$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf2b524b-14b9-47ee-b938-34b0cc40ec5e/dba63869-4b1a-3e23-9b17-f38a9a8e30a2.roa File: dba63869-4b1a-3e23-9b17-f38a9a8e30a2.roa (raw, json) Hash identifier: g1BT/TDDx/FbZTlIgIKiiAYZPtb51XqNE17jSs69WZg= Subject key identifier: BE:EA:F8:58:CF:50:DC:FE:9A:5A:85:4C:D5:85:95:18:11:74:0A:12 Certificate issuer: /CN=cf2b524b-14b9-47ee-b938-34b0cc40ec5e Certificate serial: 010D0C9F4328584EA7947D381FC534B03B984800 Authority key identifier: 58:75:2F:2C:FB:91:D0:C5:D6:87:B1:CE:3C:32:B6:4E:17:85:EF:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf2b524b-14b9-47ee-b938-34b0cc40ec5e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf2b524b-14b9-47ee-b938-34b0cc40ec5e/dba63869-4b1a-3e23-9b17-f38a9a8e30a2.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 400289 IP address blocks: 23.132.40.0/24 maxlen: 24 23.152.8.0/24 maxlen: 24 2606:9440::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf2b524b-14b9-47ee-b938-34b0cc40ec5e/cf2b524b-14b9-47ee-b938-34b0cc40ec5e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf2b524b-14b9-47ee-b938-34b0cc40ec5e/cf2b524b-14b9-47ee-b938-34b0cc40ec5e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf2b524b-14b9-47ee-b938-34b0cc40ec5e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:94:7d:38:1f:c5:34:b0:3b:98:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf2b524b-14b9-47ee-b938-34b0cc40ec5e Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=60a694f2-e39e-4066-9c08-8c21996c8f5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:19:c7:c7:8b:0f:68:6c:92:92:9d:46:4b:37: 52:9f:86:ff:05:ac:62:d3:f3:8d:6c:f8:ac:8c:a9: 44:70:1d:67:90:67:de:e4:2b:6b:f4:93:6b:09:05: 5a:a8:7b:2d:25:a7:46:78:cb:53:39:50:7c:5c:83: f8:b3:97:ec:6f:64:87:c6:ac:35:3e:a4:d1:37:d3: 99:f8:33:82:3a:cc:50:af:b0:4c:e5:1c:8d:fb:f8: 03:da:75:a8:21:31:a5:d0:f9:4f:8d:43:80:be:8a: 9d:06:c9:c9:19:bf:2d:99:58:d0:5e:17:fc:a4:15: 26:c7:31:a4:9d:78:24:9e:d5:7f:d1:90:f7:ca:42: 63:2a:c9:4b:5c:09:08:58:80:df:d2:9d:26:09:67: 4a:c0:90:c0:3c:62:de:f6:fa:9c:b1:74:d6:69:2c: f4:cf:7d:7d:6b:d0:aa:be:ac:cf:9d:62:10:44:37: ac:e2:a9:89:b4:25:21:c3:b7:5c:f3:9d:4a:ed:03: 34:70:88:d8:94:2a:27:95:c2:fe:96:97:c1:aa:10: 31:7d:37:8c:60:d8:8e:7f:d9:f6:7f:0c:1a:37:a5: e5:76:27:41:e9:9d:8f:c5:ef:78:82:25:db:69:18: e4:b2:2d:1a:cc:fc:32:fa:9c:6e:7d:0d:15:6b:cb: 9a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:EA:F8:58:CF:50:DC:FE:9A:5A:85:4C:D5:85:95:18:11:74:0A:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf2b524b-14b9-47ee-b938-34b0cc40ec5e/dba63869-4b1a-3e23-9b17-f38a9a8e30a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf2b524b-14b9-47ee-b938-34b0cc40ec5e/cf2b524b-14b9-47ee-b938-34b0cc40ec5e.crl X509v3 Authority Key Identifier: keyid:58:75:2F:2C:FB:91:D0:C5:D6:87:B1:CE:3C:32:B6:4E:17:85:EF:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf2b524b-14b9-47ee-b938-34b0cc40ec5e.cer sbgp-ipAddrBlock: critical IPv4: 23.132.40.0/24 23.152.8.0/24 IPv6: 2606:9440::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:2c:c0:64:ed:f6:42:ff:42:6b:15:5e:bd:90:a5:f4:d4:ed: 09:b6:71:3f:ab:12:04:17:92:b8:b3:da:78:13:73:fe:96:80: 1a:f8:86:aa:0c:5a:c2:88:f1:12:23:25:e7:53:2a:9f:c9:cf: c9:9b:57:75:e5:35:ac:52:11:27:42:e2:72:6f:bf:5b:94:91: 9d:80:9b:14:19:c4:53:e5:03:e8:98:04:fb:81:98:07:a8:6a: 8b:68:54:3b:08:35:0a:eb:19:84:bb:1b:c1:54:dd:ee:49:9c: 8a:00:75:59:5e:f7:a7:c7:0f:68:9c:5b:06:d3:a0:ec:cc:78: 93:e3:87:26:fc:dd:08:84:3d:91:00:61:95:ca:32:9f:12:de: ca:3d:36:79:e8:57:fa:c6:e5:0d:4c:ee:5b:83:cf:24:fc:0b: 13:53:ed:ae:e1:4a:64:6a:89:39:2b:4c:6b:ea:95:f3:7f:6b: 23:64:10:27:71:8d:c6:12:f1:9e:28:2d:36:86:a8:57:64:81: 8d:bf:62:e8:1f:3a:33:aa:3e:91:1d:f3:e0:c5:69:9f:b3:d8: f6:63:9f:0f:80:e9:38:fd:22:1d:be:a9:bb:85:7b:c8:e8:d5: 31:a9:b0:fa:f2:07:6e:b8:b4:6d:97:c8:20:72:01:29:47:81: 83:04:dc:f0 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWE6nlH04H8U0sDuYSAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YyYjUyNGItMTRiOS00N2VlLWI5MzgtMzRiMGNjNDBl YzVlMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NjBhNjk0ZjItZTM5ZS00MDY2LTljMDgtOGMyMTk5NmM4ZjVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRnHx4sPaGySkp1GSzdSn4b/Baxi0/ONbPis jKlEcB1nkGfe5Ctr9JNrCQVaqHstJadGeMtTOVB8XIP4s5fsb2SHxqw1PqTRN9OZ +DOCOsxQr7BM5RyN+/gD2nWoITGl0PlPjUOAvoqdBsnJGb8tmVjQXhf8pBUmxzGk nXgkntV/0ZD3ykJjKslLXAkIWIDf0p0mCWdKwJDAPGLe9vqcsXTWaSz0z319a9Cq vqzPnWIQRDes4qmJtCUhw7dc851K7QM0cIjYlConlcL+lpfBqhAxfTeMYNiOf9n2 fwwaN6XldidB6Z2Pxe94giXbaRjksi0azPwy+pxufQ0Va8uatwIDAQABo4IDajCC A2YwHQYDVR0OBBYEFL7q+FjPUNz+mlqFTNWFlRgRdAoSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jZjJi NTI0Yi0xNGI5LTQ3ZWUtYjkzOC0zNGIwY2M0MGVjNWUvZGJhNjM4NjktNGIxYS0z ZTIzLTliMTctZjM4YTlhOGUzMGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvY2YyYjUyNGItMTRiOS00N2VlLWI5 MzgtMzRiMGNjNDBlYzVlL2NmMmI1MjRiLTE0YjktNDdlZS1iOTM4LTM0YjBjYzQw ZWM1ZS5jcmwwHwYDVR0jBBgwFoAUWHUvLPuR0MXWh7HOPDK2TheF76kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jZjJiNTI0Yi0xNGI5LTQ3ZWUtYjkzOC0zNGIw Y2M0MGVjNWUuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAF4QoAwQA F5gIMA0EAgACMAcDBQAmBpRAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJAswGTt9kL/QmsVXr2QpfTU7Qm2 cT+rEgQXkriz2ngTc/6WgBr4hqoMWsKI8RIjJedTKp/Jz8mbV3XlNaxSESdC4nJv v1uUkZ2AmxQZxFPlA+iYBPuBmAeoaotoVDsINQrrGYS7G8FU3e5JnIoAdVle96fH D2icWwbToOzMeJPjhyb83QiEPZEAYZXKMp8S3so9NnnoV/rG5Q1M7luDzyT8CxNT 7a7hSmRqiTkrTGvqlfN/ayNkECdxjcYS8Z4oLTaGqFdkgY2/YugfOjOqPpEd8+DF aZ+z2PZjnw+A6Tj9Ih2+qbuFe8jo1TGpsPryB264tG2XyCByASlHgYME3PA= -----END CERTIFICATE-----Generated at Wed Jul 29 11:39:33 2026 by rpki-client