$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c089ce8e-f176-4dd2-a57a-8a48cf6e42a9/168c7305-41d0-3847-b688-fd50fc5a3bbb.roa File: 168c7305-41d0-3847-b688-fd50fc5a3bbb.roa (raw, json) Hash identifier: 6FqbwrI62oo3R3DXAFX1D9Q+sthHv5MQQyAiIlxN9tA= Subject key identifier: 03:9C:73:4D:33:DC:FC:3B:68:55:AF:97:36:3C:87:3E:97:04:C0:48 Certificate issuer: /CN=c089ce8e-f176-4dd2-a57a-8a48cf6e42a9 Certificate serial: 010D0C9F4328584EC7125E749C50193D207A8300 Authority key identifier: F7:79:F6:9C:64:D5:B8:F9:04:81:D9:47:AF:A8:DD:0C:A6:45:A0:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c089ce8e-f176-4dd2-a57a-8a48cf6e42a9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c089ce8e-f176-4dd2-a57a-8a48cf6e42a9/168c7305-41d0-3847-b688-fd50fc5a3bbb.roa Signing time: Sun 09 Aug 2026 08:11:23 +0000 ROA not before: Sun 09 Aug 2026 08:11:23 +0000 ROA not after: Sat 07 Nov 2026 09:11:23 +0000 asID: 398047 IP address blocks: 23.129.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c089ce8e-f176-4dd2-a57a-8a48cf6e42a9/c089ce8e-f176-4dd2-a57a-8a48cf6e42a9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c089ce8e-f176-4dd2-a57a-8a48cf6e42a9/c089ce8e-f176-4dd2-a57a-8a48cf6e42a9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c089ce8e-f176-4dd2-a57a-8a48cf6e42a9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c7:12:5e:74:9c:50:19:3d:20:7a:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c089ce8e-f176-4dd2-a57a-8a48cf6e42a9 Validity Not Before: Aug 9 08:11:23 2026 GMT Not After : Nov 7 09:11:23 2026 GMT Subject: CN=ba58530d-137c-4708-a7d8-23fcb8ef7848 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:25:21:5e:fd:63:d8:7f:ab:d7:a7:f1:73:69: 78:82:2d:59:54:df:76:c4:6b:a3:a5:54:cf:61:8c: 68:2e:cb:d8:4e:dc:a8:40:af:11:23:d2:3c:4a:04: b5:81:55:3f:55:49:5b:02:f7:63:b0:6f:b6:f4:2e: 21:1a:04:1f:df:7d:fc:99:a5:50:ea:5d:4a:87:57: 28:1d:3e:37:18:08:ce:ae:d8:87:ee:be:a1:c0:b7: 9b:3d:ac:65:69:85:13:33:13:b4:8b:00:e2:54:1b: a6:69:a1:18:42:0a:c0:34:bb:d6:07:d5:49:28:36: e9:37:af:8a:5d:ba:75:62:81:69:aa:43:e7:b9:ae: da:61:3d:a7:d1:f6:26:f4:d6:86:fd:29:04:a2:27: e6:a7:a0:6e:a9:d3:14:b9:c2:26:1d:b4:64:c7:3b: 62:5c:38:22:9f:bd:20:c8:df:10:77:5d:8d:0e:de: 30:4d:f9:f5:52:8d:75:f1:d7:ec:5b:b1:2d:3f:43: e4:2c:bb:38:66:4b:83:bd:46:5b:91:0a:ff:9e:c2: 40:78:b4:4b:a3:ae:18:eb:0a:03:68:c0:a4:da:8e: fc:48:57:05:50:60:dc:ed:b3:d7:d8:d7:66:1a:db: 76:d2:fe:6a:0d:e4:46:a7:97:5b:4a:90:c7:e5:66: 88:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:9C:73:4D:33:DC:FC:3B:68:55:AF:97:36:3C:87:3E:97:04:C0:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c089ce8e-f176-4dd2-a57a-8a48cf6e42a9/168c7305-41d0-3847-b688-fd50fc5a3bbb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c089ce8e-f176-4dd2-a57a-8a48cf6e42a9/c089ce8e-f176-4dd2-a57a-8a48cf6e42a9.crl X509v3 Authority Key Identifier: keyid:F7:79:F6:9C:64:D5:B8:F9:04:81:D9:47:AF:A8:DD:0C:A6:45:A0:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c089ce8e-f176-4dd2-a57a-8a48cf6e42a9.cer sbgp-ipAddrBlock: critical IPv4: 23.129.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:6b:96:43:5e:2b:2a:bc:fb:dc:93:9b:dd:33:50:61:d5:c9: 69:b9:3d:79:92:2b:3b:d8:64:8a:80:9c:70:cb:56:bd:4e:15: 1e:de:4f:93:6f:ff:4e:ba:77:bd:47:73:ec:5f:04:98:46:4e: 55:d6:8e:89:d3:1c:69:19:96:01:da:98:03:77:0c:7b:d2:73: fe:53:a9:80:ab:a5:79:eb:b8:9b:35:83:a2:2c:5c:a3:af:5b: 09:85:1d:8b:47:bd:81:1f:37:2a:24:56:0e:1f:2a:1e:a3:d4: cf:db:b1:27:d8:7c:3b:b5:66:d7:a3:55:54:88:8d:60:75:81: d8:1f:a5:7e:c5:9b:d3:41:86:2d:13:ef:31:25:4f:62:17:34: ce:f7:2d:e5:25:06:18:91:d6:a2:8d:73:5c:2d:36:27:ce:97: da:a6:2c:ad:3e:d2:09:86:26:8c:75:7c:a8:a9:2e:af:d7:b6: 95:32:94:f2:70:d2:80:f2:1f:e6:68:ae:74:ae:c2:94:aa:58: 64:84:ba:43:f4:12:b6:c3:4a:f4:91:e2:d5:58:87:0b:5e:27: c5:e5:5f:7d:50:99:75:d8:de:fa:65:0e:2e:4a:3e:f8:a2:49: 0c:2e:8a:1a:bb:fe:59:a1:a9:8f:ff:eb:a7:54:30:7c:f7:e2: 49:d5:ee:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7HEl50nFAZPSB6gwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzA4OWNlOGUtZjE3Ni00ZGQyLWE1N2EtOGE0OGNmNmU0 MmE5MB4XDTI2MDgwOTA4MTEyM1oXDTI2MTEwNzA5MTEyM1owLzEtMCsGA1UEAxMk YmE1ODUzMGQtMTM3Yy00NzA4LWE3ZDgtMjNmY2I4ZWY3ODQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCUhXv1j2H+r16fxc2l4gi1ZVN92xGujpVTP YYxoLsvYTtyoQK8RI9I8SgS1gVU/VUlbAvdjsG+29C4hGgQf3338maVQ6l1Kh1co HT43GAjOrtiH7r6hwLebPaxlaYUTMxO0iwDiVBumaaEYQgrANLvWB9VJKDbpN6+K Xbp1YoFpqkPnua7aYT2n0fYm9NaG/SkEoifmp6BuqdMUucImHbRkxztiXDgin70g yN8Qd12NDt4wTfn1Uo118dfsW7EtP0PkLLs4ZkuDvUZbkQr/nsJAeLRLo64Y6woD aMCk2o78SFcFUGDc7bPX2NdmGtt20v5qDeRGp5dbSpDH5WaIHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAOcc00z3Pw7aFWvlzY8hz6XBMBIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jMDg5 Y2U4ZS1mMTc2LTRkZDItYTU3YS04YTQ4Y2Y2ZTQyYTkvMTY4YzczMDUtNDFkMC0z ODQ3LWI2ODgtZmQ1MGZjNWEzYmJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYzA4OWNlOGUtZjE3Ni00ZGQyLWE1 N2EtOGE0OGNmNmU0MmE5L2MwODljZThlLWYxNzYtNGRkMi1hNTdhLThhNDhjZjZl NDJhOS5jcmwwHwYDVR0jBBgwFoAU93n2nGTVuPkEgdlHr6jdDKZFoHgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9jMDg5Y2U4ZS1mMTc2LTRkZDItYTU3YS04YTQ4 Y2Y2ZTQyYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4GsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACRrlkNeKyq8+9yTm90zUGHVyWm5PXmSKzvYZIqAnHDLVr1OFR7eT5Nv /066d71Hc+xfBJhGTlXWjonTHGkZlgHamAN3DHvSc/5TqYCrpXnruJs1g6IsXKOv WwmFHYtHvYEfNyokVg4fKh6j1M/bsSfYfDu1ZtejVVSIjWB1gdgfpX7Fm9NBhi0T 7zElT2IXNM73LeUlBhiR1qKNc1wtNifOl9qmLK0+0gmGJox1fKipLq/XtpUylPJw 0oDyH+ZornSuwpSqWGSEukP0ErbDSvSR4tVYhwteJ8XlX31QmXXY3vplDi5KPvii SQwuihq7/lmhqY//66dUMHz34knV7go= -----END CERTIFICATE-----Generated at Tue Sep 22 17:53:21 2026 by rpki-client