$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a74ec1f-6f26-4309-8e27-41175428f94b/9f862b5b-8cc2-33f8-a1ee-a80b01d5643c.roa File: 9f862b5b-8cc2-33f8-a1ee-a80b01d5643c.roa (raw, json) Hash identifier: i8jRcIJjUOlcGimFttWG4clL/YyYpXVBjIyd4CEbbQI= Subject key identifier: 58:21:8E:B1:40:CE:CA:40:4E:FC:24:37:1D:6C:1A:C5:F6:B9:D0:E5 Certificate issuer: /CN=8a74ec1f-6f26-4309-8e27-41175428f94b Certificate serial: 010D0C9F4328584DCAFB1C1FBE510A9F401637C0 Authority key identifier: B5:57:A5:CA:5F:1A:66:5B:15:B1:DC:A3:0C:95:22:39:DD:49:CA:72 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a74ec1f-6f26-4309-8e27-41175428f94b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a74ec1f-6f26-4309-8e27-41175428f94b/9f862b5b-8cc2-33f8-a1ee-a80b01d5643c.roa Signing time: Mon 11 May 2026 01:00:24 +0000 ROA not before: Mon 11 May 2026 01:00:24 +0000 ROA not after: Sun 09 Aug 2026 01:00:24 +0000 asID: 152918 IP address blocks: 23.147.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a74ec1f-6f26-4309-8e27-41175428f94b/8a74ec1f-6f26-4309-8e27-41175428f94b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a74ec1f-6f26-4309-8e27-41175428f94b/8a74ec1f-6f26-4309-8e27-41175428f94b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a74ec1f-6f26-4309-8e27-41175428f94b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ca:fb:1c:1f:be:51:0a:9f:40:16:37:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a74ec1f-6f26-4309-8e27-41175428f94b Validity Not Before: May 11 01:00:24 2026 GMT Not After : Aug 9 01:00:24 2026 GMT Subject: CN=6e6a1b99-06d5-40ae-9f4e-2ffaab83bbce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:9e:36:66:0c:65:c3:99:49:fd:14:4a:7d:68: 6d:d5:9d:5b:48:f0:0d:b0:4f:c5:a4:59:8e:41:d4: 32:f2:12:34:ee:97:52:16:47:ec:e3:da:79:aa:2d: d7:7e:08:0a:fd:94:b7:04:3a:61:64:c5:54:0b:fb: 86:10:2b:60:a0:4a:b2:d9:16:33:7c:38:65:a0:5f: 44:72:8d:7e:6d:f7:55:f0:75:ad:90:fe:16:8d:dc: 0e:43:2d:d3:37:1b:de:6c:20:46:ed:54:1b:db:70: cb:5c:31:f8:ce:6f:c4:b1:35:27:5b:3c:08:41:7a: 99:30:91:85:e4:e4:77:af:a4:1e:1d:5e:7c:bc:48: fb:19:c2:7c:0b:16:c9:e6:de:34:c1:94:09:bf:39: 80:20:e7:0d:60:91:48:22:76:59:96:77:40:27:a5: 0f:68:59:51:01:47:8e:ba:b7:15:f0:74:a3:d2:29: f3:55:96:b2:54:dc:a6:dd:04:1c:1f:b8:af:cd:59: d3:13:ef:30:fe:82:81:e3:15:5a:0c:79:1d:79:dd: e2:c4:c8:c0:88:b3:e1:40:8b:a0:38:b7:73:5e:26: b9:a0:06:22:4d:e5:f6:fa:93:ee:d9:be:94:33:d2: 7a:19:76:04:e7:81:8d:a3:9c:35:2e:44:1a:69:d7: 9c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:21:8E:B1:40:CE:CA:40:4E:FC:24:37:1D:6C:1A:C5:F6:B9:D0:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a74ec1f-6f26-4309-8e27-41175428f94b/9f862b5b-8cc2-33f8-a1ee-a80b01d5643c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a74ec1f-6f26-4309-8e27-41175428f94b/8a74ec1f-6f26-4309-8e27-41175428f94b.crl X509v3 Authority Key Identifier: keyid:B5:57:A5:CA:5F:1A:66:5B:15:B1:DC:A3:0C:95:22:39:DD:49:CA:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a74ec1f-6f26-4309-8e27-41175428f94b.cer sbgp-ipAddrBlock: critical IPv4: 23.147.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:a2:73:97:08:4e:ae:ba:c9:d5:5e:0b:c4:6a:8a:3a:52:e7: ad:f5:d2:84:6e:eb:a0:5b:c2:61:04:23:f9:cb:50:e5:9a:9d: b9:30:9d:82:e0:e9:61:01:34:33:13:0c:7e:61:87:d0:4a:b3: 3b:9f:26:3f:af:58:b8:8b:93:b7:26:c2:be:3a:d2:84:e7:34: 15:b7:66:ef:bb:fb:e1:0e:8e:38:66:99:b6:ce:fd:2a:7c:1f: cb:73:6d:b7:cf:6e:a9:39:8f:31:00:12:2f:81:c2:0f:f4:91: fc:94:1b:08:cc:c4:88:59:25:23:cb:6a:17:48:da:34:88:db: ef:fc:0b:cf:28:2a:2c:d0:21:23:4c:af:88:4f:e2:71:fc:fd: d6:d6:02:38:88:01:32:be:60:31:11:0e:9b:ae:d6:f8:6c:14: d9:2a:5f:c0:80:65:26:f6:3c:ff:27:bb:9b:b3:dc:7d:ac:20: d7:c3:21:b0:df:35:46:b6:8b:5e:15:0e:66:55:72:cd:4c:02: a1:86:64:39:73:8b:6b:c6:f6:7f:fe:e5:7a:5b:16:ae:f6:02: 74:a0:ba:4a:48:99:4e:49:ee:ca:99:68:9d:c8:f5:4d:84:14: c0:16:a3:ca:b0:eb:93:52:73:57:31:d5:1e:f2:55:3d:90:48: e5:d0:ec:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3K+xwfvlEKn0AWN8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE3NGVjMWYtNmYyNi00MzA5LThlMjctNDExNzU0Mjhm OTRiMB4XDTI2MDUxMTAxMDAyNFoXDTI2MDgwOTAxMDAyNFowLzEtMCsGA1UEAxMk NmU2YTFiOTktMDZkNS00MGFlLTlmNGUtMmZmYWFiODNiYmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZ42Zgxlw5lJ/RRKfWht1Z1bSPANsE/FpFmO QdQy8hI07pdSFkfs49p5qi3XfggK/ZS3BDphZMVUC/uGECtgoEqy2RYzfDhloF9E co1+bfdV8HWtkP4WjdwOQy3TNxvebCBG7VQb23DLXDH4zm/EsTUnWzwIQXqZMJGF 5OR3r6QeHV58vEj7GcJ8CxbJ5t40wZQJvzmAIOcNYJFIInZZlndAJ6UPaFlRAUeO urcV8HSj0inzVZayVNym3QQcH7ivzVnTE+8w/oKB4xVaDHkded3ixMjAiLPhQIug OLdzXia5oAYiTeX2+pPu2b6UM9J6GXYE54GNo5w1LkQaadecUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFghjrFAzspATvwkNx1sGsX2udDlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84YTc0 ZWMxZi02ZjI2LTQzMDktOGUyNy00MTE3NTQyOGY5NGIvOWY4NjJiNWItOGNjMi0z M2Y4LWExZWUtYTgwYjAxZDU2NDNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOGE3NGVjMWYtNmYyNi00MzA5LThl MjctNDExNzU0MjhmOTRiLzhhNzRlYzFmLTZmMjYtNDMwOS04ZTI3LTQxMTc1NDI4 Zjk0Yi5jcmwwHwYDVR0jBBgwFoAUtVelyl8aZlsVsdyjDJUiOd1JynIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84YTc0ZWMxZi02ZjI2LTQzMDktOGUyNy00MTE3 NTQyOGY5NGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5NEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADyic5cITq66ydVeC8RqijpS56310oRu66BbwmEEI/nLUOWanbkwnYLg 6WEBNDMTDH5hh9BKszufJj+vWLiLk7cmwr460oTnNBW3Zu+7++EOjjhmmbbO/Sp8 H8tzbbfPbqk5jzEAEi+Bwg/0kfyUGwjMxIhZJSPLahdI2jSI2+/8C88oKizQISNM r4hP4nH8/dbWAjiIATK+YDERDpuu1vhsFNkqX8CAZSb2PP8nu5uz3H2sINfDIbDf NUa2i14VDmZVcs1MAqGGZDlzi2vG9n/+5XpbFq72AnSgukpImU5J7sqZaJ3I9U2E FMAWo8qw65NSc1cx1R7yVT2QSOXQ7HQ= -----END CERTIFICATE-----Generated at Wed May 13 03:38:20 2026 by rpki-client