$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/d6c17614-b6c8-3e14-9443-1922a25dd1ef.roa File: d6c17614-b6c8-3e14-9443-1922a25dd1ef.roa (raw, json) Hash identifier: 7XukU/guzO+foFeLRhRw6AId2piCBepgbdgxPeStBRI= Subject key identifier: 4F:45:E3:4C:A4:BF:E9:6C:F6:70:D7:7F:8C:5E:21:7B:65:84:61:E2 Certificate issuer: /CN=2ff85e79-174c-46f6-8a62-a92c2c9875b8 Certificate serial: 010D0C9F4328584D9E501CE4617E584DD804CF20 Authority key identifier: C8:BE:F2:EE:D8:21:9E:78:D4:AE:55:A0:07:8D:21:70:2F:8F:51:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/d6c17614-b6c8-3e14-9443-1922a25dd1ef.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 401369 IP address blocks: 23.187.152.0/24 maxlen: 24 2602:f82d::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:1c:e4:61:7e:58:4d:d8:04:cf:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ff85e79-174c-46f6-8a62-a92c2c9875b8 Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=2a3a637f-7c05-4ff7-b992-c4896c93f07a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:4b:93:62:63:48:c1:6c:e7:a0:b0:52:d5:a6: 91:43:f1:2c:ba:13:63:af:7c:41:5a:11:7a:1f:ab: 31:fc:90:0e:7f:31:24:4b:f6:a8:47:12:16:b1:ab: a7:b0:ce:14:fd:9b:6b:95:05:11:d1:da:23:e8:17: ef:0a:4a:bb:5e:9f:09:a0:0b:7b:96:2f:07:20:6b: d2:5b:d5:2a:4e:e0:38:f5:e2:c7:06:15:04:d0:73: 04:2d:b2:ac:8d:bc:dd:8b:2f:7f:36:8f:ea:12:9f: 08:ba:3d:91:b8:6c:47:9e:f5:c9:59:88:7f:95:2a: fc:d0:fb:da:90:d6:0d:0d:c8:16:6d:af:60:09:3e: 10:5c:b3:74:2c:2d:97:56:cb:11:9f:d0:c9:cc:e0: f5:8b:47:af:a1:f6:10:df:d1:1c:e7:40:35:f5:62: 44:42:f8:73:c9:69:22:d7:36:74:41:98:1b:ba:d3: 53:b2:7e:0a:f5:60:e3:55:07:e5:2c:91:40:fd:ec: a1:f7:7c:84:1f:bb:4a:48:39:d0:3e:18:1e:c1:dc: 77:68:d0:2e:68:6f:46:a3:57:b0:10:5f:c6:21:2a: a0:f8:32:98:dc:d7:fc:c3:cd:73:e0:53:c0:b7:8b: ca:1d:31:44:a5:00:5f:5e:8f:48:8b:a3:16:9c:5c: 1f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:45:E3:4C:A4:BF:E9:6C:F6:70:D7:7F:8C:5E:21:7B:65:84:61:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/d6c17614-b6c8-3e14-9443-1922a25dd1ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.crl X509v3 Authority Key Identifier: keyid:C8:BE:F2:EE:D8:21:9E:78:D4:AE:55:A0:07:8D:21:70:2F:8F:51:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer sbgp-ipAddrBlock: critical IPv4: 23.187.152.0/24 IPv6: 2602:f82d::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:4b:b2:b7:1c:a3:4b:18:2d:a3:bd:cf:b2:0e:99:35:a9:9b: f4:d5:46:0d:d2:bd:76:69:8c:31:d7:c0:82:fc:51:32:0e:21: 41:2e:d0:41:8b:a5:6c:d0:1a:0b:fd:8b:c7:b5:6c:de:7b:d1: 49:0a:3f:cd:72:bf:81:e8:7c:70:f9:fe:b9:d0:d3:75:ef:28: 81:38:44:6b:96:27:44:98:9f:72:77:32:28:e7:27:62:db:2d: 78:dc:15:6f:36:a6:63:60:6f:8d:0d:2e:26:e8:36:01:ac:29: 12:cb:77:c5:3b:8c:1c:b0:3d:46:31:eb:6f:62:38:f3:a7:ce: a2:b3:03:0c:65:fd:ba:5f:2a:c3:97:5b:82:e3:f4:e1:ad:5e: 20:66:1c:a3:41:5f:c6:92:2c:aa:69:41:3c:4f:ac:3e:18:d0: c4:30:fd:63:7d:db:b5:60:4b:88:ed:a0:ac:95:bd:d2:20:fc: 0d:fc:f3:c6:d0:42:19:0a:21:f1:95:87:a3:a3:5f:c7:66:4d: a1:7a:eb:eb:03:36:6b:88:54:37:f9:13:eb:69:ae:99:f5:d9: 95:34:5e:9f:1c:bb:d1:41:dd:ed:4f:4e:fd:4b:27:41:11:0f: cd:c4:0e:45:4e:98:72:11:f4:fb:71:83:d0:ed:be:69:bb:8f: e0:28:79:5a -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE2eUBzkYX5YTdgEzyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmZmODVlNzktMTc0Yy00NmY2LThhNjItYTkyYzJjOTg3 NWI4MB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk MmEzYTYzN2YtN2MwNS00ZmY3LWI5OTItYzQ4OTZjOTNmMDdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0uTYmNIwWznoLBS1aaRQ/EsuhNjr3xBWhF6 H6sx/JAOfzEkS/aoRxIWsaunsM4U/ZtrlQUR0doj6BfvCkq7Xp8JoAt7li8HIGvS W9UqTuA49eLHBhUE0HMELbKsjbzdiy9/No/qEp8Iuj2RuGxHnvXJWYh/lSr80Pva kNYNDcgWba9gCT4QXLN0LC2XVssRn9DJzOD1i0evofYQ39Ec50A19WJEQvhzyWki 1zZ0QZgbutNTsn4K9WDjVQflLJFA/eyh93yEH7tKSDnQPhgewdx3aNAuaG9Go1ew EF/GISqg+DKY3Nf8w81z4FPAt4vKHTFEpQBfXo9Ii6MWnFwfLwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFE9F40ykv+ls9nDXf4xeIXtlhGHiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yZmY4 NWU3OS0xNzRjLTQ2ZjYtOGE2Mi1hOTJjMmM5ODc1YjgvZDZjMTc2MTQtYjZjOC0z ZTE0LTk0NDMtMTkyMmEyNWRkMWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMmZmODVlNzktMTc0Yy00NmY2LThh NjItYTkyYzJjOTg3NWI4LzJmZjg1ZTc5LTE3NGMtNDZmNi04YTYyLWE5MmMyYzk4 NzViOC5jcmwwHwYDVR0jBBgwFoAUyL7y7tghnnjUrlWgB40hcC+PUdwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yZmY4NWU3OS0xNzRjLTQ2ZjYtOGE2Mi1hOTJj MmM5ODc1YjguY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF7uYMA4E AgACMAgDBgQmAvgtADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBFS7K3HKNLGC2jvc+yDpk1qZv01UYN0r12 aYwx18CC/FEyDiFBLtBBi6Vs0BoL/YvHtWzee9FJCj/Ncr+B6Hxw+f650NN17yiB OERrlidEmJ9ydzIo5ydi2y143BVvNqZjYG+NDS4m6DYBrCkSy3fFO4wcsD1GMetv Yjjzp86iswMMZf26XyrDl1uC4/ThrV4gZhyjQV/GkiyqaUE8T6w+GNDEMP1jfdu1 YEuI7aCslb3SIPwN/PPG0EIZCiHxlYejo1/HZk2heuvrAzZriFQ3+RPraa6Z9dmV NF6fHLvRQd3tT079SydBEQ/NxA5FTphyEfT7cYPQ7b5pu4/gKHla -----END CERTIFICATE-----Generated at Wed May 13 09:33:29 2026 by rpki-client