$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/25017e4e-9850-38bf-a8e4-a96d2341037c.roa File: 25017e4e-9850-38bf-a8e4-a96d2341037c.roa (raw, json) Hash identifier: RFqTGzrtcCpQyEdOOo3xEqhs4QZ0diCXHzfuabEnUg4= Subject key identifier: 38:70:F7:13:C1:66:98:1E:88:96:E0:45:3A:FD:6A:C2:03:0C:B9:18 Certificate issuer: /CN=ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb Certificate serial: 010D0C9F4328584DCAFB099494EF777A96E32EC0 Authority key identifier: 3E:74:CA:C3:2A:55:30:FC:12:F0:74:86:AC:0C:26:F3:75:48:5A:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/25017e4e-9850-38bf-a8e4-a96d2341037c.roa Signing time: Mon 11 May 2026 01:00:24 +0000 ROA not before: Mon 11 May 2026 01:00:24 +0000 ROA not after: Sun 09 Aug 2026 01:00:24 +0000 asID: 201217 IP address blocks: 23.172.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ca:fb:09:94:94:ef:77:7a:96:e3:2e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb Validity Not Before: May 11 01:00:24 2026 GMT Not After : Aug 9 01:00:24 2026 GMT Subject: CN=d610b036-9fbc-4738-ad33-fe9b65d7d65f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:1b:90:bd:e2:e6:74:40:a3:21:54:f3:b6:c0: d4:ac:19:37:c2:2e:fe:6c:2a:4f:56:b3:f2:22:09: c3:b6:c6:43:dc:06:0e:2f:f5:f7:d9:6e:6b:c6:f8: 69:6e:c3:09:ce:b1:7b:cf:27:34:2e:f5:b2:e2:59: 03:5a:4e:63:b3:5e:85:2f:88:6f:ff:19:e1:ab:69: b4:a1:ec:40:b1:bc:e7:7f:fc:ae:6a:84:ad:fe:41: f1:a8:78:38:fe:04:d7:32:3b:51:63:7b:e2:22:65: fb:07:fd:2a:e7:ea:47:e6:8b:e4:bf:22:b5:da:76: ae:2b:c3:62:51:4e:a6:1a:83:7a:f1:15:91:84:f6: cd:9a:dd:c7:be:67:0e:36:cb:ee:bd:70:ac:0f:95: c2:6d:68:75:08:40:66:ae:94:a8:51:16:74:37:07: 21:d6:4c:cb:51:1c:49:ae:3f:fd:24:33:58:9b:0c: c0:f3:08:13:c1:f5:34:4f:fb:56:30:6c:e5:a4:4d: 3f:b9:fb:19:5d:e5:4c:3b:bb:95:0c:ea:1b:a5:a1: 5d:1d:83:a5:5e:cd:c2:5b:42:03:8f:3a:b1:cb:c7: 76:29:b0:94:66:75:70:29:3b:7f:44:26:a0:15:0e: fe:15:a2:8a:a1:e2:76:76:a7:f4:d3:7d:98:16:d2: 6c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:70:F7:13:C1:66:98:1E:88:96:E0:45:3A:FD:6A:C2:03:0C:B9:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/25017e4e-9850-38bf-a8e4-a96d2341037c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.crl X509v3 Authority Key Identifier: keyid:3E:74:CA:C3:2A:55:30:FC:12:F0:74:86:AC:0C:26:F3:75:48:5A:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.cer sbgp-ipAddrBlock: critical IPv4: 23.172.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:2e:df:bb:ee:9d:98:c1:fe:6e:1b:b5:23:b2:53:91:f5:ba: bb:13:d9:b5:5b:5e:f7:cb:cb:ec:67:56:18:b5:bc:2a:3e:96: d9:6a:1e:99:d1:e0:81:94:27:26:60:93:29:21:c6:8f:5a:48: 38:f8:c7:db:25:ca:85:08:fd:95:d0:0a:31:aa:30:e6:e3:34: 40:e9:fa:64:cc:21:09:01:d4:c3:2b:6c:cc:de:f1:8e:ac:14: 56:c6:d8:59:5a:1c:06:58:dd:35:ee:b7:5b:f7:b3:54:81:6e: fb:30:3e:3f:8c:b1:e3:7b:be:74:57:9d:fd:ac:cc:8d:f3:58: fe:f7:50:07:42:c8:25:5f:01:fa:b5:71:18:0e:34:d1:89:cc: 1b:00:0e:f9:28:ce:51:94:e6:a0:7f:4a:f7:c5:ac:39:8f:9c: e9:e9:13:70:c6:d3:38:34:5d:dc:c7:31:aa:ce:e3:2d:e6:55: 06:54:43:0b:83:f1:45:e7:ea:f7:1b:5d:27:9c:1b:af:e9:f5: 4b:38:69:e9:03:fa:c5:eb:22:8e:e3:2d:48:6c:2a:34:46:0b: 85:2f:01:63:f4:60:ab:d7:8e:78:3a:92:05:b3:14:32:3f:eb: 82:1f:20:7e:54:98:94:22:d2:82:71:9f:11:1d:fc:53:a5:1a: a0:69:c2:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3K+wmUlO93epbjLsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2UwYWNjODUtNGRjMS00ZGRjLThlYmItNTk4ZjNjYmMw ZWZiMB4XDTI2MDUxMTAxMDAyNFoXDTI2MDgwOTAxMDAyNFowLzEtMCsGA1UEAxMk ZDYxMGIwMzYtOWZiYy00NzM4LWFkMzMtZmU5YjY1ZDdkNjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihuQveLmdECjIVTztsDUrBk3wi7+bCpPVrPy IgnDtsZD3AYOL/X32W5rxvhpbsMJzrF7zyc0LvWy4lkDWk5js16FL4hv/xnhq2m0 oexAsbznf/yuaoSt/kHxqHg4/gTXMjtRY3viImX7B/0q5+pH5ovkvyK12nauK8Ni UU6mGoN68RWRhPbNmt3HvmcONsvuvXCsD5XCbWh1CEBmrpSoURZ0Nwch1kzLURxJ rj/9JDNYmwzA8wgTwfU0T/tWMGzlpE0/ufsZXeVMO7uVDOobpaFdHYOlXs3CW0ID jzqxy8d2KbCUZnVwKTt/RCagFQ7+FaKKoeJ2dqf0032YFtJs2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDhw9xPBZpgeiJbgRTr9asIDDLkYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jZTBh Y2M4NS00ZGMxLTRkZGMtOGViYi01OThmM2NiYzBlZmIvMjUwMTdlNGUtOTg1MC0z OGJmLWE4ZTQtYTk2ZDIzNDEwMzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvY2UwYWNjODUtNGRjMS00ZGRjLThl YmItNTk4ZjNjYmMwZWZiL2NlMGFjYzg1LTRkYzEtNGRkYy04ZWJiLTU5OGYzY2Jj MGVmYi5jcmwwHwYDVR0jBBgwFoAUPnTKwypVMPwS8HSGrAwm83VIWo0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jZTBhY2M4NS00ZGMxLTRkZGMtOGViYi01OThm M2NiYzBlZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6zIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAcu37vunZjB/m4btSOyU5H1ursT2bVbXvfLy+xnVhi1vCo+ltlqHpnR 4IGUJyZgkykhxo9aSDj4x9slyoUI/ZXQCjGqMObjNEDp+mTMIQkB1MMrbMze8Y6s FFbG2FlaHAZY3TXut1v3s1SBbvswPj+MseN7vnRXnf2szI3zWP73UAdCyCVfAfq1 cRgONNGJzBsADvkozlGU5qB/SvfFrDmPnOnpE3DG0zg0XdzHMarO4y3mVQZUQwuD 8UXn6vcbXSecG6/p9Us4aekD+sXrIo7jLUhsKjRGC4UvAWP0YKvXjng6kgWzFDI/ 64IfIH5UmJQi0oJxnxEd/FOlGqBpwn0= -----END CERTIFICATE-----Generated at Wed May 13 02:53:04 2026 by rpki-client