$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/4b394ad3-feab-3d68-855a-82c3eb623e83.roa File: 4b394ad3-feab-3d68-855a-82c3eb623e83.roa (raw, json) Hash identifier: Knh0xcWv2Kn5wAg16MYy/s7G1vMrEe2YaCUMuLcCbYo= Subject key identifier: 4D:A9:B3:73:DD:95:B8:06:1A:E3:51:3E:E6:8B:FD:EF:80:E9:6E:48 Certificate issuer: /CN=dd3e6032-a6af-4662-8b07-848eeecc3995 Certificate serial: 010D0C9F4328584EA7980E5D7B14D7B3AA0DA640 Authority key identifier: 67:05:BA:E6:0C:E6:EC:BA:69:B6:2B:17:EB:42:FF:2F:6F:4E:02:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/4b394ad3-feab-3d68-855a-82c3eb623e83.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 46824 IP address blocks: 23.172.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/dd3e6032-a6af-4662-8b07-848eeecc3995.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/dd3e6032-a6af-4662-8b07-848eeecc3995.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:98:0e:5d:7b:14:d7:b3:aa:0d:a6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd3e6032-a6af-4662-8b07-848eeecc3995 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=90dad9f6-a545-496d-b7d7-9785c4c4bb69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f7:4e:01:09:b0:23:b4:23:8c:18:a9:b3:5e: 58:24:d1:a0:7e:5c:34:7a:83:5a:87:1c:94:c7:63: 99:3f:0f:2f:56:8d:b2:d8:57:92:db:93:69:80:42: 30:e3:78:54:a2:26:96:b6:25:08:e7:95:61:c4:d2: 01:3f:ec:b7:48:af:36:d4:b5:63:cc:08:a2:88:8c: 84:1d:7a:8d:d5:e2:5a:32:65:cd:53:60:c8:ef:53: a8:d1:fb:76:6e:b9:5f:a9:3d:29:15:25:04:2f:f0: e6:2c:09:6c:0a:9a:2f:0f:bb:8f:ea:89:59:6a:98: cd:98:af:4d:d9:3b:0f:6d:5b:2a:2a:91:ed:6f:91: dc:3a:a7:e9:b6:73:4b:e1:20:19:5e:fe:86:9f:6c: 8c:de:05:2a:03:0e:c9:44:2b:24:f4:bb:04:9a:70: 66:dc:f1:be:57:6f:df:1b:67:2d:76:04:0f:49:6d: 0c:27:0e:27:02:3d:35:24:bd:fc:bd:9e:34:ef:0d: d6:81:e2:14:30:5b:54:53:09:6b:9c:58:f9:5f:e4: 99:42:e2:16:80:09:a5:b0:bb:1e:e9:fd:28:2d:62: d5:2f:e2:96:cb:2a:36:0a:7a:f1:b7:94:eb:80:11: a7:37:80:10:1f:fb:0a:1c:21:84:08:71:4f:9f:0b: a4:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:A9:B3:73:DD:95:B8:06:1A:E3:51:3E:E6:8B:FD:EF:80:E9:6E:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/4b394ad3-feab-3d68-855a-82c3eb623e83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/dd3e6032-a6af-4662-8b07-848eeecc3995.crl X509v3 Authority Key Identifier: keyid:67:05:BA:E6:0C:E6:EC:BA:69:B6:2B:17:EB:42:FF:2F:6F:4E:02:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995.cer sbgp-ipAddrBlock: critical IPv4: 23.172.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:b1:04:8e:62:db:49:6a:e2:bb:37:e6:bb:10:a5:54:0e:91: b6:13:28:89:f1:15:2a:59:8b:01:8e:68:5c:7b:4e:10:5a:8c: 79:b9:54:7f:99:54:26:9a:b0:40:61:12:80:cb:b6:1e:83:f6: 7d:43:96:a9:d6:4f:a7:a2:53:5c:81:4d:fc:5d:aa:fc:23:3f: 4f:8e:44:2a:e9:d6:aa:f1:c3:8b:08:35:5e:0c:65:73:fe:07: a2:f3:df:23:56:ff:de:1f:7c:f3:d2:70:a8:f8:71:da:00:73: 1b:3c:ae:24:bc:83:eb:83:71:c4:47:b5:d0:a6:09:39:90:9c: d0:35:74:53:de:c0:30:ea:a8:82:04:18:11:64:82:85:4d:23: a6:be:5a:99:1f:e4:d1:71:ec:91:27:f4:7c:ef:b9:ba:fa:05: db:a1:da:66:53:1d:4e:08:4d:08:a9:8d:d9:bf:13:c3:60:5e: 2e:cb:39:3b:39:93:8d:73:14:33:53:08:1c:32:f8:72:a3:ce: 46:69:64:4c:9a:20:c8:db:23:6c:59:e0:31:f0:e3:90:6a:7c: a1:35:85:65:bd:de:e1:52:47:de:74:1d:55:34:d1:fc:be:d9: 21:6e:e4:79:0d:83:5b:65:ed:c3:26:72:ef:9c:60:3d:cc:01: 26:7f:0b:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmA5dexTXs6oNpkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGQzZTYwMzItYTZhZi00NjYyLThiMDctODQ4ZWVlY2Mz OTk1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OTBkYWQ5ZjYtYTU0NS00OTZkLWI3ZDctOTc4NWM0YzRiYjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/dOAQmwI7QjjBips15YJNGgflw0eoNahxyU x2OZPw8vVo2y2FeS25NpgEIw43hUoiaWtiUI55VhxNIBP+y3SK821LVjzAiiiIyE HXqN1eJaMmXNU2DI71Oo0ft2brlfqT0pFSUEL/DmLAlsCpovD7uP6olZapjNmK9N 2TsPbVsqKpHtb5HcOqfptnNL4SAZXv6Gn2yM3gUqAw7JRCsk9LsEmnBm3PG+V2/f G2ctdgQPSW0MJw4nAj01JL38vZ407w3WgeIUMFtUUwlrnFj5X+SZQuIWgAmlsLse 6f0oLWLVL+KWyyo2Cnrxt5TrgBGnN4AQH/sKHCGECHFPnwuk2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE2ps3PdlbgGGuNRPuaL/e+A6W5IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kZDNl NjAzMi1hNmFmLTQ2NjItOGIwNy04NDhlZWVjYzM5OTUvNGIzOTRhZDMtZmVhYi0z ZDY4LTg1NWEtODJjM2ViNjIzZTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGQzZTYwMzItYTZhZi00NjYyLThi MDctODQ4ZWVlY2MzOTk1L2RkM2U2MDMyLWE2YWYtNDY2Mi04YjA3LTg0OGVlZWNj Mzk5NS5jcmwwHwYDVR0jBBgwFoAUZwW65gzm7LpptisX60L/L29OAi0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kZDNlNjAzMi1hNmFmLTQ2NjItOGIwNy04NDhl ZWVjYzM5OTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF6yIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFqxBI5i20lq4rs35rsQpVQOkbYTKInxFSpZiwGOaFx7ThBajHm5VH+Z VCaasEBhEoDLth6D9n1DlqnWT6eiU1yBTfxdqvwjP0+ORCrp1qrxw4sINV4MZXP+ B6Lz3yNW/94ffPPScKj4cdoAcxs8riS8g+uDccRHtdCmCTmQnNA1dFPewDDqqIIE GBFkgoVNI6a+Wpkf5NFx7JEn9Hzvubr6Bduh2mZTHU4ITQipjdm/E8NgXi7LOTs5 k41zFDNTCBwy+HKjzkZpZEyaIMjbI2xZ4DHw45BqfKE1hWW93uFSR950HVU00fy+ 2SFu5HkNg1tl7cMmcu+cYD3MASZ/C3o= -----END CERTIFICATE-----Generated at Wed Jul 29 08:14:23 2026 by rpki-client