$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/f8ba03ab-eb1d-305c-b6c7-6661ebf6f5a4.roa File: f8ba03ab-eb1d-305c-b6c7-6661ebf6f5a4.roa (raw, json) Hash identifier: Q977aJzF+uVLbYL1USMvqjxiUkyBZGeyXpGrAji3TC0= Subject key identifier: 68:5C:93:5D:D2:7A:0F:54:BE:BF:0C:75:62:E6:41:E0:BF:A0:05:F9 Certificate issuer: /CN=2ff85e79-174c-46f6-8a62-a92c2c9875b8 Certificate serial: 010D0C9F4328584D9E501C990EDECBAE3EE7ED00 Authority key identifier: C8:BE:F2:EE:D8:21:9E:78:D4:AE:55:A0:07:8D:21:70:2F:8F:51:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/f8ba03ab-eb1d-305c-b6c7-6661ebf6f5a4.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 401371 IP address blocks: 23.187.152.0/24 maxlen: 24 2602:f82d::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:1c:99:0e:de:cb:ae:3e:e7:ed:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ff85e79-174c-46f6-8a62-a92c2c9875b8 Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=302b16fc-4577-4cbb-96a5-3fd68e99c6f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f3:93:a5:7d:18:2b:82:0a:b1:cd:40:b6:6a: 8b:1c:4b:02:be:a2:09:59:2c:d1:b9:91:38:5f:15: 3d:2d:5b:3b:8b:39:25:22:4e:6d:9c:42:e4:60:df: 85:29:ee:60:cd:93:c0:d0:40:25:a6:10:f5:87:d0: 7c:5a:7c:66:4e:27:22:2e:c7:03:54:73:c4:2f:fb: c2:96:82:54:eb:d7:2f:98:4d:c5:84:48:e5:1a:c3: af:ea:10:ed:0c:0d:34:a2:38:02:6f:83:ed:c5:77: b8:3d:5b:e7:05:1b:8d:41:a8:2e:d4:1f:fb:c6:de: c6:44:63:d3:b9:2b:b9:2f:5e:2f:76:5d:6f:54:87: a0:76:54:47:dc:f6:04:6c:2b:88:81:e0:3f:83:d0: f6:33:98:e4:5d:79:e0:d5:18:63:69:04:77:8f:62: 91:ac:18:d3:47:7a:6d:70:a7:1c:df:6b:f3:35:9c: bf:a4:ca:22:48:0c:44:55:d4:48:28:60:e2:57:9b: 4a:31:67:8a:78:29:2c:da:b3:ea:dc:52:4d:29:64: 53:59:ee:cc:d1:d3:85:e6:ec:52:e8:e0:bf:90:55: de:0d:d1:4e:9a:a9:94:47:ee:fd:1b:32:92:64:31: 34:fa:29:34:97:99:93:ff:0c:a2:ce:90:89:eb:4b: 3e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:5C:93:5D:D2:7A:0F:54:BE:BF:0C:75:62:E6:41:E0:BF:A0:05:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/f8ba03ab-eb1d-305c-b6c7-6661ebf6f5a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.crl X509v3 Authority Key Identifier: keyid:C8:BE:F2:EE:D8:21:9E:78:D4:AE:55:A0:07:8D:21:70:2F:8F:51:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer sbgp-ipAddrBlock: critical IPv4: 23.187.152.0/24 IPv6: 2602:f82d::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:c9:a1:a2:5b:1b:3c:c1:1a:cb:d7:8f:17:2a:09:5f:d1:aa: cb:d0:a4:42:24:d5:6e:17:16:72:40:46:8e:4d:eb:60:38:a9: 16:a6:78:ba:ce:cf:4e:1c:87:80:04:2c:3a:99:ef:ac:48:c2: 6e:d6:b6:06:e9:f0:59:e1:58:09:30:1c:81:34:15:46:01:d0: 3b:4f:05:92:01:dd:be:3d:38:e9:be:ec:82:7a:3e:1d:5b:dd: e1:50:9c:4a:c6:28:94:d3:83:71:ea:7f:56:57:a1:e9:a0:32: 01:de:b6:89:50:ac:08:83:d1:81:c1:60:e7:f5:f0:4c:37:6e: b9:0c:56:fc:bc:0f:b1:57:6a:13:24:06:05:cb:c0:f7:b4:ce: 4b:02:ce:c4:9b:00:c6:9c:ac:cd:03:cd:aa:61:1f:cc:6a:26: 02:5e:34:a1:76:e9:67:88:db:f4:e0:a7:88:c4:99:d8:fa:2b: b4:fb:8a:6b:0a:f1:31:6a:b0:c9:3a:79:9f:a3:31:cc:87:26: 42:7e:34:0e:79:76:e3:e9:aa:11:18:89:e1:5d:86:14:3f:15: 79:fd:a2:f3:92:b9:76:fc:70:22:69:c8:a0:c1:33:a8:d0:04: 17:a1:1d:32:d2:a5:81:45:09:d0:0b:fb:9e:29:e0:c9:cc:6f: d7:a0:41:4a -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE2eUByZDt7Lrj7n7QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmZmODVlNzktMTc0Yy00NmY2LThhNjItYTkyYzJjOTg3 NWI4MB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk MzAyYjE2ZmMtNDU3Ny00Y2JiLTk2YTUtM2ZkNjhlOTljNmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPOTpX0YK4IKsc1AtmqLHEsCvqIJWSzRuZE4 XxU9LVs7izklIk5tnELkYN+FKe5gzZPA0EAlphD1h9B8WnxmTiciLscDVHPEL/vC loJU69cvmE3FhEjlGsOv6hDtDA00ojgCb4PtxXe4PVvnBRuNQagu1B/7xt7GRGPT uSu5L14vdl1vVIegdlRH3PYEbCuIgeA/g9D2M5jkXXng1RhjaQR3j2KRrBjTR3pt cKcc32vzNZy/pMoiSAxEVdRIKGDiV5tKMWeKeCks2rPq3FJNKWRTWe7M0dOF5uxS 6OC/kFXeDdFOmqmUR+79GzKSZDE0+ik0l5mT/wyizpCJ60s+vwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFGhck13Seg9Uvr8MdWLmQeC/oAX5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yZmY4 NWU3OS0xNzRjLTQ2ZjYtOGE2Mi1hOTJjMmM5ODc1YjgvZjhiYTAzYWItZWIxZC0z MDVjLWI2YzctNjY2MWViZjZmNWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMmZmODVlNzktMTc0Yy00NmY2LThh NjItYTkyYzJjOTg3NWI4LzJmZjg1ZTc5LTE3NGMtNDZmNi04YTYyLWE5MmMyYzk4 NzViOC5jcmwwHwYDVR0jBBgwFoAUyL7y7tghnnjUrlWgB40hcC+PUdwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yZmY4NWU3OS0xNzRjLTQ2ZjYtOGE2Mi1hOTJj MmM5ODc1YjguY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF7uYMA4E AgACMAgDBgQmAvgtADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBUyaGiWxs8wRrL148XKglf0arL0KRCJNVu FxZyQEaOTetgOKkWpni6zs9OHIeABCw6me+sSMJu1rYG6fBZ4VgJMByBNBVGAdA7 TwWSAd2+PTjpvuyCej4dW93hUJxKxiiU04Nx6n9WV6HpoDIB3raJUKwIg9GBwWDn 9fBMN265DFb8vA+xV2oTJAYFy8D3tM5LAs7EmwDGnKzNA82qYR/MaiYCXjShduln iNv04KeIxJnY+iu0+4prCvExarDJOnmfozHMhyZCfjQOeXbj6aoRGInhXYYUPxV5 /aLzkrl2/HAiacigwTOo0AQXoR0y0qWBRQnQC/ueKeDJzG/XoEFK -----END CERTIFICATE-----Generated at Wed May 13 09:15:48 2026 by rpki-client