$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/97a9023c-3b6e-3158-89d8-efe63001f64e.roa File: 97a9023c-3b6e-3158-89d8-efe63001f64e.roa (raw, json) Hash identifier: sbli5PiubVAM3LOsPm96IFIPc8V9hkTHXF9lwg0W8Fw= Subject key identifier: 94:4F:69:0A:21:E1:3F:F1:7C:22:08:8E:4D:51:8F:92:04:34:C3:23 Certificate issuer: /CN=dfd5f35d-5b02-484a-8e0e-a730abd98fa2 Certificate serial: 010D0C9F4328584EA7887AA716582A800E1E4B00 Authority key identifier: 1A:A3:E3:68:50:AE:CB:27:31:59:DD:A7:8B:1F:10:C2:59:10:9B:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/97a9023c-3b6e-3158-89d8-efe63001f64e.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 62516 IP address blocks: 23.140.104.0/24 maxlen: 32 169.128.84.0/22 maxlen: 32 2604:4940::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:7a:a7:16:58:2a:80:0e:1e:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfd5f35d-5b02-484a-8e0e-a730abd98fa2 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=4422d935-d9fa-44cb-b50f-7029c2db1d96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:90:c0:43:5c:d8:78:61:e4:e7:59:56:f0:95: c3:51:48:85:37:93:68:99:f6:6a:9a:81:e2:b0:06: 76:0a:b2:b0:59:80:da:08:27:de:5c:36:94:2e:ec: 0d:2e:47:b6:30:cc:1d:bf:1d:76:9b:ba:c3:ef:83: f8:ab:93:ce:19:ac:d3:30:66:60:42:48:8c:fd:8a: f1:c5:d0:74:90:72:97:10:2a:ba:cd:ba:87:a3:07: f3:be:44:2a:bd:9f:fa:42:71:22:8e:ae:8b:31:bd: c3:08:4a:39:70:5c:d5:d7:e3:c9:c0:3a:d6:59:4e: aa:80:c5:e9:38:30:35:e4:04:25:6c:7b:19:b2:58: f4:90:96:43:cf:83:25:9d:21:ba:6a:d1:07:06:5d: 3a:0c:a4:00:10:e7:a8:36:f0:dd:cd:f0:65:13:43: d7:85:76:8c:d7:e0:0d:39:94:74:95:d1:06:a3:15: c5:85:36:ab:19:e0:9e:34:e1:f3:ba:23:6b:13:28: 67:de:56:4a:e8:da:07:3f:a8:7e:2f:ad:d6:7d:87: 43:bf:e1:de:36:a5:91:cd:e0:d8:11:ed:73:c2:90: b8:e6:4d:a0:46:5f:48:fd:c4:bb:f7:54:a4:9c:15: 8b:42:f6:0d:b4:77:f6:a4:10:2c:65:12:46:d1:5e: 25:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:4F:69:0A:21:E1:3F:F1:7C:22:08:8E:4D:51:8F:92:04:34:C3:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/97a9023c-3b6e-3158-89d8-efe63001f64e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.crl X509v3 Authority Key Identifier: keyid:1A:A3:E3:68:50:AE:CB:27:31:59:DD:A7:8B:1F:10:C2:59:10:9B:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.cer sbgp-ipAddrBlock: critical IPv4: 23.140.104.0/24 169.128.84.0/22 IPv6: 2604:4940::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:e6:a7:83:28:5f:dc:8b:f1:dc:df:76:70:77:e3:e1:b7:8b: 8d:c2:22:db:61:23:68:4d:e4:a0:3a:1f:e5:07:6f:77:ca:3e: 6c:11:36:3b:09:12:39:ba:97:2c:0d:73:bb:34:55:76:dd:43: 02:ac:6c:9c:e9:46:4d:a3:53:9f:ea:e0:51:33:f4:ac:1c:ca: c0:df:65:75:a4:ca:c2:b4:1f:c5:7a:4a:67:b9:e5:a7:4d:12: 9e:f2:a5:b3:66:8e:b3:8f:6f:3c:82:b2:6f:e6:0a:22:6e:21: 4e:70:5b:18:03:0f:d2:09:58:fb:8e:1c:e2:9b:c1:f4:40:90: 11:e0:32:76:81:c2:c7:f6:74:ee:31:24:f7:b0:09:60:32:50: d9:57:8e:0e:e1:99:7f:ea:d3:2a:f8:f1:d0:2c:a0:e7:7c:b5: ce:e8:7e:5e:f2:07:c7:0d:1c:50:8a:ff:f9:68:15:dd:79:87: 52:ce:73:71:98:89:f3:e2:1d:cf:9e:b7:5b:80:1b:96:22:7c: ea:82:31:44:75:9f:70:c5:de:73:2f:98:2b:43:48:22:66:d3: 76:d5:11:2d:08:83:1d:c4:23:b3:1a:00:61:07:bd:49:0d:17: 0b:bb:bc:94:9e:27:00:37:ef:a6:c8:5c:d9:5f:30:ea:69:fb: bb:d9:fe:a3 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWE6niHqnFlgqgA4eSwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZkNWYzNWQtNWIwMi00ODRhLThlMGUtYTczMGFiZDk4 ZmEyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NDQyMmQ5MzUtZDlmYS00NGNiLWI1MGYtNzAyOWMyZGIxZDk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpDAQ1zYeGHk51lW8JXDUUiFN5NomfZqmoHi sAZ2CrKwWYDaCCfeXDaULuwNLke2MMwdvx12m7rD74P4q5POGazTMGZgQkiM/Yrx xdB0kHKXECq6zbqHowfzvkQqvZ/6QnEijq6LMb3DCEo5cFzV1+PJwDrWWU6qgMXp ODA15AQlbHsZslj0kJZDz4MlnSG6atEHBl06DKQAEOeoNvDdzfBlE0PXhXaM1+AN OZR0ldEGoxXFhTarGeCeNOHzuiNrEyhn3lZK6NoHP6h+L63WfYdDv+HeNqWRzeDY Ee1zwpC45k2gRl9I/cS791SknBWLQvYNtHf2pBAsZRJG0V4lKwIDAQABo4IDajCC A2YwHQYDVR0OBBYEFJRPaQoh4T/xfCIIjk1Rj5IENMMjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kZmQ1 ZjM1ZC01YjAyLTQ4NGEtOGUwZS1hNzMwYWJkOThmYTIvOTdhOTAyM2MtM2I2ZS0z MTU4LTg5ZDgtZWZlNjMwMDFmNjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGZkNWYzNWQtNWIwMi00ODRhLThl MGUtYTczMGFiZDk4ZmEyL2RmZDVmMzVkLTViMDItNDg0YS04ZTBlLWE3MzBhYmQ5 OGZhMi5jcmwwHwYDVR0jBBgwFoAUGqPjaFCuyycxWd2nix8QwlkQm0UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kZmQ1ZjM1ZC01YjAyLTQ4NGEtOGUwZS1hNzMw YWJkOThmYTIuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAF4xoAwQC qYBUMA0EAgACMAcDBQAmBElAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGXmp4MoX9yL8dzfdnB34+G3i43C ItthI2hN5KA6H+UHb3fKPmwRNjsJEjm6lywNc7s0VXbdQwKsbJzpRk2jU5/q4FEz 9KwcysDfZXWkysK0H8V6Sme55adNEp7ypbNmjrOPbzyCsm/mCiJuIU5wWxgDD9IJ WPuOHOKbwfRAkBHgMnaBwsf2dO4xJPewCWAyUNlXjg7hmX/q0yr48dAsoOd8tc7o fl7yB8cNHFCK//loFd15h1LOc3GYifPiHc+et1uAG5YifOqCMUR1n3DF3nMvmCtD SCJm03bVES0Igx3EI7MaAGEHvUkNFwu7vJSeJwA376bIXNlfMOpp+7vZ/qM= -----END CERTIFICATE-----Generated at Wed Jul 29 04:43:24 2026 by rpki-client