$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d2845a4-b952-4ab7-9cdb-d432ca530dd9/5901ce23-13b6-30e0-ab94-3ae79fb72dcf.roa File: 5901ce23-13b6-30e0-ab94-3ae79fb72dcf.roa (raw, json) Hash identifier: CEOBZJ2WnzJq9Vh6FIVmga/u42JSZ4mCa4uGMzThx7o= Subject key identifier: 30:A2:BB:C6:C0:84:FF:30:44:8B:DA:18:83:0D:3E:A8:8D:0E:14:42 Certificate issuer: /CN=5d2845a4-b952-4ab7-9cdb-d432ca530dd9 Certificate serial: 010D0C9F4328584E8DEFA35531542FFA67F78780 Authority key identifier: 0D:4B:24:A0:6E:CC:9A:63:0F:75:61:B5:63:F2:70:B8:95:57:21:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d2845a4-b952-4ab7-9cdb-d432ca530dd9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d2845a4-b952-4ab7-9cdb-d432ca530dd9/5901ce23-13b6-30e0-ab94-3ae79fb72dcf.roa Signing time: Sun 19 Jul 2026 21:00:12 +0000 ROA not before: Sun 19 Jul 2026 21:00:12 +0000 ROA not after: Sat 17 Oct 2026 21:00:12 +0000 asID: 401214 IP address blocks: 23.183.152.0/24 maxlen: 24 2602:f888::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d2845a4-b952-4ab7-9cdb-d432ca530dd9/5d2845a4-b952-4ab7-9cdb-d432ca530dd9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d2845a4-b952-4ab7-9cdb-d432ca530dd9/5d2845a4-b952-4ab7-9cdb-d432ca530dd9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d2845a4-b952-4ab7-9cdb-d432ca530dd9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8d:ef:a3:55:31:54:2f:fa:67:f7:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d2845a4-b952-4ab7-9cdb-d432ca530dd9 Validity Not Before: Jul 19 21:00:12 2026 GMT Not After : Oct 17 21:00:12 2026 GMT Subject: CN=371d18b0-c94a-4ffe-8f8d-44b0923f1239 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5d:d8:fb:7b:ab:20:14:d6:20:87:39:db:cb: c1:be:f4:30:af:ee:89:01:51:7c:96:6e:95:8e:7d: 22:69:89:bb:9d:26:00:fd:3b:2f:c4:8d:7e:57:87: 80:2d:aa:b5:9e:f5:9a:0a:f3:6a:d6:bf:82:7c:83: c7:d5:e1:b7:c1:38:1d:14:bb:29:43:3f:01:27:43: b7:92:40:fd:60:18:b6:37:cc:8a:79:1d:ca:58:e1: 2b:be:2f:e5:d0:7d:6f:83:8b:16:51:b7:5b:9d:a1: 2f:18:2a:66:30:3d:85:69:5e:b1:57:d2:b9:9a:44: 42:c6:a7:3e:82:dc:6b:07:53:36:e8:ac:31:18:df: 4d:7f:33:06:19:c2:df:ec:41:7b:40:76:f8:71:21: 35:82:1c:81:9d:80:63:f9:78:d6:a5:67:98:41:e9: 4e:f2:52:7c:03:46:24:e1:48:07:79:96:f9:f8:df: 60:80:24:43:b9:fe:61:85:5d:fd:7a:a6:8b:1b:20: 0c:42:5b:d5:af:1a:c8:a3:f6:4e:b1:a4:30:79:7e: e8:60:b3:15:fc:f4:8f:21:ce:d1:0f:93:af:8b:4a: ce:ed:b9:ef:a9:ef:30:03:3f:2e:91:0e:05:6a:b0: 22:7f:f7:f0:c2:1e:46:5d:fb:b4:f3:b6:06:3e:09: bd:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:A2:BB:C6:C0:84:FF:30:44:8B:DA:18:83:0D:3E:A8:8D:0E:14:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d2845a4-b952-4ab7-9cdb-d432ca530dd9/5901ce23-13b6-30e0-ab94-3ae79fb72dcf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d2845a4-b952-4ab7-9cdb-d432ca530dd9/5d2845a4-b952-4ab7-9cdb-d432ca530dd9.crl X509v3 Authority Key Identifier: keyid:0D:4B:24:A0:6E:CC:9A:63:0F:75:61:B5:63:F2:70:B8:95:57:21:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d2845a4-b952-4ab7-9cdb-d432ca530dd9.cer sbgp-ipAddrBlock: critical IPv4: 23.183.152.0/24 IPv6: 2602:f888::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:69:88:be:de:07:e1:a1:0f:06:c0:a4:bc:1c:27:04:84:5f: 4d:46:53:1b:9f:53:cd:01:e3:0a:4b:96:1d:22:e6:93:21:95: 2a:cd:9e:34:b8:8d:42:76:16:f6:c3:0c:ad:f9:0a:c4:d0:28: 16:b3:2f:83:0f:b9:85:16:bc:41:cf:4a:fd:68:ae:99:9b:0b: 83:f5:c2:08:2e:06:9c:c1:04:ab:21:f1:2b:37:54:43:f1:b5: fa:6d:e6:66:39:79:e8:08:38:7e:f5:1b:09:ae:3d:9d:40:3a: 38:2f:22:94:21:17:93:09:48:78:a4:4d:2d:41:de:e0:7b:a2: da:98:5c:56:0b:c5:11:a0:9b:1c:67:1d:82:dc:14:e9:da:61: 5c:df:b8:07:e4:cb:b4:8c:89:cf:11:40:22:b2:f9:c7:f4:fb: a9:54:a3:af:9c:88:e4:93:9f:1c:f9:b8:96:89:22:00:f1:f1: cf:27:9c:aa:4b:d8:3c:25:17:a2:6b:82:d5:ac:ea:fa:c7:4d: 33:cb:00:9d:ae:ec:40:1f:bb:ab:00:85:4b:75:f1:0b:aa:5a: 1f:9f:96:4c:cf:b2:66:d1:88:01:fd:21:fd:88:5a:fe:63:16: 11:c5:43:26:d8:68:0b:08:13:aa:00:8a:ab:f7:b9:3f:e6:23: 98:5c:98:20 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE6N76NVMVQv+mf3h4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQyODQ1YTQtYjk1Mi00YWI3LTljZGItZDQzMmNhNTMw ZGQ5MB4XDTI2MDcxOTIxMDAxMloXDTI2MTAxNzIxMDAxMlowLzEtMCsGA1UEAxMk MzcxZDE4YjAtYzk0YS00ZmZlLThmOGQtNDRiMDkyM2YxMjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArF3Y+3urIBTWIIc528vBvvQwr+6JAVF8lm6V jn0iaYm7nSYA/TsvxI1+V4eALaq1nvWaCvNq1r+CfIPH1eG3wTgdFLspQz8BJ0O3 kkD9YBi2N8yKeR3KWOErvi/l0H1vg4sWUbdbnaEvGCpmMD2FaV6xV9K5mkRCxqc+ gtxrB1M26KwxGN9NfzMGGcLf7EF7QHb4cSE1ghyBnYBj+XjWpWeYQelO8lJ8A0Yk 4UgHeZb5+N9ggCRDuf5hhV39eqaLGyAMQlvVrxrIo/ZOsaQweX7oYLMV/PSPIc7R D5Ovi0rO7bnvqe8wAz8ukQ4FarAif/fwwh5GXfu087YGPgm91QIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFDCiu8bAhP8wRIvaGIMNPqiNDhRCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81ZDI4 NDVhNC1iOTUyLTRhYjctOWNkYi1kNDMyY2E1MzBkZDkvNTkwMWNlMjMtMTNiNi0z MGUwLWFiOTQtM2FlNzlmYjcyZGNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNWQyODQ1YTQtYjk1Mi00YWI3LTlj ZGItZDQzMmNhNTMwZGQ5LzVkMjg0NWE0LWI5NTItNGFiNy05Y2RiLWQ0MzJjYTUz MGRkOS5jcmwwHwYDVR0jBBgwFoAUDUskoG7MmmMPdWG1Y/JwuJVXISswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS81ZDI4NDVhNC1iOTUyLTRhYjctOWNkYi1kNDMy Y2E1MzBkZDkuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF7eYMA4E AgACMAgDBgAmAviIADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBuaYi+3gfhoQ8GwKS8HCcEhF9NRlMbn1PN AeMKS5YdIuaTIZUqzZ40uI1Cdhb2wwyt+QrE0CgWsy+DD7mFFrxBz0r9aK6ZmwuD 9cIILgacwQSrIfErN1RD8bX6beZmOXnoCDh+9RsJrj2dQDo4LyKUIReTCUh4pE0t Qd7ge6LamFxWC8URoJscZx2C3BTp2mFc37gH5Mu0jInPEUAisvnH9PupVKOvnIjk k58c+biWiSIA8fHPJ5yqS9g8JReia4LVrOr6x00zywCdruxAH7urAIVLdfELqlof n5ZMz7Jm0YgB/SH9iFr+YxYRxUMm2GgLCBOqAIqr97k/5iOYXJgg -----END CERTIFICATE-----Generated at Fri Jul 24 15:50:38 2026 by rpki-client