$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169/ce2c9f5a-9a92-3759-8b55-d9edd603a4ad.roa File: ce2c9f5a-9a92-3759-8b55-d9edd603a4ad.roa (raw, json) Hash identifier: GVj1SzDiNqXjdp+b0nc/g26qanIP+3EVFnlCuXkj+ys= Subject key identifier: 1B:F2:67:B5:4A:28:36:BD:1F:4B:07:00:08:3A:65:A1:BA:47:D6:7A Certificate issuer: /CN=491d9ae7-4fad-4a49-a9b2-9cf1e4c19169 Certificate serial: 010D0C9F4328584DD0905F13950C25E22560E200 Authority key identifier: D9:0C:76:F7:42:30:BD:E8:BB:E1:74:41:89:F2:FE:7F:E7:18:28:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169/ce2c9f5a-9a92-3759-8b55-d9edd603a4ad.roa Signing time: Wed 13 May 2026 01:00:24 +0000 ROA not before: Wed 13 May 2026 01:00:24 +0000 ROA not after: Tue 11 Aug 2026 01:00:24 +0000 asID: 8796 IP address blocks: 23.185.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d0:90:5f:13:95:0c:25:e2:25:60:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=491d9ae7-4fad-4a49-a9b2-9cf1e4c19169 Validity Not Before: May 13 01:00:24 2026 GMT Not After : Aug 11 01:00:24 2026 GMT Subject: CN=d052836e-7c36-4400-9699-0ffe7d5c3254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:63:94:1f:82:71:c3:6b:1e:e4:1a:be:33:5e: 02:f5:14:61:b6:a1:b3:8c:16:b0:2e:41:c8:19:28: 84:84:7f:27:91:9e:34:72:ac:e2:1b:67:b8:24:39: f3:f1:9f:84:f3:56:06:9f:e3:82:ef:68:c9:a4:1b: 7d:e0:a4:8b:e1:c6:0f:06:64:d3:b4:18:a7:6c:59: f2:19:21:f8:49:8b:df:17:3f:00:b0:21:7e:db:06: 9f:2b:04:1b:0f:1a:ac:88:ed:25:0d:f8:49:37:fb: da:5b:61:14:8b:ed:3d:e5:f0:ac:43:5c:ce:d1:f0: 64:7a:74:cb:1e:1b:76:64:41:0b:b9:11:da:c4:b4: b1:57:d8:7a:19:76:2f:a0:8e:dd:fd:0e:f6:75:44: a1:3a:b2:f8:48:48:38:de:00:fb:c3:15:e7:35:d9: 90:b3:00:a0:8e:00:3d:5b:83:31:fd:2f:c6:2e:91: b2:83:8b:06:63:aa:a7:7b:35:33:c5:52:bf:76:14: f5:ae:95:ca:29:68:3f:ea:0f:d6:32:65:1e:7f:35: bc:88:ed:c8:d0:64:36:b4:67:19:1d:9d:fd:39:57: 6a:52:8f:9f:b3:10:81:f5:f3:31:fa:ca:97:8d:c1: 80:ac:6f:37:32:e5:c1:57:ae:04:53:1a:08:bf:df: e9:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:F2:67:B5:4A:28:36:BD:1F:4B:07:00:08:3A:65:A1:BA:47:D6:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169/ce2c9f5a-9a92-3759-8b55-d9edd603a4ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169.crl X509v3 Authority Key Identifier: keyid:D9:0C:76:F7:42:30:BD:E8:BB:E1:74:41:89:F2:FE:7F:E7:18:28:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169.cer sbgp-ipAddrBlock: critical IPv4: 23.185.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:d4:6c:a6:8e:2e:5c:73:75:e9:97:ca:67:69:85:0b:a5:20: 42:2c:34:b7:92:a0:bf:37:ec:d5:c4:8a:26:3b:c9:53:eb:78: 61:4d:18:af:7c:52:12:a8:b7:35:6c:06:d5:93:1c:83:75:a5: c5:1b:72:aa:32:ae:73:b9:3a:77:d2:cd:6b:7e:c2:f6:6e:db: 12:83:19:08:1b:7e:8c:72:6a:76:67:e3:a3:ba:14:f7:8d:c0: 23:42:b0:88:de:0f:d8:00:4b:da:6f:79:b1:26:f0:7b:37:a1: a7:f2:51:88:5e:05:8e:1d:e8:9d:e2:37:a5:a1:03:17:c7:e1: 0c:b1:31:f8:c4:34:7c:91:58:c2:ee:e4:44:ce:d8:48:4c:c5: 4d:99:8f:cd:f3:14:65:53:44:76:1d:55:53:de:d5:5b:d2:f1: 10:bd:5e:54:5c:c8:d2:b5:9e:84:50:bd:1a:ce:5b:27:f2:5f: 33:10:c1:27:0d:4d:bf:f9:ed:4e:59:56:e6:72:8f:d2:4a:a9: 72:7e:79:8d:47:a9:fc:6d:02:b0:2a:03:23:cf:ac:b2:65:75: 1d:2b:1e:78:44:92:b8:c4:22:24:57:ce:d5:d6:8a:21:b2:43: 66:3f:ec:58:55:ec:ff:62:93:46:3b:e2:9f:da:e7:79:32:57: f3:8f:49:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3QkF8TlQwl4iVg4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDkxZDlhZTctNGZhZC00YTQ5LWE5YjItOWNmMWU0YzE5 MTY5MB4XDTI2MDUxMzAxMDAyNFoXDTI2MDgxMTAxMDAyNFowLzEtMCsGA1UEAxMk ZDA1MjgzNmUtN2MzNi00NDAwLTk2OTktMGZmZTdkNWMzMjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWOUH4Jxw2se5Bq+M14C9RRhtqGzjBawLkHI GSiEhH8nkZ40cqziG2e4JDnz8Z+E81YGn+OC72jJpBt94KSL4cYPBmTTtBinbFny GSH4SYvfFz8AsCF+2wafKwQbDxqsiO0lDfhJN/vaW2EUi+095fCsQ1zO0fBkenTL Hht2ZEELuRHaxLSxV9h6GXYvoI7d/Q72dUShOrL4SEg43gD7wxXnNdmQswCgjgA9 W4Mx/S/GLpGyg4sGY6qnezUzxVK/dhT1rpXKKWg/6g/WMmUefzW8iO3I0GQ2tGcZ HZ39OVdqUo+fsxCB9fMx+sqXjcGArG83MuXBV64EUxoIv9/pKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBvyZ7VKKDa9H0sHAAg6ZaG6R9Z6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80OTFk OWFlNy00ZmFkLTRhNDktYTliMi05Y2YxZTRjMTkxNjkvY2UyYzlmNWEtOWE5Mi0z NzU5LThiNTUtZDllZGQ2MDNhNGFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDkxZDlhZTctNGZhZC00YTQ5LWE5 YjItOWNmMWU0YzE5MTY5LzQ5MWQ5YWU3LTRmYWQtNGE0OS1hOWIyLTljZjFlNGMx OTE2OS5jcmwwHwYDVR0jBBgwFoAU2Qx290Iwvei74XRBifL+f+cYKMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80OTFkOWFlNy00ZmFkLTRhNDktYTliMi05Y2Yx ZTRjMTkxNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7nIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKLUbKaOLlxzdemXymdphQulIEIsNLeSoL837NXEiiY7yVPreGFNGK98 UhKotzVsBtWTHIN1pcUbcqoyrnO5OnfSzWt+wvZu2xKDGQgbfoxyanZn46O6FPeN wCNCsIjeD9gAS9pvebEm8Hs3oafyUYheBY4d6J3iN6WhAxfH4QyxMfjENHyRWMLu 5ETO2EhMxU2Zj83zFGVTRHYdVVPe1VvS8RC9XlRcyNK1noRQvRrOWyfyXzMQwScN Tb/57U5ZVuZyj9JKqXJ+eY1HqfxtArAqAyPPrLJldR0rHnhEkrjEIiRXztXWiiGy Q2Y/7FhV7P9ik0Y74p/a53kyV/OPSZI= -----END CERTIFICATE-----Generated at Wed May 13 06:17:30 2026 by rpki-client