$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cf31a15f-52b3-4240-9d85-0433b7d5171d/432fe983-298a-3c6b-b02e-7d9e60c3af7e.roa File: 432fe983-298a-3c6b-b02e-7d9e60c3af7e.roa (raw, json) Hash identifier: NagIm+G+2efDXBzrSyFM41F+5Lk9TJGxXqyc5uVS+fg= Subject key identifier: 8B:8B:BF:DA:6A:D9:74:8A:42:ED:A7:66:90:E0:F9:A8:09:68:BC:DE Certificate issuer: /CN=cf31a15f-52b3-4240-9d85-0433b7d5171d Certificate serial: 010D0C9F4328584E98E784ADA4C2C9EFECB87E80 Authority key identifier: 9F:CF:3B:88:EA:F9:9B:CA:F6:B9:7D:46:EF:AF:C7:DD:02:C8:2F:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cf31a15f-52b3-4240-9d85-0433b7d5171d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cf31a15f-52b3-4240-9d85-0433b7d5171d/432fe983-298a-3c6b-b02e-7d9e60c3af7e.roa Signing time: Thu 23 Jul 2026 19:17:52 +0000 ROA not before: Thu 23 Jul 2026 19:17:52 +0000 ROA not after: Wed 21 Oct 2026 19:17:52 +0000 asID: 402681 IP address blocks: 23.246.152.0/22 maxlen: 22 2602:f35c::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cf31a15f-52b3-4240-9d85-0433b7d5171d/cf31a15f-52b3-4240-9d85-0433b7d5171d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cf31a15f-52b3-4240-9d85-0433b7d5171d/cf31a15f-52b3-4240-9d85-0433b7d5171d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cf31a15f-52b3-4240-9d85-0433b7d5171d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:98:e7:84:ad:a4:c2:c9:ef:ec:b8:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf31a15f-52b3-4240-9d85-0433b7d5171d Validity Not Before: Jul 23 19:17:52 2026 GMT Not After : Oct 21 19:17:52 2026 GMT Subject: CN=5096ba4a-b5ef-456c-b3f9-9e3d66a96ab0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d9:cb:b5:9c:8b:14:8b:6e:7d:fe:de:1a:26: 01:5e:31:75:92:c1:c5:a5:14:87:0b:41:a1:f3:a2: c9:0e:a3:b2:8d:4d:b6:e4:35:99:84:fc:c3:83:ae: 33:c0:7c:33:18:9c:8e:10:1b:3f:8a:2c:fa:cc:7f: 91:58:1a:7e:70:22:56:f9:2f:da:b8:97:80:a2:23: e0:52:9b:1f:ab:e8:9f:74:50:ea:92:72:f2:58:d2: 84:4f:70:2a:2e:8a:78:8b:54:e8:dd:43:1f:2b:fb: cd:26:49:c2:5d:78:2a:96:e1:b0:74:13:f4:61:6e: 32:c3:fb:d3:18:dd:ee:5f:d0:6c:2c:24:41:a6:7c: 2d:a8:f4:d4:3e:2e:3e:2c:ed:76:af:d7:c5:f0:50: ff:cb:e9:91:98:6a:7e:ce:2c:a3:bc:29:df:df:d9: 90:60:8c:ee:a5:e4:bd:47:7c:52:92:24:60:93:9a: f2:16:00:3d:d4:7c:8c:f2:95:b9:30:82:29:06:e5: 01:00:dc:c6:9d:0c:ad:de:7a:0b:89:45:77:02:bd: 21:1d:dc:f3:c9:c3:cc:cf:34:37:b0:8b:c9:55:d4: 5d:b3:b7:b7:44:1b:1e:d0:0d:9d:8b:be:6c:c7:80: b8:84:02:d2:e8:d8:12:1c:4c:3f:72:c7:9f:d2:fc: b1:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:8B:BF:DA:6A:D9:74:8A:42:ED:A7:66:90:E0:F9:A8:09:68:BC:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cf31a15f-52b3-4240-9d85-0433b7d5171d/432fe983-298a-3c6b-b02e-7d9e60c3af7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cf31a15f-52b3-4240-9d85-0433b7d5171d/cf31a15f-52b3-4240-9d85-0433b7d5171d.crl X509v3 Authority Key Identifier: keyid:9F:CF:3B:88:EA:F9:9B:CA:F6:B9:7D:46:EF:AF:C7:DD:02:C8:2F:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cf31a15f-52b3-4240-9d85-0433b7d5171d.cer sbgp-ipAddrBlock: critical IPv4: 23.246.152.0/22 IPv6: 2602:f35c::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:cd:a9:09:f7:5a:58:5d:e7:f7:19:38:c1:db:af:ca:f4:ce: ec:f9:d6:2c:1e:a5:00:8f:a9:9e:ea:d6:9e:4d:23:62:dd:12: b9:43:d7:9b:2b:00:36:04:a3:a2:8a:27:a0:c4:a7:23:93:d9: f8:07:de:60:09:ff:6c:6a:99:5c:03:e2:c0:fb:b7:f2:a8:1a: 91:ad:e2:eb:6f:7c:cb:b8:29:ea:1b:cb:7b:d0:74:c9:5b:c6: d0:e4:ac:2d:43:0e:08:2f:8d:90:0e:ec:df:9f:1a:1f:86:30: 41:84:a0:89:2e:80:3f:ca:30:96:ce:04:82:de:b5:6b:88:89: 65:34:af:46:8b:09:8e:3e:21:49:23:19:f4:ae:38:a5:fe:4c: 92:4f:ff:2d:22:ad:26:d4:96:94:1b:51:34:a7:cd:9b:85:71: d7:e4:a0:c3:8f:09:cb:25:ca:99:3f:76:f1:59:c3:45:4f:9d: 78:76:50:bb:b3:d9:2f:1c:87:66:d3:21:57:a4:02:03:75:c1: 45:a7:c0:87:8b:63:bc:0b:9b:5a:bb:fb:e9:5f:ae:68:43:4f: e8:dd:17:b4:b6:a8:2f:7f:de:bd:08:1c:47:0d:c9:93:ff:86: 68:dd:30:02:4b:94:f4:d8:be:15:e0:dd:65:fb:20:05:78:2a: 7a:e0:6b:d6 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE6Y54StpMLJ7+y4foAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YzMWExNWYtNTJiMy00MjQwLTlkODUtMDQzM2I3ZDUx NzFkMB4XDTI2MDcyMzE5MTc1MloXDTI2MTAyMTE5MTc1MlowLzEtMCsGA1UEAxMk NTA5NmJhNGEtYjVlZi00NTZjLWIzZjktOWUzZDY2YTk2YWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtnLtZyLFItuff7eGiYBXjF1ksHFpRSHC0Gh 86LJDqOyjU225DWZhPzDg64zwHwzGJyOEBs/iiz6zH+RWBp+cCJW+S/auJeAoiPg Upsfq+ifdFDqknLyWNKET3AqLop4i1To3UMfK/vNJknCXXgqluGwdBP0YW4yw/vT GN3uX9BsLCRBpnwtqPTUPi4+LO12r9fF8FD/y+mRmGp+ziyjvCnf39mQYIzupeS9 R3xSkiRgk5ryFgA91HyM8pW5MIIpBuUBANzGnQyt3noLiUV3Ar0hHdzzycPMzzQ3 sIvJVdRds7e3RBse0A2di75sx4C4hALS6NgSHEw/csef0vyxcQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFIuLv9pq2XSKQu2nZpDg+agJaLzeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9jZjMx YTE1Zi01MmIzLTQyNDAtOWQ4NS0wNDMzYjdkNTE3MWQvNDMyZmU5ODMtMjk4YS0z YzZiLWIwMmUtN2Q5ZTYwYzNhZjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvY2YzMWExNWYtNTJiMy00MjQwLTlk ODUtMDQzM2I3ZDUxNzFkL2NmMzFhMTVmLTUyYjMtNDI0MC05ZDg1LTA0MzNiN2Q1 MTcxZC5jcmwwHwYDVR0jBBgwFoAUn887iOr5m8r2uX1G76/H3QLILxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi9jZjMxYTE1Zi01MmIzLTQyNDAtOWQ4NS0wNDMz YjdkNTE3MWQuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQCF/aYMA4E AgACMAgDBgQmAvNcADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBVzakJ91pYXef3GTjB26/K9M7s+dYsHqUA j6me6taeTSNi3RK5Q9ebKwA2BKOiiiegxKcjk9n4B95gCf9saplcA+LA+7fyqBqR reLrb3zLuCnqG8t70HTJW8bQ5KwtQw4IL42QDuzfnxofhjBBhKCJLoA/yjCWzgSC 3rVriIllNK9GiwmOPiFJIxn0rjil/kyST/8tIq0m1JaUG1E0p82bhXHX5KDDjwnL JcqZP3bxWcNFT514dlC7s9kvHIdm0yFXpAIDdcFFp8CHi2O8C5tau/vpX65oQ0/o 3Re0tqgvf969CBxHDcmT/4Zo3TACS5T02L4V4N1l+yAFeCp64GvW -----END CERTIFICATE-----Generated at Tue Jul 28 17:47:10 2026 by rpki-client