$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0cf052a9-7395-4330-8d8e-b0ebcd23fcd3/7424def5-3c6d-351a-8d42-734d7b82d6c6.roa File: 7424def5-3c6d-351a-8d42-734d7b82d6c6.roa (raw, json) Hash identifier: dkFeEa6sYQ/fF+fKNz+khFaflf5PEKdDtR5sQxQptvM= Subject key identifier: F4:34:EB:BA:93:B7:8C:9C:01:1D:65:2E:59:63:31:1F:E3:7C:5C:B2 Certificate issuer: /CN=0cf052a9-7395-4330-8d8e-b0ebcd23fcd3 Certificate serial: 010D0C9F4328584DB1DAC5E00F24AA037F8526E0 Authority key identifier: 73:16:7C:D0:F0:F6:6B:07:1A:E0:D8:42:F7:85:2F:2E:02:67:E2:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0cf052a9-7395-4330-8d8e-b0ebcd23fcd3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0cf052a9-7395-4330-8d8e-b0ebcd23fcd3/7424def5-3c6d-351a-8d42-734d7b82d6c6.roa Signing time: Sat 02 May 2026 01:00:24 +0000 ROA not before: Sat 02 May 2026 01:00:24 +0000 ROA not after: Fri 31 Jul 2026 01:00:24 +0000 asID: 23096 IP address blocks: 23.235.48.0/24 maxlen: 24 23.235.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0cf052a9-7395-4330-8d8e-b0ebcd23fcd3/0cf052a9-7395-4330-8d8e-b0ebcd23fcd3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0cf052a9-7395-4330-8d8e-b0ebcd23fcd3/0cf052a9-7395-4330-8d8e-b0ebcd23fcd3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0cf052a9-7395-4330-8d8e-b0ebcd23fcd3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b1:da:c5:e0:0f:24:aa:03:7f:85:26:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0cf052a9-7395-4330-8d8e-b0ebcd23fcd3 Validity Not Before: May 2 01:00:24 2026 GMT Not After : Jul 31 01:00:24 2026 GMT Subject: CN=213655a4-7e75-4207-a76b-90002adb4bac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:24:72:bc:3c:fb:f0:a2:b2:5d:67:d0:1a:db: 8d:64:34:cb:d9:df:71:fd:5f:91:46:7c:b5:43:29: d5:4e:ad:af:7f:01:93:f0:9d:e8:87:6c:2c:69:f0: 0e:8d:69:a6:65:71:db:b9:12:3e:84:40:ab:ca:6d: 04:5f:37:b7:bb:0b:1c:8c:4f:5d:66:22:42:97:24: 7d:06:25:5e:19:a3:e6:25:43:22:60:9f:59:ae:01: a2:af:c3:88:34:40:48:32:3a:e1:98:fb:e1:bc:3b: f6:17:cb:bb:a4:27:09:32:bb:d8:21:fe:a5:f6:a5: 4c:c6:06:af:3e:ca:e7:e6:cc:c5:43:00:8a:d2:98: 22:ae:38:b4:96:9b:cb:86:01:e5:97:d7:16:88:22: 4d:e7:fd:5a:dc:3c:f2:51:4c:66:db:be:aa:f8:6f: bc:a8:e9:36:be:d3:2b:46:f5:b2:5a:91:6b:c4:a4: ef:99:52:99:c7:5f:8a:d1:b0:0f:f3:7e:6e:9f:9e: e2:10:de:d9:44:15:43:ab:f4:5e:87:14:80:93:bf: 29:98:de:fe:29:43:22:0d:8e:be:93:65:15:4e:12: 5a:97:c8:e4:46:55:4c:b6:1d:12:03:52:22:4a:94: 5f:21:0c:61:6c:57:2e:24:cf:4e:10:9c:fb:25:a8: 03:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:34:EB:BA:93:B7:8C:9C:01:1D:65:2E:59:63:31:1F:E3:7C:5C:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0cf052a9-7395-4330-8d8e-b0ebcd23fcd3/7424def5-3c6d-351a-8d42-734d7b82d6c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0cf052a9-7395-4330-8d8e-b0ebcd23fcd3/0cf052a9-7395-4330-8d8e-b0ebcd23fcd3.crl X509v3 Authority Key Identifier: keyid:73:16:7C:D0:F0:F6:6B:07:1A:E0:D8:42:F7:85:2F:2E:02:67:E2:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0cf052a9-7395-4330-8d8e-b0ebcd23fcd3.cer sbgp-ipAddrBlock: critical IPv4: 23.235.48.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:39:10:e7:14:2b:a2:13:e8:a1:10:cc:90:8c:b4:5f:2f:bb: 8a:b3:1b:f0:f8:3f:6d:13:cd:cb:40:87:0a:c0:f5:82:c6:0d: 3d:b7:c9:4a:cd:28:0f:27:c6:99:ea:a1:6b:33:8c:bf:49:49: 07:74:b3:ed:44:0f:e2:f8:27:bd:34:31:f6:38:49:97:9a:04: 53:5f:b2:3e:c2:74:e4:f7:1e:e2:87:95:35:bb:82:a0:26:7e: ea:e6:38:5f:64:b5:7e:34:08:d2:75:38:86:5e:97:7c:35:f3: d0:ee:2b:7f:e6:ef:0e:4c:c8:1e:03:d2:8c:8c:88:ee:a7:03: 76:70:86:2a:a0:f6:36:c9:b3:87:12:67:75:de:6b:97:05:09: fa:96:f5:2c:bf:5a:ad:67:b6:5a:c6:47:cb:78:7b:f4:f7:ad: c5:2f:74:72:68:73:38:39:76:9a:32:c3:80:18:34:bd:62:16: 4b:40:3d:aa:d2:81:3d:a8:58:2a:c5:91:63:1a:9a:6f:97:12: 2d:33:21:56:0a:66:26:a1:54:9c:ee:c1:0c:ee:0d:ee:a6:7c: 2f:5b:f6:31:d8:57:bd:8f:1e:f4:f6:93:13:f3:14:2b:ec:1f: f2:7f:03:24:f1:12:31:96:9b:d2:79:bd:7d:3f:70:b3:cb:5e: df:c2:3e:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2x2sXgDySqA3+FJuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGNmMDUyYTktNzM5NS00MzMwLThkOGUtYjBlYmNkMjNm Y2QzMB4XDTI2MDUwMjAxMDAyNFoXDTI2MDczMTAxMDAyNFowLzEtMCsGA1UEAxMk MjEzNjU1YTQtN2U3NS00MjA3LWE3NmItOTAwMDJhZGI0YmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3yRyvDz78KKyXWfQGtuNZDTL2d9x/V+RRny1 QynVTq2vfwGT8J3oh2wsafAOjWmmZXHbuRI+hECrym0EXze3uwscjE9dZiJClyR9 BiVeGaPmJUMiYJ9ZrgGir8OINEBIMjrhmPvhvDv2F8u7pCcJMrvYIf6l9qVMxgav Psrn5szFQwCK0pgirji0lpvLhgHll9cWiCJN5/1a3DzyUUxm276q+G+8qOk2vtMr RvWyWpFrxKTvmVKZx1+K0bAP835un57iEN7ZRBVDq/RehxSAk78pmN7+KUMiDY6+ k2UVThJal8jkRlVMth0SA1IiSpRfIQxhbFcuJM9OEJz7JagDrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPQ067qTt4ycAR1lLlljMR/jfFyyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wY2Yw NTJhOS03Mzk1LTQzMzAtOGQ4ZS1iMGViY2QyM2ZjZDMvNzQyNGRlZjUtM2M2ZC0z NTFhLThkNDItNzM0ZDdiODJkNmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMGNmMDUyYTktNzM5NS00MzMwLThk OGUtYjBlYmNkMjNmY2QzLzBjZjA1MmE5LTczOTUtNDMzMC04ZDhlLWIwZWJjZDIz ZmNkMy5jcmwwHwYDVR0jBBgwFoAUcxZ80PD2awca4NhC94UvLgJn4hkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8wY2YwNTJhOS03Mzk1LTQzMzAtOGQ4ZS1iMGVi Y2QyM2ZjZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF+swMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAo5EOcUK6IT6KEQzJCMtF8vu4qzG/D4P20TzctAhwrA9YLGDT23yUrN KA8nxpnqoWszjL9JSQd0s+1ED+L4J700MfY4SZeaBFNfsj7CdOT3HuKHlTW7gqAm furmOF9ktX40CNJ1OIZel3w189DuK3/m7w5MyB4D0oyMiO6nA3Zwhiqg9jbJs4cS Z3Xea5cFCfqW9Sy/Wq1ntlrGR8t4e/T3rcUvdHJoczg5dpoyw4AYNL1iFktAParS gT2oWCrFkWMamm+XEi0zIVYKZiahVJzuwQzuDe6mfC9b9jHYV72PHvT2kxPzFCvs H/J/AyTxEjGWm9J5vX0/cLPLXt/CPjw= -----END CERTIFICATE-----Generated at Wed May 13 12:31:11 2026 by rpki-client