$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/4304d6b0-4f61-30c9-a0ef-e3e83e94e659.roa File: 4304d6b0-4f61-30c9-a0ef-e3e83e94e659.roa (raw, json) Hash identifier: +wfCrPoFKKy5g26EwRLVBh+YunkFmMgbdpthAstdpr0= Subject key identifier: 31:39:48:C4:E8:E9:C0:83:A1:4B:19:7B:39:C7:26:61:8E:6F:FF:0B Certificate issuer: /CN=25397c33-84d1-4a95-9d4c-421c7d95d0f8 Certificate serial: 010D0C9F4328584D975565EB465EF6683ABB2680 Authority key identifier: DF:7C:B0:66:7B:40:6A:C8:44:70:8F:60:B1:C5:86:D9:97:B1:B3:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/4304d6b0-4f61-30c9-a0ef-e3e83e94e659.roa Signing time: Wed 22 Apr 2026 13:00:32 +0000 ROA not before: Wed 22 Apr 2026 13:00:32 +0000 ROA not after: Tue 21 Jul 2026 13:00:32 +0000 asID: 400792 IP address blocks: 23.151.140.0/24 maxlen: 24 2602:f75b::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:97:55:65:eb:46:5e:f6:68:3a:bb:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25397c33-84d1-4a95-9d4c-421c7d95d0f8 Validity Not Before: Apr 22 13:00:32 2026 GMT Not After : Jul 21 13:00:32 2026 GMT Subject: CN=84709b23-0a08-4594-a685-ce3eb8304b76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8f:98:1b:9e:78:8a:98:53:16:96:af:e4:82: 40:49:fa:ab:27:ac:9b:e2:a8:8f:04:59:96:28:cd: d4:89:a9:52:4c:ef:ad:96:3f:1c:ab:5b:f7:b4:fc: a0:09:b4:f8:1d:50:3c:2f:2c:33:5e:9c:ff:f0:3e: e7:d3:7e:51:04:39:dc:5f:9e:8f:3e:db:63:bb:99: e9:06:40:c0:98:6e:d0:3f:2b:9c:77:9b:00:fa:0f: dd:38:54:e4:55:10:a4:d6:bd:a4:11:95:e4:3c:26: 65:88:29:81:d8:65:fa:e9:aa:3d:4d:25:02:0f:a3: 0d:f5:3d:87:d6:80:80:57:0a:d8:1e:10:59:2f:c4: 70:51:bb:da:f7:50:a5:10:7f:14:1b:33:9d:40:ff: 57:13:80:e7:1e:e8:3d:d3:42:95:1e:70:7a:71:c2: 82:34:78:81:4c:cc:0c:a9:bc:5e:59:9b:a3:2a:3a: 93:04:c7:b1:e9:f4:fc:c7:90:a4:2a:b2:3e:77:98: 1d:41:6b:eb:98:c6:92:be:62:72:45:d5:8f:b5:14: 42:60:97:b5:b8:f0:64:5f:c5:e9:65:0b:1e:02:0d: a5:33:3a:6b:2f:05:6f:98:d0:ef:c4:97:c6:c9:6f: 61:d9:ee:72:b4:6f:f2:2a:4b:e1:08:07:93:9a:b2: 6d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:39:48:C4:E8:E9:C0:83:A1:4B:19:7B:39:C7:26:61:8E:6F:FF:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/4304d6b0-4f61-30c9-a0ef-e3e83e94e659.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.crl X509v3 Authority Key Identifier: keyid:DF:7C:B0:66:7B:40:6A:C8:44:70:8F:60:B1:C5:86:D9:97:B1:B3:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8.cer sbgp-ipAddrBlock: critical IPv4: 23.151.140.0/24 IPv6: 2602:f75b::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:fc:f9:54:d9:3a:3a:8c:9e:96:dd:1b:d6:a5:c9:27:f4:62: 02:9c:a3:bc:6a:36:69:8f:db:e6:e8:1a:af:c7:fe:2d:8f:d3: 4f:4a:a7:9c:b8:3c:87:f6:6c:db:8d:bf:91:86:02:b5:fb:6d: c5:c2:75:d1:67:40:7c:b3:91:18:54:a5:75:0e:d4:0b:4c:a5: 76:a2:cd:67:fe:0f:7f:a4:13:39:b1:f6:43:bf:b8:91:63:5e: c5:42:6c:18:6c:0f:b1:ac:51:0f:69:8c:9d:8a:23:ae:07:f4: 4b:c3:3d:0a:01:76:42:31:9c:33:21:fe:0b:7d:86:19:87:58: 8a:4d:5b:60:8e:2a:c7:45:11:45:a7:4a:fb:a4:f5:66:f0:0e: 12:f6:17:a6:b9:1c:40:60:51:56:ca:8e:5c:b7:91:62:fd:2e: 5c:32:c9:13:a0:c1:87:91:cc:35:41:77:d5:8e:1a:c2:f1:2e: d1:2e:1e:3e:71:b5:66:99:d8:88:61:31:ee:fc:b1:c2:93:6a: d1:f2:0d:4f:6f:ea:10:7f:02:59:81:87:33:b4:33:cf:fe:c1: 6d:83:51:1b:7f:36:71:ac:59:96:9c:b2:63:40:7f:47:a4:69: f8:1c:df:59:63:ac:57:33:45:68:48:0e:53:70:4d:ac:4d:cd: 50:64:28:6d -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE2XVWXrRl72aDq7JoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjUzOTdjMzMtODRkMS00YTk1LTlkNGMtNDIxYzdkOTVk MGY4MB4XDTI2MDQyMjEzMDAzMloXDTI2MDcyMTEzMDAzMlowLzEtMCsGA1UEAxMk ODQ3MDliMjMtMGEwOC00NTk0LWE2ODUtY2UzZWI4MzA0Yjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuY+YG554iphTFpav5IJASfqrJ6yb4qiPBFmW KM3UialSTO+tlj8cq1v3tPygCbT4HVA8LywzXpz/8D7n035RBDncX56PPttju5np BkDAmG7QPyucd5sA+g/dOFTkVRCk1r2kEZXkPCZliCmB2GX66ao9TSUCD6MN9T2H 1oCAVwrYHhBZL8RwUbva91ClEH8UGzOdQP9XE4DnHug900KVHnB6ccKCNHiBTMwM qbxeWZujKjqTBMex6fT8x5CkKrI+d5gdQWvrmMaSvmJyRdWPtRRCYJe1uPBkX8Xp ZQseAg2lMzprLwVvmNDvxJfGyW9h2e5ytG/yKkvhCAeTmrJtuQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFDE5SMTo6cCDoUsZeznHJmGOb/8LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yNTM5 N2MzMy04NGQxLTRhOTUtOWQ0Yy00MjFjN2Q5NWQwZjgvNDMwNGQ2YjAtNGY2MS0z MGM5LWEwZWYtZTNlODNlOTRlNjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjUzOTdjMzMtODRkMS00YTk1LTlk NGMtNDIxYzdkOTVkMGY4LzI1Mzk3YzMzLTg0ZDEtNGE5NS05ZDRjLTQyMWM3ZDk1 ZDBmOC5jcmwwHwYDVR0jBBgwFoAU33ywZntAashEcI9gscWG2Zexsx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yNTM5N2MzMy04NGQxLTRhOTUtOWQ0Yy00MjFj N2Q5NWQwZjguY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF5eMMA4E AgACMAgDBgQmAvdbADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA7/PlU2To6jJ6W3RvWpckn9GICnKO8ajZp j9vm6Bqvx/4tj9NPSqecuDyH9mzbjb+RhgK1+23FwnXRZ0B8s5EYVKV1DtQLTKV2 os1n/g9/pBM5sfZDv7iRY17FQmwYbA+xrFEPaYydiiOuB/RLwz0KAXZCMZwzIf4L fYYZh1iKTVtgjirHRRFFp0r7pPVm8A4S9hemuRxAYFFWyo5ct5Fi/S5cMskToMGH kcw1QXfVjhrC8S7RLh4+cbVmmdiIYTHu/LHCk2rR8g1Pb+oQfwJZgYcztDPP/sFt g1EbfzZxrFmWnLJjQH9HpGn4HN9ZY6xXM0VoSA5TcE2sTc1QZCht -----END CERTIFICATE-----Generated at Wed May 13 06:09:34 2026 by rpki-client