$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f932ac50-ee05-43cb-83a6-384d4d3614d2/b225ca7a-9ca1-3a4e-8670-67dbfc6f395f.roa File: b225ca7a-9ca1-3a4e-8670-67dbfc6f395f.roa (raw, json) Hash identifier: mqoTpPl6+HA3vvFJhMm19Ec0Sp7KFz9CkJShi4txo1o= Subject key identifier: BD:C5:20:38:4E:7F:DE:9F:88:8E:2F:4A:A3:37:FD:3A:CB:37:6C:07 Certificate issuer: /CN=f932ac50-ee05-43cb-83a6-384d4d3614d2 Certificate serial: 010D0C9F4328584D97A4D883A4E81EA5DAB39E80 Authority key identifier: 49:41:33:DE:19:60:7B:4F:06:EF:6A:18:BB:BA:88:2B:E9:FB:3D:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f932ac50-ee05-43cb-83a6-384d4d3614d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f932ac50-ee05-43cb-83a6-384d4d3614d2/b225ca7a-9ca1-3a4e-8670-67dbfc6f395f.roa Signing time: Wed 22 Apr 2026 15:40:47 +0000 ROA not before: Wed 22 Apr 2026 15:40:47 +0000 ROA not after: Tue 21 Jul 2026 15:40:47 +0000 asID: 402414 IP address blocks: 23.157.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f932ac50-ee05-43cb-83a6-384d4d3614d2/f932ac50-ee05-43cb-83a6-384d4d3614d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f932ac50-ee05-43cb-83a6-384d4d3614d2/f932ac50-ee05-43cb-83a6-384d4d3614d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f932ac50-ee05-43cb-83a6-384d4d3614d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:97:a4:d8:83:a4:e8:1e:a5:da:b3:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f932ac50-ee05-43cb-83a6-384d4d3614d2 Validity Not Before: Apr 22 15:40:47 2026 GMT Not After : Jul 21 15:40:47 2026 GMT Subject: CN=975e7b2d-b709-46c9-ae0c-5941b3437162 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d6:1f:89:85:68:86:48:42:ff:e2:52:f1:53: 4a:6c:4e:a3:28:47:6a:85:25:ce:44:33:42:5c:b1: 18:b1:da:8f:46:28:fd:2f:a2:2b:e5:a5:41:38:75: 23:37:c5:b8:b4:f5:34:eb:d3:34:d8:1b:1c:29:9c: 7d:a2:0d:38:49:e8:3f:b1:94:17:97:bf:e3:60:e4: 5f:42:cd:14:e0:cb:43:29:43:87:0a:1a:f2:a1:b1: 59:22:11:b2:42:d1:17:e2:66:1d:9f:2d:d4:c4:5e: 46:31:04:98:50:68:b8:2d:fb:51:d2:82:66:26:6f: 44:33:cc:d9:0c:83:1e:17:01:c0:38:4a:7d:99:b7: 62:07:c9:39:e0:23:73:1e:13:93:08:a9:e3:b5:5d: de:8e:05:67:12:4f:4f:fb:3f:4e:01:12:ab:d0:cb: 74:db:eb:4a:55:d4:51:6b:8a:5e:be:9e:bc:e7:60: 6b:61:ae:b6:69:a4:14:46:10:e2:fe:fb:77:39:69: f9:be:07:19:a3:82:0d:48:2b:43:ae:2d:0a:5f:7d: 49:38:95:a2:ac:53:d4:28:6f:45:77:5c:2f:cb:36: db:86:57:79:4f:f7:69:3a:58:d5:e1:fb:90:40:d7: 3a:57:64:60:70:9b:64:ad:8e:e5:a1:41:0b:49:c3: 61:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:C5:20:38:4E:7F:DE:9F:88:8E:2F:4A:A3:37:FD:3A:CB:37:6C:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f932ac50-ee05-43cb-83a6-384d4d3614d2/b225ca7a-9ca1-3a4e-8670-67dbfc6f395f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f932ac50-ee05-43cb-83a6-384d4d3614d2/f932ac50-ee05-43cb-83a6-384d4d3614d2.crl X509v3 Authority Key Identifier: keyid:49:41:33:DE:19:60:7B:4F:06:EF:6A:18:BB:BA:88:2B:E9:FB:3D:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f932ac50-ee05-43cb-83a6-384d4d3614d2.cer sbgp-ipAddrBlock: critical IPv4: 23.157.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:73:6d:0b:2f:81:b6:d7:35:40:9f:10:05:85:f9:e0:82:89: 1f:10:7f:50:0e:6c:be:20:7f:2d:53:69:bc:6b:37:40:37:05: 21:46:e2:d5:2c:df:a8:4c:86:e4:9b:71:d3:02:02:21:28:08: 79:0e:ea:a5:4a:d6:83:4f:54:0c:42:5a:52:ba:0b:dc:a1:dd: cb:03:c7:c5:47:c4:72:cf:04:9c:a9:6f:e1:44:16:f0:9c:69: e0:89:f5:72:c9:92:24:2f:e8:f7:67:0f:0c:f3:d0:41:a8:6d: 36:72:21:4f:0e:15:52:fe:b8:28:f7:be:db:3f:08:5a:ea:4d: b1:b1:86:55:36:79:bb:25:b5:e9:c5:8c:8b:41:c5:1f:de:cc: f8:58:3c:f7:e6:f5:ca:22:46:84:05:42:f9:8f:07:90:db:fa: 6f:95:f4:81:5c:e7:5d:b0:ca:ea:c4:ff:b0:b4:fb:c0:49:4e: 6d:fb:a4:e5:66:10:6e:ce:ff:ac:c3:20:d9:4c:2f:1f:c5:5b: ff:09:63:3c:4d:b0:11:c3:16:8c:d1:d1:c5:0a:67:25:4c:b2: 33:d7:42:1f:f2:f6:47:19:1a:98:ac:73:32:4c:a7:67:de:7c: b2:9a:b7:a9:d7:39:e4:6e:8c:47:c6:0e:ff:78:f0:42:60:f8: e3:28:bb:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2XpNiDpOgepdqznoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjkzMmFjNTAtZWUwNS00M2NiLTgzYTYtMzg0ZDRkMzYx NGQyMB4XDTI2MDQyMjE1NDA0N1oXDTI2MDcyMTE1NDA0N1owLzEtMCsGA1UEAxMk OTc1ZTdiMmQtYjcwOS00NmM5LWFlMGMtNTk0MWIzNDM3MTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNYfiYVohkhC/+JS8VNKbE6jKEdqhSXORDNC XLEYsdqPRij9L6Ir5aVBOHUjN8W4tPU069M02BscKZx9og04Seg/sZQXl7/jYORf Qs0U4MtDKUOHChryobFZIhGyQtEX4mYdny3UxF5GMQSYUGi4LftR0oJmJm9EM8zZ DIMeFwHAOEp9mbdiB8k54CNzHhOTCKnjtV3ejgVnEk9P+z9OARKr0Mt02+tKVdRR a4pevp6852BrYa62aaQURhDi/vt3OWn5vgcZo4INSCtDri0KX31JOJWirFPUKG9F d1wvyzbbhld5T/dpOljV4fuQQNc6V2RgcJtkrY7loUELScNhkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL3FIDhOf96fiI4vSqM3/TrLN2wHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9mOTMy YWM1MC1lZTA1LTQzY2ItODNhNi0zODRkNGQzNjE0ZDIvYjIyNWNhN2EtOWNhMS0z YTRlLTg2NzAtNjdkYmZjNmYzOTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZjkzMmFjNTAtZWUwNS00M2NiLTgz YTYtMzg0ZDRkMzYxNGQyL2Y5MzJhYzUwLWVlMDUtNDNjYi04M2E2LTM4NGQ0ZDM2 MTRkMi5jcmwwHwYDVR0jBBgwFoAUSUEz3hlge08G72oYu7qIK+n7PUkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9mOTMyYWM1MC1lZTA1LTQzY2ItODNhNi0zODRk NGQzNjE0ZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF508MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpzbQsvgbbXNUCfEAWF+eCCiR8Qf1AObL4gfy1TabxrN0A3BSFG4tUs 36hMhuSbcdMCAiEoCHkO6qVK1oNPVAxCWlK6C9yh3csDx8VHxHLPBJypb+FEFvCc aeCJ9XLJkiQv6PdnDwzz0EGobTZyIU8OFVL+uCj3vts/CFrqTbGxhlU2ebsltenF jItBxR/ezPhYPPfm9coiRoQFQvmPB5Db+m+V9IFc512wyurE/7C0+8BJTm37pOVm EG7O/6zDINlMLx/FW/8JYzxNsBHDFozR0cUKZyVMsjPXQh/y9kcZGpisczJMp2fe fLKat6nXOeRujEfGDv948EJg+OMou8A= -----END CERTIFICATE-----Generated at Wed May 13 14:17:59 2026 by rpki-client