$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f/8c7d3e4b-0e86-348a-b4fd-f390c6d57d5a.roa File: 8c7d3e4b-0e86-348a-b4fd-f390c6d57d5a.roa (raw, json) Hash identifier: 6771KEg3LHFlqMa6pLLj5GXs93b4p6aqx26RBL80INs= Subject key identifier: 1E:56:F5:45:AB:C9:F0:DF:64:B6:A9:40:CB:21:83:F5:D6:1B:F1:19 Certificate issuer: /CN=3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f Certificate serial: 010D0C9F4328584DCAFB09C930AD92D66A7FB600 Authority key identifier: B8:F6:EB:89:EB:99:E9:DA:77:78:CD:50:4D:57:27:9C:52:0F:90:6D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f/8c7d3e4b-0e86-348a-b4fd-f390c6d57d5a.roa Signing time: Mon 11 May 2026 01:00:24 +0000 ROA not before: Mon 11 May 2026 01:00:24 +0000 ROA not after: Sun 09 Aug 2026 01:00:24 +0000 asID: 23470 IP address blocks: 23.147.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ca:fb:09:c9:30:ad:92:d6:6a:7f:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f Validity Not Before: May 11 01:00:24 2026 GMT Not After : Aug 9 01:00:24 2026 GMT Subject: CN=ccfb6907-04d3-49c9-a6cd-5e92cf8b56b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:7a:08:70:d1:86:44:b7:b8:66:cb:96:ed:7d: 3a:3e:0c:f1:77:9f:85:28:91:ab:40:40:34:e4:03: d8:30:bd:d7:6d:36:43:13:5a:bb:bb:b8:ca:8a:59: 16:74:4c:b7:28:51:0f:23:4f:1f:83:11:07:d0:08: bf:f9:53:b2:3b:1b:a6:e5:6c:27:6b:a9:95:bf:7b: 3d:ac:ee:46:68:a0:8d:a5:00:12:a4:cd:55:a1:96: f5:f0:43:dc:69:59:29:ea:33:7a:a3:26:d1:28:e0: f3:54:e5:d5:07:eb:3a:e8:e0:46:fd:3c:83:3e:c0: e2:92:a7:af:1d:ec:a5:0f:5b:74:22:3b:83:14:98: 5a:6f:da:d7:d7:9a:77:24:f5:21:27:d6:83:1d:fa: 14:f3:5a:28:d2:d4:cf:e6:f9:8c:94:67:79:4d:73: 44:2d:90:31:04:cc:25:15:c8:01:9d:32:7c:5d:46: 68:a3:be:33:83:82:bd:a2:72:76:c0:77:27:b9:fd: d3:0e:97:ca:91:66:a7:7a:37:e1:74:ea:a3:6b:29: 5a:8d:4c:90:d1:c1:73:15:e4:94:8f:76:8c:4f:14: 22:fe:3b:ff:b9:de:91:fa:85:ae:f2:90:c5:e5:67: 53:0a:56:68:84:9f:8a:f5:7c:22:6c:af:f7:c3:82: ff:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:56:F5:45:AB:C9:F0:DF:64:B6:A9:40:CB:21:83:F5:D6:1B:F1:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f/8c7d3e4b-0e86-348a-b4fd-f390c6d57d5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.crl X509v3 Authority Key Identifier: keyid:B8:F6:EB:89:EB:99:E9:DA:77:78:CD:50:4D:57:27:9C:52:0F:90:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.cer sbgp-ipAddrBlock: critical IPv4: 23.147.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:79:09:70:c8:5f:ff:38:d7:14:4e:09:18:f0:a2:db:5a:2a: fd:99:81:74:1f:b2:9b:d9:96:80:76:94:18:f3:14:b6:79:52: e5:1e:89:1a:3c:73:41:f2:78:2e:65:67:b9:49:17:9f:f4:06: 8a:39:84:74:56:e6:a9:38:57:4b:42:ff:0f:96:d6:cd:fe:69: cf:19:21:d7:6b:fe:53:25:7f:42:01:4d:2d:d4:0b:e6:71:39: 28:33:b3:82:e8:35:23:85:39:dc:00:cf:fd:52:fa:4f:07:0b: a3:fc:bc:65:81:e0:ac:70:b4:04:75:95:b2:d9:39:c5:58:7c: f9:93:0d:5c:a6:18:80:61:27:5f:8b:3d:2e:6e:ab:3e:08:50: 25:31:38:86:f8:23:6b:b3:0f:ac:f2:06:fd:fd:57:71:e9:f4: 18:91:f4:0b:8e:f0:5f:6e:1c:92:fe:03:93:5c:1d:bc:d4:33: 93:ed:84:f0:b2:74:d5:4b:9d:e0:cb:04:45:6b:4c:92:bb:44: 8a:fc:03:85:be:42:79:86:58:2f:2e:79:06:09:81:e7:3d:ab: 74:df:bb:0a:8f:8b:2b:38:90:7d:4a:d1:47:17:3a:d4:79:d1: 4f:83:8c:6a:3a:0d:11:f0:89:d4:ed:98:c5:55:46:51:82:5b: 9b:18:75:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3K+wnJMK2S1mp/tgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M5ZGQ4OGMtNmNkYy00ODc1LThjZGQtYTNjNjUzZTJm ZDdmMB4XDTI2MDUxMTAxMDAyNFoXDTI2MDgwOTAxMDAyNFowLzEtMCsGA1UEAxMk Y2NmYjY5MDctMDRkMy00OWM5LWE2Y2QtNWU5MmNmOGI1NmIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3oIcNGGRLe4ZsuW7X06Pgzxd5+FKJGrQEA0 5APYML3XbTZDE1q7u7jKilkWdEy3KFEPI08fgxEH0Ai/+VOyOxum5Wwna6mVv3s9 rO5GaKCNpQASpM1VoZb18EPcaVkp6jN6oybRKODzVOXVB+s66OBG/TyDPsDikqev HeylD1t0IjuDFJhab9rX15p3JPUhJ9aDHfoU81oo0tTP5vmMlGd5TXNELZAxBMwl FcgBnTJ8XUZoo74zg4K9onJ2wHcnuf3TDpfKkWanejfhdOqjaylajUyQ0cFzFeSU j3aMTxQi/jv/ud6R+oWu8pDF5WdTClZohJ+K9XwibK/3w4L/BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB5W9UWryfDfZLapQMshg/XWG/EZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zYzlk ZDg4Yy02Y2RjLTQ4NzUtOGNkZC1hM2M2NTNlMmZkN2YvOGM3ZDNlNGItMGU4Ni0z NDhhLWI0ZmQtZjM5MGM2ZDU3ZDVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvM2M5ZGQ4OGMtNmNkYy00ODc1LThj ZGQtYTNjNjUzZTJmZDdmLzNjOWRkODhjLTZjZGMtNDg3NS04Y2RkLWEzYzY1M2Uy ZmQ3Zi5jcmwwHwYDVR0jBBgwFoAUuPbrieuZ6dp3eM1QTVcnnFIPkG0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zYzlkZDg4Yy02Y2RjLTQ4NzUtOGNkZC1hM2M2 NTNlMmZkN2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5MoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAp5CXDIX/841xROCRjwottaKv2ZgXQfspvZloB2lBjzFLZ5UuUeiRo8 c0HyeC5lZ7lJF5/0Boo5hHRW5qk4V0tC/w+W1s3+ac8ZIddr/lMlf0IBTS3UC+Zx OSgzs4LoNSOFOdwAz/1S+k8HC6P8vGWB4KxwtAR1lbLZOcVYfPmTDVymGIBhJ1+L PS5uqz4IUCUxOIb4I2uzD6zyBv39V3Hp9BiR9AuO8F9uHJL+A5NcHbzUM5PthPCy dNVLneDLBEVrTJK7RIr8A4W+QnmGWC8ueQYJgec9q3TfuwqPiys4kH1K0UcXOtR5 0U+DjGo6DRHwidTtmMVVRlGCW5sYdZM= -----END CERTIFICATE-----Generated at Wed May 13 05:27:28 2026 by rpki-client