$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6d11a6b3-8058-4e95-9e9c-20c0a442fb47/3b9c37d5-0536-31d6-80b5-4a0cf3a12b20.roa File: 3b9c37d5-0536-31d6-80b5-4a0cf3a12b20.roa (raw, json) Hash identifier: k2Q0zd0trVX2i5ccV9Mj1i19qEbv/eACQQP4XD6YI90= Subject key identifier: 3D:B6:55:FE:C5:A0:B2:5D:5E:EA:B4:10:43:21:BF:92:B8:1D:13:E7 Certificate issuer: /CN=6d11a6b3-8058-4e95-9e9c-20c0a442fb47 Certificate serial: 010D0C9F4328584EA7880A4EFE0A4B4A192759C0 Authority key identifier: 38:D3:96:8E:5C:17:D9:D5:C8:7A:95:EE:EB:04:54:9F:71:C0:C6:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6d11a6b3-8058-4e95-9e9c-20c0a442fb47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6d11a6b3-8058-4e95-9e9c-20c0a442fb47/3b9c37d5-0536-31d6-80b5-4a0cf3a12b20.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 214172 IP address blocks: 23.189.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6d11a6b3-8058-4e95-9e9c-20c0a442fb47/6d11a6b3-8058-4e95-9e9c-20c0a442fb47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6d11a6b3-8058-4e95-9e9c-20c0a442fb47/6d11a6b3-8058-4e95-9e9c-20c0a442fb47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6d11a6b3-8058-4e95-9e9c-20c0a442fb47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:0a:4e:fe:0a:4b:4a:19:27:59:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d11a6b3-8058-4e95-9e9c-20c0a442fb47 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=98d043b2-1fff-4380-b894-b71ad87de242 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:a5:48:77:48:d2:66:9f:ec:78:af:ce:c1:82: 33:10:fb:f5:10:e4:22:56:a0:7a:19:2a:74:bd:46: a7:58:1f:34:54:99:a0:01:8f:fc:0d:18:9e:31:5b: b3:a3:39:a6:c2:d8:a4:ee:ee:c5:7b:00:de:68:59: 1f:4b:5a:2a:af:8a:c5:98:86:0c:f4:3e:92:25:b2: 4c:6f:83:47:9d:a2:59:86:61:d8:e8:fc:e5:52:fc: 92:f4:86:1e:18:1b:c6:db:80:07:60:ef:68:6a:e0: 41:2a:7d:7b:6f:13:3c:5a:a1:85:43:9a:ae:b1:d6: 60:58:f9:be:bd:29:5e:16:82:90:8c:10:c3:1d:c1: 6a:50:85:a1:43:3f:3f:4a:c7:21:77:66:82:51:fe: 7d:dd:40:fb:1a:2e:c2:95:15:ae:f1:93:ea:f6:b2: 22:6a:79:cd:7d:c7:a4:c8:b0:12:12:89:2b:69:38: ae:bc:69:bc:2e:e9:b1:4d:c0:11:1d:2a:e0:0c:39: 9c:3e:65:2a:3e:72:12:3c:7d:e4:dc:a3:b0:8f:36: 93:70:d6:35:bf:93:1c:b1:4f:d7:94:ea:c5:f3:b0: 38:d0:b8:db:30:83:6c:6d:7c:90:42:62:cd:42:0f: 30:46:d2:4e:f9:13:77:9e:e8:0c:ea:2a:06:56:76: 15:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:B6:55:FE:C5:A0:B2:5D:5E:EA:B4:10:43:21:BF:92:B8:1D:13:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6d11a6b3-8058-4e95-9e9c-20c0a442fb47/3b9c37d5-0536-31d6-80b5-4a0cf3a12b20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6d11a6b3-8058-4e95-9e9c-20c0a442fb47/6d11a6b3-8058-4e95-9e9c-20c0a442fb47.crl X509v3 Authority Key Identifier: keyid:38:D3:96:8E:5C:17:D9:D5:C8:7A:95:EE:EB:04:54:9F:71:C0:C6:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6d11a6b3-8058-4e95-9e9c-20c0a442fb47.cer sbgp-ipAddrBlock: critical IPv4: 23.189.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:b9:d6:bc:4d:75:6b:79:fa:36:d1:f7:57:28:1e:1b:d6:2c: a3:6c:ad:aa:7d:10:db:7b:50:77:ef:9c:46:0d:fb:d9:16:a6: 2b:2a:d7:2e:a2:49:18:de:92:1b:7a:d1:98:65:04:6d:0f:76: fb:cf:45:0f:4a:23:7d:95:0a:98:d2:46:8d:68:91:f2:d9:ac: df:3e:e9:98:30:9d:5a:75:2e:66:10:90:27:8a:e5:88:b8:8f: 67:19:47:36:e1:10:15:d0:dc:4e:00:ea:75:4b:01:6c:f3:f4: 71:5e:a4:3b:65:7b:79:e6:d4:31:8a:f0:3e:cf:02:e9:0d:67: 8e:3b:87:5e:d1:98:b9:36:7b:8e:fb:bd:60:90:b9:53:27:5b: 19:a2:d0:9c:3c:4b:b3:94:e6:1b:cb:f3:79:51:09:ff:af:33: 33:9d:d5:02:11:56:c6:6a:bf:5e:66:2f:4d:51:1c:37:0a:16: e6:da:23:d1:54:77:0c:49:1a:e2:c6:0e:fb:43:a1:4e:2a:b6: 40:fc:3a:fc:56:9a:8c:12:16:d8:ee:73:fc:3d:86:7b:86:ee: 6e:1f:7c:fa:7f:89:a9:3c:df:ac:96:bf:4c:82:5f:6a:11:dd: e1:88:dd:84:9f:41:9a:96:33:72:e2:28:0c:b4:cd:81:53:e6: c9:28:d2:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niApO/gpLShknWcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQxMWE2YjMtODA1OC00ZTk1LTllOWMtMjBjMGE0NDJm YjQ3MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OThkMDQzYjItMWZmZi00MzgwLWI4OTQtYjcxYWQ4N2RlMjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKVId0jSZp/seK/OwYIzEPv1EOQiVqB6GSp0 vUanWB80VJmgAY/8DRieMVuzozmmwtik7u7FewDeaFkfS1oqr4rFmIYM9D6SJbJM b4NHnaJZhmHY6PzlUvyS9IYeGBvG24AHYO9oauBBKn17bxM8WqGFQ5qusdZgWPm+ vSleFoKQjBDDHcFqUIWhQz8/Sschd2aCUf593UD7Gi7ClRWu8ZPq9rIiannNfcek yLASEokraTiuvGm8LumxTcARHSrgDDmcPmUqPnISPH3k3KOwjzaTcNY1v5McsU/X lOrF87A40LjbMINsbXyQQmLNQg8wRtJO+RN3nugM6ioGVnYV3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD22Vf7FoLJdXuq0EEMhv5K4HRPnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82ZDEx YTZiMy04MDU4LTRlOTUtOWU5Yy0yMGMwYTQ0MmZiNDcvM2I5YzM3ZDUtMDUzNi0z MWQ2LTgwYjUtNGEwY2YzYTEyYjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNmQxMWE2YjMtODA1OC00ZTk1LTll OWMtMjBjMGE0NDJmYjQ3LzZkMTFhNmIzLTgwNTgtNGU5NS05ZTljLTIwYzBhNDQy ZmI0Ny5jcmwwHwYDVR0jBBgwFoAUONOWjlwX2dXIepXu6wRUn3HAxl8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82ZDExYTZiMy04MDU4LTRlOTUtOWU5Yy0yMGMw YTQ0MmZiNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF71oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHS51rxNdWt5+jbR91coHhvWLKNsrap9ENt7UHfvnEYN+9kWpisq1y6i SRjekht60ZhlBG0PdvvPRQ9KI32VCpjSRo1okfLZrN8+6ZgwnVp1LmYQkCeK5Yi4 j2cZRzbhEBXQ3E4A6nVLAWzz9HFepDtle3nm1DGK8D7PAukNZ447h17RmLk2e477 vWCQuVMnWxmi0Jw8S7OU5hvL83lRCf+vMzOd1QIRVsZqv15mL01RHDcKFubaI9FU dwxJGuLGDvtDoU4qtkD8OvxWmowSFtjuc/w9hnuG7m4ffPp/iak836yWv0yCX2oR 3eGI3YSfQZqWM3LiKAy0zYFT5sko0j8= -----END CERTIFICATE-----Generated at Wed Jul 29 10:11:40 2026 by rpki-client