60:1c:8e:5c:77:ff: 4d:bb:63:70:fe:be:e2:94:8e:e2:4c:cc:07:43:be:31:94:58: 8c:df:1f:4f:85:01:64:84:2c:19:aa:13:00:bd:e3:b0:5e:e5: 4f:3b:29:5b:ef:27:6c:b7:9a:a1:61:6f:a3:75:2d:63:e2:e7: 9c:2a:8f:17 -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWE73F2I+ZdpZds+S5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFmYjdiNGMtMDhjYy00ZDc2LWFkYTItYjU3MmEyZDIz M2E5MB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk ZmM4ZTkxZjYtMjAwMS00MzBkLTg5MTgtMDhmMTE0M2EzZjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkI9CLrT1r1EdQ6r5yy84yndtiG2bRO6BcKss ZkfmVwt3WA3S04OJ1PbOiNXRyMonnsGSfSN5pWej37qy3EA81BckqIhQTjH2zSvN SGFevo83fDHY0L77PqDEuuT85yDMUuFTx0S5VLFVRI2lZwxdW2n20UfX/hL92LVH GnVdd9BsOsQB6HP3C6csPZbKCKRKHUsAkVie1E/AV/0EhOzW1zRRsPFoDUtp6dy8 /P5zE/I6YwRwMg/o5V7x1SBYsfSuMZidPhonFTsc9OaPhp+KAiYbwhXNkIEbhBBd /Hu+FyePLfUBjz+Us7O2pQQaioTDrUxafaodSDidpYObGlMEAQIDAQABo4IDazCC A2cwHQYDVR0OBBYEFGGiLObWCyaSIPaDQHideqE0DOGyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWZi N2I0Yy0wOGNjLTRkNzYtYWRhMi1iNTcyYTJkMjMzYTkvN2MyMGRlZWMtMTE1Mi0z YzU2LThlYTQtZDg5OWE5MjlkYWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFmYjdiNGMtMDhjYy00ZDc2LWFk YTItYjU3MmEyZDIzM2E5L2RhZmI3YjRjLTA4Y2MtNGQ3Ni1hZGEyLWI1NzJhMmQy MzNhOS5jcmwwHwYDVR0jBBgwFoAUNX/ggAcTwJH090DQumO5Cuj1sxEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWZiN2I0Yy0wOGNjLTRkNzYtYWRhMi1iNTcy YTJkMjMzYTkuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF6VwAwQA lDtfMA4EAgACMAgDBgQmAv0YADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCDyDHhSMMDM5vCN2GAywmZ6lDz IwYut0UFhHuXmprpMZxfic9k9Oybh7n+0b3vVhP5AMnRIs0V7l1o97OfE/O5PQMn uGWwWVXyx1KuZBi/IbbojvF6vZDzVYIjrRtQKgjZggsbRGmlqBMOYoePi4SDshBX N8b8wUu0wks549CVLBfl47MNjL3Zqqulx2siz7OmQVZU8JCp+RSWHPtjVxHiWDFu T5+fRQja3jSL83sSSFowdeQW7rxEyqJLTeRnaQtgHI5cd/9Nu2Nw/r7ilI7iTMwH Q74xlFiM3x9PhQFkhCwZqhMAveOwXuVPOylb7ydst5qhYW+jdS1j4uecKo8X -----END CERTIFICATE-----Generated at Fri Sep 25 07:21:29 2026 by rpki-client