$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/ed656f57-c876-3393-937a-7eabe0e6e42a.roa File: ed656f57-c876-3393-937a-7eabe0e6e42a.roa (raw, json) Hash identifier: ZhMZTLRNEjsbTp2VeJ8oZSomdrxpan3/98LiZSz1ELo= Subject key identifier: 15:BC:B1:85:C3:E2:DB:24:FD:EB:36:03:C1:B1:F4:B2:B9:1E:F9:34 Certificate issuer: /CN=de8939a6-6acb-48e5-af9a-d1f7cca3b18e Certificate serial: 010D0C9F4328584D95EFEFB5F5138D89FE49A820 Authority key identifier: F7:1B:1F:24:54:05:80:7F:6E:C6:5D:46:1B:82:A2:89:E7:ED:82:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/ed656f57-c876-3393-937a-7eabe0e6e42a.roa Signing time: Wed 22 Apr 2026 01:00:23 +0000 ROA not before: Wed 22 Apr 2026 01:00:23 +0000 ROA not after: Tue 21 Jul 2026 01:00:23 +0000 asID: 400564 IP address blocks: 23.134.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:ef:ef:b5:f5:13:8d:89:fe:49:a8:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de8939a6-6acb-48e5-af9a-d1f7cca3b18e Validity Not Before: Apr 22 01:00:23 2026 GMT Not After : Jul 21 01:00:23 2026 GMT Subject: CN=8c9391c6-0007-4de3-ba3e-24199519acc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c1:80:b6:f7:d2:52:0c:6f:9d:e1:cb:fa:e6: 0e:2e:88:19:db:b5:91:e2:0e:ca:ea:9d:52:47:9c: 70:59:cd:68:56:14:9b:ce:d5:a6:13:20:b3:88:2c: 1c:af:b5:59:92:5b:e4:7b:36:87:eb:d7:25:7a:45: 84:85:80:41:1f:9c:ea:10:70:55:b7:b2:79:26:93: 8a:9e:8f:33:31:6d:8a:62:e6:b8:13:2e:98:53:14: 5c:b4:50:4d:fa:9f:55:91:eb:b0:c0:71:e4:27:a4: c2:1f:b6:5d:1b:ba:75:a9:9d:d4:79:88:b8:f7:2b: 69:27:70:fe:e6:ca:62:69:89:c0:49:c3:ee:0c:15: 84:f5:37:5e:16:38:c7:96:3c:43:69:7c:5f:89:a1: af:c3:a9:33:e4:5d:29:5b:d9:96:b0:d4:d8:66:0b: 7e:0b:2e:da:e2:e3:46:a5:6a:11:18:73:70:30:41: 65:6f:d6:12:7e:b2:11:0f:c9:c3:b5:60:a1:71:09: 43:85:2b:0d:f6:24:d3:63:ba:58:91:a9:01:01:ee: 73:13:f9:1f:4b:27:14:c9:3f:3c:ca:e1:2f:af:28: 67:7c:eb:45:9f:3b:b0:05:48:9b:38:2a:71:29:ed: 87:3b:8f:eb:61:d0:57:08:71:e1:5e:9d:26:16:8f: cd:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:BC:B1:85:C3:E2:DB:24:FD:EB:36:03:C1:B1:F4:B2:B9:1E:F9:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/ed656f57-c876-3393-937a-7eabe0e6e42a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.crl X509v3 Authority Key Identifier: keyid:F7:1B:1F:24:54:05:80:7F:6E:C6:5D:46:1B:82:A2:89:E7:ED:82:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer sbgp-ipAddrBlock: critical IPv4: 23.134.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:ff:66:6a:fe:81:9b:09:dc:fb:a7:dd:11:eb:af:42:f7:bd: 40:cb:3c:18:61:1f:44:a5:3a:03:f5:be:93:63:22:dc:5c:f0: 65:25:ba:73:cc:8c:63:7c:fc:39:4f:ce:ce:09:ff:66:7f:c8: 67:cf:6b:c9:b8:5b:db:16:19:51:55:70:7f:8d:21:0e:00:2c: 7a:d1:f2:76:28:26:05:e6:29:8d:3d:2f:f2:43:94:d9:8d:7e: 56:f8:c5:ac:d4:48:2c:09:c7:44:fb:7a:10:68:21:a0:e8:0c: 91:c6:6e:6f:b0:35:c2:4d:b8:57:1b:01:e1:18:82:cf:38:33: c6:aa:91:2a:e3:e3:d0:a0:7e:6e:9b:da:4f:e4:4a:a8:bb:2a: a2:8f:86:50:c7:ec:d4:0c:fd:89:e9:37:8b:14:1e:f5:f2:da: 7b:44:b0:48:23:51:14:44:62:7b:bf:81:31:40:ed:5f:23:59: 23:8f:fe:60:08:b4:95:5c:92:24:f1:f4:31:4b:33:ee:d1:e5: 51:8b:ad:57:69:ce:ec:c1:3a:9b:ba:9e:cd:c9:3a:67:63:b0: ad:30:a3:7d:4e:49:9d:67:8a:41:ce:25:19:b7:9c:3e:6b:0e: c0:c8:50:52:aa:3a:9f:61:e2:6b:af:59:23:a3:fb:41:cc:a7: 29:36:2a:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2V7++19RONif5JqCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU4OTM5YTYtNmFjYi00OGU1LWFmOWEtZDFmN2NjYTNi MThlMB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk OGM5MzkxYzYtMDAwNy00ZGUzLWJhM2UtMjQxOTk1MTlhY2M3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsGAtvfSUgxvneHL+uYOLogZ27WR4g7K6p1S R5xwWc1oVhSbztWmEyCziCwcr7VZklvkezaH69clekWEhYBBH5zqEHBVt7J5JpOK no8zMW2KYua4Ey6YUxRctFBN+p9VkeuwwHHkJ6TCH7ZdG7p1qZ3UeYi49ytpJ3D+ 5spiaYnAScPuDBWE9TdeFjjHljxDaXxfiaGvw6kz5F0pW9mWsNTYZgt+Cy7a4uNG pWoRGHNwMEFlb9YSfrIRD8nDtWChcQlDhSsN9iTTY7pYkakBAe5zE/kfSycUyT88 yuEvryhnfOtFnzuwBUibOCpxKe2HO4/rYdBXCHHhXp0mFo/N1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBW8sYXD4tsk/es2A8Gx9LK5Hvk0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kZTg5 MzlhNi02YWNiLTQ4ZTUtYWY5YS1kMWY3Y2NhM2IxOGUvZWQ2NTZmNTctYzg3Ni0z MzkzLTkzN2EtN2VhYmUwZTZlNDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGU4OTM5YTYtNmFjYi00OGU1LWFm OWEtZDFmN2NjYTNiMThlL2RlODkzOWE2LTZhY2ItNDhlNS1hZjlhLWQxZjdjY2Ez YjE4ZS5jcmwwHwYDVR0jBBgwFoAU9xsfJFQFgH9uxl1GG4KiieftgsYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kZTg5MzlhNi02YWNiLTQ4ZTUtYWY5YS1kMWY3 Y2NhM2IxOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4aIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD3/Zmr+gZsJ3Pun3RHrr0L3vUDLPBhhH0SlOgP1vpNjItxc8GUlunPM jGN8/DlPzs4J/2Z/yGfPa8m4W9sWGVFVcH+NIQ4ALHrR8nYoJgXmKY09L/JDlNmN flb4xazUSCwJx0T7ehBoIaDoDJHGbm+wNcJNuFcbAeEYgs84M8aqkSrj49Cgfm6b 2k/kSqi7KqKPhlDH7NQM/YnpN4sUHvXy2ntEsEgjURREYnu/gTFA7V8jWSOP/mAI tJVckiTx9DFLM+7R5VGLrVdpzuzBOpu6ns3JOmdjsK0wo31OSZ1nikHOJRm3nD5r DsDIUFKqOp9h4muvWSOj+0HMpyk2Khk= -----END CERTIFICATE-----Generated at Wed May 13 09:22:37 2026 by rpki-client