$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b016da01-ca57-4ad0-ab13-d0b3dcfbc131/8508cfc1-c0a6-3b37-a8d6-da00aa13759d.roa File: 8508cfc1-c0a6-3b37-a8d6-da00aa13759d.roa (raw, json) Hash identifier: J6vblAg95UoshcDN4Y7QfqNRmZ2zOvYQPHuEM4fqJTI= Subject key identifier: 10:DE:BA:D3:68:B8:67:74:B8:85:70:C6:0C:B6:E1:03:04:07:E2:36 Certificate issuer: /CN=b016da01-ca57-4ad0-ab13-d0b3dcfbc131 Certificate serial: 010D0C9F4328584DC61549711E59641451FFBB4A Authority key identifier: B2:6D:BD:A1:96:DE:A9:15:F5:89:35:5D:8B:79:E6:5C:92:73:58:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b016da01-ca57-4ad0-ab13-d0b3dcfbc131.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b016da01-ca57-4ad0-ab13-d0b3dcfbc131/8508cfc1-c0a6-3b37-a8d6-da00aa13759d.roa Signing time: Sat 09 May 2026 06:54:31 +0000 ROA not before: Sat 09 May 2026 06:54:31 +0000 ROA not after: Fri 07 Aug 2026 06:54:31 +0000 asID: 215748 IP address blocks: 23.157.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b016da01-ca57-4ad0-ab13-d0b3dcfbc131/b016da01-ca57-4ad0-ab13-d0b3dcfbc131.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b016da01-ca57-4ad0-ab13-d0b3dcfbc131/b016da01-ca57-4ad0-ab13-d0b3dcfbc131.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b016da01-ca57-4ad0-ab13-d0b3dcfbc131.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c6:15:49:71:1e:59:64:14:51:ff:bb:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b016da01-ca57-4ad0-ab13-d0b3dcfbc131 Validity Not Before: May 9 06:54:31 2026 GMT Not After : Aug 7 06:54:31 2026 GMT Subject: CN=447d8186-699c-4fbc-b9db-5efee1f875b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a7:53:04:5a:ac:e9:4a:65:d9:f0:f7:66:b8: 25:4d:8c:9b:09:45:1c:5d:15:5e:a5:5c:18:05:68: 5a:b5:50:4a:52:15:a8:25:61:73:8a:91:5b:e1:ad: 66:94:ed:a3:b0:5f:6e:eb:a4:33:32:3c:79:db:69: cb:7b:23:cd:f3:20:c7:cf:3a:6d:e6:ff:a6:4a:20: 71:e4:28:84:5c:35:4e:98:99:98:c2:aa:cd:4a:bd: 45:40:06:21:b9:7d:1d:35:ec:78:3f:c3:00:60:b4: c0:f3:f8:33:ce:b9:f8:d0:fe:ff:0e:e0:af:dc:fb: 7e:58:dc:ff:93:39:e8:97:3a:b4:b4:f2:85:68:b7: 8e:73:cb:0a:02:1c:ed:32:2d:9c:41:a2:fc:05:97: b1:fc:69:c0:fe:72:8b:e5:6f:f8:4e:43:48:e5:44: 3e:8c:c2:1f:60:de:e2:15:51:f3:a8:db:54:34:e5: ac:c7:6a:2f:66:9c:b9:98:cc:30:9f:27:d8:f3:ae: 28:07:41:24:bc:6e:10:b8:ba:88:ad:93:3e:bc:b3: 34:42:28:27:63:f5:f8:26:14:7c:dd:48:be:1f:ae: 5c:8a:83:e6:8d:b3:68:8d:df:74:38:44:9c:6f:79: df:43:54:4f:97:b9:35:6f:4c:84:34:3c:ef:fe:1c: bd:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:DE:BA:D3:68:B8:67:74:B8:85:70:C6:0C:B6:E1:03:04:07:E2:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b016da01-ca57-4ad0-ab13-d0b3dcfbc131/8508cfc1-c0a6-3b37-a8d6-da00aa13759d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b016da01-ca57-4ad0-ab13-d0b3dcfbc131/b016da01-ca57-4ad0-ab13-d0b3dcfbc131.crl X509v3 Authority Key Identifier: keyid:B2:6D:BD:A1:96:DE:A9:15:F5:89:35:5D:8B:79:E6:5C:92:73:58:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b016da01-ca57-4ad0-ab13-d0b3dcfbc131.cer sbgp-ipAddrBlock: critical IPv4: 23.157.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:59:c5:85:fe:b7:8d:e9:81:37:3c:0a:03:90:a1:a9:26:7d: 61:37:bb:b0:c9:a0:9a:9f:f7:95:3a:65:00:db:b1:5e:e0:23: e7:e9:1a:a8:fa:a7:c7:cc:7e:32:8e:c3:6a:72:0e:1a:80:c5: ab:86:1d:af:7d:db:c9:ee:bd:fd:eb:53:b6:cb:f1:c6:ac:97: cf:d7:03:a7:d6:b0:2b:dd:d6:47:16:4c:ec:c0:db:9c:21:08: 55:bf:9e:e4:8f:c5:b1:ca:b1:67:92:9b:51:bc:ee:98:d3:88: d9:32:e4:65:9a:c3:fd:dd:93:a0:bf:77:18:97:ad:c6:1f:dc: 68:7f:a8:9a:bc:08:20:4f:2b:21:9a:c2:ef:8f:0d:a1:32:ba: 72:18:ba:15:f6:6b:c8:bc:b1:f0:bc:fe:86:5e:8f:2f:67:bc: 95:17:4d:e9:26:58:ad:1f:b8:38:34:38:8c:e0:c4:07:29:db: ce:d8:aa:04:34:41:fa:5c:96:44:d1:5a:67:6f:75:02:eb:4a: fe:19:c2:c4:8a:09:41:f1:73:ec:5f:03:34:38:d0:dc:1d:5d: 2e:33:df:15:27:f6:1f:d5:7e:8e:a5:ae:b7:10:41:d2:77:bd: eb:37:0c:48:aa:37:58:6c:77:51:ec:3b:5d:f4:7c:54:ab:89: 33:ec:df:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3GFUlxHllkFFH/u0owDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjAxNmRhMDEtY2E1Ny00YWQwLWFiMTMtZDBiM2RjZmJj MTMxMB4XDTI2MDUwOTA2NTQzMVoXDTI2MDgwNzA2NTQzMVowLzEtMCsGA1UEAxMk NDQ3ZDgxODYtNjk5Yy00ZmJjLWI5ZGItNWVmZWUxZjg3NWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqdTBFqs6Upl2fD3ZrglTYybCUUcXRVepVwY BWhatVBKUhWoJWFzipFb4a1mlO2jsF9u66QzMjx522nLeyPN8yDHzzpt5v+mSiBx 5CiEXDVOmJmYwqrNSr1FQAYhuX0dNex4P8MAYLTA8/gzzrn40P7/DuCv3Pt+WNz/ kznolzq0tPKFaLeOc8sKAhztMi2cQaL8BZex/GnA/nKL5W/4TkNI5UQ+jMIfYN7i FVHzqNtUNOWsx2ovZpy5mMwwnyfY864oB0EkvG4QuLqIrZM+vLM0QignY/X4JhR8 3Ui+H65cioPmjbNojd90OEScb3nfQ1RPl7k1b0yENDzv/hy9GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBDeutNouGd0uIVwxgy24QMEB+I2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9iMDE2 ZGEwMS1jYTU3LTRhZDAtYWIxMy1kMGIzZGNmYmMxMzEvODUwOGNmYzEtYzBhNi0z YjM3LWE4ZDYtZGEwMGFhMTM3NTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYjAxNmRhMDEtY2E1Ny00YWQwLWFi MTMtZDBiM2RjZmJjMTMxL2IwMTZkYTAxLWNhNTctNGFkMC1hYjEzLWQwYjNkY2Zi YzEzMS5jcmwwHwYDVR0jBBgwFoAUsm29oZbeqRX1iTVdi3nmXJJzWDgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9iMDE2ZGEwMS1jYTU3LTRhZDAtYWIxMy1kMGIz ZGNmYmMxMzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF538MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALNZxYX+t43pgTc8CgOQoakmfWE3u7DJoJqf95U6ZQDbsV7gI+fpGqj6 p8fMfjKOw2pyDhqAxauGHa9928nuvf3rU7bL8casl8/XA6fWsCvd1kcWTOzA25wh CFW/nuSPxbHKsWeSm1G87pjTiNky5GWaw/3dk6C/dxiXrcYf3Gh/qJq8CCBPKyGa wu+PDaEyunIYuhX2a8i8sfC8/oZejy9nvJUXTekmWK0fuDg0OIzgxAcp287YqgQ0 QfpclkTRWmdvdQLrSv4ZwsSKCUHxc+xfAzQ40NwdXS4z3xUn9h/Vfo6lrrcQQdJ3 ves3DEiqN1hsd1HsO130fFSriTPs3zc= -----END CERTIFICATE-----Generated at Wed May 13 05:47:44 2026 by rpki-client