$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/b8ed32fa-028c-3cfb-950c-51608cf30050.roa File: b8ed32fa-028c-3cfb-950c-51608cf30050.roa (raw, json) Hash identifier: 3hNKf03H1vCWHe5Hyp0pGKqaoczvlWbzxQRosqVD89Y= Subject key identifier: A5:94:64:AB:3E:32:B3:ED:00:A5:34:35:1C:01:7F:76:E2:FC:FD:9E Certificate issuer: /CN=cf31296f-8f2f-4268-8599-4c47d25cfcf0 Certificate serial: 010D0C9F4328584EA79C49390508EF828C974800 Authority key identifier: FA:BA:17:48:6C:35:CD:8A:8B:3C:16:60:C4:6F:9F:58:0E:2F:5E:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/b8ed32fa-028c-3cfb-950c-51608cf30050.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 11913 IP address blocks: 23.163.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/cf31296f-8f2f-4268-8599-4c47d25cfcf0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/cf31296f-8f2f-4268-8599-4c47d25cfcf0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9c:49:39:05:08:ef:82:8c:97:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf31296f-8f2f-4268-8599-4c47d25cfcf0 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=90f3c239-eb64-418c-b778-8cf852c2e1ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:90:04:9d:c4:0e:79:64:3e:7d:24:b6:bf:16: 91:ad:5e:e9:87:2c:40:bc:10:d9:41:a0:15:9f:1f: 26:47:91:85:55:35:93:8d:90:30:f0:67:48:b9:8e: ff:eb:01:11:f4:90:ae:ea:67:e2:eb:49:c7:fe:2a: 6d:5f:37:30:9d:00:bd:36:2e:d7:59:b9:f6:5a:28: 26:e7:d4:85:70:c4:2b:83:92:ee:37:99:75:5e:c3: 0a:4f:9e:86:a3:0e:bc:44:7c:6e:0b:0d:8d:eb:f9: ab:0a:e7:f5:e5:f8:4f:83:85:65:f1:3e:94:94:cf: a6:7f:00:8f:ba:2a:af:5e:61:a7:5e:a1:59:07:4d: 66:26:30:af:e4:12:f3:99:f4:e5:13:c3:3a:49:3a: ba:f5:40:a5:0d:c8:66:ef:5b:22:ff:d5:fc:19:0c: dc:e3:28:e0:f8:d5:26:3a:66:bb:5c:5f:4e:0c:7b: eb:e0:be:47:0a:bf:5c:5f:e2:30:6b:ef:dd:ec:28: 9c:ec:63:cb:e7:ac:75:e0:31:e0:e3:97:ea:49:51: d2:54:f2:af:69:91:fa:e4:03:ae:bf:57:d2:78:73: dc:2a:63:c2:a9:0e:40:5b:42:44:1d:ed:b2:4d:54: 6e:09:f9:53:32:76:19:63:fb:33:a2:3b:50:88:9b: 34:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:94:64:AB:3E:32:B3:ED:00:A5:34:35:1C:01:7F:76:E2:FC:FD:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/b8ed32fa-028c-3cfb-950c-51608cf30050.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/cf31296f-8f2f-4268-8599-4c47d25cfcf0.crl X509v3 Authority Key Identifier: keyid:FA:BA:17:48:6C:35:CD:8A:8B:3C:16:60:C4:6F:9F:58:0E:2F:5E:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0.cer sbgp-ipAddrBlock: critical IPv4: 23.163.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:75:93:83:84:35:b5:0f:33:bd:ca:76:b5:15:02:9a:ca:2f: 1a:1c:7b:97:2c:8c:5d:32:9c:f7:02:7d:c1:97:a9:b1:85:2e: c0:05:be:8f:08:18:1b:9c:b3:38:73:40:0d:40:85:6c:07:73: 8d:de:1d:2b:2c:84:ef:c7:c1:5c:40:a1:b9:7d:db:25:a9:4f: 29:92:67:f8:4c:9d:ac:74:6c:56:12:1c:c2:ea:94:fc:c2:37: 18:30:40:8b:a3:91:b5:39:f6:ab:5d:e0:38:96:16:81:2c:f0: 94:51:59:2a:f9:c2:75:24:c0:a3:bc:fa:69:ae:32:ac:47:2f: a3:ef:df:a5:40:1c:61:32:f9:6f:09:d8:e5:8f:b9:e2:70:d5: d5:06:f7:dc:af:9d:fe:ba:26:d6:74:ed:f6:de:49:a3:e8:62: d1:6f:f3:b5:61:9c:e1:03:e2:16:b5:73:f9:9b:3c:45:be:9c: d0:cf:c0:8b:26:98:1e:66:98:79:f9:47:9d:33:8f:9f:11:a1: 5f:cc:22:bc:f4:3e:92:44:99:6b:aa:dc:17:33:30:b7:55:ce: c0:e4:31:2c:8a:fe:0e:6b:65:8a:56:69:6e:f5:e5:c1:72:5e: a0:b2:28:11:06:e9:33:98:0e:bd:5e:a3:c3:6c:aa:5f:39:43: 79:54:06:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnEk5BQjvgoyXSAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YzMTI5NmYtOGYyZi00MjY4LTg1OTktNGM0N2QyNWNm Y2YwMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OTBmM2MyMzktZWI2NC00MThjLWI3NzgtOGNmODUyYzJlMWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZAEncQOeWQ+fSS2vxaRrV7phyxAvBDZQaAV nx8mR5GFVTWTjZAw8GdIuY7/6wER9JCu6mfi60nH/iptXzcwnQC9Ni7XWbn2Wigm 59SFcMQrg5LuN5l1XsMKT56Gow68RHxuCw2N6/mrCuf15fhPg4Vl8T6UlM+mfwCP uiqvXmGnXqFZB01mJjCv5BLzmfTlE8M6STq69UClDchm71si/9X8GQzc4yjg+NUm Oma7XF9ODHvr4L5HCr9cX+Iwa+/d7Cic7GPL56x14DHg45fqSVHSVPKvaZH65AOu v1fSeHPcKmPCqQ5AW0JEHe2yTVRuCflTMnYZY/szojtQiJs0jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKWUZKs+MrPtAKU0NRwBf3bi/P2eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jZjMx Mjk2Zi04ZjJmLTQyNjgtODU5OS00YzQ3ZDI1Y2ZjZjAvYjhlZDMyZmEtMDI4Yy0z Y2ZiLTk1MGMtNTE2MDhjZjMwMDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvY2YzMTI5NmYtOGYyZi00MjY4LTg1 OTktNGM0N2QyNWNmY2YwL2NmMzEyOTZmLThmMmYtNDI2OC04NTk5LTRjNDdkMjVj ZmNmMC5jcmwwHwYDVR0jBBgwFoAU+roXSGw1zYqLPBZgxG+fWA4vXmQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jZjMxMjk2Zi04ZjJmLTQyNjgtODU5OS00YzQ3 ZDI1Y2ZjZjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6N4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACB1k4OENbUPM73KdrUVAprKLxoce5csjF0ynPcCfcGXqbGFLsAFvo8I GBucszhzQA1AhWwHc43eHSsshO/HwVxAobl92yWpTymSZ/hMnax0bFYSHMLqlPzC NxgwQIujkbU59qtd4DiWFoEs8JRRWSr5wnUkwKO8+mmuMqxHL6Pv36VAHGEy+W8J 2OWPueJw1dUG99yvnf66JtZ07fbeSaPoYtFv87VhnOED4ha1c/mbPEW+nNDPwIsm mB5mmHn5R50zj58RoV/MIrz0PpJEmWuq3BczMLdVzsDkMSyK/g5rZYpWaW715cFy XqCyKBEG6TOYDr1eo8Nsql85Q3lUBmo= -----END CERTIFICATE-----Generated at Thu Jul 30 00:31:48 2026 by rpki-client