$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78/f2b2ef5e-e197-3273-9721-b9a575e1ad08.roa File: f2b2ef5e-e197-3273-9721-b9a575e1ad08.roa (raw, json) Hash identifier: nutmZOzlKB8KJlYKdlnA/+I6vr7edsm/WlcgYrKfxfs= Subject key identifier: 58:5E:E5:7B:FB:36:95:DA:08:9D:BB:FC:DA:26:49:76:0F:E9:2A:85 Certificate issuer: /CN=42eee53c-f373-4efe-aed3-4c501c9dde78 Certificate serial: 010D0C9F4328584ED9C75DADA1D1F8EEDDED0EC0 Authority key identifier: A0:35:2C:B8:0B:B4:72:AB:EE:B9:9C:1B:4A:68:ED:08:B8:A1:FD:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78/f2b2ef5e-e197-3273-9721-b9a575e1ad08.roa Signing time: Sun 16 Aug 2026 01:00:14 +0000 ROA not before: Sun 16 Aug 2026 01:00:14 +0000 ROA not after: Sat 14 Nov 2026 02:00:14 +0000 asID: 401474 IP address blocks: 23.129.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78/42eee53c-f373-4efe-aed3-4c501c9dde78.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78/42eee53c-f373-4efe-aed3-4c501c9dde78.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d9:c7:5d:ad:a1:d1:f8:ee:dd:ed:0e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42eee53c-f373-4efe-aed3-4c501c9dde78 Validity Not Before: Aug 16 01:00:14 2026 GMT Not After : Nov 14 02:00:14 2026 GMT Subject: CN=b9625043-2b73-440c-a9c7-733739e3bedd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:97:b7:71:87:a4:44:dd:66:2f:de:7a:26:99: f2:60:64:bd:e9:a6:b2:07:cb:0d:25:a4:f2:b7:0a: 7d:00:aa:ed:2d:42:ed:b9:01:02:b5:7f:99:f6:5a: 4a:d5:ac:9e:89:29:42:5b:a8:e8:0f:fe:31:86:40: ec:5c:13:37:02:b6:1b:89:c1:d2:7f:6f:49:a1:d2: 7b:28:8b:8c:b1:a4:40:15:a9:1b:3a:36:4e:35:fd: 4d:9e:a1:95:03:2b:ea:f4:65:57:2d:c4:d3:f6:5c: e4:64:22:a9:02:77:f7:1d:3b:09:f8:11:d8:1d:53: 85:af:4d:ad:a4:6c:7b:50:82:20:80:96:92:1e:3c: ff:e1:97:23:c4:d1:6d:80:13:20:48:a3:6f:20:5c: 45:07:32:01:d4:e0:ee:7f:c9:35:3f:05:7a:7b:2b: 2c:15:cf:ec:ea:7a:c9:f2:65:2d:9e:8b:8d:ac:34: 6b:e7:c6:f9:ee:8b:3c:48:cf:76:5a:2a:cb:5c:be: a7:d5:0e:a1:25:fc:71:b2:06:41:ef:9f:2d:a8:26: a7:eb:de:9c:51:e7:e5:e8:01:c4:d0:18:1d:ff:5a: a6:31:5a:14:d1:c0:23:5f:90:6a:7c:8c:4c:3a:d3: 18:48:22:c1:6d:72:6b:8f:3e:46:29:00:52:8f:cb: 43:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:5E:E5:7B:FB:36:95:DA:08:9D:BB:FC:DA:26:49:76:0F:E9:2A:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78/f2b2ef5e-e197-3273-9721-b9a575e1ad08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78/42eee53c-f373-4efe-aed3-4c501c9dde78.crl X509v3 Authority Key Identifier: keyid:A0:35:2C:B8:0B:B4:72:AB:EE:B9:9C:1B:4A:68:ED:08:B8:A1:FD:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78.cer sbgp-ipAddrBlock: critical IPv4: 23.129.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:58:6b:59:0f:3e:4e:04:aa:14:82:a1:f1:37:9c:2f:2a:43: f2:db:ff:b4:35:3f:24:d5:07:d3:95:6b:7f:3f:a8:f3:78:5e: 6e:ad:5b:5b:79:5d:36:a4:b5:75:98:a8:b3:d9:01:79:2d:ce: 91:62:f0:8e:89:a6:3d:96:a7:e1:20:60:30:70:32:e8:c8:ae: 37:c1:b6:fe:f3:f0:21:7b:ec:47:c2:7e:41:39:64:fc:d1:4f: 83:78:3e:63:1f:59:36:b7:24:6d:b4:dd:6c:22:94:c3:ee:10: ff:0e:1f:bb:4a:c3:bf:c5:dc:0b:83:f2:72:56:3d:bf:12:57: a0:f1:66:78:dd:8c:87:70:ed:82:25:bf:0a:29:9d:01:0a:c3: 2a:87:29:87:2f:ff:e1:97:d8:06:aa:52:95:cc:dd:b4:68:9e: 00:d7:b1:b0:00:75:00:a5:a5:4b:7f:c2:aa:ae:d1:ad:13:fd: eb:ca:bf:4d:8f:0a:fd:9f:48:20:fc:20:76:0f:22:ca:ce:40: b5:a3:66:e6:8a:fa:0e:0b:7d:ea:5f:63:91:85:b9:6d:1d:f9: b9:ce:82:9e:ab:ca:d2:e7:de:43:63:f2:98:0a:0f:69:93:a3: 91:7e:cc:a1:2e:b8:94:83:fe:22:c4:b5:90:27:ef:b0:01:76: 9d:70:5d:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Zx12todH47t3tDsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDJlZWU1M2MtZjM3My00ZWZlLWFlZDMtNGM1MDFjOWRk ZTc4MB4XDTI2MDgxNjAxMDAxNFoXDTI2MTExNDAyMDAxNFowLzEtMCsGA1UEAxMk Yjk2MjUwNDMtMmI3My00NDBjLWE5YzctNzMzNzM5ZTNiZWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pe3cYekRN1mL956JpnyYGS96aayB8sNJaTy twp9AKrtLULtuQECtX+Z9lpK1ayeiSlCW6joD/4xhkDsXBM3ArYbicHSf29JodJ7 KIuMsaRAFakbOjZONf1NnqGVAyvq9GVXLcTT9lzkZCKpAnf3HTsJ+BHYHVOFr02t pGx7UIIggJaSHjz/4ZcjxNFtgBMgSKNvIFxFBzIB1ODuf8k1PwV6eyssFc/s6nrJ 8mUtnouNrDRr58b57os8SM92WirLXL6n1Q6hJfxxsgZB758tqCan696cUefl6AHE 0Bgd/1qmMVoU0cAjX5BqfIxMOtMYSCLBbXJrjz5GKQBSj8tDlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFhe5Xv7NpXaCJ27/NomSXYP6SqFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80MmVl ZTUzYy1mMzczLTRlZmUtYWVkMy00YzUwMWM5ZGRlNzgvZjJiMmVmNWUtZTE5Ny0z MjczLTk3MjEtYjlhNTc1ZTFhZDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNDJlZWU1M2MtZjM3My00ZWZlLWFl ZDMtNGM1MDFjOWRkZTc4LzQyZWVlNTNjLWYzNzMtNGVmZS1hZWQzLTRjNTAxYzlk ZGU3OC5jcmwwHwYDVR0jBBgwFoAUoDUsuAu0cqvuuZwbSmjtCLih/ccwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi80MmVlZTUzYy1mMzczLTRlZmUtYWVkMy00YzUw MWM5ZGRlNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4EMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGtYa1kPPk4EqhSCofE3nC8qQ/Lb/7Q1PyTVB9OVa38/qPN4Xm6tW1t5 XTaktXWYqLPZAXktzpFi8I6Jpj2Wp+EgYDBwMujIrjfBtv7z8CF77EfCfkE5ZPzR T4N4PmMfWTa3JG203WwilMPuEP8OH7tKw7/F3AuD8nJWPb8SV6DxZnjdjIdw7YIl vwopnQEKwyqHKYcv/+GX2AaqUpXM3bRongDXsbAAdQClpUt/wqqu0a0T/evKv02P Cv2fSCD8IHYPIsrOQLWjZuaK+g4LfepfY5GFuW0d+bnOgp6rytLn3kNj8pgKD2mT o5F+zKEuuJSD/iLEtZAn77ABdp1wXSQ= -----END CERTIFICATE-----Generated at Tue Sep 22 13:31:26 2026 by rpki-client