$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d6700884-10a1-34b7-9970-7d3f38008d31.roa File: d6700884-10a1-34b7-9970-7d3f38008d31.roa (raw, json) Hash identifier: SqA4pwdBEolNj1ngls0+CUDSjRpQRXo2+dYzD4Mn7sE= Subject key identifier: 34:42:39:F4:90:7C:60:83:A6:92:20:83:34:05:98:7B:C6:FE:28:89 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584D91BFF9D6CB45C0858DA2CC00 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d6700884-10a1-34b7-9970-7d3f38008d31.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 62904 IP address blocks: 23.231.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:bf:f9:d6:cb:45:c0:85:8d:a2:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=1c9d6608-501a-4c4e-b22e-1046eb9fa7c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:14:a1:07:0a:03:9c:80:8e:93:3e:0d:ae:9d: 21:9f:a1:a9:e5:f5:2c:c8:94:2f:a4:7d:e9:bc:e5: 42:c6:da:52:10:d9:6b:7b:b4:68:a7:df:cd:7a:2e: db:5d:f2:c5:9c:77:2b:8e:90:37:ec:28:ae:a9:ce: ff:c9:d4:0e:64:b8:71:6d:b9:97:fc:46:82:b5:c6: 14:a0:90:f8:31:01:0f:cc:d4:d2:0c:de:3a:52:6a: 76:aa:20:2e:d9:86:81:8c:11:f6:aa:2d:09:67:ac: 96:cf:f2:43:94:ff:81:48:b9:61:be:cd:56:13:49: a8:02:7d:ea:d1:a0:26:8b:ca:e2:50:a0:f2:d9:1c: ad:09:61:77:eb:33:3a:35:e1:78:7c:47:e3:51:1f: 61:0d:08:b0:5d:ff:9b:68:1e:98:48:d9:0f:df:d8: 75:6b:94:ea:bc:e5:ac:65:e8:d4:c9:b1:1d:b3:df: 15:d0:86:75:2e:c2:ff:d1:38:12:cc:c3:1e:71:23: c3:7c:ed:c7:9e:75:8e:3a:48:ae:e8:28:3d:b3:b1: 20:20:18:c9:19:f1:6f:46:03:10:80:61:da:32:17: 95:60:ab:e9:46:f9:f6:1d:6b:c3:6b:97:dd:a7:2a: 6f:4c:48:65:25:e3:b7:17:13:c8:a2:4a:cf:62:37: 6d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:42:39:F4:90:7C:60:83:A6:92:20:83:34:05:98:7B:C6:FE:28:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d6700884-10a1-34b7-9970-7d3f38008d31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 23.231.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:1a:1c:3d:40:f7:63:68:2a:6e:e2:c0:55:83:30:e5:8c:fc: 44:ed:2a:9f:08:65:07:d1:70:82:a7:4c:57:20:7b:30:09:11: d6:f3:ca:c1:da:84:0b:73:40:a8:a5:58:0a:51:cd:f1:37:36: 57:0f:06:58:e5:d0:82:cf:d2:d7:ae:63:dc:49:80:b5:fa:43: 97:89:ad:ba:52:0c:b1:33:0b:8c:3d:fb:45:9f:3a:fa:75:99: 6d:66:51:07:c1:a7:50:91:04:81:92:df:b5:be:fd:db:c7:ce: a0:9f:4e:5a:77:c3:34:e1:b8:3e:e0:bc:64:3b:50:ca:13:88: 33:5a:42:e5:59:96:e5:8f:b3:52:f5:8f:c4:dd:fe:54:73:9e: e3:09:e7:8f:86:f3:e4:a9:c2:69:03:15:d3:43:5b:e7:e9:73: 1f:4e:e2:fe:b8:17:c5:db:4e:72:52:37:1a:82:45:a3:27:01: d6:aa:54:a7:77:55:53:01:c6:65:d1:ee:df:41:a0:38:6a:a8: 26:84:a7:d6:c5:8d:be:25:a4:82:d8:af:75:33:c5:14:57:42: 9a:73:e0:ac:35:26:39:55:9f:a1:39:04:63:0e:97:11:bd:7f: 2f:e6:50:1f:aa:81:1f:92:90:16:26:ff:43:7a:9e:0f:d1:b5: d9:5a:4d:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2Rv/nWy0XAhY2izAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk MWM5ZDY2MDgtNTAxYS00YzRlLWIyMmUtMTA0NmViOWZhN2M4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBShBwoDnICOkz4Nrp0hn6Gp5fUsyJQvpH3p vOVCxtpSENlre7Rop9/Nei7bXfLFnHcrjpA37Ciuqc7/ydQOZLhxbbmX/EaCtcYU oJD4MQEPzNTSDN46Ump2qiAu2YaBjBH2qi0JZ6yWz/JDlP+BSLlhvs1WE0moAn3q 0aAmi8riUKDy2RytCWF36zM6NeF4fEfjUR9hDQiwXf+baB6YSNkP39h1a5TqvOWs ZejUybEds98V0IZ1LsL/0TgSzMMecSPDfO3HnnWOOkiu6Cg9s7EgIBjJGfFvRgMQ gGHaMheVYKvpRvn2HWvDa5fdpypvTEhlJeO3FxPIokrPYjdtPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDRCOfSQfGCDppIggzQFmHvG/iiJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvZDY3MDA4ODQtMTBhMS0z NGI3LTk5NzAtN2QzZjM4MDA4ZDMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF+dkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABgaHD1A92NoKm7iwFWDMOWM/ETtKp8IZQfRcIKnTFcgezAJEdbzysHa hAtzQKilWApRzfE3NlcPBljl0ILP0teuY9xJgLX6Q5eJrbpSDLEzC4w9+0WfOvp1 mW1mUQfBp1CRBIGS37W+/dvHzqCfTlp3wzThuD7gvGQ7UMoTiDNaQuVZluWPs1L1 j8Td/lRznuMJ54+G8+SpwmkDFdNDW+fpcx9O4v64F8XbTnJSNxqCRaMnAdaqVKd3 VVMBxmXR7t9BoDhqqCaEp9bFjb4lpILYr3UzxRRXQppz4Kw1JjlVn6E5BGMOlxG9 fy/mUB+qgR+SkBYm/0N6ng/RtdlaTV4= -----END CERTIFICATE-----Generated at Wed May 13 18:37:26 2026 by rpki-client