$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0002cb20-026c-453e-a998-7e9db1f7f47f/09f5c911-e2b2-3955-a3bf-e5b22aece251.roa File: 09f5c911-e2b2-3955-a3bf-e5b22aece251.roa (raw, json) Hash identifier: /qUbZQ1dLoCZXfX0CsuWV86BqCJNBTGSmE7k80gFG+8= Subject key identifier: 68:18:56:F7:E8:7C:63:A0:8F:39:59:28:28:D6:17:26:4F:79:3C:50 Certificate issuer: /CN=0002cb20-026c-453e-a998-7e9db1f7f47f Certificate serial: 010D0C9F4328584EA2DFC9299DDED52E46803D20 Authority key identifier: DF:84:17:17:97:D6:4F:0F:71:6E:56:32:44:E4:D6:73:BA:18:52:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0002cb20-026c-453e-a998-7e9db1f7f47f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0002cb20-026c-453e-a998-7e9db1f7f47f/09f5c911-e2b2-3955-a3bf-e5b22aece251.roa Signing time: Mon 27 Jul 2026 09:00:12 +0000 ROA not before: Mon 27 Jul 2026 09:00:12 +0000 ROA not after: Sun 25 Oct 2026 09:00:12 +0000 asID: 400529 IP address blocks: 23.164.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0002cb20-026c-453e-a998-7e9db1f7f47f/0002cb20-026c-453e-a998-7e9db1f7f47f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0002cb20-026c-453e-a998-7e9db1f7f47f/0002cb20-026c-453e-a998-7e9db1f7f47f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0002cb20-026c-453e-a998-7e9db1f7f47f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a2:df:c9:29:9d:de:d5:2e:46:80:3d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0002cb20-026c-453e-a998-7e9db1f7f47f Validity Not Before: Jul 27 09:00:12 2026 GMT Not After : Oct 25 09:00:12 2026 GMT Subject: CN=3e8c1508-18d5-4205-a7f5-2b7917f024ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:f0:bc:1e:b0:e9:ac:99:8d:33:c8:da:5c:c1: 01:b2:e6:85:e8:ff:cb:4b:63:d4:9a:17:09:bc:3e: 46:54:42:b1:f4:c5:e1:e1:a3:80:8a:b0:6b:b7:bf: ad:8a:35:70:c4:c4:16:a0:50:d3:03:ba:e4:d8:a5: cc:81:3d:f3:62:6f:9a:c2:72:e7:ce:ef:cc:1f:52: 11:69:1c:71:91:54:5b:dd:eb:32:bb:04:59:52:c8: f4:9d:3c:58:3a:18:28:5e:b1:5a:26:92:78:bd:79: 53:68:51:2b:63:56:90:bc:67:d1:9a:4b:65:08:31: a8:14:3c:c2:d1:10:73:22:a1:78:b2:c6:1e:4a:ab: 8f:8d:0e:6f:fc:1d:62:d0:da:a6:73:21:9e:6e:42: 5a:17:b9:a9:cc:6b:86:42:0d:f4:75:66:b7:ad:96: 39:32:2f:bf:04:48:93:f1:d0:f1:65:b6:cd:88:e1: 25:92:67:51:ec:e6:b7:ba:49:1a:72:d4:73:d4:2b: 01:d9:f5:d5:e9:3d:de:14:a1:17:40:e7:38:56:48: 8d:66:59:5a:49:3e:82:47:ca:f3:88:fb:29:46:bf: 52:7e:e1:73:b3:b7:4c:7f:89:f1:de:65:03:5d:f6: cb:8b:6b:b7:0f:36:b2:c4:30:d8:52:59:69:30:9f: 0b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:18:56:F7:E8:7C:63:A0:8F:39:59:28:28:D6:17:26:4F:79:3C:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0002cb20-026c-453e-a998-7e9db1f7f47f/09f5c911-e2b2-3955-a3bf-e5b22aece251.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0002cb20-026c-453e-a998-7e9db1f7f47f/0002cb20-026c-453e-a998-7e9db1f7f47f.crl X509v3 Authority Key Identifier: keyid:DF:84:17:17:97:D6:4F:0F:71:6E:56:32:44:E4:D6:73:BA:18:52:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0002cb20-026c-453e-a998-7e9db1f7f47f.cer sbgp-ipAddrBlock: critical IPv4: 23.164.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:5d:ca:5e:68:8b:6b:bc:d3:98:f7:04:d5:af:32:8d:07:b8: a1:5e:3d:7a:ad:e7:cc:85:97:86:f9:93:87:58:d0:59:d2:1d: 70:0b:db:b1:c9:c5:3e:61:91:58:2e:cc:a3:ff:f2:7c:2a:dc: 5d:6a:af:11:fd:1d:e8:8a:eb:36:71:a9:e8:c4:8e:bd:08:88: e3:d0:03:91:85:3b:be:56:5a:a5:00:fa:7b:10:da:0a:70:4a: 05:5b:a9:34:84:b2:11:bf:5f:2b:e9:c1:5e:96:52:f6:38:0e: 8e:8e:73:ed:9f:d9:fb:58:20:66:1a:66:e6:1a:eb:f5:d2:3a: 54:b5:d6:ed:e7:f7:d7:c5:20:1e:6b:ee:0c:4c:af:c2:8e:93: cf:4a:18:8c:e0:0e:d0:4a:b9:55:60:e0:e4:f8:44:e9:5e:6a: 6e:2e:21:72:b3:b9:57:6e:0e:87:02:35:e5:98:f3:46:37:3e: 07:b4:ce:8e:0b:2d:95:be:ba:07:55:1c:31:c5:8e:18:d2:e8: ec:22:a2:d8:49:76:2d:ec:f6:21:be:51:69:96:24:09:7d:1e: 0e:00:a1:af:73:da:98:ba:63:c0:5a:27:28:ab:af:ac:1a:3e: 97:d3:85:0c:a9:4b:ec:9c:5d:88:a1:92:42:c7:8b:9f:f6:93: f6:72:c5:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6i38kpnd7VLkaAPSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDAwMmNiMjAtMDI2Yy00NTNlLWE5OTgtN2U5ZGIxZjdm NDdmMB4XDTI2MDcyNzA5MDAxMloXDTI2MTAyNTA5MDAxMlowLzEtMCsGA1UEAxMk M2U4YzE1MDgtMThkNS00MjA1LWE3ZjUtMmI3OTE3ZjAyNGVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPC8HrDprJmNM8jaXMEBsuaF6P/LS2PUmhcJ vD5GVEKx9MXh4aOAirBrt7+tijVwxMQWoFDTA7rk2KXMgT3zYm+awnLnzu/MH1IR aRxxkVRb3esyuwRZUsj0nTxYOhgoXrFaJpJ4vXlTaFErY1aQvGfRmktlCDGoFDzC 0RBzIqF4ssYeSquPjQ5v/B1i0NqmcyGebkJaF7mpzGuGQg30dWa3rZY5Mi+/BEiT 8dDxZbbNiOElkmdR7Oa3ukkactRz1CsB2fXV6T3eFKEXQOc4VkiNZllaST6CR8rz iPspRr9SfuFzs7dMf4nx3mUDXfbLi2u3DzayxDDYUllpMJ8L5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGgYVvfofGOgjzlZKCjWFyZPeTxQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wMDAy Y2IyMC0wMjZjLTQ1M2UtYTk5OC03ZTlkYjFmN2Y0N2YvMDlmNWM5MTEtZTJiMi0z OTU1LWEzYmYtZTViMjJhZWNlMjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDAwMmNiMjAtMDI2Yy00NTNlLWE5 OTgtN2U5ZGIxZjdmNDdmLzAwMDJjYjIwLTAyNmMtNDUzZS1hOTk4LTdlOWRiMWY3 ZjQ3Zi5jcmwwHwYDVR0jBBgwFoAU34QXF5fWTw9xblYyROTWc7oYUuAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wMDAyY2IyMC0wMjZjLTQ1M2UtYTk5OC03ZTlk YjFmN2Y0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6RYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHldyl5oi2u805j3BNWvMo0HuKFePXqt58yFl4b5k4dY0FnSHXAL27HJ xT5hkVguzKP/8nwq3F1qrxH9HeiK6zZxqejEjr0IiOPQA5GFO75WWqUA+nsQ2gpw SgVbqTSEshG/XyvpwV6WUvY4Do6Oc+2f2ftYIGYaZuYa6/XSOlS11u3n99fFIB5r 7gxMr8KOk89KGIzgDtBKuVVg4OT4ROleam4uIXKzuVduDocCNeWY80Y3Pge0zo4L LZW+ugdVHDHFjhjS6OwiothJdi3s9iG+UWmWJAl9Hg4Aoa9z2pi6Y8BaJyirr6wa PpfThQypS+ycXYihkkLHi5/2k/Zyxcs= -----END CERTIFICATE-----Generated at Tue Jul 28 21:36:47 2026 by rpki-client