$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/cf849384-a1f0-358f-8cff-6f887dcd91a0.roa File: cf849384-a1f0-358f-8cff-6f887dcd91a0.roa (raw, json) Hash identifier: +EyfeMVPHpB3/YZsZtBp9b8Dt4oOmt8QXLxaBwAwduY= Subject key identifier: 0A:52:3C:2F:AD:5F:19:C9:6A:78:EE:D4:03:DE:56:39:41:65:A3:BF Certificate issuer: /CN=517b063f-7f88-4d7a-a5ad-1e487692f063 Certificate serial: 010D0C9F4328584EA7877583B2A10AB55A0355D0 Authority key identifier: 05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/cf849384-a1f0-358f-8cff-6f887dcd91a0.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 152156 IP address blocks: 23.249.28.0/23 maxlen: 24 23.249.30.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:75:83:b2:a1:0a:b5:5a:03:55:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=517b063f-7f88-4d7a-a5ad-1e487692f063 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=931e48a9-dcf4-4908-af1f-ca50e7132d10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e5:7f:f9:ad:e1:39:72:fb:44:2b:a5:11:10: a4:f2:2a:4b:4e:e0:d2:10:b1:5e:7c:f7:6a:1d:72: 90:cb:25:44:9c:bb:b8:48:d0:4d:40:ef:b4:99:67: e0:41:7c:ba:c1:03:15:9f:c7:2e:88:c5:b3:27:79: c4:73:8c:02:4f:72:b2:1a:19:c1:b0:fd:bb:28:e3: 01:2d:36:fc:a0:3a:7b:88:6d:28:99:39:1e:3c:ff: cb:56:b1:62:a4:71:f9:92:46:83:b6:cf:e6:97:12: ed:8c:4b:40:f2:fd:4a:4f:c2:62:34:a8:96:b5:b2: d9:77:7c:cf:99:c1:fe:81:8f:05:58:cd:f4:83:6c: 3e:37:f1:00:51:fd:ab:f2:4f:d7:e2:84:d1:29:79: 36:8f:93:79:6b:dc:6a:44:e3:7e:6d:84:d3:c0:c0: ab:f3:26:cd:36:3c:3b:4f:39:53:13:75:4e:71:e2: 53:3d:4b:5c:a5:95:b5:53:fe:70:1a:33:74:49:bb: a9:81:98:a8:7c:c4:ba:c2:8b:52:6b:92:e0:bd:3e: e5:46:2a:88:32:39:b5:ff:b7:6c:76:4e:22:00:ef: 9a:e5:7a:d8:fa:2e:77:63:67:b5:8b:ee:ad:a5:95: d0:b1:0c:e0:66:20:21:6f:80:a5:fc:bb:70:89:5d: ea:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:52:3C:2F:AD:5F:19:C9:6A:78:EE:D4:03:DE:56:39:41:65:A3:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/cf849384-a1f0-358f-8cff-6f887dcd91a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl X509v3 Authority Key Identifier: keyid:05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer sbgp-ipAddrBlock: critical IPv4: 23.249.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:21:d9:69:73:82:42:65:f7:ea:b7:4c:3e:ac:2e:74:71:4f: 3e:20:2b:82:23:7b:a4:ab:97:45:7b:9b:31:2d:71:83:91:d2: 80:16:4f:5a:7f:ef:8e:55:82:5f:0e:64:fb:91:73:19:bb:ff: 1c:d5:7a:4f:70:8d:ae:51:56:d0:69:cf:95:0c:d8:ab:57:bd: 91:fb:2a:a6:f6:f3:b0:47:8f:9a:ed:57:b5:d4:f4:b2:22:14: a0:15:51:06:a0:31:b9:fe:04:9c:ea:03:a5:8d:97:62:c8:1f: 82:d0:29:4f:13:f5:47:c6:40:2f:27:0c:9b:7d:d2:45:aa:39: 72:71:17:30:04:23:8b:f0:03:df:6c:d9:c1:26:1f:9d:d0:5e: b2:64:64:ec:e0:8e:35:35:76:c2:f8:7c:7d:b6:e8:0c:8a:79: 83:47:35:fc:c6:dd:61:fc:a4:da:d6:ee:a3:64:86:0d:97:d4: 32:38:30:65:3f:12:ef:ff:48:7c:bb:d9:08:94:af:e0:f8:24: 37:7f:a3:97:9d:cb:b7:b8:c5:11:9d:00:e3:4f:8d:9e:b5:09: e4:31:9d:ed:44:85:3d:73:d9:25:d1:bd:34:b9:f6:2b:73:5c: e8:6a:0b:44:67:ec:89:34:9b:4b:4d:a6:42:82:97:58:ad:b6: 0f:a7:52:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh3WDsqEKtVoDVdAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTE3YjA2M2YtN2Y4OC00ZDdhLWE1YWQtMWU0ODc2OTJm MDYzMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OTMxZTQ4YTktZGNmNC00OTA4LWFmMWYtY2E1MGU3MTMyZDEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1eV/+a3hOXL7RCulERCk8ipLTuDSELFefPdq HXKQyyVEnLu4SNBNQO+0mWfgQXy6wQMVn8cuiMWzJ3nEc4wCT3KyGhnBsP27KOMB LTb8oDp7iG0omTkePP/LVrFipHH5kkaDts/mlxLtjEtA8v1KT8JiNKiWtbLZd3zP mcH+gY8FWM30g2w+N/EAUf2r8k/X4oTRKXk2j5N5a9xqRON+bYTTwMCr8ybNNjw7 TzlTE3VOceJTPUtcpZW1U/5wGjN0SbupgZiofMS6wotSa5LgvT7lRiqIMjm1/7ds dk4iAO+a5XrY+i53Y2e1i+6tpZXQsQzgZiAhb4Cl/LtwiV3q9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFApSPC+tXxnJanju1APeVjlBZaO/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81MTdi MDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4NzY5MmYwNjMvY2Y4NDkzODQtYTFmMC0z NThmLThjZmYtNmY4ODdkY2Q5MWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTE3YjA2M2YtN2Y4OC00ZDdhLWE1 YWQtMWU0ODc2OTJmMDYzLzUxN2IwNjNmLTdmODgtNGQ3YS1hNWFkLTFlNDg3Njky ZjA2My5jcmwwHwYDVR0jBBgwFoAUBbMoGYYiMAW+fQvz/IMiJ547jVwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81MTdiMDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4 NzY5MmYwNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF/kcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFoh2WlzgkJl9+q3TD6sLnRxTz4gK4Ije6Srl0V7mzEtcYOR0oAWT1p/ 745Vgl8OZPuRcxm7/xzVek9wja5RVtBpz5UM2KtXvZH7Kqb287BHj5rtV7XU9LIi FKAVUQagMbn+BJzqA6WNl2LIH4LQKU8T9UfGQC8nDJt90kWqOXJxFzAEI4vwA99s 2cEmH53QXrJkZOzgjjU1dsL4fH226AyKeYNHNfzG3WH8pNrW7qNkhg2X1DI4MGU/ Eu//SHy72QiUr+D4JDd/o5edy7e4xRGdAONPjZ61CeQxne1EhT1z2SXRvTS59itz XOhqC0Rn7Ik0m0tNpkKCl1ittg+nUv0= -----END CERTIFICATE-----Generated at Wed Jul 29 05:46:12 2026 by rpki-client