$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/068fe099-ec29-42a6-8cc8-92597523d41f/502505e1-d06b-3b30-bd54-58420c555658.roa File: 502505e1-d06b-3b30-bd54-58420c555658.roa (raw, json) Hash identifier: f/I+Y0VWDoUbj12N0ZsRZj9ImooouNQm22D8a05XOqs= Subject key identifier: 92:54:6B:85:D8:80:4C:2B:50:7C:47:F6:DE:83:2E:87:38:81:7E:50 Certificate issuer: /CN=068fe099-ec29-42a6-8cc8-92597523d41f Certificate serial: 010D0C9F4328584DC29AED68525553C491673480 Authority key identifier: 9D:FC:DC:61:99:3A:69:27:BD:44:35:85:72:72:08:04:68:94:A2:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/068fe099-ec29-42a6-8cc8-92597523d41f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/068fe099-ec29-42a6-8cc8-92597523d41f/502505e1-d06b-3b30-bd54-58420c555658.roa Signing time: Fri 08 May 2026 01:00:24 +0000 ROA not before: Fri 08 May 2026 01:00:24 +0000 ROA not after: Thu 06 Aug 2026 01:00:24 +0000 asID: 33263 IP address blocks: 23.167.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/068fe099-ec29-42a6-8cc8-92597523d41f/068fe099-ec29-42a6-8cc8-92597523d41f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/068fe099-ec29-42a6-8cc8-92597523d41f/068fe099-ec29-42a6-8cc8-92597523d41f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/068fe099-ec29-42a6-8cc8-92597523d41f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c2:9a:ed:68:52:55:53:c4:91:67:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=068fe099-ec29-42a6-8cc8-92597523d41f Validity Not Before: May 8 01:00:24 2026 GMT Not After : Aug 6 01:00:24 2026 GMT Subject: CN=4ea897d1-5d11-46d5-97b9-5c7832271ba8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:92:b8:6b:37:fd:3d:0b:ed:b3:c0:9c:98:7d: c4:a0:cc:d5:fc:e0:66:0c:3b:d3:b8:5d:38:b8:ec: 53:51:1a:a4:39:e5:2b:da:e2:73:70:93:d5:07:01: 10:5f:e8:8e:62:dd:f3:ea:df:e7:32:66:67:74:57: 9b:b4:47:ab:c6:30:2e:02:7e:c2:e4:d5:20:30:30: ee:98:f4:64:d4:c4:2f:07:5d:97:14:4f:a1:ef:4e: d2:ea:51:e7:73:8f:11:56:ff:58:44:25:96:0f:bf: d8:ee:fc:be:a2:2b:68:35:82:01:69:70:3b:f2:bc: 02:55:3b:e7:e6:c0:21:66:35:ca:ff:97:b8:95:b3: 69:55:ee:42:69:0d:33:15:59:c1:25:ea:90:77:9f: e4:09:67:98:9a:65:e0:04:c0:9c:da:11:87:d5:18: 98:83:e6:34:4d:3c:07:d6:46:a0:70:03:c2:ba:c0: a2:aa:aa:4d:7b:28:57:67:5d:e0:31:c8:fb:a4:f2: 11:2a:27:2a:84:62:8b:fe:d2:9a:05:4a:07:e6:ba: 85:72:ac:7a:4c:ed:7c:3a:5a:b7:65:05:c1:42:9a: 48:c0:90:76:4a:43:bc:3b:0a:77:31:d1:f5:bb:11: 91:4d:50:49:92:a7:a1:34:d8:aa:3d:58:d0:2b:15: 8b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:54:6B:85:D8:80:4C:2B:50:7C:47:F6:DE:83:2E:87:38:81:7E:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/068fe099-ec29-42a6-8cc8-92597523d41f/502505e1-d06b-3b30-bd54-58420c555658.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/068fe099-ec29-42a6-8cc8-92597523d41f/068fe099-ec29-42a6-8cc8-92597523d41f.crl X509v3 Authority Key Identifier: keyid:9D:FC:DC:61:99:3A:69:27:BD:44:35:85:72:72:08:04:68:94:A2:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/068fe099-ec29-42a6-8cc8-92597523d41f.cer sbgp-ipAddrBlock: critical IPv4: 23.167.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:7a:4a:37:75:bb:ba:a4:88:2e:ba:1e:d2:ee:01:55:bd:db: 24:03:d8:df:d9:cf:e4:51:76:f5:19:76:a7:7e:34:4a:d5:4f: 76:d1:6b:64:1c:72:0f:3b:1c:9c:ee:9d:63:71:05:4f:4c:c3: d7:d9:26:c2:65:cd:a4:14:5f:c3:4f:16:23:14:0a:af:e4:80: 8c:e4:5f:4e:93:c0:9d:82:91:d1:37:53:57:b7:ad:c5:3e:dc: c5:42:f1:3a:76:8e:82:8b:4c:b2:62:23:93:ee:d9:02:aa:fa: 44:9b:2e:99:34:5a:e7:59:7f:89:b7:6c:e1:b3:58:21:42:2a: 84:fc:89:3c:de:a5:fe:e9:4d:52:42:58:61:97:8c:09:51:4d: 7c:7b:c1:d7:9b:f4:27:ae:96:02:a7:bf:d3:b5:2b:17:64:95: 28:25:f1:60:f1:09:91:10:f8:da:db:b5:6f:64:92:91:6c:eb: e7:c5:c7:c0:01:a7:8b:1f:c3:44:17:31:a2:b0:2f:b6:8b:3b: 6f:e2:44:14:12:6c:df:ba:5b:1a:db:d6:d7:28:05:be:92:cb: 2b:c8:25:d4:23:00:e2:b6:4b:93:be:5b:10:b7:27:8b:a0:f7: c6:00:9c:81:5d:88:32:94:15:e7:78:29:a6:1f:eb:60:b2:f1: 16:f5:bb:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3Cmu1oUlVTxJFnNIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDY4ZmUwOTktZWMyOS00MmE2LThjYzgtOTI1OTc1MjNk NDFmMB4XDTI2MDUwODAxMDAyNFoXDTI2MDgwNjAxMDAyNFowLzEtMCsGA1UEAxMk NGVhODk3ZDEtNWQxMS00NmQ1LTk3YjktNWM3ODMyMjcxYmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5K4azf9PQvts8CcmH3EoMzV/OBmDDvTuF04 uOxTURqkOeUr2uJzcJPVBwEQX+iOYt3z6t/nMmZndFebtEerxjAuAn7C5NUgMDDu mPRk1MQvB12XFE+h707S6lHnc48RVv9YRCWWD7/Y7vy+oitoNYIBaXA78rwCVTvn 5sAhZjXK/5e4lbNpVe5CaQ0zFVnBJeqQd5/kCWeYmmXgBMCc2hGH1RiYg+Y0TTwH 1kagcAPCusCiqqpNeyhXZ13gMcj7pPIRKicqhGKL/tKaBUoH5rqFcqx6TO18Olq3 ZQXBQppIwJB2SkO8Owp3MdH1uxGRTVBJkqehNNiqPVjQKxWL1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJJUa4XYgEwrUHxH9t6DLoc4gX5QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNjhm ZTA5OS1lYzI5LTQyYTYtOGNjOC05MjU5NzUyM2Q0MWYvNTAyNTA1ZTEtZDA2Yi0z YjMwLWJkNTQtNTg0MjBjNTU1NjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDY4ZmUwOTktZWMyOS00MmE2LThj YzgtOTI1OTc1MjNkNDFmLzA2OGZlMDk5LWVjMjktNDJhNi04Y2M4LTkyNTk3NTIz ZDQxZi5jcmwwHwYDVR0jBBgwFoAUnfzcYZk6aSe9RDWFcnIIBGiUojEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wNjhmZTA5OS1lYzI5LTQyYTYtOGNjOC05MjU5 NzUyM2Q0MWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6doMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHp6Sjd1u7qkiC66HtLuAVW92yQD2N/Zz+RRdvUZdqd+NErVT3bRa2Qc cg87HJzunWNxBU9Mw9fZJsJlzaQUX8NPFiMUCq/kgIzkX06TwJ2CkdE3U1e3rcU+ 3MVC8Tp2joKLTLJiI5Pu2QKq+kSbLpk0WudZf4m3bOGzWCFCKoT8iTzepf7pTVJC WGGXjAlRTXx7wdeb9CeulgKnv9O1KxdklSgl8WDxCZEQ+NrbtW9kkpFs6+fFx8AB p4sfw0QXMaKwL7aLO2/iRBQSbN+6Wxrb1tcoBb6SyyvIJdQjAOK2S5O+WxC3J4ug 98YAnIFdiDKUFed4KaYf62Cy8Rb1u24= -----END CERTIFICATE-----Generated at Wed May 13 16:03:35 2026 by rpki-client