$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/24570cf0-6be7-4f66-a550-b04cfd954538/b1e93cdb-7048-3eec-a474-37efd56ac00b.roa File: b1e93cdb-7048-3eec-a474-37efd56ac00b.roa (raw, json) Hash identifier: Js5S1mWxoIMZkeTF1TOMfY3N6pUHb4iyxJTYizYhXyU= Subject key identifier: DC:31:02:58:10:93:2A:8C:A1:7A:0D:4D:F7:59:A7:38:CC:38:EF:E1 Certificate issuer: /CN=24570cf0-6be7-4f66-a550-b04cfd954538 Certificate serial: 010D0C9F4328584EA2DFC00087294A784A657C80 Authority key identifier: 0A:C0:D2:13:85:AA:09:75:83:97:EF:B6:FB:54:0A:9B:77:8D:D2:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/24570cf0-6be7-4f66-a550-b04cfd954538.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/24570cf0-6be7-4f66-a550-b04cfd954538/b1e93cdb-7048-3eec-a474-37efd56ac00b.roa Signing time: Mon 27 Jul 2026 09:00:12 +0000 ROA not before: Mon 27 Jul 2026 09:00:12 +0000 ROA not after: Sun 25 Oct 2026 09:00:12 +0000 asID: 399870 IP address blocks: 23.144.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/24570cf0-6be7-4f66-a550-b04cfd954538/24570cf0-6be7-4f66-a550-b04cfd954538.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/24570cf0-6be7-4f66-a550-b04cfd954538/24570cf0-6be7-4f66-a550-b04cfd954538.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/24570cf0-6be7-4f66-a550-b04cfd954538.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a2:df:c0:00:87:29:4a:78:4a:65:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24570cf0-6be7-4f66-a550-b04cfd954538 Validity Not Before: Jul 27 09:00:12 2026 GMT Not After : Oct 25 09:00:12 2026 GMT Subject: CN=f7f42c65-116f-40a5-b76b-e84fee8b1aa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7b:98:f3:88:1d:47:47:03:77:ff:3b:4d:53: b2:d6:95:55:4a:7d:51:cb:a7:2a:83:a8:4c:93:bf: b0:28:8a:06:ad:9e:21:a3:e8:fa:10:de:9b:e7:6b: e4:b8:10:e7:c6:9b:8b:7c:9a:53:dd:fa:d6:53:a0: a3:cb:28:ca:0b:27:e5:8d:5c:da:8a:df:e8:9d:44: 90:38:74:c2:ae:e3:5f:e7:29:ac:1e:2d:67:28:76: 37:ed:14:e5:ec:53:52:22:1c:c1:c6:02:aa:56:9a: 46:66:12:5b:9e:1d:96:3e:bc:ee:5f:f4:6e:d7:2c: eb:8c:09:a2:db:60:c9:6b:1f:f9:6f:db:9c:cd:be: 3f:93:38:f5:9c:37:d4:76:98:92:11:80:ca:55:15: 71:55:95:07:d8:4c:ec:83:ca:e4:c4:68:82:6e:2f: 6f:bd:5e:42:07:0e:69:dd:d4:64:ce:16:4c:0c:8c: 51:ba:c0:6f:74:3a:3c:a5:21:7f:8b:9a:66:90:50: c9:a0:c4:d2:e9:9e:e7:73:fd:35:9b:5d:78:dc:dc: cc:2a:9c:50:2f:50:46:94:a9:be:8a:a7:58:06:28: f5:00:6e:fa:b8:ef:6f:7b:c5:c8:bb:98:1b:70:8e: 23:cb:85:91:79:e1:dc:9b:4a:e6:c4:16:56:7f:c9: a5:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:31:02:58:10:93:2A:8C:A1:7A:0D:4D:F7:59:A7:38:CC:38:EF:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/24570cf0-6be7-4f66-a550-b04cfd954538/b1e93cdb-7048-3eec-a474-37efd56ac00b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/24570cf0-6be7-4f66-a550-b04cfd954538/24570cf0-6be7-4f66-a550-b04cfd954538.crl X509v3 Authority Key Identifier: keyid:0A:C0:D2:13:85:AA:09:75:83:97:EF:B6:FB:54:0A:9B:77:8D:D2:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/24570cf0-6be7-4f66-a550-b04cfd954538.cer sbgp-ipAddrBlock: critical IPv4: 23.144.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:9a:58:01:39:0a:93:86:f4:14:f1:13:14:f3:97:2f:f6:7b: 00:26:61:56:f6:93:b5:73:c4:5e:08:2d:3e:72:be:5a:fc:04: 51:18:16:89:1d:71:73:cf:9d:0c:23:2f:0b:fe:42:20:9e:fb: eb:c3:9c:f1:07:4f:83:d2:c6:e6:e1:3a:3f:c6:45:c6:e9:0b: 1a:b8:13:81:12:78:80:db:ba:b6:4a:e1:af:c8:cf:97:0f:e3: df:7f:b3:2c:77:8a:e0:c2:42:ab:5e:71:42:e6:f9:aa:d7:62: 70:0f:4a:a8:88:a5:d9:39:60:e2:55:e1:cb:2f:ef:a7:cd:86: 23:4e:56:2a:cc:18:80:52:53:dc:34:08:ff:9e:b0:dc:bb:8e: 82:cb:d4:7e:d1:97:ac:20:e3:87:36:af:26:2b:c3:c0:fe:07: 27:72:8d:be:bc:d2:12:e4:1d:f2:9b:1b:69:cc:e7:3e:ff:9d: e0:7b:67:62:9e:c5:c0:47:e6:41:e4:ca:e8:f6:29:9c:8f:32: 28:62:bf:2f:79:1d:3f:03:6d:26:42:66:71:39:9f:e7:51:fb: 77:26:ea:5e:95:e2:10:13:b0:24:2e:ef:66:e8:c6:77:01:ce: 37:ec:ab:b2:f3:2d:0d:5a:9c:95:b2:9b:1b:00:12:e7:6b:f1: 82:48:b2:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6i38AAhylKeEplfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ1NzBjZjAtNmJlNy00ZjY2LWE1NTAtYjA0Y2ZkOTU0 NTM4MB4XDTI2MDcyNzA5MDAxMloXDTI2MTAyNTA5MDAxMlowLzEtMCsGA1UEAxMk ZjdmNDJjNjUtMTE2Zi00MGE1LWI3NmItZTg0ZmVlOGIxYWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXuY84gdR0cDd/87TVOy1pVVSn1Ry6cqg6hM k7+wKIoGrZ4ho+j6EN6b52vkuBDnxpuLfJpT3frWU6CjyyjKCyfljVzait/onUSQ OHTCruNf5ymsHi1nKHY37RTl7FNSIhzBxgKqVppGZhJbnh2WPrzuX/Ru1yzrjAmi 22DJax/5b9uczb4/kzj1nDfUdpiSEYDKVRVxVZUH2Ezsg8rkxGiCbi9vvV5CBw5p 3dRkzhZMDIxRusBvdDo8pSF/i5pmkFDJoMTS6Z7nc/01m1143NzMKpxQL1BGlKm+ iqdYBij1AG76uO9ve8XIu5gbcI4jy4WReeHcm0rmxBZWf8mlnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNwxAlgQkyqMoXoNTfdZpzjMOO/hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yNDU3 MGNmMC02YmU3LTRmNjYtYTU1MC1iMDRjZmQ5NTQ1MzgvYjFlOTNjZGItNzA0OC0z ZWVjLWE0NzQtMzdlZmQ1NmFjMDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjQ1NzBjZjAtNmJlNy00ZjY2LWE1 NTAtYjA0Y2ZkOTU0NTM4LzI0NTcwY2YwLTZiZTctNGY2Ni1hNTUwLWIwNGNmZDk1 NDUzOC5jcmwwHwYDVR0jBBgwFoAUCsDSE4WqCXWDl++2+1QKm3eN0v4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yNDU3MGNmMC02YmU3LTRmNjYtYTU1MC1iMDRj ZmQ5NTQ1MzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5CMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHmaWAE5CpOG9BTxExTzly/2ewAmYVb2k7VzxF4ILT5yvlr8BFEYFokd cXPPnQwjLwv+QiCe++vDnPEHT4PSxubhOj/GRcbpCxq4E4ESeIDburZK4a/Iz5cP 499/syx3iuDCQqtecULm+arXYnAPSqiIpdk5YOJV4csv76fNhiNOVirMGIBSU9w0 CP+esNy7joLL1H7Rl6wg44c2ryYrw8D+Bydyjb680hLkHfKbG2nM5z7/neB7Z2Ke xcBH5kHkyuj2KZyPMihivy95HT8DbSZCZnE5n+dR+3cm6l6V4hATsCQu72boxncB zjfsq7LzLQ1anJWymxsAEudr8YJIssA= -----END CERTIFICATE-----Generated at Wed Jul 29 00:36:50 2026 by rpki-client