$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/3482c56b-a68f-3216-b18d-c6952ef07146.roa File: 3482c56b-a68f-3216-b18d-c6952ef07146.roa (raw, json) Hash identifier: bIAMoEOr+ksmGMK4Ff6NKk7UZFe/4lZJ3M6KzSqBGQY= Subject key identifier: 99:47:89:05:27:E0:1E:2C:FB:22:9F:3C:CA:4D:FD:40:E3:5F:D7:E7 Certificate issuer: /CN=23f061ce-1a61-493b-8f3b-472334453f0d Certificate serial: 010D0C9F4328584EA786ECFBBEBE8AE006F79C80 Authority key identifier: B0:4C:1C:BF:DB:0C:EF:A5:7E:B9:AF:53:02:90:A0:E7:4C:BC:DC:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/3482c56b-a68f-3216-b18d-c6952ef07146.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 2650 IP address blocks: 204.68.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/23f061ce-1a61-493b-8f3b-472334453f0d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/23f061ce-1a61-493b-8f3b-472334453f0d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:86:ec:fb:be:be:8a:e0:06:f7:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23f061ce-1a61-493b-8f3b-472334453f0d Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=95c45958-b3f1-4d81-af1b-9c1bc5f4fe72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:96:45:d2:c5:27:e4:ac:b7:3a:22:10:20:02: fb:58:19:d7:4d:5c:79:70:37:78:2f:28:80:85:5d: 64:15:cb:73:40:58:4a:38:d6:2e:3f:ae:a2:4e:68: 76:f1:0f:1d:c2:1c:67:9d:21:21:9e:37:ad:2e:db: a9:9b:2e:4c:8a:56:3e:35:7a:09:f8:97:df:90:43: 4e:8d:07:dd:05:0c:6d:89:21:60:67:75:3a:0b:b3: 14:58:18:d4:e1:3f:1e:48:9f:ef:2a:6d:6b:7e:a3: 82:ad:7d:ce:1a:c3:82:48:33:22:45:8a:2a:c1:ab: 0e:46:9f:65:01:4e:ab:d3:21:a4:8b:7b:10:47:a2: 30:08:aa:93:33:b6:99:09:b8:e6:85:1b:9f:8d:e2: be:e4:e2:8e:82:9a:ab:3d:80:55:db:49:cb:f5:87: 21:21:a3:33:50:e1:be:79:1a:4c:d2:6f:52:07:b3: a3:81:55:2e:2a:de:6c:85:56:7c:65:72:c8:d0:6f: 9a:36:13:6d:5a:ff:b4:33:dd:f7:d6:b0:7a:63:07: d1:cc:2a:d5:42:8d:13:0c:6d:93:c8:77:dd:5e:fa: 00:2a:e4:1e:d7:9b:af:1b:91:fd:45:43:2b:a4:bb: bc:a1:c6:cc:8d:97:c8:83:4f:51:db:12:cc:ff:64: 86:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:47:89:05:27:E0:1E:2C:FB:22:9F:3C:CA:4D:FD:40:E3:5F:D7:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/3482c56b-a68f-3216-b18d-c6952ef07146.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/23f061ce-1a61-493b-8f3b-472334453f0d.crl X509v3 Authority Key Identifier: keyid:B0:4C:1C:BF:DB:0C:EF:A5:7E:B9:AF:53:02:90:A0:E7:4C:BC:DC:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d.cer sbgp-ipAddrBlock: critical IPv4: 204.68.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:8e:c4:e3:eb:18:6c:0c:42:23:30:7b:61:46:3b:6f:10:1c: c9:ab:5a:12:e9:04:f3:32:51:03:68:bf:98:48:25:22:33:6e: 0b:ff:48:b7:87:03:d4:4a:ca:17:a0:e9:0d:eb:04:8a:d1:c3: 8a:e1:26:fc:ce:d9:46:29:e0:60:ed:25:97:48:0b:11:ac:47: 82:8a:32:f5:06:38:7b:30:28:2c:8d:d4:4c:39:f9:b1:a2:b8: 69:33:4d:27:54:41:06:ff:e7:6b:ad:23:0f:6f:47:6f:87:9e: 37:d6:1f:20:65:0f:e9:b0:72:79:7f:07:d1:31:e5:cf:0a:ff: e3:cb:55:68:7a:47:fa:28:b5:e2:a7:cc:5a:26:cc:3a:d9:80: d5:01:aa:df:e3:57:d3:98:ac:8f:6a:ef:e3:59:fc:ff:d5:8d: 0e:a9:66:b7:b0:09:23:04:41:8a:53:24:41:52:e6:3a:a0:32: b9:0a:2a:60:70:82:29:5d:4f:58:47:ee:91:f1:74:99:2b:10: 55:db:c8:e2:9d:fe:c9:33:22:33:6a:1e:3e:ec:2f:66:b3:75: 03:d5:76:25:3e:d8:39:e3:cd:8d:b3:08:2d:b4:a3:34:78:f3: 94:65:b4:d5:1a:c8:5d:c5:b8:97:e2:a3:ec:05:4c:49:ec:b4: cb:0b:59:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nhuz7vr6K4Ab3nIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNmMDYxY2UtMWE2MS00OTNiLThmM2ItNDcyMzM0NDUz ZjBkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OTVjNDU5NTgtYjNmMS00ZDgxLWFmMWItOWMxYmM1ZjRmZTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJZF0sUn5Ky3OiIQIAL7WBnXTVx5cDd4LyiA hV1kFctzQFhKONYuP66iTmh28Q8dwhxnnSEhnjetLtupmy5MilY+NXoJ+JffkENO jQfdBQxtiSFgZ3U6C7MUWBjU4T8eSJ/vKm1rfqOCrX3OGsOCSDMiRYoqwasORp9l AU6r0yGki3sQR6IwCKqTM7aZCbjmhRufjeK+5OKOgpqrPYBV20nL9YchIaMzUOG+ eRpM0m9SB7OjgVUuKt5shVZ8ZXLI0G+aNhNtWv+0M9331rB6YwfRzCrVQo0TDG2T yHfdXvoAKuQe15uvG5H9RUMrpLu8ocbMjZfIg09R2xLM/2SG8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJlHiQUn4B4s+yKfPMpN/UDjX9fnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yM2Yw NjFjZS0xYTYxLTQ5M2ItOGYzYi00NzIzMzQ0NTNmMGQvMzQ4MmM1NmItYTY4Zi0z MjE2LWIxOGQtYzY5NTJlZjA3MTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjNmMDYxY2UtMWE2MS00OTNiLThm M2ItNDcyMzM0NDUzZjBkLzIzZjA2MWNlLTFhNjEtNDkzYi04ZjNiLTQ3MjMzNDQ1 M2YwZC5jcmwwHwYDVR0jBBgwFoAUsEwcv9sM76V+ua9TApCg50y83MkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yM2YwNjFjZS0xYTYxLTQ5M2ItOGYzYi00NzIz MzQ0NTNmMGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzETPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEKOxOPrGGwMQiMwe2FGO28QHMmrWhLpBPMyUQNov5hIJSIzbgv/SLeH A9RKyheg6Q3rBIrRw4rhJvzO2UYp4GDtJZdICxGsR4KKMvUGOHswKCyN1Ew5+bGi uGkzTSdUQQb/52utIw9vR2+HnjfWHyBlD+mwcnl/B9Ex5c8K/+PLVWh6R/ooteKn zFomzDrZgNUBqt/jV9OYrI9q7+NZ/P/VjQ6pZrewCSMEQYpTJEFS5jqgMrkKKmBw gildT1hH7pHxdJkrEFXbyOKd/skzIjNqHj7sL2azdQPVdiU+2DnjzY2zCC20ozR4 85RltNUayF3FuJfio+wFTEnstMsLWR4= -----END CERTIFICATE-----Generated at Wed Jul 29 10:38:47 2026 by rpki-client