$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/d73dd892-ee55-3262-86e9-4939ca3508af.roa File: d73dd892-ee55-3262-86e9-4939ca3508af.roa (raw, json) Hash identifier: kNHDYw7uLaeS7U0lcpqGZ06xAlYyBVr/AyzT6H+nAgM= Subject key identifier: D0:34:94:40:B4:5D:6A:1F:25:25:4E:6F:A2:8B:EF:64:D7:0F:E9:80 Certificate issuer: /CN=2ff85e79-174c-46f6-8a62-a92c2c9875b8 Certificate serial: 010D0C9F4328584D9B8555D5010640CD8E108080 Authority key identifier: C8:BE:F2:EE:D8:21:9E:78:D4:AE:55:A0:07:8D:21:70:2F:8F:51:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/d73dd892-ee55-3262-86e9-4939ca3508af.roa Signing time: Fri 24 Apr 2026 01:00:23 +0000 ROA not before: Fri 24 Apr 2026 01:00:23 +0000 ROA not after: Thu 23 Jul 2026 01:00:23 +0000 asID: 401368 IP address blocks: 23.187.152.0/24 maxlen: 24 2602:f82d::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9b:85:55:d5:01:06:40:cd:8e:10:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ff85e79-174c-46f6-8a62-a92c2c9875b8 Validity Not Before: Apr 24 01:00:23 2026 GMT Not After : Jul 23 01:00:23 2026 GMT Subject: CN=e050f632-22b7-4d23-a800-d7d8c024957e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:2a:40:d8:26:06:4b:2b:ee:b1:35:b7:03:0a: 60:e3:fa:89:08:33:95:29:91:5f:09:dc:e0:75:cf: ae:eb:3c:81:41:82:92:9f:ea:92:2d:69:6e:b4:76: 14:ac:75:d7:6f:77:12:bb:f5:5a:40:e1:e8:c5:c8: 8d:68:e4:21:80:aa:58:84:a4:e2:1d:a0:8b:c3:d1: ff:38:be:3e:75:a6:93:ad:b4:0f:b4:4d:c3:5e:82: 0b:4c:de:83:bb:e6:b5:26:17:c1:60:d8:b9:52:4c: 3e:c2:e2:2c:cd:f8:96:24:67:e3:95:da:2f:84:98: 11:c4:95:d3:5f:7c:e5:d5:9c:01:f2:15:84:c8:08: 4e:90:0e:24:8f:04:93:0e:e5:9a:13:a3:9d:3d:9b: 96:56:9e:85:02:c0:04:e9:ae:94:1e:b4:65:2c:65: e2:b8:21:c3:59:29:fd:94:1a:95:a9:cf:57:a8:4a: c9:42:ab:b4:58:d2:17:cd:1f:cd:79:ea:70:8d:42: 02:ac:30:ae:85:e7:36:d6:e6:c6:34:28:a3:82:b4: b3:e5:42:04:08:cb:1e:61:ec:bc:47:bd:0e:46:2e: ad:7c:07:00:a2:d2:ab:5f:dd:ff:65:f1:c2:10:0f: dd:d3:94:4e:55:f8:2a:69:11:d3:3c:50:90:36:6e: e8:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:34:94:40:B4:5D:6A:1F:25:25:4E:6F:A2:8B:EF:64:D7:0F:E9:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/d73dd892-ee55-3262-86e9-4939ca3508af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.crl X509v3 Authority Key Identifier: keyid:C8:BE:F2:EE:D8:21:9E:78:D4:AE:55:A0:07:8D:21:70:2F:8F:51:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer sbgp-ipAddrBlock: critical IPv4: 23.187.152.0/24 IPv6: 2602:f82d::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:68:38:66:1f:4f:d6:db:83:85:2b:cd:6f:df:43:a8:1c:e3: 46:62:dc:29:95:30:ed:7a:a7:95:53:37:0b:f0:be:ad:96:3e: cc:d8:cc:ec:84:d8:dc:10:67:31:b2:40:1c:ac:36:b8:9c:64: 20:69:2b:df:dd:8f:b2:49:9d:1d:da:46:53:06:8b:e5:1e:1c: d9:54:14:cd:b2:88:27:27:f2:bc:4b:04:3e:24:0a:49:20:34: ec:ea:bb:cf:fa:eb:20:26:dd:39:f5:ed:ce:b1:fd:9e:24:2d: 79:06:b3:cd:55:e8:bf:ae:40:4d:90:bb:d1:f6:f6:3e:3b:b3: 5c:fd:3d:ca:da:a1:9e:77:c5:8b:bd:68:3d:c4:b6:d4:e3:7f: 1c:bb:5c:c5:44:0e:3e:ca:51:58:fa:aa:68:5d:9a:e7:a1:4c: c3:ff:cb:b5:c4:cf:24:f4:d9:53:36:fa:7c:e0:46:25:41:24: 76:0c:08:20:ff:cb:c2:78:e7:60:f2:7d:9f:63:94:b9:6e:6b: d4:8a:c4:5a:dc:e2:96:68:d7:d7:62:fe:3a:2b:47:77:6f:ff: 04:33:ca:05:c1:bb:99:89:97:4a:91:02:ce:77:7a:23:08:05: 5e:78:67:4a:c8:67:38:42:ca:27:ee:54:c7:b3:b7:17:ad:1c: 06:dd:48:71 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE2bhVXVAQZAzY4QgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmZmODVlNzktMTc0Yy00NmY2LThhNjItYTkyYzJjOTg3 NWI4MB4XDTI2MDQyNDAxMDAyM1oXDTI2MDcyMzAxMDAyM1owLzEtMCsGA1UEAxMk ZTA1MGY2MzItMjJiNy00ZDIzLWE4MDAtZDdkOGMwMjQ5NTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjypA2CYGSyvusTW3Awpg4/qJCDOVKZFfCdzg dc+u6zyBQYKSn+qSLWlutHYUrHXXb3cSu/VaQOHoxciNaOQhgKpYhKTiHaCLw9H/ OL4+daaTrbQPtE3DXoILTN6Du+a1JhfBYNi5Ukw+wuIszfiWJGfjldovhJgRxJXT X3zl1ZwB8hWEyAhOkA4kjwSTDuWaE6OdPZuWVp6FAsAE6a6UHrRlLGXiuCHDWSn9 lBqVqc9XqErJQqu0WNIXzR/NeepwjUICrDCuhec21ubGNCijgrSz5UIECMseYey8 R70ORi6tfAcAotKrX93/ZfHCEA/d05ROVfgqaRHTPFCQNm7o8QIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFNA0lEC0XWofJSVOb6KL72TXD+mAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yZmY4 NWU3OS0xNzRjLTQ2ZjYtOGE2Mi1hOTJjMmM5ODc1YjgvZDczZGQ4OTItZWU1NS0z MjYyLTg2ZTktNDkzOWNhMzUwOGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMmZmODVlNzktMTc0Yy00NmY2LThh NjItYTkyYzJjOTg3NWI4LzJmZjg1ZTc5LTE3NGMtNDZmNi04YTYyLWE5MmMyYzk4 NzViOC5jcmwwHwYDVR0jBBgwFoAUyL7y7tghnnjUrlWgB40hcC+PUdwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yZmY4NWU3OS0xNzRjLTQ2ZjYtOGE2Mi1hOTJj MmM5ODc1YjguY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF7uYMA4E AgACMAgDBgQmAvgtADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBIaDhmH0/W24OFK81v30OoHONGYtwplTDt eqeVUzcL8L6tlj7M2MzshNjcEGcxskAcrDa4nGQgaSvf3Y+ySZ0d2kZTBovlHhzZ VBTNsognJ/K8SwQ+JApJIDTs6rvP+usgJt059e3Osf2eJC15BrPNVei/rkBNkLvR 9vY+O7Nc/T3K2qGed8WLvWg9xLbU438cu1zFRA4+ylFY+qpoXZrnoUzD/8u1xM8k 9NlTNvp84EYlQSR2DAgg/8vCeOdg8n2fY5S5bmvUisRa3OKWaNfXYv46K0d3b/8E M8oFwbuZiZdKkQLOd3ojCAVeeGdKyGc4Qson7lTHs7cXrRwG3Uhx -----END CERTIFICATE-----Generated at Wed May 13 07:51:10 2026 by rpki-client