$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3c126bd3-337a-46ea-8aab-c2cd7594edf9/a611323c-5d49-3b79-a1f9-62dc57283557.roa File: a611323c-5d49-3b79-a1f9-62dc57283557.roa (raw, json) Hash identifier: II+yNmCAFeg8HxpM8aYuKsUvn4jhmTYzNT5uXxhL0nc= Subject key identifier: C4:4C:3B:73:C6:72:3A:AA:84:EC:C3:1B:60:EA:9B:26:81:9C:19:F6 Certificate issuer: /CN=3c126bd3-337a-46ea-8aab-c2cd7594edf9 Certificate serial: 010D0C9F4328584EA788770C6A1535C36EA4FCC0 Authority key identifier: 1C:39:7D:D2:AA:2B:C3:BB:B1:39:4D:AC:AC:48:73:70:52:F9:0A:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3c126bd3-337a-46ea-8aab-c2cd7594edf9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3c126bd3-337a-46ea-8aab-c2cd7594edf9/a611323c-5d49-3b79-a1f9-62dc57283557.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 210000 IP address blocks: 23.128.140.0/24 maxlen: 24 2602:f7b3::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3c126bd3-337a-46ea-8aab-c2cd7594edf9/3c126bd3-337a-46ea-8aab-c2cd7594edf9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3c126bd3-337a-46ea-8aab-c2cd7594edf9/3c126bd3-337a-46ea-8aab-c2cd7594edf9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3c126bd3-337a-46ea-8aab-c2cd7594edf9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:77:0c:6a:15:35:c3:6e:a4:fc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c126bd3-337a-46ea-8aab-c2cd7594edf9 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=2068b8ce-d207-455b-94c0-c2a7077fc4fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b2:9f:2f:f5:b9:53:0c:10:f5:f2:84:f3:87: 0f:47:02:8d:24:ff:78:cf:bd:d7:de:e9:8b:30:15: 19:2c:37:1e:bd:f7:3c:50:c3:27:59:86:82:c4:b4: 7b:94:b1:92:12:dd:00:2c:ca:dd:f9:31:6c:4b:5a: b9:9b:8f:d7:88:8e:2f:71:53:44:b8:e2:b7:03:6e: 40:9c:e2:7b:3c:3e:f6:13:25:90:7e:5f:a0:20:d4: 6d:bb:92:e7:1e:6a:d3:5f:7a:74:f2:01:6a:e6:ee: f6:3c:bc:de:29:fd:cd:e7:9d:f7:63:48:07:fa:4d: e1:40:37:fa:62:e0:c3:fb:05:52:36:68:7c:bc:9b: 0a:a4:76:b3:71:ed:55:c5:87:f8:79:43:cf:07:bd: 6e:11:f4:ad:fe:20:1c:3c:ed:fa:78:fa:6e:be:b8: 7b:b3:10:4a:6c:7f:e0:bb:36:d5:28:46:bd:fc:d0: 6c:83:f5:9b:2d:a3:71:d8:ef:55:1d:5d:98:95:1a: 36:a0:65:bb:75:8c:d9:48:2b:1a:70:20:f7:1c:d5: df:3c:5a:9a:45:75:b4:37:b8:76:c4:4e:58:a6:27: 73:41:06:72:92:19:49:4a:30:8d:ec:9c:7e:52:72: c6:2e:c4:3b:bd:73:9e:2c:5e:05:97:69:d3:95:c6: 2f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:4C:3B:73:C6:72:3A:AA:84:EC:C3:1B:60:EA:9B:26:81:9C:19:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3c126bd3-337a-46ea-8aab-c2cd7594edf9/a611323c-5d49-3b79-a1f9-62dc57283557.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3c126bd3-337a-46ea-8aab-c2cd7594edf9/3c126bd3-337a-46ea-8aab-c2cd7594edf9.crl X509v3 Authority Key Identifier: keyid:1C:39:7D:D2:AA:2B:C3:BB:B1:39:4D:AC:AC:48:73:70:52:F9:0A:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3c126bd3-337a-46ea-8aab-c2cd7594edf9.cer sbgp-ipAddrBlock: critical IPv4: 23.128.140.0/24 IPv6: 2602:f7b3::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:66:5b:d9:05:e4:a0:b9:4c:1c:57:78:6b:36:ac:10:b9:fa: ae:ee:96:aa:dc:3c:9b:94:d9:3b:25:9a:9a:b7:73:e8:e1:00: 13:19:5d:18:94:e4:d8:b9:2b:3d:02:e1:51:c4:ba:ec:ef:8b: 86:bd:07:15:5e:e8:5d:49:b9:0b:05:a8:02:50:9d:cb:31:f3: 6d:40:9d:ff:f5:c3:ce:42:c2:0c:05:38:67:ef:59:13:5e:88: 0a:76:d0:55:7d:2a:87:bc:8e:c3:de:5a:53:b3:19:7d:f5:cc: 29:6f:e1:52:a9:3f:bf:40:ac:f2:a0:42:d6:d6:df:fd:2b:46: 30:6c:07:64:37:41:09:99:ac:3a:85:f5:71:6c:56:71:e3:da: fd:7e:a3:48:11:e2:0f:5d:36:3c:a2:b5:fc:2a:92:8e:1b:84: 56:7e:b8:b6:b9:74:e2:90:c4:7b:58:a1:83:3b:0e:8d:eb:fb: 20:a2:c6:09:94:d1:a9:12:00:f8:57:47:71:c6:32:9f:ce:8f: d6:22:bd:96:c2:e0:20:b3:71:69:4f:93:88:ef:f6:4b:11:aa: 83:06:82:cf:8e:90:1d:73:41:b8:a3:34:e7:ce:96:bd:aa:81: 78:fa:62:4b:05:10:63:ed:8f:9c:11:66:1a:2c:23:f5:79:6b: b9:60:d9:31 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE6niHcMahU1w26k/MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2MxMjZiZDMtMzM3YS00NmVhLThhYWItYzJjZDc1OTRl ZGY5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MjA2OGI4Y2UtZDIwNy00NTViLTk0YzAtYzJhNzA3N2ZjNGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLKfL/W5UwwQ9fKE84cPRwKNJP94z73X3umL MBUZLDcevfc8UMMnWYaCxLR7lLGSEt0ALMrd+TFsS1q5m4/XiI4vcVNEuOK3A25A nOJ7PD72EyWQfl+gINRtu5LnHmrTX3p08gFq5u72PLzeKf3N5533Y0gH+k3hQDf6 YuDD+wVSNmh8vJsKpHazce1VxYf4eUPPB71uEfSt/iAcPO36ePpuvrh7sxBKbH/g uzbVKEa9/NBsg/WbLaNx2O9VHV2YlRo2oGW7dYzZSCsacCD3HNXfPFqaRXW0N7h2 xE5YpidzQQZykhlJSjCN7Jx+UnLGLsQ7vXOeLF4Fl2nTlcYvHwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFMRMO3PGcjqqhOzDG2DqmyaBnBn2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zYzEy NmJkMy0zMzdhLTQ2ZWEtOGFhYi1jMmNkNzU5NGVkZjkvYTYxMTMyM2MtNWQ0OS0z Yjc5LWExZjktNjJkYzU3MjgzNTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvM2MxMjZiZDMtMzM3YS00NmVhLThh YWItYzJjZDc1OTRlZGY5LzNjMTI2YmQzLTMzN2EtNDZlYS04YWFiLWMyY2Q3NTk0 ZWRmOS5jcmwwHwYDVR0jBBgwFoAUHDl90qorw7uxOU2srEhzcFL5CnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zYzEyNmJkMy0zMzdhLTQ2ZWEtOGFhYi1jMmNk NzU5NGVkZjkuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4CMMA4E AgACMAgDBgAmAvezADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAuZlvZBeSguUwcV3hrNqwQufqu7paq3Dyb lNk7JZqat3Po4QATGV0YlOTYuSs9AuFRxLrs74uGvQcVXuhdSbkLBagCUJ3LMfNt QJ3/9cPOQsIMBThn71kTXogKdtBVfSqHvI7D3lpTsxl99cwpb+FSqT+/QKzyoELW 1t/9K0YwbAdkN0EJmaw6hfVxbFZx49r9fqNIEeIPXTY8orX8KpKOG4RWfri2uXTi kMR7WKGDOw6N6/sgosYJlNGpEgD4V0dxxjKfzo/WIr2WwuAgs3FpT5OI7/ZLEaqD BoLPjpAdc0G4ozTnzpa9qoF4+mJLBRBj7Y+cEWYaLCP1eWu5YNkx -----END CERTIFICATE-----Generated at Wed Jul 29 05:43:51 2026 by rpki-client