$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/539c4abd-3fc4-3155-8a5a-b488516837e0.roa File: 539c4abd-3fc4-3155-8a5a-b488516837e0.roa (raw, json) Hash identifier: PS63fieJvdDl9WiWQdX37TFo6hlmzKJpsYqYrgjbdVI= Subject key identifier: B1:B1:26:0C:B8:49:67:49:39:DE:D3:F4:7D:F3:2A:B0:7B:48:F2:84 Certificate issuer: /CN=b2959336-6afe-411c-b979-dac0a693f8c4 Certificate serial: 010D0C9F4328584DA2801A6C6015EEE39FDCDB80 Authority key identifier: 1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/539c4abd-3fc4-3155-8a5a-b488516837e0.roa Signing time: Sun 26 Apr 2026 13:00:30 +0000 ROA not before: Sun 26 Apr 2026 13:00:30 +0000 ROA not after: Sat 25 Jul 2026 13:00:30 +0000 asID: 10753 IP address blocks: 167.23.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a2:80:1a:6c:60:15:ee:e3:9f:dc:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2959336-6afe-411c-b979-dac0a693f8c4 Validity Not Before: Apr 26 13:00:30 2026 GMT Not After : Jul 25 13:00:30 2026 GMT Subject: CN=0ff16d30-4ad8-4874-b2f1-2e5691658eca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:3e:54:d7:79:50:59:e9:de:35:a2:99:64:bc: 4d:01:e5:67:ba:43:93:e8:9a:7e:80:a3:a3:05:e3: a6:a7:9b:95:29:d8:0a:dd:0c:2d:66:46:c7:fb:0c: fb:6f:5e:00:e0:ee:b3:4d:a0:10:a6:20:6c:e4:d8: 1e:91:70:12:cd:a1:f8:a3:a0:08:5f:10:f5:00:b7: af:96:2b:48:ae:23:c7:c4:6e:ba:93:00:0e:32:04: a0:61:0e:16:4b:d1:b8:04:26:4a:bd:96:0e:e7:4f: 9b:33:00:a4:ab:52:f6:3b:a8:ad:8f:f8:45:bf:07: 3a:ba:bd:3c:fb:2f:fa:8f:7e:83:22:10:1e:dc:c3: dc:d7:44:63:fc:71:b7:ff:ee:c1:fe:94:fb:f2:bd: 9c:78:13:c2:91:e8:d1:b2:e2:f5:71:08:0d:ec:36: ee:4a:b4:2a:16:40:29:7b:b1:3b:0f:c8:10:80:75: 22:3a:bd:cf:d1:4e:c5:95:f9:dd:1d:12:a3:22:e1: e3:f3:86:0d:72:d7:2e:ca:b5:59:6e:0c:ac:83:0a: 97:2a:b2:d8:ec:02:cd:d7:f0:96:df:c0:27:6a:a5: 19:92:57:54:01:b6:02:f6:9d:a6:7b:24:65:22:87: 5c:cd:40:4b:f9:2c:c6:6a:e3:5b:73:4c:56:8b:64: ce:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:B1:26:0C:B8:49:67:49:39:DE:D3:F4:7D:F3:2A:B0:7B:48:F2:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/539c4abd-3fc4-3155-8a5a-b488516837e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl X509v3 Authority Key Identifier: keyid:1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer sbgp-ipAddrBlock: critical IPv4: 167.23.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:16:5a:3f:56:d0:25:9e:82:06:b3:c4:68:21:2f:9d:09:5e: 4b:4a:9d:70:a4:af:0d:c8:54:6d:a4:b6:2b:ab:16:26:0e:4f: 21:fb:90:1b:b9:6b:aa:83:f3:d5:11:2c:22:bf:e1:31:61:d3: b9:8f:62:ba:c0:39:4e:83:2f:f7:74:0a:c9:df:36:86:13:8e: 17:50:f3:8e:88:4f:f9:d4:cd:48:d5:1f:02:97:fe:15:25:15: ef:e7:f8:4d:4a:8d:60:89:9b:81:67:78:a1:29:62:40:82:70: 9e:9a:0a:da:d3:af:5b:17:11:c7:94:f3:10:82:4d:6e:b2:89: 02:c6:c1:b3:30:21:15:4b:3f:3d:ab:cf:50:d8:86:14:c8:bc: 2f:c6:0d:62:03:27:8a:da:d7:9f:a3:fb:21:9c:90:bb:f9:0d: 5d:fa:d3:3c:4e:2a:04:a5:12:12:51:0f:1f:e4:a2:6d:d0:90: d1:4d:be:26:14:87:e3:30:c8:e2:17:eb:8a:99:96:55:c8:93: 0f:49:a6:a7:49:8a:5b:c1:bb:11:a3:12:14:3d:78:da:f0:c1: 23:cd:e0:05:ba:3b:1c:c9:5a:4f:a2:1c:3d:7d:57:25:f7:da: 1e:44:ad:a1:da:cc:be:75:c6:c2:43:1c:f9:44:c6:67:84:b5: d8:fa:0c:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2igBpsYBXu45/c24AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjI5NTkzMzYtNmFmZS00MTFjLWI5NzktZGFjMGE2OTNm OGM0MB4XDTI2MDQyNjEzMDAzMFoXDTI2MDcyNTEzMDAzMFowLzEtMCsGA1UEAxMk MGZmMTZkMzAtNGFkOC00ODc0LWIyZjEtMmU1NjkxNjU4ZWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0z5U13lQWeneNaKZZLxNAeVnukOT6Jp+gKOj BeOmp5uVKdgK3QwtZkbH+wz7b14A4O6zTaAQpiBs5NgekXASzaH4o6AIXxD1ALev litIriPHxG66kwAOMgSgYQ4WS9G4BCZKvZYO50+bMwCkq1L2O6itj/hFvwc6ur08 +y/6j36DIhAe3MPc10Rj/HG3/+7B/pT78r2ceBPCkejRsuL1cQgN7DbuSrQqFkAp e7E7D8gQgHUiOr3P0U7FlfndHRKjIuHj84YNctcuyrVZbgysgwqXKrLY7ALN1/CW 38AnaqUZkldUAbYC9p2meyRlIodczUBL+SzGauNbc0xWi2TOrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLGxJgy4SWdJOd7T9H3zKrB7SPKEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iMjk1 OTMzNi02YWZlLTQxMWMtYjk3OS1kYWMwYTY5M2Y4YzQvNTM5YzRhYmQtM2ZjNC0z MTU1LThhNWEtYjQ4ODUxNjgzN2UwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjI5NTkzMzYtNmFmZS00MTFjLWI5 NzktZGFjMGE2OTNmOGM0L2IyOTU5MzM2LTZhZmUtNDExYy1iOTc5LWRhYzBhNjkz ZjhjNC5jcmwwHwYDVR0jBBgwFoAUHFIwMv7rW5JtWi415XyAOxXgMnMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iMjk1OTMzNi02YWZlLTQxMWMtYjk3OS1kYWMw YTY5M2Y4YzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHpxeAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEUWWj9W0CWeggazxGghL50JXktKnXCkrw3IVG2ktiurFiYOTyH7kBu5 a6qD89URLCK/4TFh07mPYrrAOU6DL/d0CsnfNoYTjhdQ846IT/nUzUjVHwKX/hUl Fe/n+E1KjWCJm4FneKEpYkCCcJ6aCtrTr1sXEceU8xCCTW6yiQLGwbMwIRVLPz2r z1DYhhTIvC/GDWIDJ4ra15+j+yGckLv5DV360zxOKgSlEhJRDx/kom3QkNFNviYU h+MwyOIX64qZllXIkw9JpqdJilvBuxGjEhQ9eNrwwSPN4AW6OxzJWk+iHD19VyX3 2h5EraHazL51xsJDHPlExmeEtdj6DLM= -----END CERTIFICATE-----Generated at Wed May 13 08:05:12 2026 by rpki-client