$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/4e651070-49d3-379c-9ddb-1c9815e02a76.roa File: 4e651070-49d3-379c-9ddb-1c9815e02a76.roa (raw, json) Hash identifier: nUSzswUBKJR5SsPlqUQVhbmvyFsraNmrC0AGlMJK5Y8= Subject key identifier: 21:CC:F0:1D:15:F0:EA:07:B2:57:EA:3B:68:7F:78:D1:45:6E:2E:7A Certificate issuer: /CN=9faf7a12-0176-44f9-9938-7bbccac3d238 Certificate serial: 010D0C9F4328584DB07585F384DCB94D6544F020 Authority key identifier: 27:F5:34:9F:8C:B1:FD:33:07:55:93:76:CC:BC:45:98:C1:2E:B5:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/4e651070-49d3-379c-9ddb-1c9815e02a76.roa Signing time: Fri 01 May 2026 13:00:30 +0000 ROA not before: Fri 01 May 2026 13:00:30 +0000 ROA not after: Thu 30 Jul 2026 13:00:30 +0000 asID: 30399 IP address blocks: 23.152.40.0/24 maxlen: 24 23.152.41.0/24 maxlen: 24 2602:fa82::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/9faf7a12-0176-44f9-9938-7bbccac3d238.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/9faf7a12-0176-44f9-9938-7bbccac3d238.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b0:75:85:f3:84:dc:b9:4d:65:44:f0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9faf7a12-0176-44f9-9938-7bbccac3d238 Validity Not Before: May 1 13:00:30 2026 GMT Not After : Jul 30 13:00:30 2026 GMT Subject: CN=6b7ff2e1-0556-4191-9e06-44518ac39237 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:e9:03:9b:b9:46:07:bd:7c:0a:4c:a7:fc:5d: 05:92:94:8a:be:3c:b7:6f:f4:0f:78:96:4d:2d:7a: 31:47:00:65:34:10:4e:fb:02:77:86:75:2e:bf:ee: 9f:86:a2:f3:1a:d9:07:3f:9d:c0:ae:fa:51:2e:b4: a0:a3:47:e8:4b:c6:6a:bd:f8:b3:3f:39:d0:28:83: 5c:a6:77:e3:cf:ca:26:57:06:aa:b7:ef:96:10:57: 94:85:7a:4b:d5:5b:89:5c:2e:2f:60:85:9f:c2:34: 09:7b:8a:0a:de:9f:f1:b7:2f:e8:09:f6:04:50:c8: 14:7d:1c:98:79:a2:61:f1:6b:8b:ac:1f:2d:01:8f: 25:a1:84:91:af:af:c5:e3:97:5f:93:35:33:84:80: 90:3f:10:11:38:57:ef:5f:25:9b:19:a8:36:03:7c: 60:c0:04:ff:ea:70:f1:9d:8d:98:c1:23:29:84:63: e9:eb:aa:31:5d:64:c3:1b:72:58:1e:70:d2:da:80: bb:c8:37:0b:02:a2:60:de:8e:b8:aa:5c:86:a2:85: 46:3f:40:b9:54:07:c5:de:a0:48:f2:89:2f:06:2e: 09:aa:f0:37:f9:5d:22:ba:3c:65:42:ef:93:e6:6d: 91:a0:1c:55:16:3d:cc:68:bd:51:94:99:49:03:3e: 7b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:CC:F0:1D:15:F0:EA:07:B2:57:EA:3B:68:7F:78:D1:45:6E:2E:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/4e651070-49d3-379c-9ddb-1c9815e02a76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/9faf7a12-0176-44f9-9938-7bbccac3d238.crl X509v3 Authority Key Identifier: keyid:27:F5:34:9F:8C:B1:FD:33:07:55:93:76:CC:BC:45:98:C1:2E:B5:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238.cer sbgp-ipAddrBlock: critical IPv4: 23.152.40.0/23 IPv6: 2602:fa82::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:3a:de:31:27:44:05:6d:ee:32:39:0e:1a:4a:4d:5f:d8:7a: 60:1d:30:35:15:d7:d7:ff:d6:97:ee:15:2a:d5:36:c3:89:ad: ae:29:d6:0a:d4:e7:7f:e5:96:d3:f1:17:91:6d:68:b0:19:83: 52:60:3a:98:11:87:5b:05:21:01:57:a7:3b:2a:f5:bb:58:ae: c2:dc:56:e3:fc:cf:0e:2c:a3:3a:85:13:34:46:45:1d:be:6a: 10:98:a2:5b:60:cd:99:eb:cb:c1:07:93:fb:af:8d:67:2b:7f: cc:ce:50:6a:42:4f:34:a5:ec:35:13:d4:75:4a:da:3c:40:ce: 6b:e3:07:3a:3b:bc:46:05:cd:e3:79:88:6f:dd:0a:e5:d1:c9: 16:2f:d0:81:14:25:64:aa:2e:34:07:28:e3:b8:c1:5c:6e:35: 9a:f4:be:6f:bd:5f:05:d6:d0:bb:a7:14:33:ec:16:bf:5a:b4: 99:26:f5:f8:93:ad:14:21:4c:15:ec:b7:6e:61:ea:b5:0c:c2: 25:fc:45:c8:5b:c7:88:ce:5a:6b:fe:75:83:7d:d4:74:32:5b: cc:b1:a4:c1:57:e4:b4:2d:1e:0a:8c:7e:48:f8:88:02:f4:28: be:da:25:6b:c4:3e:6e:cc:62:81:11:fb:17:88:fb:04:22:b0: da:9a:99:99 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE2wdYXzhNy5TWVE8CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWZhZjdhMTItMDE3Ni00NGY5LTk5MzgtN2JiY2NhYzNk MjM4MB4XDTI2MDUwMTEzMDAzMFoXDTI2MDczMDEzMDAzMFowLzEtMCsGA1UEAxMk NmI3ZmYyZTEtMDU1Ni00MTkxLTllMDYtNDQ1MThhYzM5MjM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+kDm7lGB718Ckyn/F0FkpSKvjy3b/QPeJZN LXoxRwBlNBBO+wJ3hnUuv+6fhqLzGtkHP53ArvpRLrSgo0foS8ZqvfizPznQKINc pnfjz8omVwaqt++WEFeUhXpL1VuJXC4vYIWfwjQJe4oK3p/xty/oCfYEUMgUfRyY eaJh8WuLrB8tAY8loYSRr6/F45dfkzUzhICQPxAROFfvXyWbGag2A3xgwAT/6nDx nY2YwSMphGPp66oxXWTDG3JYHnDS2oC7yDcLAqJg3o64qlyGooVGP0C5VAfF3qBI 8okvBi4JqvA3+V0iujxlQu+T5m2RoBxVFj3MaL1RlJlJAz57IQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFCHM8B0V8OoHslfqO2h/eNFFbi56MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85ZmFm N2ExMi0wMTc2LTQ0ZjktOTkzOC03YmJjY2FjM2QyMzgvNGU2NTEwNzAtNDlkMy0z NzljLTlkZGItMWM5ODE1ZTAyYTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWZhZjdhMTItMDE3Ni00NGY5LTk5 MzgtN2JiY2NhYzNkMjM4LzlmYWY3YTEyLTAxNzYtNDRmOS05OTM4LTdiYmNjYWMz ZDIzOC5jcmwwHwYDVR0jBBgwFoAUJ/U0n4yx/TMHVZN2zLxFmMEutRAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85ZmFmN2ExMi0wMTc2LTQ0ZjktOTkzOC03YmJj Y2FjM2QyMzguY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQBF5goMA4E AgACMAgDBgQmAvqCADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCYOt4xJ0QFbe4yOQ4aSk1f2HpgHTA1FdfX /9aX7hUq1TbDia2uKdYK1Od/5ZbT8ReRbWiwGYNSYDqYEYdbBSEBV6c7KvW7WK7C 3Fbj/M8OLKM6hRM0RkUdvmoQmKJbYM2Z68vBB5P7r41nK3/MzlBqQk80pew1E9R1 Sto8QM5r4wc6O7xGBc3jeYhv3Qrl0ckWL9CBFCVkqi40ByjjuMFcbjWa9L5vvV8F 1tC7pxQz7Ba/WrSZJvX4k60UIUwV7LduYeq1DMIl/EXIW8eIzlpr/nWDfdR0MlvM saTBV+S0LR4KjH5I+IgC9Ci+2iVrxD5uzGKBEfsXiPsEIrDampmZ -----END CERTIFICATE-----Generated at Wed May 13 11:09:02 2026 by rpki-client