$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b3642034-3a8a-4858-abb3-8e2b429a1376/86e89988-fc9f-36d3-be0b-651a22e02d05.roa File: 86e89988-fc9f-36d3-be0b-651a22e02d05.roa (raw, json) Hash identifier: dBQVWHxxKYIuId3O8x7jJyFC4EkGczDdKx20zAiXDSQ= Subject key identifier: E2:A0:7A:E9:6A:6F:F1:A3:49:FD:A7:6F:6C:2F:47:55:51:3C:F2:0B Certificate issuer: /CN=b3642034-3a8a-4858-abb3-8e2b429a1376 Certificate serial: 010D0C9F4328584EA7914AF39CB9BA5399BD1780 Authority key identifier: 35:82:A7:1E:56:7F:83:97:CC:41:D0:90:E0:C3:03:29:B9:29:09:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b3642034-3a8a-4858-abb3-8e2b429a1376.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b3642034-3a8a-4858-abb3-8e2b429a1376/86e89988-fc9f-36d3-be0b-651a22e02d05.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 399861 IP address blocks: 23.131.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b3642034-3a8a-4858-abb3-8e2b429a1376/b3642034-3a8a-4858-abb3-8e2b429a1376.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b3642034-3a8a-4858-abb3-8e2b429a1376/b3642034-3a8a-4858-abb3-8e2b429a1376.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b3642034-3a8a-4858-abb3-8e2b429a1376.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:91:4a:f3:9c:b9:ba:53:99:bd:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3642034-3a8a-4858-abb3-8e2b429a1376 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=646d1853-cbd0-432b-9d4a-64f2aad91a57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d3:c2:0d:3b:da:86:08:ec:98:14:93:70:42: 05:cb:f9:9f:83:32:73:3d:51:bc:ba:1f:9d:cb:6d: d9:95:89:e3:12:dc:09:64:c3:5d:f0:10:3f:47:0a: c5:fa:76:6e:4e:b4:9e:5e:90:d3:f3:ef:a4:46:c4: 1c:17:36:bc:78:b1:af:1d:14:7d:af:c8:a4:9b:3b: a4:46:e9:75:a8:a2:d1:d3:5a:84:58:e0:bc:19:a7: c1:17:47:ba:34:1b:02:f7:7c:d9:29:03:7f:d6:88: cd:e0:d9:5a:47:79:7f:bd:90:78:d4:04:36:d9:75: f5:6c:7a:e4:24:35:3e:54:7e:99:a4:50:4d:de:5d: c7:14:d1:04:74:cd:a3:8e:99:32:b2:95:ac:7b:12: 9d:46:ca:dc:a1:16:4d:81:42:2e:39:2d:9e:29:f2: f4:5f:6d:0b:2e:ff:b2:ad:7c:fe:2c:a8:16:2e:24: bc:a0:47:5d:ae:48:6f:86:f4:c0:cd:2d:ef:c7:a4: aa:40:d9:c5:ba:e6:76:96:3d:26:9d:39:85:42:fd: 3c:9a:e0:cf:c9:dc:a8:55:d3:18:9b:36:f4:f1:96: 7a:b1:37:db:19:2a:d1:76:5c:c2:5b:40:7e:d4:ab: 22:79:e8:d7:19:be:a0:9a:cf:38:a4:d2:50:4d:9c: ab:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:A0:7A:E9:6A:6F:F1:A3:49:FD:A7:6F:6C:2F:47:55:51:3C:F2:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b3642034-3a8a-4858-abb3-8e2b429a1376/86e89988-fc9f-36d3-be0b-651a22e02d05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b3642034-3a8a-4858-abb3-8e2b429a1376/b3642034-3a8a-4858-abb3-8e2b429a1376.crl X509v3 Authority Key Identifier: keyid:35:82:A7:1E:56:7F:83:97:CC:41:D0:90:E0:C3:03:29:B9:29:09:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b3642034-3a8a-4858-abb3-8e2b429a1376.cer sbgp-ipAddrBlock: critical IPv4: 23.131.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:97:a1:1a:cf:8b:6a:0e:3a:f6:c2:ed:87:7a:5b:dc:13:47: 9c:d7:e0:27:1d:60:d1:40:ab:0c:d8:91:05:ec:1c:c4:51:f1: 4b:4f:fc:e2:2c:93:bf:40:7c:c0:d7:76:61:a9:77:fb:da:dc: d1:b4:89:71:4c:ea:86:b0:71:e9:58:94:1c:3e:54:36:4b:15: 78:20:ed:01:21:2a:8d:6e:92:fb:1d:be:83:1a:5e:26:ce:b2: 02:44:b3:7e:22:0b:36:b5:e8:91:5d:ea:8d:82:57:10:4e:d8: ca:98:a9:7c:2e:75:62:5d:a4:d5:fe:9b:dc:9f:65:21:ba:d2: 7f:7e:82:93:b4:2f:d3:c2:0a:d3:1a:0e:44:c3:75:88:f0:6e: 66:a9:7a:3b:3b:af:cc:cd:3d:d9:ca:08:41:95:38:fc:42:7c: a7:e5:4d:2d:38:6a:98:ca:b2:08:54:b9:57:10:97:fd:10:67: ad:8f:9c:13:6e:4d:89:cf:1d:29:48:4c:e2:84:4f:6b:11:01: 03:10:d3:d7:28:29:cc:ad:6d:47:eb:5e:ac:98:58:16:b7:cf: a9:86:a2:94:68:9b:5c:47:c5:3e:6e:31:65:09:ca:3f:fa:88: ab:ba:23:a0:22:25:12:38:ba:e1:f1:fc:b5:d6:64:34:be:50: 41:54:5c:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkUrznLm6U5m9F4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjM2NDIwMzQtM2E4YS00ODU4LWFiYjMtOGUyYjQyOWEx Mzc2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NjQ2ZDE4NTMtY2JkMC00MzJiLTlkNGEtNjRmMmFhZDkxYTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNPCDTvahgjsmBSTcEIFy/mfgzJzPVG8uh+d y23ZlYnjEtwJZMNd8BA/RwrF+nZuTrSeXpDT8++kRsQcFza8eLGvHRR9r8ikmzuk Rul1qKLR01qEWOC8GafBF0e6NBsC93zZKQN/1ojN4NlaR3l/vZB41AQ22XX1bHrk JDU+VH6ZpFBN3l3HFNEEdM2jjpkyspWsexKdRsrcoRZNgUIuOS2eKfL0X20LLv+y rXz+LKgWLiS8oEddrkhvhvTAzS3vx6SqQNnFuuZ2lj0mnTmFQv08muDPydyoVdMY mzb08ZZ6sTfbGSrRdlzCW0B+1KsieejXGb6gms84pNJQTZyrPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOKgeulqb/GjSf2nb2wvR1VRPPILMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMzY0 MjAzNC0zYThhLTQ4NTgtYWJiMy04ZTJiNDI5YTEzNzYvODZlODk5ODgtZmM5Zi0z NmQzLWJlMGItNjUxYTIyZTAyZDA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjM2NDIwMzQtM2E4YS00ODU4LWFi YjMtOGUyYjQyOWExMzc2L2IzNjQyMDM0LTNhOGEtNDg1OC1hYmIzLThlMmI0Mjlh MTM3Ni5jcmwwHwYDVR0jBBgwFoAUNYKnHlZ/g5fMQdCQ4MMDKbkpCZ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMzY0MjAzNC0zYThhLTQ4NTgtYWJiMy04ZTJi NDI5YTEzNzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4MEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqXoRrPi2oOOvbC7Yd6W9wTR5zX4CcdYNFAqwzYkQXsHMRR8UtP/OIs k79AfMDXdmGpd/va3NG0iXFM6oawcelYlBw+VDZLFXgg7QEhKo1ukvsdvoMaXibO sgJEs34iCza16JFd6o2CVxBO2MqYqXwudWJdpNX+m9yfZSG60n9+gpO0L9PCCtMa DkTDdYjwbmapejs7r8zNPdnKCEGVOPxCfKflTS04apjKsghUuVcQl/0QZ62PnBNu TYnPHSlITOKET2sRAQMQ09coKcytbUfrXqyYWBa3z6mGopRom1xHxT5uMWUJyj/6 iKu6I6AiJRI4uuHx/LXWZDS+UEFUXPM= -----END CERTIFICATE-----Generated at Wed Jul 29 04:16:02 2026 by rpki-client