$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/eafd673f-1b99-3314-a8b5-d658f6891223.roa File: eafd673f-1b99-3314-a8b5-d658f6891223.roa (raw, json) Hash identifier: yT9wG4fcp3vB5m+N4OHGsyY86lsD6UeiRSnljK/qnTg= Subject key identifier: 4E:5C:5A:46:00:AD:42:9A:E0:B6:51:BD:24:99:55:A8:CC:49:42:40 Certificate issuer: /CN=4d754a75-6fef-427a-8a5d-d152fb72f46d Certificate serial: 010D0C9F4328584DCAFB164C6BF7C303E70F0A20 Authority key identifier: E4:23:FA:30:4E:50:F0:F7:51:74:45:81:BD:6E:13:37:F9:19:D9:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/eafd673f-1b99-3314-a8b5-d658f6891223.roa Signing time: Mon 11 May 2026 01:00:24 +0000 ROA not before: Mon 11 May 2026 01:00:24 +0000 ROA not after: Sun 09 Aug 2026 01:00:24 +0000 asID: 32913 IP address blocks: 23.157.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/4d754a75-6fef-427a-8a5d-d152fb72f46d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/4d754a75-6fef-427a-8a5d-d152fb72f46d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ca:fb:16:4c:6b:f7:c3:03:e7:0f:0a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d754a75-6fef-427a-8a5d-d152fb72f46d Validity Not Before: May 11 01:00:24 2026 GMT Not After : Aug 9 01:00:24 2026 GMT Subject: CN=53c88ea7-ca5a-488d-84a0-d57e7693c6cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b4:42:96:d5:7b:19:95:4f:a0:dc:b2:21:26: 6a:42:89:c5:c9:4d:04:b7:b7:4c:4a:1b:43:93:52: bd:6d:8f:5b:f1:f1:9d:f6:b0:b4:2d:73:ea:34:32: 4e:7a:8c:ff:6e:e7:26:e7:2d:b9:f6:a1:9d:ac:2e: 3f:9f:ee:74:e3:03:46:62:0f:39:fa:41:19:71:25: e8:22:df:5b:94:90:8b:f0:75:64:dc:f6:c9:41:86: c4:fe:2c:9e:2b:55:48:0a:b5:e1:00:1b:7c:35:6b: c4:e2:b2:7e:a1:2c:67:86:83:f4:dd:9a:e2:de:09: a4:bc:2e:53:62:93:fa:bd:83:42:98:fc:27:a6:d1: 5c:09:bd:67:46:ff:4c:d2:e9:18:04:27:dd:84:99: ce:01:6e:a4:cc:c5:3d:c5:44:f0:b2:42:f6:69:53: 8f:54:50:c0:f8:5d:ee:33:77:77:a0:3c:fe:52:f3: b1:04:c6:78:67:d0:3b:16:37:76:c6:16:45:f2:91: df:a0:f5:64:3d:da:d3:07:62:4b:6b:91:56:a9:3c: 62:83:1d:5d:f6:bb:8a:f1:a6:dc:b1:cf:f8:89:56: 06:9a:e1:83:47:87:d7:76:82:ae:9b:33:8f:80:30: 6f:b2:d3:c5:62:ae:8f:69:2c:d5:ce:73:74:ba:e8: ac:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:5C:5A:46:00:AD:42:9A:E0:B6:51:BD:24:99:55:A8:CC:49:42:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/eafd673f-1b99-3314-a8b5-d658f6891223.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/4d754a75-6fef-427a-8a5d-d152fb72f46d.crl X509v3 Authority Key Identifier: keyid:E4:23:FA:30:4E:50:F0:F7:51:74:45:81:BD:6E:13:37:F9:19:D9:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d.cer sbgp-ipAddrBlock: critical IPv4: 23.157.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:ea:26:0a:2c:5f:b4:12:8c:e8:bf:c2:a8:a5:d5:24:ec:0c: f6:f0:ac:4f:df:c0:87:cd:61:31:10:6f:b5:a6:3d:77:99:73: 93:2f:fb:80:54:a0:58:86:69:b7:3c:4b:e1:0b:ee:17:6b:c3: 1f:e9:b6:bc:92:b1:7c:e3:17:8d:d5:29:7a:79:65:f0:a6:c7: 4c:28:13:19:0b:ef:6c:bc:c1:c1:59:a3:96:67:96:76:3c:b5: 04:c5:7a:16:77:ac:ab:1c:0a:a9:35:67:2b:d6:ed:a6:64:54: 75:55:42:65:26:ef:7f:44:ea:c1:fc:6e:23:19:15:f2:44:d3: 45:94:6a:e5:32:a4:db:a0:82:5f:3d:e7:d8:a7:84:1e:36:79: 2d:fd:91:70:58:a6:59:18:a7:63:fe:90:c4:de:95:ed:00:ad: 79:3b:18:b1:12:10:ce:c5:09:e9:f1:10:3d:de:a7:c7:20:1e: 1e:2f:02:d3:0e:e1:3a:e0:14:ec:e8:ed:94:3f:48:5d:26:42: 45:4f:b5:43:ab:d0:d7:51:7c:63:84:ca:a7:03:26:d8:96:e9: a9:32:e1:dc:39:bd:69:9a:ef:85:ab:3e:2a:70:6c:ce:65:26: b4:dd:49:8c:8a:d1:70:2e:c7:d3:ba:24:0a:b6:ef:1e:c9:cf: c7:62:1c:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3K+xZMa/fDA+cPCiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQ3NTRhNzUtNmZlZi00MjdhLThhNWQtZDE1MmZiNzJm NDZkMB4XDTI2MDUxMTAxMDAyNFoXDTI2MDgwOTAxMDAyNFowLzEtMCsGA1UEAxMk NTNjODhlYTctY2E1YS00ODhkLTg0YTAtZDU3ZTc2OTNjNmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrRCltV7GZVPoNyyISZqQonFyU0Et7dMShtD k1K9bY9b8fGd9rC0LXPqNDJOeoz/bucm5y259qGdrC4/n+504wNGYg85+kEZcSXo It9blJCL8HVk3PbJQYbE/iyeK1VICrXhABt8NWvE4rJ+oSxnhoP03Zri3gmkvC5T YpP6vYNCmPwnptFcCb1nRv9M0ukYBCfdhJnOAW6kzMU9xUTwskL2aVOPVFDA+F3u M3d3oDz+UvOxBMZ4Z9A7Fjd2xhZF8pHfoPVkPdrTB2JLa5FWqTxigx1d9ruK8abc sc/4iVYGmuGDR4fXdoKumzOPgDBvstPFYq6PaSzVznN0uuisWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE5cWkYArUKa4LZRvSSZVajMSUJAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZDc1 NGE3NS02ZmVmLTQyN2EtOGE1ZC1kMTUyZmI3MmY0NmQvZWFmZDY3M2YtMWI5OS0z MzE0LWE4YjUtZDY1OGY2ODkxMjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGQ3NTRhNzUtNmZlZi00MjdhLThh NWQtZDE1MmZiNzJmNDZkLzRkNzU0YTc1LTZmZWYtNDI3YS04YTVkLWQxNTJmYjcy ZjQ2ZC5jcmwwHwYDVR0jBBgwFoAU5CP6ME5Q8PdRdEWBvW4TN/kZ2UswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZDc1NGE3NS02ZmVmLTQyN2EtOGE1ZC1kMTUy ZmI3MmY0NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF52YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHqJgosX7QSjOi/wqil1STsDPbwrE/fwIfNYTEQb7WmPXeZc5Mv+4BU oFiGabc8S+EL7hdrwx/ptrySsXzjF43VKXp5ZfCmx0woExkL72y8wcFZo5ZnlnY8 tQTFehZ3rKscCqk1ZyvW7aZkVHVVQmUm739E6sH8biMZFfJE00WUauUypNuggl89 59inhB42eS39kXBYplkYp2P+kMTele0ArXk7GLESEM7FCenxED3ep8cgHh4vAtMO 4TrgFOzo7ZQ/SF0mQkVPtUOr0NdRfGOEyqcDJtiW6aky4dw5vWma74WrPipwbM5l JrTdSYyK0XAux9O6JAq27x7Jz8diHGs= -----END CERTIFICATE-----Generated at Wed May 13 06:43:27 2026 by rpki-client