$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62/cf1f5542-3832-3dd7-a2a2-2c68571dd2aa.roa File: cf1f5542-3832-3dd7-a2a2-2c68571dd2aa.roa (raw, json) Hash identifier: sYT6QLGAVsRiWoaIQa9u3CJlZcZBMAoPqVOFN9TQY8Q= Subject key identifier: 35:70:D8:8D:CB:70:72:9E:7E:ED:44:A5:F8:5C:1C:2F:0D:CC:FE:F5 Certificate issuer: /CN=b4f91351-ba27-4d8a-9d06-59aeaa972a62 Certificate serial: 010D0C9F4328584EA798E5849B001D2D62E1BC80 Authority key identifier: 46:E2:26:A8:17:D7:F8:DD:BE:2B:B7:36:A7:C8:BB:56:4F:8A:FF:79 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62/cf1f5542-3832-3dd7-a2a2-2c68571dd2aa.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 12131 IP address blocks: 23.161.34.0/24 maxlen: 24 23.187.0.0/24 maxlen: 24 23.187.1.0/24 maxlen: 24 2620:1df::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62/b4f91351-ba27-4d8a-9d06-59aeaa972a62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62/b4f91351-ba27-4d8a-9d06-59aeaa972a62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:98:e5:84:9b:00:1d:2d:62:e1:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4f91351-ba27-4d8a-9d06-59aeaa972a62 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=24738ae8-c0b2-40f9-b803-376e88624597 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:6d:0c:fe:da:7c:40:7d:c0:b6:70:41:b3:e6: f6:49:89:12:3c:36:25:02:71:82:2a:2c:ee:b5:5a: 23:b2:a3:a9:dc:e2:af:5a:14:9e:35:19:63:2f:b3: 47:d0:57:09:77:4d:62:ea:37:32:26:60:ad:02:5b: 85:17:d8:ac:be:0b:72:d1:53:d7:79:1f:c2:e9:ea: 2e:06:8e:77:4b:ca:f3:07:6a:da:ad:1c:5f:57:7f: b4:52:68:86:32:cc:85:d4:7c:f5:eb:69:d9:ca:f8: 96:78:7d:5b:d8:c6:f3:b3:cf:3f:36:d1:86:d7:91: 78:5d:6a:fc:70:49:88:7c:4c:c0:b7:35:08:47:6f: 73:6b:52:52:0f:0f:69:af:ef:c7:52:0b:60:4a:81: 05:0a:65:9f:25:7e:1f:4c:88:01:e9:5c:6b:66:21: 83:67:19:83:86:5e:57:00:81:67:ce:dd:35:f6:d6: ab:cd:38:87:2d:9d:c4:b7:8b:28:7f:80:56:9c:03: 03:3a:27:2e:c3:cd:d7:2e:7b:7f:89:48:28:da:d6: 30:3a:15:4d:b8:93:23:85:5e:3e:84:e6:2e:b8:c4: b8:bb:b8:45:0f:89:61:51:ab:58:2d:0b:24:7e:51: c6:27:df:ba:da:59:54:37:28:58:eb:2a:7b:46:8c: 65:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:70:D8:8D:CB:70:72:9E:7E:ED:44:A5:F8:5C:1C:2F:0D:CC:FE:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62/cf1f5542-3832-3dd7-a2a2-2c68571dd2aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62/b4f91351-ba27-4d8a-9d06-59aeaa972a62.crl X509v3 Authority Key Identifier: keyid:46:E2:26:A8:17:D7:F8:DD:BE:2B:B7:36:A7:C8:BB:56:4F:8A:FF:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62.cer sbgp-ipAddrBlock: critical IPv4: 23.161.34.0/24 23.187.0.0/23 IPv6: 2620:1df::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:34:d0:93:7f:44:bb:bc:b0:fe:ba:a0:46:6a:c1:f7:a2:39: 91:f4:02:ce:59:2d:c9:70:75:43:01:54:e6:3c:88:67:05:9d: 48:49:a8:66:96:8b:10:5f:2f:aa:84:f3:6e:1e:45:ab:df:30: c6:05:54:95:2b:cb:74:0e:78:ac:8c:a5:09:1b:0d:1e:94:c5: 3e:dd:85:28:87:3b:96:ad:c1:6a:7e:c9:26:04:ea:c5:2a:8f: 6c:31:ac:9c:06:3a:c8:16:82:41:5c:16:fe:55:14:44:79:92: ff:f9:ff:66:95:b6:71:53:b5:f4:44:6c:ce:95:1d:8f:f3:d6: 87:f9:f3:30:09:c8:f0:5c:b6:66:6b:03:ae:7a:90:b5:02:02: 97:8f:21:fe:f8:34:b9:0b:0c:3b:0b:31:e9:d0:c3:6a:79:04: de:85:e0:ad:d1:4f:60:1c:3f:74:d7:42:cf:23:cf:fb:21:09: d3:a6:17:63:48:f1:0b:c3:db:bd:0d:04:48:72:a8:e0:77:ed: 1f:e0:83:8c:83:ab:39:db:d4:70:dd:83:db:0f:86:c6:cd:37: db:40:98:64:8b:e4:b6:eb:e3:8e:df:dc:6b:22:41:22:65:a4: d8:18:c8:ed:95:7e:2d:98:ce:a5:65:db:7b:de:b4:04:b1:aa: ca:24:d4:ef -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWE6nmOWEmwAdLWLhvIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjRmOTEzNTEtYmEyNy00ZDhhLTlkMDYtNTlhZWFhOTcy YTYyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MjQ3MzhhZTgtYzBiMi00MGY5LWI4MDMtMzc2ZTg4NjI0NTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiG0M/tp8QH3AtnBBs+b2SYkSPDYlAnGCKizu tVojsqOp3OKvWhSeNRljL7NH0FcJd01i6jcyJmCtAluFF9isvgty0VPXeR/C6eou Bo53S8rzB2rarRxfV3+0UmiGMsyF1Hz162nZyviWeH1b2Mbzs88/NtGG15F4XWr8 cEmIfEzAtzUIR29za1JSDw9pr+/HUgtgSoEFCmWfJX4fTIgB6VxrZiGDZxmDhl5X AIFnzt019tarzTiHLZ3Et4sof4BWnAMDOicuw83XLnt/iUgo2tYwOhVNuJMjhV4+ hOYuuMS4u7hFD4lhUatYLQskflHGJ9+62llUNyhY6yp7RoxljQIDAQABo4IDajCC A2YwHQYDVR0OBBYEFDVw2I3LcHKefu1EpfhcHC8NzP71MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iNGY5 MTM1MS1iYTI3LTRkOGEtOWQwNi01OWFlYWE5NzJhNjIvY2YxZjU1NDItMzgzMi0z ZGQ3LWEyYTItMmM2ODU3MWRkMmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjRmOTEzNTEtYmEyNy00ZDhhLTlk MDYtNTlhZWFhOTcyYTYyL2I0ZjkxMzUxLWJhMjctNGQ4YS05ZDA2LTU5YWVhYTk3 MmE2Mi5jcmwwHwYDVR0jBBgwFoAURuImqBfX+N2+K7c2p8i7Vk+K/3kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iNGY5MTM1MS1iYTI3LTRkOGEtOWQwNi01OWFl YWE5NzJhNjIuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAF6EiAwQB F7sAMA0EAgACMAcDBQAmIAHfMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAF800JN/RLu8sP66oEZqwfeiOZH0 As5ZLclwdUMBVOY8iGcFnUhJqGaWixBfL6qE824eRavfMMYFVJUry3QOeKyMpQkb DR6UxT7dhSiHO5atwWp+ySYE6sUqj2wxrJwGOsgWgkFcFv5VFER5kv/5/2aVtnFT tfREbM6VHY/z1of58zAJyPBctmZrA656kLUCApePIf74NLkLDDsLMenQw2p5BN6F 4K3RT2AcP3TXQs8jz/shCdOmF2NI8QvD270NBEhyqOB37R/gg4yDqznb1HDdg9sP hsbNN9tAmGSL5Lbr447f3GsiQSJlpNgYyO2Vfi2YzqVl23vetASxqsok1O8= -----END CERTIFICATE-----Generated at Thu Jul 30 00:31:32 2026 by rpki-client