$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/2a117ee7-322f-3fb9-aaae-1c614b96e006.roa File: 2a117ee7-322f-3fb9-aaae-1c614b96e006.roa (raw, json) Hash identifier: VMp3/XwlR93I/rKd5BAz6z69H6DpKYFcFHndB0jfxt0= Subject key identifier: 56:36:F9:94:FC:6D:70:E1:AB:58:09:A7:9B:77:41:AC:68:D9:EA:5F Certificate issuer: /CN=f35be5f0-d452-4cd8-859e-27da5839ddb4 Certificate serial: 010D0C9F4328584EE7BCB5E5F240A73920E0B380 Authority key identifier: 16:D3:86:F9:79:3B:5D:0D:9C:FD:0F:F3:B5:6F:04:6D:8D:77:58:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/2a117ee7-322f-3fb9-aaae-1c614b96e006.roa Signing time: Fri 21 Aug 2026 01:00:12 +0000 ROA not before: Fri 21 Aug 2026 01:00:12 +0000 ROA not after: Thu 19 Nov 2026 02:00:12 +0000 asID: 63334 IP address blocks: 23.143.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/f35be5f0-d452-4cd8-859e-27da5839ddb4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/f35be5f0-d452-4cd8-859e-27da5839ddb4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e7:bc:b5:e5:f2:40:a7:39:20:e0:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f35be5f0-d452-4cd8-859e-27da5839ddb4 Validity Not Before: Aug 21 01:00:12 2026 GMT Not After : Nov 19 02:00:12 2026 GMT Subject: CN=3994ce3a-dfbc-433c-980a-29beb7b75ade Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f4:cf:34:65:e6:6c:3e:65:1c:8f:2a:de:ee: db:e8:95:e7:4c:76:91:67:e4:7d:3c:08:d6:5f:58: 73:0c:7d:0d:49:7e:21:0b:09:37:0d:4a:0d:33:cb: 1f:04:4d:15:0f:23:92:58:96:da:eb:e6:7e:5a:15: a7:ef:7f:f2:81:d5:eb:08:37:dd:2c:58:44:db:61: b7:f3:ba:90:ed:92:8c:c0:90:36:ee:b3:39:25:1f: 69:8a:6c:d1:ad:50:2d:68:8f:30:fa:d6:5e:80:17: bf:f2:2d:a3:01:b1:c8:91:f7:dc:9e:f6:b2:e8:93: 28:2d:52:7f:d1:9c:4e:31:ed:6f:61:c7:14:e1:90: bf:64:59:76:77:76:67:0e:dd:1b:42:68:7b:3e:bd: d1:df:fe:5e:07:8d:b2:9a:78:1b:b5:b1:8f:ae:f0: c0:8c:3f:1a:10:e5:d8:69:fb:fd:0e:a9:c1:8e:3e: 54:5e:ef:a9:25:38:5e:c1:35:2d:2a:07:ab:1c:c5: b1:d1:4a:4a:e4:2c:be:f6:0a:67:d0:9d:4f:ab:78: 47:7c:f0:a9:4f:bc:8f:85:58:f2:c9:31:89:a6:90: b1:58:87:72:11:62:01:56:17:5c:51:c6:09:38:b8: b0:e1:42:3b:96:f0:70:64:95:80:a9:ed:11:8d:62: 87:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:36:F9:94:FC:6D:70:E1:AB:58:09:A7:9B:77:41:AC:68:D9:EA:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/2a117ee7-322f-3fb9-aaae-1c614b96e006.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/f35be5f0-d452-4cd8-859e-27da5839ddb4.crl X509v3 Authority Key Identifier: keyid:16:D3:86:F9:79:3B:5D:0D:9C:FD:0F:F3:B5:6F:04:6D:8D:77:58:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4.cer sbgp-ipAddrBlock: critical IPv4: 23.143.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:05:b5:cc:f3:8b:53:38:92:17:8c:25:e4:20:bf:b0:7d:5a: 08:6c:3c:88:10:f9:7b:28:58:47:e2:ed:37:46:41:0b:b3:34: 6b:44:d6:48:84:e1:16:89:90:e7:e4:41:de:d4:5a:55:69:7a: 1b:11:f4:9d:ae:8a:8f:d1:27:f7:e1:09:92:83:29:95:6f:40: d3:23:62:6f:f7:45:6c:92:a1:50:16:6e:b6:90:97:ce:99:49: 5a:a6:b9:ad:15:63:1e:82:f8:69:15:9f:b6:80:61:df:e8:fb: 61:72:dd:24:f0:56:14:4a:ba:0d:c9:9f:dc:a3:84:84:46:06: 11:db:e9:00:44:49:71:b9:1a:02:8c:c9:69:c9:c6:f3:0a:8f: 31:9c:8e:da:10:5c:f9:31:ad:28:0e:88:fe:01:1b:7e:07:bf: fe:54:ce:4b:ac:72:07:87:55:20:96:df:a6:e9:ef:5f:bc:42: 7c:c1:1f:91:7a:46:8f:9c:3f:9b:0f:8f:e0:39:16:73:69:7f: 84:5f:e1:a6:18:be:cb:24:95:60:ea:77:cb:76:bc:6d:2c:01: f2:d8:58:c9:70:91:48:cc:8c:75:b6:18:2f:11:7a:62:9a:4a: a1:e7:58:6b:22:a2:3d:77:d8:a2:70:76:fb:6f:1c:d5:e3:f3: 59:ab:2f:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7nvLXl8kCnOSDgs4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjM1YmU1ZjAtZDQ1Mi00Y2Q4LTg1OWUtMjdkYTU4Mzlk ZGI0MB4XDTI2MDgyMTAxMDAxMloXDTI2MTExOTAyMDAxMlowLzEtMCsGA1UEAxMk Mzk5NGNlM2EtZGZiYy00MzNjLTk4MGEtMjliZWI3Yjc1YWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3vTPNGXmbD5lHI8q3u7b6JXnTHaRZ+R9PAjW X1hzDH0NSX4hCwk3DUoNM8sfBE0VDyOSWJba6+Z+WhWn73/ygdXrCDfdLFhE22G3 87qQ7ZKMwJA27rM5JR9pimzRrVAtaI8w+tZegBe/8i2jAbHIkffcnvay6JMoLVJ/ 0ZxOMe1vYccU4ZC/ZFl2d3ZnDt0bQmh7Pr3R3/5eB42ymngbtbGPrvDAjD8aEOXY afv9DqnBjj5UXu+pJThewTUtKgerHMWx0UpK5Cy+9gpn0J1Pq3hHfPCpT7yPhVjy yTGJppCxWIdyEWIBVhdcUcYJOLiw4UI7lvBwZJWAqe0RjWKHawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFY2+ZT8bXDhq1gJp5t3Qaxo2epfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMzVi ZTVmMC1kNDUyLTRjZDgtODU5ZS0yN2RhNTgzOWRkYjQvMmExMTdlZTctMzIyZi0z ZmI5LWFhYWUtMWM2MTRiOTZlMDA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjM1YmU1ZjAtZDQ1Mi00Y2Q4LTg1 OWUtMjdkYTU4MzlkZGI0L2YzNWJlNWYwLWQ0NTItNGNkOC04NTllLTI3ZGE1ODM5 ZGRiNC5jcmwwHwYDVR0jBBgwFoAUFtOG+Xk7XQ2c/Q/ztW8EbY13WNcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMzViZTVmMC1kNDUyLTRjZDgtODU5ZS0yN2Rh NTgzOWRkYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4/YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4Ftczzi1M4kheMJeQgv7B9WghsPIgQ+XsoWEfi7TdGQQuzNGtE1kiE 4RaJkOfkQd7UWlVpehsR9J2uio/RJ/fhCZKDKZVvQNMjYm/3RWySoVAWbraQl86Z SVqmua0VYx6C+GkVn7aAYd/o+2Fy3STwVhRKug3Jn9yjhIRGBhHb6QBESXG5GgKM yWnJxvMKjzGcjtoQXPkxrSgOiP4BG34Hv/5UzkuscgeHVSCW36bp71+8QnzBH5F6 Ro+cP5sPj+A5FnNpf4Rf4aYYvssklWDqd8t2vG0sAfLYWMlwkUjMjHW2GC8RemKa SqHnWGsioj132KJwdvtvHNXj81mrL/o= -----END CERTIFICATE-----Generated at Sat Sep 26 14:28:33 2026 by rpki-client