$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/a05edcb1-cd53-3361-9a4a-f92812c5008e.roa File: a05edcb1-cd53-3361-9a4a-f92812c5008e.roa (raw, json) Hash identifier: 3Adr18qHzwH1JmVZR9qQV9idL6xA7/WLZJp9hCztnag= Subject key identifier: 80:C2:76:94:3B:74:D5:7B:70:E0:60:CB:53:48:2D:DF:F6:48:8C:39 Certificate issuer: /CN=9c6e9a25-1599-4e9b-a8a2-015995c805b8 Certificate serial: 010D0C9F4328584D8EF55BF745AE4C8CCDFA5800 Authority key identifier: 8E:F7:C9:9E:50:68:66:1B:10:0F:56:6A:37:AB:5B:FF:D4:26:8F:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/a05edcb1-cd53-3361-9a4a-f92812c5008e.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 400312 IP address blocks: 23.131.168.0/24 maxlen: 24 2602:fbf0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/9c6e9a25-1599-4e9b-a8a2-015995c805b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/9c6e9a25-1599-4e9b-a8a2-015995c805b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:5b:f7:45:ae:4c:8c:cd:fa:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c6e9a25-1599-4e9b-a8a2-015995c805b8 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=a198bd88-69e3-4e3d-b9d3-e79b167185d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:95:2c:65:8f:72:0e:eb:b5:90:8d:ba:e9:e6: a4:dd:c0:37:70:fc:27:2d:9f:2b:01:33:28:f0:9a: df:02:80:09:e5:15:eb:db:35:ea:aa:24:f1:ed:5a: e7:2d:14:47:91:3f:9e:c5:48:6d:49:5c:a7:58:81: 30:38:c0:90:89:80:9f:d5:98:48:56:4b:cd:0a:b4: ad:e2:d7:cd:41:25:47:13:c1:d3:fa:87:03:21:b3: 51:1a:22:14:c6:70:19:87:a0:4a:eb:8a:39:cf:0b: 92:0a:cb:4e:71:8f:a4:5a:bc:d8:c7:9b:24:c2:7a: 62:8a:b2:fd:cd:d0:09:26:6f:a4:56:9a:81:75:b8: 48:4d:3a:db:1e:91:9c:7e:7e:e4:c3:27:aa:3f:ae: 1c:4c:41:26:21:f1:44:c0:a3:04:22:0d:a0:16:83: 7e:5f:5e:a5:01:67:3e:ef:ca:2b:17:48:c1:ad:b3: 79:6f:1d:d4:ee:68:f0:db:05:f3:37:94:33:2a:39: 2e:9a:ab:2b:17:d9:8d:77:55:84:f7:3e:c4:65:2a: f7:bc:df:7e:0b:ea:65:8e:62:0c:43:18:ca:04:49: aa:1b:f5:13:02:16:7f:c4:32:64:5f:3e:6c:f0:27: bf:24:7d:c3:f7:8d:72:6a:5e:10:b7:34:09:5e:0f: 63:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:C2:76:94:3B:74:D5:7B:70:E0:60:CB:53:48:2D:DF:F6:48:8C:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/a05edcb1-cd53-3361-9a4a-f92812c5008e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/9c6e9a25-1599-4e9b-a8a2-015995c805b8.crl X509v3 Authority Key Identifier: keyid:8E:F7:C9:9E:50:68:66:1B:10:0F:56:6A:37:AB:5B:FF:D4:26:8F:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8.cer sbgp-ipAddrBlock: critical IPv4: 23.131.168.0/24 IPv6: 2602:fbf0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:32:af:9a:3a:1e:70:e3:76:a6:72:af:81:a2:44:12:ce:ce: 20:b0:03:05:5a:36:91:e1:eb:bc:55:d9:3b:29:87:81:6a:0f: 82:b8:b6:4c:9f:9b:f3:c9:9e:cf:1d:7a:19:88:f5:e2:a1:c7: 7c:ec:c0:58:d1:94:bf:02:80:9d:a6:82:bb:03:5c:ef:94:d4: 02:77:f8:35:71:e3:78:8e:f9:db:5b:43:42:cc:62:a5:61:55: ef:32:d6:5d:03:7a:1b:eb:77:cd:ee:b5:7a:ba:f2:31:cc:9c: 02:28:33:89:49:fd:5e:81:02:6a:a0:c5:9b:e9:bb:f6:05:50: 13:00:10:e4:b3:7c:9f:68:d5:18:ec:7e:1d:45:ec:c5:50:0b: 72:db:41:c9:21:f3:c3:bb:c4:80:16:9f:72:87:82:01:b9:13: 69:ae:f0:7e:bf:7d:92:40:33:83:52:75:e7:ae:c2:8b:0c:99: a6:7a:ab:b1:45:e5:bf:ed:ca:55:d3:eb:a6:1c:00:07:9f:dc: 0c:34:96:a0:0e:d9:59:bc:e9:83:a8:1a:67:20:77:3c:73:79: b5:fb:a4:1e:64:19:7c:fa:9a:5c:f9:d9:ef:21:68:f9:f2:f3: 94:6e:10:05:4b:ce:c1:d9:62:33:d6:7a:f1:3b:33:13:43:3c: e5:35:1a:15 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE2O9Vv3Ra5MjM36WAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWM2ZTlhMjUtMTU5OS00ZTliLWE4YTItMDE1OTk1Yzgw NWI4MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk YTE5OGJkODgtNjllMy00ZTNkLWI5ZDMtZTc5YjE2NzE4NWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5UsZY9yDuu1kI266eak3cA3cPwnLZ8rATMo 8JrfAoAJ5RXr2zXqqiTx7VrnLRRHkT+exUhtSVynWIEwOMCQiYCf1ZhIVkvNCrSt 4tfNQSVHE8HT+ocDIbNRGiIUxnAZh6BK64o5zwuSCstOcY+kWrzYx5skwnpiirL9 zdAJJm+kVpqBdbhITTrbHpGcfn7kwyeqP64cTEEmIfFEwKMEIg2gFoN+X16lAWc+ 78orF0jBrbN5bx3U7mjw2wXzN5QzKjkumqsrF9mNd1WE9z7EZSr3vN9+C+pljmIM QxjKBEmqG/UTAhZ/xDJkXz5s8Ce/JH3D941yal4QtzQJXg9jRwIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFIDCdpQ7dNV7cOBgy1NILd/2SIw5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85YzZl OWEyNS0xNTk5LTRlOWItYThhMi0wMTU5OTVjODA1YjgvYTA1ZWRjYjEtY2Q1My0z MzYxLTlhNGEtZjkyODEyYzUwMDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOWM2ZTlhMjUtMTU5OS00ZTliLWE4 YTItMDE1OTk1YzgwNWI4LzljNmU5YTI1LTE1OTktNGU5Yi1hOGEyLTAxNTk5NWM4 MDViOC5jcmwwHwYDVR0jBBgwFoAUjvfJnlBoZhsQD1ZqN6tb/9Qmj6cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85YzZlOWEyNS0xNTk5LTRlOWItYThhMi0wMTU5 OTVjODA1YjguY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF4OoMA0E AgACMAcDBQAmAvvwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAC4yr5o6HnDjdqZyr4GiRBLOziCwAwVaNpHh 67xV2Tsph4FqD4K4tkyfm/PJns8dehmI9eKhx3zswFjRlL8CgJ2mgrsDXO+U1AJ3 +DVx43iO+dtbQ0LMYqVhVe8y1l0Dehvrd83utXq68jHMnAIoM4lJ/V6BAmqgxZvp u/YFUBMAEOSzfJ9o1Rjsfh1F7MVQC3LbQckh88O7xIAWn3KHggG5E2mu8H6/fZJA M4NSdeeuwosMmaZ6q7FF5b/tylXT66YcAAef3Aw0lqAO2Vm86YOoGmcgdzxzebX7 pB5kGXz6mlz52e8haPny85RuEAVLzsHZYjPWevE7MxNDPOU1GhU= -----END CERTIFICATE-----Generated at Wed May 13 12:23:03 2026 by rpki-client