$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7/5b544329-5f81-3c9e-8a03-9130ec07b101.roa File: 5b544329-5f81-3c9e-8a03-9130ec07b101.roa (raw, json) Hash identifier: GkKnF4pfnYmqZrfEf21wf80FKgLZPzi95vRC9WcJ5o4= Subject key identifier: F9:DE:9B:39:F9:9D:9E:6B:B1:4F:42:65:E0:64:AB:14:D5:19:FF:43 Certificate issuer: /CN=6d2e159b-7f9d-4fde-83eb-ff2852b127f7 Certificate serial: 010D0C9F4328584EC7A1C0511FF3FDA698EE7800 Authority key identifier: 4A:82:75:D7:A7:7C:40:CB:AA:EE:BD:86:14:01:53:AC:A1:C7:5D:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7/5b544329-5f81-3c9e-8a03-9130ec07b101.roa Signing time: Sun 09 Aug 2026 13:00:12 +0000 ROA not before: Sun 09 Aug 2026 13:00:12 +0000 ROA not after: Sat 07 Nov 2026 14:00:12 +0000 asID: 401449 IP address blocks: 23.128.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7/6d2e159b-7f9d-4fde-83eb-ff2852b127f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7/6d2e159b-7f9d-4fde-83eb-ff2852b127f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c7:a1:c0:51:1f:f3:fd:a6:98:ee:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d2e159b-7f9d-4fde-83eb-ff2852b127f7 Validity Not Before: Aug 9 13:00:12 2026 GMT Not After : Nov 7 14:00:12 2026 GMT Subject: CN=7cf1bdc7-2b18-4f3b-8772-f0ef6591f8e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:73:a1:3b:b8:e9:be:ac:1b:aa:10:b0:2a:ab: 2b:81:1b:fd:95:14:e5:3f:83:76:eb:db:7e:1c:e1: 99:df:b9:84:f3:36:6e:c3:cf:8a:b7:f8:c7:e5:5e: b9:f1:b4:d7:b2:f7:9c:ae:e7:e0:3c:7b:f3:72:49: 92:ce:ed:79:fd:72:c3:15:76:7f:97:65:dc:cd:b0: 6f:6e:17:58:08:59:14:76:b5:e7:dd:c8:02:bc:41: 13:08:7b:67:74:08:8e:f6:be:af:a3:a1:97:80:ed: ed:fc:90:be:73:a1:40:b9:49:c7:d1:d8:19:cf:82: 96:5d:27:18:24:41:f4:71:86:f1:d6:eb:97:25:57: b1:04:dc:9e:97:47:f3:65:19:ff:91:85:d2:2e:6b: d5:c4:88:66:0f:ab:13:02:b7:72:6c:7f:f7:0d:f3: 16:cc:2c:93:68:96:65:8d:fd:c0:3b:82:bc:44:b2: 05:e9:c3:6e:07:c6:07:7c:63:8f:0f:2b:29:db:b6: 8a:a5:a6:32:73:6a:7b:c0:df:b2:dd:a3:67:44:d9: 78:e9:51:75:e5:cf:e3:2a:ca:22:de:af:48:09:9a: 3a:2f:65:a5:27:3d:45:dd:9b:5a:ef:0e:26:37:9d: a1:af:fc:9e:42:f5:ba:82:f2:40:a3:ed:59:17:05: ca:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:DE:9B:39:F9:9D:9E:6B:B1:4F:42:65:E0:64:AB:14:D5:19:FF:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7/5b544329-5f81-3c9e-8a03-9130ec07b101.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7/6d2e159b-7f9d-4fde-83eb-ff2852b127f7.crl X509v3 Authority Key Identifier: keyid:4A:82:75:D7:A7:7C:40:CB:AA:EE:BD:86:14:01:53:AC:A1:C7:5D:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7.cer sbgp-ipAddrBlock: critical IPv4: 23.128.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:33:2e:7c:78:94:f5:34:56:2d:f4:9b:7a:21:be:47:0a:5f: 4e:22:d7:53:6e:03:74:42:c5:82:46:6d:43:72:c6:a2:13:43: d3:35:1d:ae:fd:58:12:ec:f6:60:4a:59:2a:6c:e0:db:cc:74: 21:af:7a:81:d5:bb:d8:39:3f:e6:40:55:f3:fe:71:64:74:28: 7b:37:03:76:bd:83:e8:d5:4d:77:9d:96:be:01:98:a4:d3:92: ae:8b:01:20:25:a9:e2:52:6c:f0:59:b0:db:11:ab:71:00:8d: ab:f1:41:5e:3e:18:38:54:43:f6:0d:af:b2:8b:b7:3a:97:ff: 9a:ef:40:55:d9:16:0c:ac:74:c0:43:53:3b:55:58:f2:c3:be: 95:e9:4b:c7:cd:82:b1:3f:04:0d:80:a4:95:d0:3d:72:e0:f3: 0f:5d:b8:98:2f:18:27:76:ff:e3:0c:e8:50:3c:e6:de:c4:75: d4:8d:14:ca:3e:2c:f2:95:34:26:59:b9:78:cf:08:1d:6b:27: 4b:91:42:b8:f1:fc:98:06:a3:34:d7:de:d4:7a:bb:94:2f:9c: 57:d1:b9:61:a3:9e:58:c8:ac:94:4c:3f:7c:55:5a:53:39:1e: 49:56:50:63:f4:e3:c3:39:76:59:38:d1:c3:3c:c4:71:f2:73: 8d:68:b6:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7HocBRH/P9ppjueAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQyZTE1OWItN2Y5ZC00ZmRlLTgzZWItZmYyODUyYjEy N2Y3MB4XDTI2MDgwOTEzMDAxMloXDTI2MTEwNzE0MDAxMlowLzEtMCsGA1UEAxMk N2NmMWJkYzctMmIxOC00ZjNiLTg3NzItZjBlZjY1OTFmOGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHOhO7jpvqwbqhCwKqsrgRv9lRTlP4N269t+ HOGZ37mE8zZuw8+Kt/jH5V658bTXsvecrufgPHvzckmSzu15/XLDFXZ/l2XczbBv bhdYCFkUdrXn3cgCvEETCHtndAiO9r6vo6GXgO3t/JC+c6FAuUnH0dgZz4KWXScY JEH0cYbx1uuXJVexBNyel0fzZRn/kYXSLmvVxIhmD6sTArdybH/3DfMWzCyTaJZl jf3AO4K8RLIF6cNuB8YHfGOPDysp27aKpaYyc2p7wN+y3aNnRNl46VF15c/jKsoi 3q9ICZo6L2WlJz1F3Zta7w4mN52hr/yeQvW6gvJAo+1ZFwXKgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPnemzn5nZ5rsU9CZeBkqxTVGf9DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi82ZDJl MTU5Yi03ZjlkLTRmZGUtODNlYi1mZjI4NTJiMTI3ZjcvNWI1NDQzMjktNWY4MS0z YzllLThhMDMtOTEzMGVjMDdiMTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNmQyZTE1OWItN2Y5ZC00ZmRlLTgz ZWItZmYyODUyYjEyN2Y3LzZkMmUxNTliLTdmOWQtNGZkZS04M2ViLWZmMjg1MmIx MjdmNy5jcmwwHwYDVR0jBBgwFoAUSoJ116d8QMuq7r2GFAFTrKHHXcAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi82ZDJlMTU5Yi03ZjlkLTRmZGUtODNlYi1mZjI4 NTJiMTI3ZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4BUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGAzLnx4lPU0Vi30m3ohvkcKX04i11NuA3RCxYJGbUNyxqITQ9M1Ha79 WBLs9mBKWSps4NvMdCGveoHVu9g5P+ZAVfP+cWR0KHs3A3a9g+jVTXedlr4BmKTT kq6LASAlqeJSbPBZsNsRq3EAjavxQV4+GDhUQ/YNr7KLtzqX/5rvQFXZFgysdMBD UztVWPLDvpXpS8fNgrE/BA2ApJXQPXLg8w9duJgvGCd2/+MM6FA85t7EddSNFMo+ LPKVNCZZuXjPCB1rJ0uRQrjx/JgGozTX3tR6u5QvnFfRuWGjnljIrJRMP3xVWlM5 HklWUGP048M5dlk40cM8xHHyc41otoE= -----END CERTIFICATE-----Generated at Mon Sep 21 22:00:38 2026 by rpki-client