$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9dc842a-d5cd-4c00-95d8-2542c58d42ee/b8815bee-53b6-34c1-94e0-b17b6a5d8057.roa File: b8815bee-53b6-34c1-94e0-b17b6a5d8057.roa (raw, json) Hash identifier: XiPdy23ddfFIs3pzIJJRrFtjtO8nBqCM8uFeFcDesr0= Subject key identifier: 49:74:5B:47:1F:7E:F2:84:84:0A:D0:1A:F9:81:58:B4:8B:C6:DA:23 Certificate issuer: /CN=a9dc842a-d5cd-4c00-95d8-2542c58d42ee Certificate serial: 010D0C9F4328584EA17A8412E9809735D3617D40 Authority key identifier: 8E:A6:FF:8C:F9:87:23:26:9D:5D:CD:BC:3E:35:A6:99:C2:1F:D9:83 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9dc842a-d5cd-4c00-95d8-2542c58d42ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9dc842a-d5cd-4c00-95d8-2542c58d42ee/b8815bee-53b6-34c1-94e0-b17b6a5d8057.roa Signing time: Sun 26 Jul 2026 21:00:11 +0000 ROA not before: Sun 26 Jul 2026 21:00:11 +0000 ROA not after: Sat 24 Oct 2026 21:00:11 +0000 asID: 394019 IP address blocks: 23.139.248.0/24 maxlen: 24 64.239.20.0/23 maxlen: 24 172.96.162.0/24 maxlen: 24 199.79.156.0/24 maxlen: 24 2631:7000::/28 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9dc842a-d5cd-4c00-95d8-2542c58d42ee/a9dc842a-d5cd-4c00-95d8-2542c58d42ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9dc842a-d5cd-4c00-95d8-2542c58d42ee/a9dc842a-d5cd-4c00-95d8-2542c58d42ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9dc842a-d5cd-4c00-95d8-2542c58d42ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a1:7a:84:12:e9:80:97:35:d3:61:7d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9dc842a-d5cd-4c00-95d8-2542c58d42ee Validity Not Before: Jul 26 21:00:11 2026 GMT Not After : Oct 24 21:00:11 2026 GMT Subject: CN=270fa532-0a7c-4367-bffe-19447d976223 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:76:12:d4:bf:4b:59:12:3b:09:ae:1d:5e:a3: d0:57:17:e6:ec:da:0a:fa:e4:ae:6b:34:74:be:87: 82:69:c3:86:73:69:3b:e3:2e:b6:c9:c8:b6:e0:4c: de:40:41:5c:06:12:bf:5d:64:e7:92:ee:26:18:ec: c1:c4:d3:92:37:84:10:d7:f8:85:59:33:cd:c0:63: 83:41:c3:44:6a:07:2b:6e:c7:d0:85:d5:1d:aa:e7: 0d:fc:6e:e7:6c:04:fa:84:2f:65:9c:db:2c:56:78: 5f:76:01:7e:83:38:97:84:f1:b6:fc:e4:cd:86:5a: ab:50:ed:69:b9:9c:ef:a9:7f:07:4c:60:ef:72:39: ca:d3:47:48:7e:64:9a:09:c1:b8:b6:f3:1f:6e:f8: b9:e3:cc:1a:fc:2d:68:f4:ff:21:01:18:b6:6f:07: de:2b:3c:68:21:c3:1f:50:71:cd:0d:67:85:e5:88: de:2c:e2:f6:4f:b2:96:15:b1:28:c3:71:57:15:cf: 05:f9:72:4b:1e:6c:93:8a:5a:60:5b:5d:7a:49:9d: 42:e7:8e:44:6b:2b:38:66:8c:a4:7d:61:e8:8d:4b: 25:12:ce:d5:3e:3b:2f:fa:27:42:7c:8d:a7:85:4f: 7c:e7:4b:24:db:2d:cb:36:70:cd:0c:af:75:98:e3: a7:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:74:5B:47:1F:7E:F2:84:84:0A:D0:1A:F9:81:58:B4:8B:C6:DA:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9dc842a-d5cd-4c00-95d8-2542c58d42ee/b8815bee-53b6-34c1-94e0-b17b6a5d8057.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9dc842a-d5cd-4c00-95d8-2542c58d42ee/a9dc842a-d5cd-4c00-95d8-2542c58d42ee.crl X509v3 Authority Key Identifier: keyid:8E:A6:FF:8C:F9:87:23:26:9D:5D:CD:BC:3E:35:A6:99:C2:1F:D9:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9dc842a-d5cd-4c00-95d8-2542c58d42ee.cer sbgp-ipAddrBlock: critical IPv4: 23.139.248.0/24 64.239.20.0/23 172.96.162.0/24 199.79.156.0/24 IPv6: 2631:7000::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:30:67:ab:b2:bb:56:9f:69:8c:de:e5:07:e1:3c:7d:3c:1f: e6:98:a9:62:ae:ae:84:a9:56:c7:c6:12:20:df:95:70:ba:a6: 5b:ff:c4:a3:3d:7c:e8:01:c2:c3:a1:37:a7:a8:63:c5:10:87: 2c:8b:e4:ef:95:a0:6d:65:f2:26:2a:fd:52:85:d4:ce:11:d9: c3:7a:75:cf:3e:9a:e7:88:6e:06:dd:a9:e2:b7:01:5f:c7:84: 36:b7:d8:ca:fb:22:b3:c9:cd:e2:10:79:50:16:8b:20:d6:f7: ff:1f:1f:4b:ee:23:3f:63:63:93:35:18:17:12:e2:cd:e7:d8: 9c:1c:86:41:87:6e:ff:d9:6b:85:ab:21:db:82:e5:46:32:0f: ca:6c:ef:e2:b6:34:e2:b3:aa:c0:37:1c:02:59:cb:45:08:54: f0:0e:ac:f4:36:e5:67:78:9c:cf:98:2f:17:22:c6:17:76:52: dc:4a:31:6b:cb:15:b4:cc:df:ad:98:0b:54:91:d1:d5:f9:20: 66:3c:c2:e4:dd:d2:27:41:3b:ef:92:ea:aa:d0:7f:d0:d3:0d: 39:4c:c7:e1:d9:60:10:80:59:78:91:71:94:54:e0:47:9a:72: f2:44:4a:a3:31:d7:39:55:c5:3b:32:a2:30:e4:49:46:6f:ec: 35:b4:9f:f8 -----BEGIN CERTIFICATE----- MIIGZDCCBUygAwIBAgIUAQ0Mn0MoWE6heoQS6YCXNdNhfUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTlkYzg0MmEtZDVjZC00YzAwLTk1ZDgtMjU0MmM1OGQ0 MmVlMB4XDTI2MDcyNjIxMDAxMVoXDTI2MTAyNDIxMDAxMVowLzEtMCsGA1UEAxMk MjcwZmE1MzItMGE3Yy00MzY3LWJmZmUtMTk0NDdkOTc2MjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3YS1L9LWRI7Ca4dXqPQVxfm7NoK+uSuazR0 voeCacOGc2k74y62yci24EzeQEFcBhK/XWTnku4mGOzBxNOSN4QQ1/iFWTPNwGOD QcNEagcrbsfQhdUdqucN/G7nbAT6hC9lnNssVnhfdgF+gziXhPG2/OTNhlqrUO1p uZzvqX8HTGDvcjnK00dIfmSaCcG4tvMfbvi548wa/C1o9P8hARi2bwfeKzxoIcMf UHHNDWeF5YjeLOL2T7KWFbEow3FXFc8F+XJLHmyTilpgW116SZ1C545Eays4Zoyk fWHojUslEs7VPjsv+idCfI2nhU9850sk2y3LNnDNDK91mOOntQIDAQABo4IDdjCC A3IwHQYDVR0OBBYEFEl0W0cffvKEhArQGvmBWLSLxtojMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hOWRj ODQyYS1kNWNkLTRjMDAtOTVkOC0yNTQyYzU4ZDQyZWUvYjg4MTViZWUtNTNiNi0z NGMxLTk0ZTAtYjE3YjZhNWQ4MDU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYTlkYzg0MmEtZDVjZC00YzAwLTk1 ZDgtMjU0MmM1OGQ0MmVlL2E5ZGM4NDJhLWQ1Y2QtNGMwMC05NWQ4LTI1NDJjNThk NDJlZS5jcmwwHwYDVR0jBBgwFoAUjqb/jPmHIyadXc28PjWmmcIf2YMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9hOWRjODQyYS1kNWNkLTRjMDAtOTVkOC0yNTQy YzU4ZDQyZWUuY2VyMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQAF4v4AwQB QO8UAwQArGCiAwQAx0+cMA0EAgACMAcDBQQmMXAAMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACIwZ6uyu1af aYze5QfhPH08H+aYqWKuroSpVsfGEiDflXC6plv/xKM9fOgBwsOhN6eoY8UQhyyL 5O+VoG1l8iYq/VKF1M4R2cN6dc8+mueIbgbdqeK3AV/HhDa32Mr7IrPJzeIQeVAW iyDW9/8fH0vuIz9jY5M1GBcS4s3n2JwchkGHbv/Za4WrIduC5UYyD8ps7+K2NOKz qsA3HAJZy0UIVPAOrPQ25Wd4nM+YLxcixhd2UtxKMWvLFbTM362YC1SR0dX5IGY8 wuTd0idBO++S6qrQf9DTDTlMx+HZYBCAWXiRcZRU4EeacvJESqMx1zlVxTsyojDk SUZv7DW0n/g= -----END CERTIFICATE-----Generated at Wed Jul 29 09:59:56 2026 by rpki-client