$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5/2b98512f-e781-3b9a-b954-6bbdae3b43de.roa File: 2b98512f-e781-3b9a-b954-6bbdae3b43de.roa (raw, json) Hash identifier: vdm8O01TTakilA96BYjKA219EV8Hf45qhdKpjjWInx4= Subject key identifier: A1:E8:FA:A5:81:14:7D:78:4D:28:5F:33:41:89:1D:A8:11:5F:BE:38 Certificate issuer: /CN=8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5 Certificate serial: 010D0C9F4328584E9BE51855B3EEB2ED60E5B600 Authority key identifier: ED:7E:CD:7E:EF:AE:EC:A6:4C:F5:ED:B0:44:CA:C4:02:FD:DA:43:C1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5/2b98512f-e781-3b9a-b954-6bbdae3b43de.roa Signing time: Fri 24 Jul 2026 21:00:12 +0000 ROA not before: Fri 24 Jul 2026 21:00:12 +0000 ROA not after: Thu 22 Oct 2026 21:00:12 +0000 asID: 19415 IP address blocks: 23.166.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9b:e5:18:55:b3:ee:b2:ed:60:e5:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5 Validity Not Before: Jul 24 21:00:12 2026 GMT Not After : Oct 22 21:00:12 2026 GMT Subject: CN=cb87f2c9-df31-4cb1-a360-914c96221f07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:0b:20:f5:d3:31:bd:49:58:cd:d6:ed:0b:03: 77:77:cb:2d:f9:97:fd:ea:80:60:36:71:87:57:0d: c2:e3:a4:fb:09:f3:e1:f5:a5:54:6b:04:f3:fc:de: 23:1c:72:4d:89:8b:ac:e4:fc:21:93:d2:de:01:99: be:09:d4:3b:26:52:07:9f:a5:32:34:55:33:c8:e5: 12:09:d6:97:3e:d2:57:c5:0a:38:51:ca:84:3f:04: 88:a5:74:39:6b:94:a4:ff:70:3c:00:54:8f:79:ae: 01:79:b8:80:78:ee:b1:26:1c:83:68:50:1d:49:c2: b8:4c:45:75:9f:f9:75:a5:d5:e4:2f:8e:7d:8f:1d: 8c:a5:6c:01:26:17:f4:a2:29:2c:99:5e:88:3e:42: a9:aa:20:36:d1:0c:73:a8:57:a4:8f:4e:c9:eb:c1: 32:7f:42:cf:a3:15:5b:7e:ef:32:a8:a2:3b:af:bf: 29:fa:7a:28:c6:01:64:b9:99:94:ed:9a:ec:86:68: 58:f6:8d:08:f9:c8:52:f7:6f:1b:9e:29:1f:1d:33: 0c:b5:4b:e2:a0:05:c9:be:25:f8:82:1c:aa:62:e1: 39:74:df:f9:5e:86:7b:6a:58:ea:a2:99:15:a4:c0: b7:f6:0a:82:4c:20:82:44:15:18:19:af:05:a1:63: 35:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:E8:FA:A5:81:14:7D:78:4D:28:5F:33:41:89:1D:A8:11:5F:BE:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5/2b98512f-e781-3b9a-b954-6bbdae3b43de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5.crl X509v3 Authority Key Identifier: keyid:ED:7E:CD:7E:EF:AE:EC:A6:4C:F5:ED:B0:44:CA:C4:02:FD:DA:43:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5.cer sbgp-ipAddrBlock: critical IPv4: 23.166.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:25:48:dc:de:b8:0a:36:83:94:4c:23:d4:a0:66:15:c9:f4: e7:c9:f7:86:78:46:b1:95:1c:53:02:7a:81:0b:c5:e3:89:28: 9f:b2:62:55:91:02:16:c0:b7:93:cd:dd:90:4c:42:0d:86:c9: 39:27:1a:6a:8a:74:a6:c2:01:8c:f3:98:e7:a1:0c:dd:c3:04: c7:3e:81:e3:78:ce:98:70:d5:23:da:ad:6c:13:4b:69:47:76: 61:b5:05:3d:fb:5a:3f:ce:b9:86:13:c9:5b:55:a1:24:65:30: d1:6e:f6:90:f6:1c:6f:af:6f:41:65:06:24:56:c1:f1:c5:a5: 36:1f:cd:65:8d:24:6b:53:6d:7e:69:f6:63:aa:af:75:3c:f2: c3:72:3b:c7:ad:0e:df:70:fa:d6:fc:09:71:41:e4:3c:f8:ee: 27:a5:ac:de:43:12:a6:93:b2:be:67:da:19:e8:cd:7e:94:49: 7b:21:f2:bf:65:ec:b0:b9:0d:3a:5d:67:b9:4e:0e:28:2b:1f: f0:2f:39:26:5e:f7:93:8b:e8:a5:99:d6:f7:9a:2e:7c:a4:06: 76:66:1d:c8:92:18:9b:c9:76:7d:76:ba:b5:9e:d5:48:79:8f: 5a:fc:c5:47:03:db:c8:49:af:54:75:db:4c:6b:06:d1:a3:9d: d7:1f:4b:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6b5RhVs+6y7WDltgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY2YjIzYjEtYzE5Ny00ZGIyLWI0ZDQtYTgxYWRjZDZm MGU1MB4XDTI2MDcyNDIxMDAxMloXDTI2MTAyMjIxMDAxMlowLzEtMCsGA1UEAxMk Y2I4N2YyYzktZGYzMS00Y2IxLWEzNjAtOTE0Yzk2MjIxZjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgsg9dMxvUlYzdbtCwN3d8st+Zf96oBgNnGH Vw3C46T7CfPh9aVUawTz/N4jHHJNiYus5Pwhk9LeAZm+CdQ7JlIHn6UyNFUzyOUS CdaXPtJXxQo4UcqEPwSIpXQ5a5Sk/3A8AFSPea4BebiAeO6xJhyDaFAdScK4TEV1 n/l1pdXkL459jx2MpWwBJhf0oiksmV6IPkKpqiA20QxzqFekj07J68Eyf0LPoxVb fu8yqKI7r78p+nooxgFkuZmU7ZrshmhY9o0I+chS928bnikfHTMMtUvioAXJviX4 ghyqYuE5dN/5XoZ7aljqopkVpMC39gqCTCCCRBUYGa8FoWM1MwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKHo+qWBFH14TShfM0GJHagRX744MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84ZjZi MjNiMS1jMTk3LTRkYjItYjRkNC1hODFhZGNkNmYwZTUvMmI5ODUxMmYtZTc4MS0z YjlhLWI5NTQtNmJiZGFlM2I0M2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGY2YjIzYjEtYzE5Ny00ZGIyLWI0 ZDQtYTgxYWRjZDZmMGU1LzhmNmIyM2IxLWMxOTctNGRiMi1iNGQ0LWE4MWFkY2Q2 ZjBlNS5jcmwwHwYDVR0jBBgwFoAU7X7Nfu+u7KZM9e2wRMrEAv3aQ8EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84ZjZiMjNiMS1jMTk3LTRkYjItYjRkNC1hODFh ZGNkNmYwZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6b4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAklSNzeuAo2g5RMI9SgZhXJ9OfJ94Z4RrGVHFMCeoELxeOJKJ+yYlWR AhbAt5PN3ZBMQg2GyTknGmqKdKbCAYzzmOehDN3DBMc+geN4zphw1SParWwTS2lH dmG1BT37Wj/OuYYTyVtVoSRlMNFu9pD2HG+vb0FlBiRWwfHFpTYfzWWNJGtTbX5p 9mOqr3U88sNyO8etDt9w+tb8CXFB5Dz47ielrN5DEqaTsr5n2hnozX6USXsh8r9l 7LC5DTpdZ7lODigrH/AvOSZe95OL6KWZ1veaLnykBnZmHciSGJvJdn12urWe1Uh5 j1r8xUcD28hJr1R120xrBtGjndcfS9U= -----END CERTIFICATE-----Generated at Thu Jul 30 00:30:00 2026 by rpki-client