$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/cf849384-a1f0-358f-8cff-6f887dcd91a0.roa File: cf849384-a1f0-358f-8cff-6f887dcd91a0.roa (raw, json) Hash identifier: RNoHQ0aSlgia8TjOZxDa4yKOynK7wA1fndXyAAW7IbM= Subject key identifier: 59:5D:05:22:E2:7B:31:B0:A4:53:D3:AF:EF:78:09:70:06:FD:69:34 Certificate issuer: /CN=517b063f-7f88-4d7a-a5ad-1e487692f063 Certificate serial: 010D0C9F4328584DCDC5ABD6C57587E358D1A520 Authority key identifier: 05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/cf849384-a1f0-358f-8cff-6f887dcd91a0.roa Signing time: Tue 12 May 2026 01:00:24 +0000 ROA not before: Tue 12 May 2026 01:00:24 +0000 ROA not after: Mon 10 Aug 2026 01:00:24 +0000 asID: 152156 IP address blocks: 23.249.28.0/23 maxlen: 24 23.249.30.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cd:c5:ab:d6:c5:75:87:e3:58:d1:a5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=517b063f-7f88-4d7a-a5ad-1e487692f063 Validity Not Before: May 12 01:00:24 2026 GMT Not After : Aug 10 01:00:24 2026 GMT Subject: CN=8525d1fd-525b-4fbf-b1b3-a7364195395e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3a:bf:99:d3:16:fa:c2:71:68:1c:1d:a4:42: 42:72:e9:66:ef:3f:6a:50:65:3f:4a:4f:89:08:c5: ae:1e:83:1c:1f:ca:65:31:d0:6d:a0:40:19:4b:69: 46:92:4b:ff:95:d8:17:2f:9d:a9:13:aa:de:e1:b9: 60:30:8f:b1:c9:f0:57:d3:bd:2c:f1:75:2e:4e:9f: d2:3a:ce:d7:fd:0c:d3:20:51:ce:54:54:c8:df:a8: 27:0e:29:49:f3:ea:28:8b:10:8f:0e:60:8d:0f:c4: 6d:45:0d:f0:19:e7:52:77:5c:d1:60:7d:05:e1:c8: 15:7c:01:36:97:72:6b:b9:c7:8d:c1:c1:88:89:a4: f0:8c:06:7f:6e:54:79:4a:f4:82:22:9e:be:ed:10: df:71:cc:d4:97:14:0d:56:38:80:c9:3b:6d:e9:c6: 70:28:c3:fc:9d:b6:bf:0f:33:a9:ef:37:4f:3f:48: 6a:21:3d:b5:b3:0e:70:97:aa:95:d5:83:e8:af:fc: eb:94:d5:54:63:13:d3:bb:47:8e:fe:60:a5:a0:f8: a8:9f:11:a3:08:16:b0:8b:ef:3d:1e:a2:7e:2c:50: a1:d0:6c:0e:95:09:49:5d:16:36:d4:c4:79:1d:4e: f2:a5:df:f9:d0:10:cc:8a:46:ef:9d:ca:ff:30:0b: 26:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:5D:05:22:E2:7B:31:B0:A4:53:D3:AF:EF:78:09:70:06:FD:69:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/cf849384-a1f0-358f-8cff-6f887dcd91a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl X509v3 Authority Key Identifier: keyid:05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer sbgp-ipAddrBlock: critical IPv4: 23.249.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:b2:9a:7a:20:b9:14:b3:04:ee:78:e2:21:65:d6:02:8a:3b: 45:07:e4:41:bd:47:3c:f6:e1:c7:d6:08:3c:de:b8:ef:5b:55: e2:0a:3b:54:be:77:cd:7f:2d:46:30:3e:01:e6:17:1c:7f:67: 86:19:41:15:df:33:91:0d:f0:94:14:9e:90:9f:96:72:96:c6: c9:47:fb:42:3a:94:0b:93:20:38:06:88:0d:92:d8:b5:a5:74: 5a:50:fc:8e:b9:bc:45:d1:fd:47:37:9f:fd:ee:7f:41:16:a5: 85:d8:b9:ec:91:ec:a4:24:24:4a:69:96:31:f9:a8:e8:d8:57: 21:62:11:bd:57:1a:d2:5e:ca:bc:c7:f6:15:4d:f8:3c:da:2d: e8:48:96:3c:be:47:88:08:27:4f:63:e0:6c:5d:75:6c:de:57: 23:ea:59:98:91:2c:65:ea:b9:d5:3a:86:d0:cd:dc:ce:de:c5: ae:d2:7a:42:e7:f2:93:bc:fc:d9:08:47:d6:dc:79:56:c9:23: e1:68:99:55:5a:99:16:49:8c:81:70:97:de:50:9c:cb:83:e1: 26:ec:31:a0:8b:54:a8:ed:e2:f3:75:a5:81:bc:1a:27:8c:1f: 98:72:5f:ef:55:95:86:87:2d:3c:05:ad:07:b0:a0:39:f0:90: 42:ae:a1:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3NxavWxXWH41jRpSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTE3YjA2M2YtN2Y4OC00ZDdhLWE1YWQtMWU0ODc2OTJm MDYzMB4XDTI2MDUxMjAxMDAyNFoXDTI2MDgxMDAxMDAyNFowLzEtMCsGA1UEAxMk ODUyNWQxZmQtNTI1Yi00ZmJmLWIxYjMtYTczNjQxOTUzOTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzq/mdMW+sJxaBwdpEJCculm7z9qUGU/Sk+J CMWuHoMcH8plMdBtoEAZS2lGkkv/ldgXL52pE6re4blgMI+xyfBX070s8XUuTp/S Os7X/QzTIFHOVFTI36gnDilJ8+ooixCPDmCND8RtRQ3wGedSd1zRYH0F4cgVfAE2 l3JruceNwcGIiaTwjAZ/blR5SvSCIp6+7RDfcczUlxQNVjiAyTtt6cZwKMP8nba/ DzOp7zdPP0hqIT21sw5wl6qV1YPor/zrlNVUYxPTu0eO/mCloPionxGjCBawi+89 HqJ+LFCh0GwOlQlJXRY21MR5HU7ypd/50BDMikbvncr/MAsmSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFldBSLiezGwpFPTr+94CXAG/Wk0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81MTdi MDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4NzY5MmYwNjMvY2Y4NDkzODQtYTFmMC0z NThmLThjZmYtNmY4ODdkY2Q5MWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTE3YjA2M2YtN2Y4OC00ZDdhLWE1 YWQtMWU0ODc2OTJmMDYzLzUxN2IwNjNmLTdmODgtNGQ3YS1hNWFkLTFlNDg3Njky ZjA2My5jcmwwHwYDVR0jBBgwFoAUBbMoGYYiMAW+fQvz/IMiJ547jVwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81MTdiMDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4 NzY5MmYwNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF/kcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFSymnoguRSzBO544iFl1gKKO0UH5EG9Rzz24cfWCDzeuO9bVeIKO1S+ d81/LUYwPgHmFxx/Z4YZQRXfM5EN8JQUnpCflnKWxslH+0I6lAuTIDgGiA2S2LWl dFpQ/I65vEXR/Uc3n/3uf0EWpYXYueyR7KQkJEppljH5qOjYVyFiEb1XGtJeyrzH 9hVN+DzaLehIljy+R4gIJ09j4GxddWzeVyPqWZiRLGXqudU6htDN3M7exa7SekLn 8pO8/NkIR9bceVbJI+FomVVamRZJjIFwl95QnMuD4SbsMaCLVKjt4vN1pYG8GieM H5hyX+9VlYaHLTwFrQewoDnwkEKuoX4= -----END CERTIFICATE-----Generated at Wed May 13 06:42:37 2026 by rpki-client