$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5abd481c-a75f-4f76-a08e-be7629dc5c9d/a0becca9-b236-3cc9-8944-0ddc143cdcb7.roa File: a0becca9-b236-3cc9-8944-0ddc143cdcb7.roa (raw, json) Hash identifier: Uj3F7Pdc/TXE+hAkXJhrQahld+zJYIHSsweZ8nsMN1Q= Subject key identifier: 09:75:CB:E9:7C:94:0C:26:CA:01:0D:48:04:C2:86:3E:98:A1:46:0A Certificate issuer: /CN=5abd481c-a75f-4f76-a08e-be7629dc5c9d Certificate serial: 010D0C9F4328584EA7941B9608801290BBA88900 Authority key identifier: 9E:F1:29:BA:15:89:35:A6:0D:BE:AC:19:3D:61:1E:86:19:E5:D8:EC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5abd481c-a75f-4f76-a08e-be7629dc5c9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5abd481c-a75f-4f76-a08e-be7629dc5c9d/a0becca9-b236-3cc9-8944-0ddc143cdcb7.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 401997 IP address blocks: 23.145.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5abd481c-a75f-4f76-a08e-be7629dc5c9d/5abd481c-a75f-4f76-a08e-be7629dc5c9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5abd481c-a75f-4f76-a08e-be7629dc5c9d/5abd481c-a75f-4f76-a08e-be7629dc5c9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5abd481c-a75f-4f76-a08e-be7629dc5c9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:94:1b:96:08:80:12:90:bb:a8:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5abd481c-a75f-4f76-a08e-be7629dc5c9d Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=9ab9e97f-dca6-4eea-b003-fb97a7090ea2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:52:e5:20:95:fb:61:d2:45:3e:2e:54:6a:d7: 92:45:40:25:dc:3f:32:ce:d1:8d:35:fb:84:30:4e: 8e:b9:1a:44:3c:c1:99:aa:5b:2f:cf:3f:2c:17:ea: 74:b8:a9:8f:91:68:32:62:47:b0:1f:c4:79:fa:54: 95:eb:fa:79:06:59:33:b1:d6:80:b0:9a:d4:17:93: 9a:d2:5b:be:8d:61:e7:86:03:bc:7b:b2:c5:87:8d: 14:01:2d:e4:e1:14:92:b6:09:92:4e:a6:4e:cf:82: 0e:e9:47:07:1a:c3:d5:e6:4f:ff:62:78:28:96:67: d8:3f:b0:57:af:57:d0:f0:39:3d:b2:4f:5d:01:4e: 77:37:9d:c6:0e:fe:6b:03:1e:b7:4a:82:04:50:1d: 3a:a2:d3:0b:58:7e:ef:00:f8:46:1f:62:d9:7c:2f: 08:ae:68:47:d8:72:85:7e:51:e4:ad:52:a2:89:3b: e9:be:76:b8:93:30:d2:29:f0:e1:fb:ac:cd:b3:ed: 08:60:16:8b:44:8a:38:f7:e3:fc:64:01:ae:bf:31: b4:aa:a9:41:fc:96:3c:36:a1:ad:34:4d:ac:b3:83: b4:f7:1f:03:a8:52:2c:55:41:23:88:29:fc:b2:97: a4:98:48:4e:7c:73:38:c4:19:56:5d:30:12:b7:0a: 0c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:75:CB:E9:7C:94:0C:26:CA:01:0D:48:04:C2:86:3E:98:A1:46:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5abd481c-a75f-4f76-a08e-be7629dc5c9d/a0becca9-b236-3cc9-8944-0ddc143cdcb7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5abd481c-a75f-4f76-a08e-be7629dc5c9d/5abd481c-a75f-4f76-a08e-be7629dc5c9d.crl X509v3 Authority Key Identifier: keyid:9E:F1:29:BA:15:89:35:A6:0D:BE:AC:19:3D:61:1E:86:19:E5:D8:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5abd481c-a75f-4f76-a08e-be7629dc5c9d.cer sbgp-ipAddrBlock: critical IPv4: 23.145.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:2f:8f:59:fe:83:9f:1d:40:15:c9:2b:15:59:bc:9e:c2:b7: 99:f0:69:b9:27:2b:d9:27:3a:8d:c6:9a:3d:ee:09:c2:d4:ab: 4f:cb:e0:dc:19:d6:cb:42:46:49:22:c1:7e:4a:42:45:5c:d9: a7:9a:a0:36:40:20:ba:e0:2d:64:f1:4d:fb:23:ba:00:54:37: a3:3a:1a:7a:12:09:10:7b:b5:2c:ae:62:85:bf:dd:97:4a:de: 75:57:e6:87:7f:55:d1:aa:56:09:dc:12:72:0c:c5:51:d7:2c: 1b:6d:d7:88:35:41:41:22:ee:ca:f8:12:8a:66:30:03:be:89: 3d:33:69:b5:dc:b6:85:21:f1:c7:52:25:de:f4:f3:5c:23:be: b6:d2:b2:76:03:f7:83:87:09:ba:75:a8:33:7a:a7:3a:f3:db: 95:14:e9:77:02:b1:97:49:c8:02:9e:b2:d8:6e:e9:32:23:3a: 6b:37:b0:0e:61:44:71:d7:bf:f7:df:69:72:99:e9:06:6e:e5: 0b:13:3f:70:2e:a9:46:60:82:ce:ed:52:56:aa:76:e5:ec:6c: e9:89:23:00:9d:8e:35:2a:f8:b0:4c:5e:ae:56:9c:fe:ea:14: 96:2c:65:6c:79:f4:a4:9d:cd:31:1a:dc:33:27:a1:ab:b4:27: 32:21:c6:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlBuWCIASkLuoiQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFiZDQ4MWMtYTc1Zi00Zjc2LWEwOGUtYmU3NjI5ZGM1 YzlkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OWFiOWU5N2YtZGNhNi00ZWVhLWIwMDMtZmI5N2E3MDkwZWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFLlIJX7YdJFPi5UateSRUAl3D8yztGNNfuE ME6OuRpEPMGZqlsvzz8sF+p0uKmPkWgyYkewH8R5+lSV6/p5BlkzsdaAsJrUF5Oa 0lu+jWHnhgO8e7LFh40UAS3k4RSStgmSTqZOz4IO6UcHGsPV5k//YngolmfYP7BX r1fQ8Dk9sk9dAU53N53GDv5rAx63SoIEUB06otMLWH7vAPhGH2LZfC8IrmhH2HKF flHkrVKiiTvpvna4kzDSKfDh+6zNs+0IYBaLRIo49+P8ZAGuvzG0qqlB/JY8NqGt NE2ss4O09x8DqFIsVUEjiCn8spekmEhOfHM4xBlWXTAStwoM3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAl1y+l8lAwmygENSATChj6YoUYKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81YWJk NDgxYy1hNzVmLTRmNzYtYTA4ZS1iZTc2MjlkYzVjOWQvYTBiZWNjYTktYjIzNi0z Y2M5LTg5NDQtMGRkYzE0M2NkY2I3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWFiZDQ4MWMtYTc1Zi00Zjc2LWEw OGUtYmU3NjI5ZGM1YzlkLzVhYmQ0ODFjLWE3NWYtNGY3Ni1hMDhlLWJlNzYyOWRj NWM5ZC5jcmwwHwYDVR0jBBgwFoAUnvEpuhWJNaYNvqwZPWEehhnl2OwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81YWJkNDgxYy1hNzVmLTRmNzYtYTA4ZS1iZTc2 MjlkYzVjOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5HcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG4vj1n+g58dQBXJKxVZvJ7Ct5nwabknK9knOo3Gmj3uCcLUq0/L4NwZ 1stCRkkiwX5KQkVc2aeaoDZAILrgLWTxTfsjugBUN6M6GnoSCRB7tSyuYoW/3ZdK 3nVX5od/VdGqVgncEnIMxVHXLBtt14g1QUEi7sr4EopmMAO+iT0zabXctoUh8cdS Jd7081wjvrbSsnYD94OHCbp1qDN6pzrz25UU6XcCsZdJyAKesthu6TIjOms3sA5h RHHXv/ffaXKZ6QZu5QsTP3AuqUZggs7tUlaqduXsbOmJIwCdjjUq+LBMXq5WnP7q FJYsZWx59KSdzTEa3DMnoau0JzIhxg0= -----END CERTIFICATE-----Generated at Wed Jul 29 05:46:06 2026 by rpki-client