$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4997cc35-d26e-45fa-b0fc-e6489213999d/96811b58-4e3b-32b6-b608-80deb3b3db19.roa File: 96811b58-4e3b-32b6-b608-80deb3b3db19.roa (raw, json) Hash identifier: b9+WLvcMLR4JXpqQI37raU+wkKSLKkofFJgn5pcEqu0= Subject key identifier: 4B:05:33:C4:74:7D:D0:54:E1:92:3E:01:D4:83:FB:13:98:49:D6:8C Certificate issuer: /CN=4997cc35-d26e-45fa-b0fc-e6489213999d Certificate serial: 010D0C9F4328584DCD499E88DDED2D76F1B6C080 Authority key identifier: 0A:87:68:3E:C5:DB:7D:09:FF:58:D7:2C:5D:53:26:30:B5:F7:C4:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4997cc35-d26e-45fa-b0fc-e6489213999d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4997cc35-d26e-45fa-b0fc-e6489213999d/96811b58-4e3b-32b6-b608-80deb3b3db19.roa Signing time: Mon 11 May 2026 20:50:37 +0000 ROA not before: Mon 11 May 2026 20:50:37 +0000 ROA not after: Wed 29 Jul 2026 15:56:30 +0000 asID: 402465 IP address blocks: 23.157.244.0/24 maxlen: 24 2620:19:c000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4997cc35-d26e-45fa-b0fc-e6489213999d/4997cc35-d26e-45fa-b0fc-e6489213999d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4997cc35-d26e-45fa-b0fc-e6489213999d/4997cc35-d26e-45fa-b0fc-e6489213999d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4997cc35-d26e-45fa-b0fc-e6489213999d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cd:49:9e:88:dd:ed:2d:76:f1:b6:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4997cc35-d26e-45fa-b0fc-e6489213999d Validity Not Before: May 11 20:50:37 2026 GMT Not After : Jul 29 15:56:30 2026 GMT Subject: CN=fa2275bc-a312-4195-9d42-8b63f230bc1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:25:45:fd:a8:ec:35:f7:f1:0f:79:06:1e:f3: 92:f4:01:1d:87:3d:d2:90:fe:b6:a6:ef:51:53:9c: aa:73:1a:db:f1:09:fd:17:10:98:ac:97:46:9f:dd: b4:62:d3:be:dc:ff:f0:2b:af:fc:36:a5:9e:f4:76: cb:51:2e:28:e3:ca:e8:9e:6d:29:40:fa:5f:7e:da: 39:c3:c1:da:77:3a:38:cd:de:f3:a8:a0:7a:07:f5: 8f:05:6a:71:90:b8:c2:c4:1f:4a:ee:d6:72:03:a1: 2f:ef:62:15:ff:2b:1b:08:ea:b9:0c:dd:1b:2c:77: b1:c9:1a:c4:46:83:7c:10:55:ac:b1:f7:b1:25:10: 28:44:10:9d:a4:d8:61:2f:02:c6:48:99:d4:cf:8e: ed:9f:65:85:ba:48:46:20:58:2e:5b:f7:0c:33:b1: fb:27:e2:19:b0:87:69:8c:35:21:fe:7c:3b:e2:d1: b1:30:5e:9c:dd:29:7c:3d:07:a9:39:99:86:8b:e0: 8d:b1:b8:8b:98:f2:8d:cc:7f:bc:2d:08:d7:11:eb: ac:e4:ab:de:9c:25:27:24:73:fe:77:1b:19:7d:6a: 45:dc:b6:8f:cb:72:7f:a3:19:6a:b6:3b:68:30:fe: 88:da:24:a9:0a:be:fa:37:14:0b:e8:aa:0a:0f:07: 85:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:05:33:C4:74:7D:D0:54:E1:92:3E:01:D4:83:FB:13:98:49:D6:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4997cc35-d26e-45fa-b0fc-e6489213999d/96811b58-4e3b-32b6-b608-80deb3b3db19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4997cc35-d26e-45fa-b0fc-e6489213999d/4997cc35-d26e-45fa-b0fc-e6489213999d.crl X509v3 Authority Key Identifier: keyid:0A:87:68:3E:C5:DB:7D:09:FF:58:D7:2C:5D:53:26:30:B5:F7:C4:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4997cc35-d26e-45fa-b0fc-e6489213999d.cer sbgp-ipAddrBlock: critical IPv4: 23.157.244.0/24 IPv6: 2620:19:c000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:63:6b:72:ce:e6:8d:ec:fb:1b:17:7f:82:79:a7:f4:eb:ab: 09:16:5f:d9:0d:d1:ae:00:db:b4:a0:1b:d8:8e:f2:dc:a4:4c: f7:b7:ca:d4:ac:20:58:3b:0e:9f:a8:56:4e:ce:dd:d4:70:c4: de:99:b4:86:f1:22:13:d7:aa:25:57:aa:6b:76:61:6e:14:1e: 5d:f3:05:28:ab:f4:c7:01:af:43:38:1a:b8:7f:9b:47:97:87: d6:ff:4f:00:77:12:16:f8:eb:a1:7a:b4:83:ed:81:b4:20:bb: 37:48:dc:78:fd:59:09:cb:18:08:be:f3:4a:e2:ee:b7:45:58: 65:38:56:db:c2:9c:0c:b2:f4:d3:fa:2f:ca:22:d9:dd:3c:07: 9a:ab:26:69:ba:8f:f5:bf:cb:1f:2d:56:af:ff:67:7b:0a:29: 8d:2f:ed:2b:32:61:48:75:08:0f:d2:5d:f4:b0:cf:9c:ea:42: 47:fa:19:d6:15:23:6b:49:cb:2a:bc:df:6e:bc:cb:7b:af:20: 94:a3:ce:a5:8e:23:f1:11:55:33:2a:ac:2a:f2:4c:c9:11:59: a1:95:f0:ea:d6:64:f9:38:6c:94:40:f2:2a:fe:3c:5a:8f:60: 0b:b1:07:2f:45:b4:7e:7e:bb:cf:fd:ac:18:de:c0:2b:d9:cf: be:83:47:e5 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE3NSZ6I3e0tdvG2wIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDk5N2NjMzUtZDI2ZS00NWZhLWIwZmMtZTY0ODkyMTM5 OTlkMB4XDTI2MDUxMTIwNTAzN1oXDTI2MDcyOTE1NTYzMFowLzEtMCsGA1UEAxMk ZmEyMjc1YmMtYTMxMi00MTk1LTlkNDItOGI2M2YyMzBiYzFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSVF/ajsNffxD3kGHvOS9AEdhz3SkP62pu9R U5yqcxrb8Qn9FxCYrJdGn920YtO+3P/wK6/8NqWe9HbLUS4o48ronm0pQPpffto5 w8Hadzo4zd7zqKB6B/WPBWpxkLjCxB9K7tZyA6Ev72IV/ysbCOq5DN0bLHexyRrE RoN8EFWssfexJRAoRBCdpNhhLwLGSJnUz47tn2WFukhGIFguW/cMM7H7J+IZsIdp jDUh/nw74tGxMF6c3Sl8PQepOZmGi+CNsbiLmPKNzH+8LQjXEeus5KvenCUnJHP+ dxsZfWpF3LaPy3J/oxlqtjtoMP6I2iSpCr76NxQL6KoKDweFoQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFEsFM8R0fdBU4ZI+AdSD+xOYSdaMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi80OTk3 Y2MzNS1kMjZlLTQ1ZmEtYjBmYy1lNjQ4OTIxMzk5OWQvOTY4MTFiNTgtNGUzYi0z MmI2LWI2MDgtODBkZWIzYjNkYjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNDk5N2NjMzUtZDI2ZS00NWZhLWIw ZmMtZTY0ODkyMTM5OTlkLzQ5OTdjYzM1LWQyNmUtNDVmYS1iMGZjLWU2NDg5MjEz OTk5ZC5jcmwwHwYDVR0jBBgwFoAUCodoPsXbfQn/WNcsXVMmMLX3xBgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi80OTk3Y2MzNS1kMjZlLTQ1ZmEtYjBmYy1lNjQ4 OTIxMzk5OWQuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAF530MA8E AgACMAkDBwAmIAAZwAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAoGNrcs7mjez7Gxd/gnmn9OurCRZf2Q3R rgDbtKAb2I7y3KRM97fK1KwgWDsOn6hWTs7d1HDE3pm0hvEiE9eqJVeqa3ZhbhQe XfMFKKv0xwGvQzgauH+bR5eH1v9PAHcSFvjroXq0g+2BtCC7N0jceP1ZCcsYCL7z SuLut0VYZThW28KcDLL00/ovyiLZ3TwHmqsmabqP9b/LHy1Wr/9newopjS/tKzJh SHUID9Jd9LDPnOpCR/oZ1hUja0nLKrzfbrzLe68glKPOpY4j8RFVMyqsKvJMyRFZ oZXw6tZk+ThslEDyKv48Wo9gC7EHL0W0fn67z/2sGN7AK9nPvoNH5Q== -----END CERTIFICATE-----Generated at Tue May 12 21:48:12 2026 by rpki-client