$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d58af5c4-ef02-3f65-8896-f19f84091c13.roa File: d58af5c4-ef02-3f65-8896-f19f84091c13.roa (raw, json) Hash identifier: bFOWSvzFnzDH9cbYFSzC35QAbqOhZu4mCO9EVMuyBDI= Subject key identifier: 1C:35:83:FB:42:D2:E9:E2:88:BC:AB:05:C4:E1:D7:16:B9:F3:A3:9B Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584EA79EDE136742E179CB964300 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d58af5c4-ef02-3f65-8896-f19f84091c13.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396982 IP address blocks: 23.251.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9e:de:13:67:42:e1:79:cb:96:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=b017f06a-4940-4504-b97d-1f2572198a14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:52:43:22:44:df:0b:ef:40:73:68:ab:de:53: 6d:9c:84:6a:8f:f6:f7:6f:f3:97:2a:64:cf:5b:45: b9:39:d9:1f:64:7a:3f:c6:ef:7d:fe:51:c9:93:62: b2:ad:fc:aa:60:37:8b:6a:b7:72:a3:51:3e:01:d0: c6:8c:ef:a0:07:3a:cb:c9:0d:90:f9:1d:69:f3:e9: a8:0c:78:b5:aa:80:84:21:75:52:7f:33:1b:77:7a: 4b:f8:3b:fe:6d:d5:76:f2:76:31:45:a5:2f:e9:e8: b4:d3:d9:5a:a9:06:96:33:aa:27:e0:98:4f:c2:5f: 40:24:d4:0f:0a:d5:73:b7:7f:b8:00:ff:a9:e6:81: 81:91:52:d0:d3:95:18:3e:ed:fe:3d:32:eb:84:7c: be:a7:e8:00:a0:2e:e8:7f:bc:fe:58:35:c5:10:ae: 87:29:10:c5:cd:1b:57:84:fb:e4:57:f0:5a:d0:5d: d2:ef:02:ea:d6:c9:b7:2b:87:3e:21:a9:f8:b8:91: 73:3f:b3:d4:a8:d0:0f:c3:ad:e7:a5:c8:5d:97:38: 30:40:fc:94:f0:ba:9e:2f:25:2a:5d:2a:50:4d:19: 5f:69:32:ef:70:a4:b7:4c:46:c1:7a:3d:ab:2e:1f: cc:70:9a:d4:46:86:15:f6:76:78:ac:18:a9:1b:30: 11:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:35:83:FB:42:D2:E9:E2:88:BC:AB:05:C4:E1:D7:16:B9:F3:A3:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d58af5c4-ef02-3f65-8896-f19f84091c13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 23.251.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:55:3d:91:aa:ab:35:e0:09:f5:45:08:9c:ba:22:2d:b5:be: af:4a:c0:a3:bc:d1:7c:28:c8:2e:bb:fd:98:f4:f8:d6:8a:32: ca:27:d7:86:93:1e:e6:69:57:e3:c7:e4:9b:2f:94:e8:7e:3e: 5a:3c:d5:19:1f:58:98:fd:c0:af:08:6d:a4:b9:73:c0:43:9b: 3d:e2:f7:c2:c9:b7:b8:07:db:a5:df:f9:eb:83:aa:4b:1a:92: 09:57:28:f6:e5:ff:c2:c0:9c:29:d5:ad:f4:18:2b:b1:2f:0f: c8:9a:22:de:96:18:fb:ed:ed:c6:45:29:73:5b:2b:93:0f:b6: aa:da:b9:2a:16:11:a5:09:a7:89:41:43:42:27:04:d0:4e:3e: 90:1e:7e:03:f0:d1:d2:23:af:74:64:83:66:0c:8c:11:81:8b: 84:50:d0:e7:bb:17:06:4a:2a:0b:a6:14:c1:a5:9d:2a:ce:92: be:2c:c1:5b:ed:1b:ee:da:76:ea:19:39:a9:45:09:2b:73:67: 0a:f6:f6:cf:a8:a7:8b:0c:57:ac:01:f4:5e:17:6f:5f:48:d1: 4e:a1:57:c6:c1:15:ad:aa:17:94:a2:31:17:08:c8:42:a4:13: 62:ae:4c:53:3d:0f:c0:cb:d9:d8:e2:2c:a6:c9:44:eb:c0:2e: e2:b6:9e:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnt4TZ0LhecuWQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YjAxN2YwNmEtNDk0MC00NTA0LWI5N2QtMWYyNTcyMTk4YTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFJDIkTfC+9Ac2ir3lNtnIRqj/b3b/OXKmTP W0W5OdkfZHo/xu99/lHJk2KyrfyqYDeLardyo1E+AdDGjO+gBzrLyQ2Q+R1p8+mo DHi1qoCEIXVSfzMbd3pL+Dv+bdV28nYxRaUv6ei009laqQaWM6on4JhPwl9AJNQP CtVzt3+4AP+p5oGBkVLQ05UYPu3+PTLrhHy+p+gAoC7of7z+WDXFEK6HKRDFzRtX hPvkV/Ba0F3S7wLq1sm3K4c+Ian4uJFzP7PUqNAPw63npchdlzgwQPyU8LqeLyUq XSpQTRlfaTLvcKS3TEbBej2rLh/McJrURoYV9nZ4rBipGzAR0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBw1g/tC0uniiLyrBcTh1xa586ObMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDU4YWY1YzQtZWYwMi0z ZjY1LTg4OTYtZjE5Zjg0MDkxYzEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF/uPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRVPZGqqzXgCfVFCJy6Ii21vq9KwKO80XwoyC67/Zj0+NaKMson14aT HuZpV+PH5JsvlOh+Plo81RkfWJj9wK8IbaS5c8BDmz3i98LJt7gH26Xf+euDqksa kglXKPbl/8LAnCnVrfQYK7EvD8iaIt6WGPvt7cZFKXNbK5MPtqrauSoWEaUJp4lB Q0InBNBOPpAefgPw0dIjr3Rkg2YMjBGBi4RQ0Oe7FwZKKgumFMGlnSrOkr4swVvt G+7aduoZOalFCStzZwr29s+op4sMV6wB9F4Xb19I0U6hV8bBFa2qF5SiMRcIyEKk E2KuTFM9D8DL2djiLKbJROvALuK2nsk= -----END CERTIFICATE-----Generated at Wed Jul 29 15:28:07 2026 by rpki-client