$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/04b35b42-a07c-34ef-9f3a-c2f6e5bfb9de.roa File: 04b35b42-a07c-34ef-9f3a-c2f6e5bfb9de.roa (raw, json) Hash identifier: qK6m8w2tnk8U/vj2qYGSH+/V0v6lDxAmae7fNmXVVwQ= Subject key identifier: DD:DF:05:F6:CA:20:93:FF:91:EE:A3:96:CE:DC:BC:D4:34:D9:64:F7 Certificate issuer: /CN=21873e5a-a16d-4890-8dfe-c281bf6e020e Certificate serial: 010D0C9F4328584EA78F462C22718B8BF0FDD000 Authority key identifier: C7:79:A7:C6:3F:DA:5B:57:55:3E:FC:42:87:91:EE:1B:37:F1:C2:A6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/04b35b42-a07c-34ef-9f3a-c2f6e5bfb9de.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 49585 IP address blocks: 23.149.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/21873e5a-a16d-4890-8dfe-c281bf6e020e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/21873e5a-a16d-4890-8dfe-c281bf6e020e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8f:46:2c:22:71:8b:8b:f0:fd:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21873e5a-a16d-4890-8dfe-c281bf6e020e Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=f8c77944-780d-4f2d-8cc7-dc3cc6181a23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:84:43:4d:73:21:a8:19:59:28:64:cf:2d:b6: 69:d9:25:88:df:c7:f5:3d:f1:8c:57:0a:c8:dd:37: 8d:77:4a:d0:93:2b:e6:05:30:44:2e:c9:71:41:a0: 43:67:ae:0c:ec:64:cf:be:41:04:9a:75:85:2a:f2: 72:38:c4:30:c6:21:48:a1:e0:ee:00:1c:47:c4:f2: b4:d9:37:30:b9:8c:6b:99:18:4b:e7:b1:40:5f:2d: 0d:c3:df:e9:58:c3:b5:b8:1a:97:64:04:97:9d:c4: 67:42:af:30:ec:05:17:7c:f8:0e:f1:dd:1c:e5:da: 9a:43:30:3a:b7:08:4c:b2:1b:e5:83:1b:3e:b5:13: 42:ae:01:ad:e1:1f:6d:1e:e7:47:d0:3c:aa:54:04: ca:4f:a1:28:c6:18:42:be:f4:2f:1f:55:c6:09:25: 64:19:7b:b9:36:95:b0:dc:f7:45:61:34:c5:a6:e6: 5f:ab:12:93:7f:33:8a:23:98:67:8c:ae:91:dd:be: 3f:13:ea:68:c5:11:92:c7:38:60:a5:bc:73:f7:80: 6d:31:9f:65:d1:fc:f3:6b:b3:83:92:6e:02:0f:c6: 5f:b2:9b:86:33:42:56:42:ba:11:ef:e5:11:16:3f: 3a:23:bc:2e:31:cf:a9:8e:49:0e:e5:1f:16:e8:e2: 0a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:DF:05:F6:CA:20:93:FF:91:EE:A3:96:CE:DC:BC:D4:34:D9:64:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/04b35b42-a07c-34ef-9f3a-c2f6e5bfb9de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/21873e5a-a16d-4890-8dfe-c281bf6e020e.crl X509v3 Authority Key Identifier: keyid:C7:79:A7:C6:3F:DA:5B:57:55:3E:FC:42:87:91:EE:1B:37:F1:C2:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e.cer sbgp-ipAddrBlock: critical IPv4: 23.149.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:8c:4a:bf:39:35:50:a8:2a:ce:f9:8a:58:84:2a:a0:d2:18: 63:bd:78:85:ad:a9:7a:78:26:75:aa:dc:54:8c:2d:ec:94:c2: a4:ae:51:b9:13:d9:79:41:4c:cf:01:19:cd:45:be:f1:d8:ff: d9:8a:9b:ea:1e:99:6c:29:38:09:c4:95:b5:e9:a8:4f:e6:85: 11:10:31:63:8c:35:c4:d3:61:cb:8a:57:f3:f0:e5:3d:05:36: fb:07:dd:2e:11:8a:f6:8b:bc:7f:a5:74:b9:f9:b4:c4:2a:59: 27:2b:84:5d:41:2a:ff:80:6c:03:61:2c:41:9b:a6:6c:2a:21: bc:c6:3e:c5:5c:0d:be:34:2e:ae:ff:dc:16:24:19:79:90:c4: e2:05:a7:56:6e:7f:d2:fe:8c:51:bc:67:a3:23:bb:c9:04:80: 4d:62:f1:60:42:82:94:d6:55:41:27:1a:31:0b:71:8e:60:b5: 11:80:e0:da:91:c3:09:9c:59:32:6e:5b:74:8b:88:23:93:5b: aa:3f:5f:75:1d:7d:1b:94:82:f8:45:5d:c6:87:28:68:76:5e: 8b:84:70:e4:89:77:aa:05:f0:d4:30:80:e3:2a:9f:5e:0c:e7: 6e:29:6e:e1:f3:7a:a8:63:bc:05:9c:24:74:b4:ef:75:0c:78: cc:82:aa:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nj0YsInGLi/D90AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjE4NzNlNWEtYTE2ZC00ODkwLThkZmUtYzI4MWJmNmUw MjBlMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZjhjNzc5NDQtNzgwZC00ZjJkLThjYzctZGMzY2M2MTgxYTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4RDTXMhqBlZKGTPLbZp2SWI38f1PfGMVwrI 3TeNd0rQkyvmBTBELslxQaBDZ64M7GTPvkEEmnWFKvJyOMQwxiFIoeDuABxHxPK0 2TcwuYxrmRhL57FAXy0Nw9/pWMO1uBqXZASXncRnQq8w7AUXfPgO8d0c5dqaQzA6 twhMshvlgxs+tRNCrgGt4R9tHudH0DyqVATKT6EoxhhCvvQvH1XGCSVkGXu5NpWw 3PdFYTTFpuZfqxKTfzOKI5hnjK6R3b4/E+poxRGSxzhgpbxz94BtMZ9l0fzza7OD km4CD8ZfspuGM0JWQroR7+URFj86I7wuMc+pjkkO5R8W6OIK1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN3fBfbKIJP/ke6jls7cvNQ02WT3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yMTg3 M2U1YS1hMTZkLTQ4OTAtOGRmZS1jMjgxYmY2ZTAyMGUvMDRiMzViNDItYTA3Yy0z NGVmLTlmM2EtYzJmNmU1YmZiOWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjE4NzNlNWEtYTE2ZC00ODkwLThk ZmUtYzI4MWJmNmUwMjBlLzIxODczZTVhLWExNmQtNDg5MC04ZGZlLWMyODFiZjZl MDIwZS5jcmwwHwYDVR0jBBgwFoAUx3mnxj/aW1dVPvxCh5HuGzfxwqYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yMTg3M2U1YS1hMTZkLTQ4OTAtOGRmZS1jMjgx YmY2ZTAyMGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5UoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGuMSr85NVCoKs75iliEKqDSGGO9eIWtqXp4JnWq3FSMLeyUwqSuUbkT 2XlBTM8BGc1FvvHY/9mKm+oemWwpOAnElbXpqE/mhREQMWOMNcTTYcuKV/Pw5T0F NvsH3S4RivaLvH+ldLn5tMQqWScrhF1BKv+AbANhLEGbpmwqIbzGPsVcDb40Lq7/ 3BYkGXmQxOIFp1Zuf9L+jFG8Z6Mju8kEgE1i8WBCgpTWVUEnGjELcY5gtRGA4NqR wwmcWTJuW3SLiCOTW6o/X3UdfRuUgvhFXcaHKGh2XouEcOSJd6oF8NQwgOMqn14M 524pbuHzeqhjvAWcJHS073UMeMyCqv8= -----END CERTIFICATE-----Generated at Wed Jul 29 10:08:49 2026 by rpki-client